last executing test programs: 41.499040145s ago: executing program 4 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect(r1, &(0x7f0000000200)=@ll={0x27, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000002c0)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x4, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x20000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x1000, 0x0, r7, r8, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r2, r8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs$namespace(r9, &(0x7f0000000040)='ns/time_for_children\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000008d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 41.099483264s ago: executing program 4 (id=1683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) select(0x40, &(0x7f00000000c0)={0x9, 0xca5, 0xfffffffffffffffb, 0x8e, 0x8000, 0x200, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x118}], 0x1}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getpeername$packet(r5, 0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) 40.324168018s ago: executing program 4 (id=1684): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb380018000000000000007c000000d600000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000080000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000007a0000000000089500000000000000"], &(0x7f0000000280)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14, 0x0, @void, @value}, 0x90) 40.299264132s ago: executing program 4 (id=1685): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@any, 0xffffffff}, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x24, 0x6a, 0x501, 0x70bd26, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) open(0x0, 0x44e42, 0xb0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140005000000080000000000000000000a00000a140000001100010000000000000000000500000a"], 0x28}}, 0x40050) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x8200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000f89000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab24, 0x38, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000004900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/84, 0x54}, 0x85ae}], 0x1, 0x60010020, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 39.914027683s ago: executing program 4 (id=1687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040b00000000000000ff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0xc2, 0x5d}}]}}]}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001380)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x10) 36.037659355s ago: executing program 4 (id=1699): syz_open_dev$vcsa(&(0x7f0000000640), 0x6, 0x10000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r1, &(0x7f0000000240), 0x0, 0x0, 0x0, 0xb) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 27.012513842s ago: executing program 2 (id=1734): socket$kcm(0x21, 0x2, 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) set_tid_address(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) r3 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) 26.4144027s ago: executing program 3 (id=1736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}}}, 0x24}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') syz_open_dev$I2C(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b, 0x0, 0x3}, 0x14}}, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect(r8, &(0x7f0000000200)=@ll={0x27, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 26.02048467s ago: executing program 2 (id=1738): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x703780) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x44}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x0, {0xa, 0x80, 0x80, 0x80, 0x0, 0x0, 0x0, 0x3, 0x16}, [@FRA_SRC={0xd, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_FWMARK={0x0, 0xa, 0x7}]}, 0x44}}, 0x40000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) r6 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x50, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0xe, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfb, 0x10, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x8}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x180, 0xff, 0x7, 0x9, 0x10, 0x6}, 0xc7, &(0x7f0000000400)={0x5, 0xf, 0xc7, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0x4, 0x0, 0x5, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0xfff, 0xf000, 0x8, [0x0, 0x3f, 0xff00c0, 0xff3fcf, 0xc00f, 0x3f30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x1e, 0x7f, 0x4, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x4, 0xf, 0x7, [0xff3f18, 0xc00f, 0xff00c0, 0xff0f, 0x0, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0x50}, @generic={0x5a, 0x10, 0x3, "b996853c96a404ba0ad5a66b6914c6a3143d8ddedff5b8b004f3bfdaa8dd6f4adad6c1bce450a03185a419be8d783e673a965b9c02a576a989bc9be3fd87af71b6eabb61b550a25da5aafd5cd4781594ff6acfb350c6f2"}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x804}}, {0x16, &(0x7f0000000340)=@string={0x16, 0x3, "adb847ffad2fae1a8c6cd8c6780cd4fb0e587838"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0b}}, {0x94, &(0x7f0000000500)=@string={0x94, 0x3, "07275a8d88a4de53498df39bbec05e9c177dc8a509892cb6ee976089036f9a1e38642b06f52ebfdb9ea01a861b642f8cd541b99fef05a012c3f4e996a5695c20d130278ecbcd4c0dc2fab49f46aafdfac141abc8211f785f700b6027510afb6fd7b12e3a48ff1b81070ab0e044227b94f744f27073a335b81d1f49666ba1a0fc60144185db845a2fbc973ff152ed76f85745"}}]}) syz_usb_control_io$hid(r6, &(0x7f00000007c0)={0x24, &(0x7f0000000640)={0x0, 0x23, 0x1a, {0x1a, 0xf, "83e6eb1533e16a30d92e2c03266cddca907698e5faf76483"}}, &(0x7f0000000680)={0x0, 0x3, 0x27, @string={0x27, 0x3, "fc0fcf1ef0dbc2f8bd6306a02f7ab6c42d2f783c2cf1d4305e49fe347b39d02f73d16d578c"}}, &(0x7f00000006c0)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0x8, "3cd393e3"}, @global=@item_4={0x3, 0x1, 0x1, "82ff3033"}, @main=@item_012={0x2, 0x0, 0xb, 'Ab'}, @global=@item_4={0x3, 0x1, 0xb, "96836835"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_4={0x3, 0x2, 0x3, "e7e23f2e"}]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x4b5}}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)={0x40, 0x1a, 0x76, "53d467c79f56a924c82998346bf71f1bb28c11be75a7fb26fa06ff99a7ebc871e9b7562e0dbe404e4ea7000ec9a567e7d700e6cd57572a87140c04bb0072bdd48259b890d12c2c174667c0485437bdffdfc86f8da0ebc32098da686e8c044de0a2214c746c5940ce2dbf721bd09eb0bd46638d0904b2"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000940)={0x20, 0x1, 0x5e, "5c3097443ee0412e620f3e3fb7e4802c8f091cafdca26644427195c401bff202ae56c94bd24bfba1b4cc2f425d9ad53f9a13305f05d4c5a3c0100444e3bfc6c28f2d22804c6c0d01531c8644a69d6aef7d8a563e339d629d4ff7092f3d96"}, &(0x7f00000009c0)={0x20, 0x3, 0x1, 0x2}}) 25.954034059s ago: executing program 1 (id=1739): r0 = syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100302000018250501000000e901030109025c0002010600000904e8200102"], 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) 24.901845024s ago: executing program 3 (id=1743): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a37f200142c00fe8000000000000000000000030000bbfe800000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) 23.871165316s ago: executing program 3 (id=1744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1e00}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x7c}}, 0x0) 23.805899849s ago: executing program 3 (id=1745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect(r1, &(0x7f0000000200)=@ll={0x27, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000002c0)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x4, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x20000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x1000, 0x0, r7, r8, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r2, r8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r9, 0xb701, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000008d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 23.478241314s ago: executing program 3 (id=1746): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x1, 0x60, &(0x7f0000000340)="8fdd4f4d2c883d68c82e42ab9865d6eb3066eed9f3cf0ca2069297d3e8db3809a57d8e096ff42cdb9f13d9c82d5f792215d098816e7a9adefe4ed29a3f9ff9518b0f886ee2f9c668442065cf3823974228624b80ccaf4ca9e8de8346bf3c80c1"}) r1 = io_uring_setup(0x2e34, &(0x7f0000000180)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) openat2(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x5, 0x18, 0xfffe, 0xf91f, "78d76e21e27e6befe9274317cc93ce77464fb57e3d8a80ce1018fa7b71899dbe"}) 23.361494511s ago: executing program 3 (id=1747): read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002f40)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000480)="ef48c4f10b0ea5573808512520204d2641d50bc2b43d8f3f62f3e1c1f170f21ed699577e219f8342d6d573b01688d1c5d74ec04e6145889db5b7259e380ab8b25ead9e80efca2efb680d4a", 0x4b}], 0x1, &(0x7f0000003040)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYBLOB="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", @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYBLOB="00c40000d32cc6ba000000040100000001f20000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x240000d0}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002740)="eafc251ca394be6347974ff541523e9543b28b8a88297e2fb8ffff7fabbe8982640ec92bfb87406ec656649b473f70eada97ba96655b60f92592cd7fca8938c870b5867320e6ec9238eacae0706e301e743c9e93b539007aefc95d719f39aa337094963bb2adb31819a3f0b8bd2fd5f9c39d7313cfe053bbc6fe35db70d487f94c4732e1258a93c44f0b9f01b139abed5743cd4db455ce1bd4f123d187eb6742e7104896d3b95711142e9b9d9bc38a31448f20e9577e557d7978f51d57caebbcfdc7a3d31a6a9a5603df33ab19dd366c252711e2dfb7559a1b6574e6c5f0895ad15eee4523b52684e59cc7", 0xeb}, {&(0x7f0000002840)="6b6866fdef32e4e4825e616a3084c8a3f59e16ac269ff9ead9d6fe086edf5338ca4fe3b435890ca7cc5acd202545373606cd801615e6c5e0abfa108f3a618d6529791c50b0d358379f2b5598d282ea00854d6ee81e816ffc13e6e2c601d961b07f0019e8192c8ca175843cef5b9a43cf598ea9199733643724e8aefb9c9a9b072f80f6f3a467f4e013dffb2b4de5de02efa92a28111ac21ce39e082fd97f5bae101fa93bda3eaa28d8062088b67cd0dc5306749b9cfc719cb5f1ad9364e0379422d71b5a8f32b2beda6ebc71e2449ed8e937", 0xd2}, {&(0x7f0000002940)="11fcd6067d8cf5f12da38739e3c1fa3a28ab15f4c446dea9f515ddc4ff30e7dcffd687b151687049d67d7a89545ba76f7d753f6fa9ca7abb2961ad0bc69b660c4ed8e4", 0x43}, {&(0x7f00000029c0)="cc8a2890d89bb5ad4f2b20a9d9c50f58124ab8225e12b5fbb3d0691534f5bbdf63b19c45cadb45257c", 0x29}, {&(0x7f0000002a00)="3f43bd35", 0x4}, {&(0x7f0000002a40)="517dade3bbe56c02fe82f776990fbb53dea3f648f5be1d6b2f3a9355879ebc981f579b6afc3f05bcc14b05bd1b8be59dec82649d4034a41f5ce367dce8ae7b4858248a938fc01e9fee344fd9355fc695fe276e4241e5be777622150931d5afa309947781d530affb2497bb11f0eb6826eb01fbc842122f52367116a4ba0a1ae2c8926cb19542df65d7f411ac2aa07473d1add577a313f15091cc7bc1d162022a81862bf3db60b33ed944cfe6df5b2fc1cb1c43fe349055a5a385428c42d1c2c5bd7164a43e4337cc5184d7661857ececde5056bc50640000", 0xd8}], 0x6}}, {{&(0x7f0000002bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002c40)="9659cb38dc0c96af216ace11205449768dcf24aca313c2d1622bc3285afd11a1aabde513e1aa1750e681e059e0c99383f6d4420df41b5e16560810915ef57d10d0e9a77f1f32c811648ea5d2dd41d11cd3f350e5b4561b690008dd776c220f09ae829d", 0x63}], 0x1, &(0x7f0000002e40)=[@cred={{0x1c, 0x1, 0x2, {r2, r0}}}], 0x20, 0x10}}, {{0x0, 0x0, &(0x7f0000002e80), 0x0, &(0x7f0000002d00)=ANY=[@ANYBLOB="18000000000000000100004200010000005b82a2dc07cb289a8b8e4c0d22e46c565e8f29768414afe08d9dd5fd54e9966abd6a48428af0748658b954679911a15551cc51a44fe92391d9897839050300000000000000248d2785f39fc01ccf1fa6875dc8da7978f10f3e85c7ce84b353c80d124b8a1d3fc4a8cbf2a9a9abf18a4ae85afab0793f113dfb96e4141e5fb3214e14412caa062a991d01079a71deee1d2c731312f0de3edd34a48c55ba35e0c9aa52ee12cfd7f0f3aa4427235161dfeb6cd2a9d2e091a964dcf313fc8a835bb62b05542525af4aaf157415fd6fe3503f805544b1a945e5160b6639c1fba72125710c7e", @ANYRES32, @ANYRES32=r3, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32], 0x38, 0x20008001}}], 0x4, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xf946, 0x80, 0x5, 0x1002}, &(0x7f0000000040), &(0x7f00000001c0)) r7 = eventfd2(0x58, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r7, 0x1) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0xfff1, 0xa}, {0xffed, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x0, 0x3, 0x9, 0x9}}}}]}, 0x48}}, 0x20044080) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}]}, 0x38}}, 0x4000) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r11, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xc990, 0x3, 0x0, 0x0, 0xc07}}, 0x11c) readv(r11, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r11, &(0x7f0000000200), 0x4) 22.694021865s ago: executing program 2 (id=1748): socket$kcm(0x21, 0x2, 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) set_tid_address(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) r3 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) 22.443620838s ago: executing program 1 (id=1749): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0xff, 0x52000}]}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = syz_clone(0x80048080, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x4, 0x0) syz_open_procfs(r2, &(0x7f0000000180)='comm\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYRESDEC=r2, @ANYRESOCT=r5, @ANYRES64=r0], 0x13) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x7, 0x8, 0x8}) r6 = getpgrp(0x0) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c000180060006008035"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sched_setscheduler(r7, 0x5, &(0x7f0000000200)=0x4) tgkill(r6, r7, 0x3f) 21.791099181s ago: executing program 2 (id=1751): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_on}]}) chdir(&(0x7f0000000140)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18) r6 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000300)={0x800000000006, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000480)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 21.693926798s ago: executing program 0 (id=1752): add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0xfffff, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x1c1482) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000019180), 0x4) r0 = socket$kcm(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x0, 0xffffffff, 0x0, 0x8, 0x7}}, {0x4}}]}]}, 0x48}}, 0x0) mmap(&(0x7f00005af000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 21.486098584s ago: executing program 1 (id=1753): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xce83, 0x0, 0x0, 0x0, 0xc}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x10, 0x900000, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103f, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000006000000000003000000140001800d0001007564703a73797a43ba6953c0"], 0x28}}, 0x0) 21.36692281s ago: executing program 0 (id=1754): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008090) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_setup(0x1, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff4, r0, 0x0}]) 21.214074795s ago: executing program 1 (id=1755): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x2, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)}, 0x20000000) add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000600)="72d6e16ddc031cfeb87fb65d5b810000000000039b23f0d36746337973c4c3d11723b1ecc4feb58ad293b7836e13ac90620b63f18d1f602b473fb39dc902bcad3a65f87d40da121f4e8734ab3a578ff077c69bc7879cdc984b149708d92963e23a75c49f55fcda572aaa6875df66cdf04b4dbb59df0a2f7c", 0x78, 0xfffffffffffffffe) getpid() 21.135203946s ago: executing program 0 (id=1756): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_exit\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) statx(0xffffffffffffffff, 0x0, 0x6000, 0x80, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) setsockopt$inet6_int(r1, 0x10d, 0xb, &(0x7f0000000080)=0xf, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x9, 0x0, @vifc_lcl_addr=@local, @multicast1=0xe0000300}, 0x10) close(0x3) 20.210585998s ago: executing program 1 (id=1757): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) 20.113896176s ago: executing program 1 (id=1758): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/103, 0x67, 0x67) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x8000, @local, 0x8}]}, &(0x7f0000000180)=0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x88882, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={r1, 0x9}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x7a30, 0x1, 0x0, 0x20040, 0x0}) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r9 = syz_open_dev$dri(&(0x7f00000024c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 20.11322116s ago: executing program 0 (id=1759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xaff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000351000/0x3000)=nil, 0x3000, 0x2, 0x40010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000039c0)=[{{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/116, 0x74}], 0x1, &(0x7f0000000340)=""/63, 0x3f}, 0x7}, {{&(0x7f00000005c0)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/42, 0x2a}, {&(0x7f0000000a00)=""/251, 0xfb}], 0x2, &(0x7f0000000b00)=""/188, 0xbc}, 0x8000}, {{&(0x7f0000000bc0)=@l2tp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000c40)=""/111, 0x6f}, {&(0x7f0000000cc0)=""/136, 0x88}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000001500)=""/15, 0xf}, {&(0x7f0000000e80)=""/216, 0xd8}, {&(0x7f0000000f80)}], 0x6, &(0x7f0000001040)=""/38, 0x26}, 0x8}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000001080)=""/32, 0x20}, {&(0x7f00000010c0)=""/171, 0xab}, {&(0x7f0000001180)=""/192, 0xc0}, {&(0x7f0000001240)=""/184, 0xb8}], 0x5, &(0x7f0000001380)=""/234, 0xea}, 0x9}, {{&(0x7f0000001480)=@ieee802154, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000f80)=""/61, 0x3d}, {&(0x7f0000001540)=""/157, 0x9d}, {&(0x7f0000001600)=""/49, 0x31}, {&(0x7f0000001640)=""/2, 0x2}, {&(0x7f0000001680)=""/13, 0xd}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001740)=""/158, 0x9e}, 0x800}, {{&(0x7f0000001800)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001880), 0x0, &(0x7f00000018c0)=""/34, 0x22}, 0x401}], 0x6, 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0xa8000) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x10000500, 0x0, 0x51424752, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x2}, {0x480bd72125a0c189, 0x5}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x0) connect$inet(r5, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009a173610ef171e7206de01020301090212000100000000090400000502060000"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="00001f00da6153f2f5c0081453b6d247e582a0bd4b031353ff7f0000000000001bff1f202910b49cdf24f18d993517f281e24cccd308a74053a18c074cc5de389bc320ec7d99ffa1c6efe120fbf8eef9789683f9d4d2ca06c3bec1b032d0051d987916eea3f54541cf419f6c98e5c70681d84a6b37a086d809d57c10f827fba0431084dac48d99ff9fab650946fc4d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r9, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x3, '\x00', &(0x7f0000000040)}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000b75e802778ae570000f800000095000000000000001700ee7ef40f51c2e2f9e9230bb321a5748e5df6cee195ac8383d6cbbaac1d21026705fe863da1ab25ae5076c8d22e6d71e6418d9f80dac39e0a3c5bd4e0bd9322fc421c9646a7c4347eab2fa99f99c7ceb7e1a39d759bcea85b0dd83e9d21b6621d9acdc2d4cd27e1bc6187ec2b8e2ea2880f4e8f3d2a5b188dd0ad0f4fe0a14b1e2f5260ff"], &(0x7f0000000640)='GPL\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[{0x0, 0x5, 0x3, 0x3}, {0x3, 0x4, 0xd, 0x6}, {0x3, 0x1, 0xf, 0x4}, {0x1, 0x4, 0xc, 0x4}, {0x1, 0x3, 0xc, 0x4}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={r7, 0xffffffffffffffff, 0x4, r10}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 19.516243809s ago: executing program 32 (id=1699): syz_open_dev$vcsa(&(0x7f0000000640), 0x6, 0x10000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r1, &(0x7f0000000240), 0x0, 0x0, 0x0, 0xb) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 18.418690781s ago: executing program 2 (id=1761): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b70800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x25, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}, "d889e52303"}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$video(0x0, 0x7, 0x80040) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 18.068546556s ago: executing program 2 (id=1762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) unshare(0x62040200) (async, rerun: 32) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000700)={'nat\x00', 0x4, "dea50c52"}, &(0x7f0000001740)=0x2c) (async) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffff0000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 16.83007142s ago: executing program 0 (id=1763): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0xeb322e1fb5425c9a, 0xffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x860b, 0x1, 0x8, 0xf6}, &(0x7f0000000300), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0x1, 0x4) landlock_create_ruleset(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x0, 0x40000}}, {0x28}}}}, 0x378) socket$inet6_tcp(0xa, 0x1, 0x0) 16.785515544s ago: executing program 0 (id=1764): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e6400000000140002800500010006000000080003000000000008000a00", @ANYRES32=r2], 0x4c}}, 0x0) 7.005672384s ago: executing program 33 (id=1747): read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002f40)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000480)="ef48c4f10b0ea5573808512520204d2641d50bc2b43d8f3f62f3e1c1f170f21ed699577e219f8342d6d573b01688d1c5d74ec04e6145889db5b7259e380ab8b25ead9e80efca2efb680d4a", 0x4b}], 0x1, &(0x7f0000003040)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYBLOB="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", @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYBLOB="00c40000d32cc6ba000000040100000001f20000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x240000d0}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002740)="eafc251ca394be6347974ff541523e9543b28b8a88297e2fb8ffff7fabbe8982640ec92bfb87406ec656649b473f70eada97ba96655b60f92592cd7fca8938c870b5867320e6ec9238eacae0706e301e743c9e93b539007aefc95d719f39aa337094963bb2adb31819a3f0b8bd2fd5f9c39d7313cfe053bbc6fe35db70d487f94c4732e1258a93c44f0b9f01b139abed5743cd4db455ce1bd4f123d187eb6742e7104896d3b95711142e9b9d9bc38a31448f20e9577e557d7978f51d57caebbcfdc7a3d31a6a9a5603df33ab19dd366c252711e2dfb7559a1b6574e6c5f0895ad15eee4523b52684e59cc7", 0xeb}, {&(0x7f0000002840)="6b6866fdef32e4e4825e616a3084c8a3f59e16ac269ff9ead9d6fe086edf5338ca4fe3b435890ca7cc5acd202545373606cd801615e6c5e0abfa108f3a618d6529791c50b0d358379f2b5598d282ea00854d6ee81e816ffc13e6e2c601d961b07f0019e8192c8ca175843cef5b9a43cf598ea9199733643724e8aefb9c9a9b072f80f6f3a467f4e013dffb2b4de5de02efa92a28111ac21ce39e082fd97f5bae101fa93bda3eaa28d8062088b67cd0dc5306749b9cfc719cb5f1ad9364e0379422d71b5a8f32b2beda6ebc71e2449ed8e937", 0xd2}, {&(0x7f0000002940)="11fcd6067d8cf5f12da38739e3c1fa3a28ab15f4c446dea9f515ddc4ff30e7dcffd687b151687049d67d7a89545ba76f7d753f6fa9ca7abb2961ad0bc69b660c4ed8e4", 0x43}, {&(0x7f00000029c0)="cc8a2890d89bb5ad4f2b20a9d9c50f58124ab8225e12b5fbb3d0691534f5bbdf63b19c45cadb45257c", 0x29}, {&(0x7f0000002a00)="3f43bd35", 0x4}, {&(0x7f0000002a40)="517dade3bbe56c02fe82f776990fbb53dea3f648f5be1d6b2f3a9355879ebc981f579b6afc3f05bcc14b05bd1b8be59dec82649d4034a41f5ce367dce8ae7b4858248a938fc01e9fee344fd9355fc695fe276e4241e5be777622150931d5afa309947781d530affb2497bb11f0eb6826eb01fbc842122f52367116a4ba0a1ae2c8926cb19542df65d7f411ac2aa07473d1add577a313f15091cc7bc1d162022a81862bf3db60b33ed944cfe6df5b2fc1cb1c43fe349055a5a385428c42d1c2c5bd7164a43e4337cc5184d7661857ececde5056bc50640000", 0xd8}], 0x6}}, {{&(0x7f0000002bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002c40)="9659cb38dc0c96af216ace11205449768dcf24aca313c2d1622bc3285afd11a1aabde513e1aa1750e681e059e0c99383f6d4420df41b5e16560810915ef57d10d0e9a77f1f32c811648ea5d2dd41d11cd3f350e5b4561b690008dd776c220f09ae829d", 0x63}], 0x1, &(0x7f0000002e40)=[@cred={{0x1c, 0x1, 0x2, {r2, r0}}}], 0x20, 0x10}}, {{0x0, 0x0, &(0x7f0000002e80), 0x0, &(0x7f0000002d00)=ANY=[@ANYBLOB="18000000000000000100004200010000005b82a2dc07cb289a8b8e4c0d22e46c565e8f29768414afe08d9dd5fd54e9966abd6a48428af0748658b954679911a15551cc51a44fe92391d9897839050300000000000000248d2785f39fc01ccf1fa6875dc8da7978f10f3e85c7ce84b353c80d124b8a1d3fc4a8cbf2a9a9abf18a4ae85afab0793f113dfb96e4141e5fb3214e14412caa062a991d01079a71deee1d2c731312f0de3edd34a48c55ba35e0c9aa52ee12cfd7f0f3aa4427235161dfeb6cd2a9d2e091a964dcf313fc8a835bb62b05542525af4aaf157415fd6fe3503f805544b1a945e5160b6639c1fba72125710c7e", @ANYRES32, @ANYRES32=r3, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32], 0x38, 0x20008001}}], 0x4, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xf946, 0x80, 0x5, 0x1002}, &(0x7f0000000040), &(0x7f00000001c0)) r7 = eventfd2(0x58, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r7, 0x1) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0xfff1, 0xa}, {0xffed, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x0, 0x3, 0x9, 0x9}}}}]}, 0x48}}, 0x20044080) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}]}, 0x38}}, 0x4000) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r11, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0xc990, 0x3, 0x0, 0x0, 0xc07}}, 0x11c) readv(r11, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r11, &(0x7f0000000200), 0x4) 3.932179228s ago: executing program 34 (id=1758): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/103, 0x67, 0x67) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x8000, @local, 0x8}]}, &(0x7f0000000180)=0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x88882, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={r1, 0x9}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x7a30, 0x1, 0x0, 0x20040, 0x0}) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r9 = syz_open_dev$dri(&(0x7f00000024c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 1.927868901s ago: executing program 35 (id=1762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) unshare(0x62040200) (async, rerun: 32) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000700)={'nat\x00', 0x4, "dea50c52"}, &(0x7f0000001740)=0x2c) (async) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffff0000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 36 (id=1764): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e6400000000140002800500010006000000080003000000000008000a00", @ANYRES32=r2], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): number 42 using dummy_hcd [ 388.598532][ T91] usb usb1-port1: attempt power cycle [ 389.013718][T10105] syz.3.1211: attempt to access beyond end of device [ 389.013718][T10105] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 389.027463][T10105] hfsplus: unable to find HFS+ superblock [ 389.204873][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.478481][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 389.503162][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.516765][ T24] usb 2-1: config 0 descriptor?? [ 389.537093][ T24] xbox_remote_probe: Unexpected endpoint_in [ 389.543625][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 389.560454][T10110] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 389.625978][ T30] audit: type=1400 audit(1745177373.587:499): avc: denied { getopt } for pid=10111 comm="syz.3.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 389.658714][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 389.744687][ T24] usb 2-1: USB disconnect, device number 42 [ 391.024019][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 391.947795][T10135] FAULT_INJECTION: forcing a failure. [ 391.947795][T10135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.961280][T10135] CPU: 1 UID: 0 PID: 10135 Comm: syz.2.1222 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 391.961303][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 391.961312][T10135] Call Trace: [ 391.961317][T10135] [ 391.961322][T10135] dump_stack_lvl+0x16c/0x1f0 [ 391.961349][T10135] should_fail_ex+0x512/0x640 [ 391.961369][T10135] _copy_to_user+0x32/0xd0 [ 391.961388][T10135] __htab_map_lookup_and_delete_batch+0x19d3/0x23d0 [ 391.961430][T10135] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 391.961462][T10135] ? __pfx_htab_percpu_map_lookup_batch+0x10/0x10 [ 391.961484][T10135] bpf_map_do_batch+0x264/0x670 [ 391.961504][T10135] __sys_bpf+0x4afc/0x4d80 [ 391.961528][T10135] ? __pfx___sys_bpf+0x10/0x10 [ 391.961550][T10135] ? ksys_write+0x190/0x240 [ 391.961569][T10135] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 391.961607][T10135] ? fput+0x70/0xf0 [ 391.961625][T10135] ? ksys_write+0x1b9/0x240 [ 391.961639][T10135] ? __pfx_ksys_write+0x10/0x10 [ 391.961652][T10135] ? irq_work_single+0x13a/0x260 [ 391.961675][T10135] __x64_sys_bpf+0x78/0xc0 [ 391.961696][T10135] ? lockdep_hardirqs_on+0x7c/0x110 [ 391.961716][T10135] do_syscall_64+0xcd/0x260 [ 391.961740][T10135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.961757][T10135] RIP: 0033:0x7f110a98e169 [ 391.961771][T10135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.961787][T10135] RSP: 002b:00007f110b82f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.961803][T10135] RAX: ffffffffffffffda RBX: 00007f110abb6160 RCX: 00007f110a98e169 [ 391.961814][T10135] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 391.961824][T10135] RBP: 00007f110b82f090 R08: 0000000000000000 R09: 0000000000000000 [ 391.961834][T10135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.961844][T10135] R13: 0000000000000000 R14: 00007f110abb6160 R15: 00007ffd2e8d9918 [ 391.961866][T10135] [ 392.160613][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.360542][ T30] audit: type=1400 audit(1745177376.140:500): avc: denied { setopt } for pid=10140 comm="syz.1.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 392.451067][ T30] audit: type=1400 audit(1745177376.168:501): avc: denied { map } for pid=10140 comm="syz.1.1225" path="socket:[28000]" dev="sockfs" ino=28000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 392.496722][ T30] audit: type=1400 audit(1745177376.168:502): avc: denied { read } for pid=10140 comm="syz.1.1225" path="socket:[28000]" dev="sockfs" ino=28000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 393.855839][T10155] Dead loop on virtual device ipvlan1, fix it urgently! [ 394.139193][T10155] syz.0.1228 (10155) used greatest stack depth: 13616 bytes left [ 395.135762][T10186] netlink: 'syz.2.1240': attribute type 5 has an invalid length. [ 395.811439][ T5876] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 395.989882][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.013031][ T5876] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 396.125802][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.146273][ T5876] usb 3-1: config 0 descriptor?? [ 396.488303][ T5876] xbox_remote_probe: Unexpected endpoint_in [ 396.495223][ T5876] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 397.150871][T10211] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 397.215651][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 397.478425][T10215] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 397.494388][T10215] bond0: (slave batadv4): Enslaving as a backup interface with an up link [ 397.512526][T10217] bond0 (unregistering): (slave batadv4): Releasing backup interface [ 397.538807][T10217] bond0 (unregistering): Released all slaves [ 397.564023][T10221] tmpfs: Bad value for 'mpol' [ 397.821072][T10224] netlink: 'syz.1.1250': attribute type 1 has an invalid length. [ 397.829131][T10224] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1250'. [ 397.864303][ T91] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 398.029050][ T91] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 398.185677][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.378931][ T91] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.397656][ T91] usb 5-1: config 0 descriptor?? [ 398.458693][ T5931] usb 3-1: USB disconnect, device number 53 [ 398.700825][ T91] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 398.736831][ T91] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 398.755611][ T91] [drm:udl_init] *ERROR* Selecting channel failed [ 398.790123][ T91] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 398.800191][ T91] [drm] Initialized udl on minor 2 [ 398.810096][ T91] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.824108][ T91] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 398.847352][ T5874] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.860888][ T91] usb 5-1: USB disconnect, device number 40 [ 398.868450][ T5874] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 399.136899][ T5918] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 399.211532][ T91] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 399.299579][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.316470][ T5918] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 399.339568][ T5918] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 399.351183][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.362322][ T5918] usb 3-1: config 0 descriptor?? [ 399.470014][ T5918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 399.477042][ T91] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.486824][ T5918] dvb-usb: bulk message failed: -22 (3/0) [ 399.492839][ T91] usb 5-1: config 0 has no interface number 0 [ 399.501416][ T5918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 399.509762][ T91] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 399.521254][ T5918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 399.528382][ T91] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 399.539275][ T5918] usb 3-1: media controller created [ 399.548390][ T91] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 399.563961][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.598337][T10252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 400.035281][ T91] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.051058][ T5918] dvb-usb: bulk message failed: -22 (6/0) [ 400.060065][ T91] usb 5-1: config 0 descriptor?? [ 400.065170][ T5918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 400.073322][T10235] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.085403][ T91] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 400.096604][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 400.118731][ T5918] dvb-usb: schedule remote query interval to 150 msecs. [ 400.127878][ T5918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 400.255792][T10261] netlink: 'syz.0.1262': attribute type 5 has an invalid length. [ 400.341334][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 400.350750][ T5918] dvb-usb: error while querying for an remote control event. [ 400.371794][ T30] audit: type=1400 audit(1745177383.632:503): avc: denied { setopt } for pid=10234 comm="syz.4.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 400.540292][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 400.540854][ T5918] dvb-usb: error while querying for an remote control event. [ 400.676764][ T5931] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 400.715396][ T91] dvb-usb: bulk message failed: -22 (1/0) [ 400.755194][ T972] usb 3-1: USB disconnect, device number 54 [ 400.776494][ T91] dvb-usb: error while querying for an remote control event. [ 400.789141][ T91] usb 5-1: USB disconnect, device number 41 [ 400.822269][ T972] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 400.870220][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.890176][ T5931] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 400.908356][T10270] fuse: Bad value for 'fd' [ 400.914073][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.941580][ T5931] usb 1-1: config 0 descriptor?? [ 400.957060][ T5931] xbox_remote_probe: Unexpected endpoint_in [ 400.997764][ T5931] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 401.225302][T10276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.498314][ T5931] usb 1-1: USB disconnect, device number 46 [ 403.527041][T10308] xt_socket: unknown flags 0xc [ 403.639876][T10308] could not allocate digest TFM handle blake2s-128 [ 403.657298][ T30] audit: type=1400 audit(1745177386.699:504): avc: denied { map } for pid=10310 comm="syz.0.1279" path="socket:[28420]" dev="sockfs" ino=28420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 403.680279][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.751073][ T30] audit: type=1400 audit(1745177386.737:505): avc: denied { read } for pid=10310 comm="syz.0.1279" path="socket:[28420]" dev="sockfs" ino=28420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 405.123142][T10324] netlink: zone id is out of range [ 405.144130][T10324] netlink: zone id is out of range [ 405.162949][T10324] netlink: zone id is out of range [ 405.236162][T10324] netlink: zone id is out of range [ 405.241509][T10324] netlink: zone id is out of range [ 405.305942][T10324] netlink: zone id is out of range [ 405.418683][T10331] ntfs3(nullb0): Primary boot signature is not NTFS. [ 405.425514][T10331] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 405.497121][T10324] netlink: zone id is out of range [ 405.528870][T10324] netlink: zone id is out of range [ 405.553121][T10324] netlink: zone id is out of range [ 405.579400][T10324] netlink: zone id is out of range [ 406.417914][T10339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1285'. [ 406.580351][T10343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1288'. [ 407.269627][T10349] netlink: 'syz.3.1290': attribute type 5 has an invalid length. [ 407.326070][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1286'. [ 407.340657][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1286'. [ 407.385562][T10355] lo speed is unknown, defaulting to 1000 [ 407.529855][ T5874] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 407.652653][T10355] lo speed is unknown, defaulting to 1000 [ 407.690181][ T5918] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 407.778964][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1295'. [ 407.809258][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.838443][ T5874] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 407.848467][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.856535][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 407.874472][ T5918] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 407.897574][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.908335][ T5918] usb 5-1: Product: syz [ 407.912834][ T5918] usb 5-1: Manufacturer: syz [ 407.921348][ T5918] usb 5-1: SerialNumber: syz [ 408.055086][T10357] NILFS (nullb0): couldn't find nilfs on the device [ 408.081857][ T5874] usb 4-1: config 0 descriptor?? [ 408.186678][ T5874] xbox_remote_probe: Unexpected endpoint_in [ 408.519423][ T5918] usb 5-1: config 0 descriptor?? [ 408.525945][ T5874] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 408.553049][ T5918] usb 5-1: no audio or video endpoints found [ 408.609477][T10368] Process accounting paused [ 408.774330][T10385] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[10385] [ 408.954450][ T5831] IPVS: starting estimator thread 0... [ 409.045732][ T5918] usb 5-1: USB disconnect, device number 42 [ 409.058977][T10387] IPVS: using max 45 ests per chain, 108000 per kthread [ 409.077378][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 409.650141][T10390] bond4: entered promiscuous mode [ 409.655275][T10390] bond4: entered allmulticast mode [ 409.855898][T10402] netlink: 'syz.0.1306': attribute type 5 has an invalid length. [ 409.999719][ T5874] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 410.042551][ T972] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 410.162447][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 410.173801][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.190170][ T5874] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 410.200167][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.213499][ T972] usb 3-1: Using ep0 maxpacket: 32 [ 410.214241][ T5874] usb 2-1: config 0 descriptor?? [ 410.228725][ T972] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 410.229502][ T5874] gspca_main: spca501-2.14.0 probing 0000:0000 [ 410.242669][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.266590][ T972] usb 3-1: config 0 descriptor?? [ 410.539969][ T5918] usb 4-1: USB disconnect, device number 33 [ 410.567343][ T972] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 410.595536][ T972] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 410.615566][ T972] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 410.666684][ T5874] gspca_spca501: reg write: error -71 [ 410.675397][ T5874] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 410.682555][ T5874] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 410.693212][ T5874] usb 2-1: USB disconnect, device number 43 [ 410.947739][T10428] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1315'. [ 411.218710][ T5876] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 411.402432][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.413449][ T5876] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 411.423254][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.432992][ T5876] usb 5-1: config 0 descriptor?? [ 411.669517][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 411.745065][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1318'. [ 411.882791][ T5876] usbhid 5-1:0.0: can't add hid device: -71 [ 411.902620][ T5876] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 411.911809][ T5876] usb 5-1: USB disconnect, device number 43 [ 412.063213][ T5931] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 412.084902][ T5918] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 412.153273][T10448] netlink: 'syz.1.1323': attribute type 5 has an invalid length. [ 412.189841][T10450] netlink: 'syz.1.1324': attribute type 5 has an invalid length. [ 412.223779][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 412.230254][ T5931] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.241282][ T5931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.254873][ T5931] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.255655][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 412.263998][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.272886][ T5918] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 412.284057][ T5876] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 412.287199][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.295535][ T5931] usb 4-1: Product: syz [ 412.302767][ T5918] usb 1-1: Product: syz [ 412.312540][ T5931] usb 4-1: Manufacturer: syz [ 412.317189][ T5931] usb 4-1: SerialNumber: syz [ 412.319743][ T5918] usb 1-1: Manufacturer: syz [ 412.330503][ T5918] usb 1-1: SerialNumber: syz [ 412.337775][ T5918] usb 1-1: config 0 descriptor?? [ 412.350262][ T5918] usb 1-1: no audio or video endpoints found [ 412.472888][ T5876] usb 5-1: config 129 has an invalid interface number: 112 but max is 0 [ 412.481833][ T5876] usb 5-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 412.493190][ T5876] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 412.501702][ T5874] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 412.503459][ T5876] usb 5-1: config 129 has no interface number 0 [ 412.517965][ T5876] usb 5-1: config 129 interface 112 has no altsetting 0 [ 412.524988][ T5876] usb 5-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=62.bd [ 412.534078][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.545656][ T5931] usb 4-1: 0:2 : does not exist [ 412.550528][ T5931] usb 4-1: unit 6 not found! [ 412.564300][ T5931] usb 4-1: USB disconnect, device number 34 [ 412.582228][ T5918] usb 1-1: USB disconnect, device number 47 [ 412.673949][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.683922][ T5874] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 412.692947][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.703341][ T5874] usb 2-1: config 0 descriptor?? [ 412.710088][ T5874] xbox_remote_probe: Unexpected endpoint_in [ 412.719372][ T5874] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 412.831686][T10451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1321'. [ 413.153181][ T5931] usb 5-1: USB disconnect, device number 44 [ 413.443363][T10462] FAULT_INJECTION: forcing a failure. [ 413.443363][T10462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.456467][T10462] CPU: 1 UID: 0 PID: 10462 Comm: syz.3.1326 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 413.456489][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 413.456498][T10462] Call Trace: [ 413.456504][T10462] [ 413.456510][T10462] dump_stack_lvl+0x16c/0x1f0 [ 413.456537][T10462] should_fail_ex+0x512/0x640 [ 413.456558][T10462] _copy_to_user+0x32/0xd0 [ 413.456580][T10462] __htab_map_lookup_and_delete_batch+0x1960/0x23d0 [ 413.456621][T10462] ? irqentry_exit+0x3b/0x90 [ 413.456653][T10462] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 413.456680][T10462] ? fdget+0x176/0x210 [ 413.456696][T10462] ? fdget+0x176/0x210 [ 413.456713][T10462] ? __pfx_htab_percpu_map_lookup_batch+0x10/0x10 [ 413.456736][T10462] bpf_map_do_batch+0x264/0x670 [ 413.456756][T10462] __sys_bpf+0x4afc/0x4d80 [ 413.456777][T10462] ? rcu_is_watching+0x12/0xc0 [ 413.456813][T10462] ? __pfx___sys_bpf+0x10/0x10 [ 413.456833][T10462] ? __schedule+0x1186/0x5de0 [ 413.456853][T10462] ? ksys_write+0x190/0x240 [ 413.456887][T10462] ? fput+0x70/0xf0 [ 413.456905][T10462] ? ksys_write+0x1b9/0x240 [ 413.456925][T10462] __x64_sys_bpf+0x78/0xc0 [ 413.456946][T10462] ? lockdep_hardirqs_on+0x7c/0x110 [ 413.456966][T10462] do_syscall_64+0xcd/0x260 [ 413.456991][T10462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.457008][T10462] RIP: 0033:0x7f396098e169 [ 413.457021][T10462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.457037][T10462] RSP: 002b:00007f39617b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.457052][T10462] RAX: ffffffffffffffda RBX: 00007f3960bb6160 RCX: 00007f396098e169 [ 413.457063][T10462] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 413.457072][T10462] RBP: 00007f39617b6090 R08: 0000000000000000 R09: 0000000000000000 [ 413.457082][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.457091][T10462] R13: 0000000000000000 R14: 00007f3960bb6160 R15: 00007ffd125cb108 [ 413.457113][T10462] [ 415.357875][T10482] x_tables: duplicate underflow at hook 1 [ 415.772262][ T5918] usb 2-1: USB disconnect, device number 44 [ 416.072928][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 416.218233][T10496] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 416.649800][ T30] audit: type=1400 audit(1745177398.783:506): avc: denied { getopt } for pid=10490 comm="syz.2.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 416.706297][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 416.898171][ T30] audit: type=1400 audit(1745177398.830:507): avc: denied { ioctl } for pid=10490 comm="syz.2.1337" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 417.008171][T10500] lo speed is unknown, defaulting to 1000 [ 417.024215][ T30] audit: type=1400 audit(1745177399.204:508): avc: denied { getopt } for pid=10505 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 417.216744][ T5931] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 417.238079][ T5874] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 417.352460][T10524] serio: Serial port ptm0 [ 417.409505][T10525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 417.433126][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.452899][ T5874] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 417.486098][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.533214][ T5874] usb 5-1: config 0 descriptor?? [ 417.571148][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'. [ 417.590908][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 417.600749][ T5931] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 417.609887][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.627690][ T5931] usb 1-1: Product: syz [ 417.634641][ T5931] usb 1-1: Manufacturer: syz [ 417.639356][ T5931] usb 1-1: SerialNumber: syz [ 417.653727][ T5931] usb 1-1: config 0 descriptor?? [ 417.668899][ T5931] usb 1-1: no audio or video endpoints found [ 417.885544][ T5918] usb 1-1: USB disconnect, device number 48 [ 417.988920][ T5874] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 418.010098][ T5874] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0013/input/input44 [ 418.164549][ T5874] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 418.192305][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 418.206245][T10534] netlink: 'syz.1.1346': attribute type 1 has an invalid length. [ 418.241914][T10534] netlink: 'syz.1.1346': attribute type 2 has an invalid length. [ 418.284740][ T5918] usb 5-1: USB disconnect, device number 45 [ 420.329221][T10568] wireguard0: entered promiscuous mode [ 420.814545][T10568] wireguard0: entered allmulticast mode [ 421.472281][T10562] Bluetooth: hci4: command 0x0c1a tx timeout [ 421.476618][T10584] program syz.1.1364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.820867][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 421.830663][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'. [ 422.209914][ T5931] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 422.380900][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 422.389527][ T5931] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 422.427976][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.460436][ T5931] usb 2-1: Product: syz [ 422.475421][ T5931] usb 2-1: Manufacturer: syz [ 422.485040][ T5931] usb 2-1: SerialNumber: syz [ 422.659439][ T5931] usb 2-1: config 0 descriptor?? [ 422.669870][ T5931] usb 2-1: no audio or video endpoints found [ 423.052126][ T5931] usb 2-1: USB disconnect, device number 45 [ 424.245866][ T30] audit: type=1326 audit(1745177405.966:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.0.1372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f045118e169 code=0x0 [ 424.314041][T10617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1373'. [ 425.240812][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1377'. [ 426.013343][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'. [ 426.034417][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1384'. [ 426.499573][ T47] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 426.690525][ T5874] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 426.698786][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 426.836452][ T47] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 426.851589][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 426.861088][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.869089][ T47] usb 5-1: Product: syz [ 426.882366][ T5874] usb 4-1: config 8 has an invalid interface number: 198 but max is 0 [ 426.897497][ T5874] usb 4-1: config 8 has an invalid descriptor of length 36, skipping remainder of the config [ 427.042884][ T5874] usb 4-1: config 8 has no interface number 0 [ 427.063387][ T5874] usb 4-1: config 8 interface 198 has no altsetting 0 [ 427.091986][ T5874] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=6c.67 [ 427.098886][ T47] usb 5-1: Manufacturer: syz [ 427.113177][ T47] usb 5-1: SerialNumber: syz [ 427.717926][ T47] usb 5-1: config 0 descriptor?? [ 427.733000][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.738046][ T47] usb 5-1: no audio or video endpoints found [ 427.789755][ T5874] usb 4-1: Product: syz [ 427.804857][ T5874] usb 4-1: Manufacturer: syz [ 427.809469][ T5874] usb 4-1: SerialNumber: syz [ 427.973942][T10470] usb 5-1: USB disconnect, device number 46 [ 428.539323][T10692] program syz.2.1394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.785497][ T47] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 428.968222][ T5137] Bluetooth: hci4: unexpected event for opcode 0x0c7d [ 428.978663][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 428.984687][ T30] audit: type=1400 audit(1745177410.390:510): avc: denied { map } for pid=10695 comm="syz.2.1396" path="socket:[30253]" dev="sockfs" ino=30253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 429.019728][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.085063][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.096046][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 429.106939][ T47] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 429.136694][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.165894][ T47] usb 2-1: config 0 descriptor?? [ 429.616457][ T47] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 429.635900][ T47] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 429.665755][ T47] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 429.694847][ T47] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 429.711319][ T47] savu 0003:1E7D:2D5A.0014: unknown main item tag 0x0 [ 429.730102][ T47] savu 0003:1E7D:2D5A.0014: unbalanced collection at end of report description [ 429.762138][ T30] audit: type=1400 audit(1745177411.101:511): avc: denied { write } for pid=10713 comm="syz.2.1403" path="socket:[31143]" dev="sockfs" ino=31143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 429.788551][ T47] savu 0003:1E7D:2D5A.0014: parse failed [ 429.795103][ T47] savu 0003:1E7D:2D5A.0014: probe with driver savu failed with error -22 [ 430.093133][ T5831] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 430.562652][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.586018][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.731284][ T5831] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 430.999125][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.025624][ T5831] usb 1-1: config 0 descriptor?? [ 431.034305][ T5874] ums-onetouch 4-1:8.198: USB Mass Storage device detected [ 431.094858][ T91] usb 2-1: USB disconnect, device number 46 [ 431.426675][ T5874] usb 4-1: USB disconnect, device number 35 [ 431.462862][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 431.506944][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'. [ 431.524797][T10734] FAULT_INJECTION: forcing a failure. [ 431.524797][T10734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.587003][T10734] CPU: 1 UID: 0 PID: 10734 Comm: syz.4.1410 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 431.587029][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 431.587039][T10734] Call Trace: [ 431.587044][T10734] [ 431.587051][T10734] dump_stack_lvl+0x16c/0x1f0 [ 431.587076][T10734] should_fail_ex+0x512/0x640 [ 431.587099][T10734] _copy_to_user+0x32/0xd0 [ 431.587120][T10734] bpf_test_finish.isra.0+0x540/0x690 [ 431.587142][T10734] ? find_held_lock+0x2b/0x80 [ 431.587163][T10734] ? __might_fault+0xe3/0x190 [ 431.587179][T10734] ? __might_fault+0xe3/0x190 [ 431.587195][T10734] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 431.587219][T10734] ? _copy_from_user+0x59/0xd0 [ 431.587241][T10734] bpf_prog_test_run_xdp+0xa0d/0x1540 [ 431.587272][T10734] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 431.587294][T10734] ? __might_fault+0x70/0x190 [ 431.587315][T10734] ? fput+0x70/0xf0 [ 431.587333][T10734] ? __bpf_prog_get+0xa0/0x290 [ 431.587350][T10734] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 431.587369][T10734] __sys_bpf+0x1485/0x4d80 [ 431.587394][T10734] ? __pfx___sys_bpf+0x10/0x10 [ 431.587416][T10734] ? ksys_write+0x190/0x240 [ 431.587434][T10734] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 431.587472][T10734] ? fput+0x70/0xf0 [ 431.587489][T10734] ? ksys_write+0x1b9/0x240 [ 431.587501][T10734] ? __pfx_ksys_write+0x10/0x10 [ 431.587514][T10734] ? rcu_is_watching+0x12/0xc0 [ 431.587538][T10734] __x64_sys_bpf+0x78/0xc0 [ 431.587558][T10734] ? lockdep_hardirqs_on+0x7c/0x110 [ 431.587580][T10734] do_syscall_64+0xcd/0x260 [ 431.587604][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.587626][T10734] RIP: 0033:0x7f5e66b8e169 [ 431.587638][T10734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.587653][T10734] RSP: 002b:00007f5e67a1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.587669][T10734] RAX: ffffffffffffffda RBX: 00007f5e66db5fa0 RCX: 00007f5e66b8e169 [ 431.587679][T10734] RDX: 000000000000001e RSI: 0000200000000000 RDI: 000000000000000a [ 431.587689][T10734] RBP: 00007f5e67a1b090 R08: 0000000000000000 R09: 0000000000000000 [ 431.587698][T10734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.587707][T10734] R13: 0000000000000000 R14: 00007f5e66db5fa0 R15: 00007ffc9ac3db48 [ 431.587730][T10734] [ 431.871653][ T5831] hid-rmi 0003:0461:4E72.0015: item fetching failed at offset 1/3 [ 431.893162][ T5831] hid-rmi 0003:0461:4E72.0015: parse failed [ 431.899724][ T5831] hid-rmi 0003:0461:4E72.0015: probe with driver hid-rmi failed with error -22 [ 431.982300][ T47] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 432.107112][ T5831] usb 1-1: USB disconnect, device number 49 [ 432.148604][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 432.154431][T10470] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 432.170395][ T47] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.185324][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.390791][ T47] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.400193][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.408191][ T47] usb 5-1: Product: syz [ 432.415572][ T47] usb 5-1: Manufacturer: syz [ 432.420302][ T47] usb 5-1: SerialNumber: syz [ 432.441999][T10470] usb 2-1: Using ep0 maxpacket: 32 [ 432.494693][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 432.504016][T10741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1411'. [ 432.641402][T10470] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 432.699888][ T47] usb 5-1: 0:2 : does not exist [ 432.761088][ T47] usb 5-1: unit 6 not found! [ 432.811270][T10470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.823858][T10470] usb 2-1: Product: syz [ 432.832598][T10470] usb 2-1: Manufacturer: syz [ 432.837713][ T47] usb 5-1: USB disconnect, device number 47 [ 432.843754][T10470] usb 2-1: SerialNumber: syz [ 432.858387][T10470] usb 2-1: config 0 descriptor?? [ 432.872093][T10470] usb 2-1: no audio or video endpoints found [ 433.084451][ T5831] usb 2-1: USB disconnect, device number 47 [ 433.176486][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'. [ 433.223249][ T5931] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 433.473436][ T5931] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 433.502334][ T5931] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 433.571170][ T5931] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.598666][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.633012][ T5931] usb 1-1: Product: syz [ 433.657790][ T5931] usb 1-1: Manufacturer: syz [ 433.684402][ T5931] usb 1-1: SerialNumber: syz [ 433.881242][T10745] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.935428][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1419'. [ 434.958240][T10765] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 434.966172][T10765] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1420'. [ 436.177505][T10773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1422'. [ 436.316330][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1425'. [ 436.463987][ T30] audit: type=1400 audit(1745177417.395:512): avc: denied { write } for pid=10779 comm="syz.3.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 436.486675][T10781] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10781 comm=syz.3.1425 [ 436.939290][ T30] audit: type=1400 audit(1745177417.835:513): avc: denied { read } for pid=10779 comm="syz.3.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 436.975064][T10781] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1425'. [ 437.238019][ T5931] cdc_ncm 1-1:1.0: bind() failure [ 437.245972][ T5931] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 437.285568][ T5931] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 437.301737][ T5931] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 437.320261][ T5931] usb 1-1: USB disconnect, device number 50 [ 437.407454][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 437.423290][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1429'. [ 437.456756][ T91] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 437.852307][ T5931] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 438.034051][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 438.050789][ T5931] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 438.068572][ T91] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.070127][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.083613][ T91] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 438.096635][ T91] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.107376][ T5931] usb 1-1: Product: syz [ 438.112448][ T91] usb 4-1: config 0 descriptor?? [ 438.117046][ T5931] usb 1-1: Manufacturer: syz [ 438.126348][ T5931] usb 1-1: SerialNumber: syz [ 438.139562][ T5931] usb 1-1: config 0 descriptor?? [ 438.158906][ T5931] usb 1-1: no audio or video endpoints found [ 438.394558][ T5918] usb 1-1: USB disconnect, device number 51 [ 439.014844][ T91] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 439.026685][ T91] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0016/input/input46 [ 439.100208][ T91] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 439.118349][ T91] usb 4-1: USB disconnect, device number 36 [ 439.341783][T10810] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1435'. [ 439.562996][T10818] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 439.745058][T10823] FAULT_INJECTION: forcing a failure. [ 439.745058][T10823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.784196][ T30] audit: type=1400 audit(1745177420.482:514): avc: denied { map } for pid=10814 comm="syz.4.1437" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 439.791400][T10823] CPU: 1 UID: 0 PID: 10823 Comm: syz.3.1439 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 439.791421][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 439.791429][T10823] Call Trace: [ 439.791434][T10823] [ 439.791440][T10823] dump_stack_lvl+0x16c/0x1f0 [ 439.791464][T10823] should_fail_ex+0x512/0x640 [ 439.791483][T10823] _copy_to_user+0x32/0xd0 [ 439.791502][T10823] simple_read_from_buffer+0xcb/0x170 [ 439.791526][T10823] proc_fail_nth_read+0x197/0x270 [ 439.791555][T10823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.791578][T10823] ? rw_verify_area+0xcf/0x680 [ 439.791597][T10823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.791619][T10823] vfs_read+0x1de/0xc70 [ 439.791644][T10823] ? __pfx___mutex_lock+0x10/0x10 [ 439.791664][T10823] ? __pfx_vfs_read+0x10/0x10 [ 439.791691][T10823] ? __fget_files+0x20e/0x3c0 [ 439.791711][T10823] ksys_read+0x12a/0x240 [ 439.791723][T10823] ? __pfx_ksys_read+0x10/0x10 [ 439.791742][T10823] ? rcu_is_watching+0x12/0xc0 [ 439.791767][T10823] do_syscall_64+0xcd/0x260 [ 439.791788][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.791803][T10823] RIP: 0033:0x7f396098cb7c [ 439.791816][T10823] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 439.791829][T10823] RSP: 002b:00007f39617f8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.791843][T10823] RAX: ffffffffffffffda RBX: 00007f3960bb5fa0 RCX: 00007f396098cb7c [ 439.791852][T10823] RDX: 000000000000000f RSI: 00007f39617f80a0 RDI: 0000000000000004 [ 439.791861][T10823] RBP: 00007f39617f8090 R08: 0000000000000000 R09: 0000000000000000 [ 439.791869][T10823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.791877][T10823] R13: 0000000000000000 R14: 00007f3960bb5fa0 R15: 00007ffd125cb108 [ 439.791897][T10823] [ 439.943446][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.249453][T10825] ntfs3(nullb0): Primary boot signature is not NTFS. [ 441.256308][T10825] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 441.312410][T10844] net_ratelimit: 6 callbacks suppressed [ 441.312425][T10844] IPv6: addrconf: prefix option has invalid lifetime [ 441.561240][T10800] Process accounting resumed [ 442.403513][T10866] tipc: Cannot configure node identity twice [ 443.291233][T10874] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1445'. [ 443.389820][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 443.638363][ T30] audit: type=1400 audit(1745177424.092:515): avc: denied { setopt } for pid=10885 comm="syz.2.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 444.832335][T10900] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 446.509295][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 446.523690][ T5931] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 446.578740][T10922] FAULT_INJECTION: forcing a failure. [ 446.578740][T10922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.751931][T10922] CPU: 0 UID: 0 PID: 10922 Comm: syz.4.1470 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 446.751957][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 446.751967][T10922] Call Trace: [ 446.751973][T10922] [ 446.751979][T10922] dump_stack_lvl+0x16c/0x1f0 [ 446.752006][T10922] should_fail_ex+0x512/0x640 [ 446.752027][T10922] _copy_to_user+0x32/0xd0 [ 446.752049][T10922] simple_read_from_buffer+0xcb/0x170 [ 446.752076][T10922] proc_fail_nth_read+0x197/0x270 [ 446.752101][T10922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.752128][T10922] ? rw_verify_area+0xcf/0x680 [ 446.752150][T10922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.752176][T10922] vfs_read+0x1de/0xc70 [ 446.752204][T10922] ? __pfx___mutex_lock+0x10/0x10 [ 446.752226][T10922] ? __pfx_vfs_read+0x10/0x10 [ 446.752257][T10922] ? __fget_files+0x20e/0x3c0 [ 446.752281][T10922] ksys_read+0x12a/0x240 [ 446.752296][T10922] ? __pfx_ksys_read+0x10/0x10 [ 446.752319][T10922] ? rcu_is_watching+0x12/0xc0 [ 446.752347][T10922] do_syscall_64+0xcd/0x260 [ 446.752371][T10922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.752388][T10922] RIP: 0033:0x7f5e66b8cb7c [ 446.752401][T10922] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 446.752417][T10922] RSP: 002b:00007f5e67a1b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 446.752434][T10922] RAX: ffffffffffffffda RBX: 00007f5e66db5fa0 RCX: 00007f5e66b8cb7c [ 446.752445][T10922] RDX: 000000000000000f RSI: 00007f5e67a1b0a0 RDI: 0000000000000006 [ 446.752454][T10922] RBP: 00007f5e67a1b090 R08: 0000000000000000 R09: 0000000000000000 [ 446.752463][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.752473][T10922] R13: 0000000000000000 R14: 00007f5e66db5fa0 R15: 00007ffc9ac3db48 [ 446.752495][T10922] [ 446.943932][ C0] vkms_vblank_simulate: vblank timer overrun [ 446.949999][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 447.182966][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1469'. [ 447.320583][ T5931] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 447.340522][ T5931] usb 1-1: can't read configurations, error -22 [ 447.816842][ T5931] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 448.510371][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 448.593042][ T5931] usb 1-1: device descriptor read/all, error -71 [ 448.645569][ T5931] usb usb1-port1: attempt power cycle [ 448.874581][T10950] serio: Serial port ptm0 [ 449.448419][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'. [ 449.527759][T10470] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 449.537310][T10962] netlink: 'syz.1.1481': attribute type 1 has an invalid length. [ 449.550868][T10962] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1481'. [ 449.729296][T10470] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.808903][T10470] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 449.910971][T10470] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.974951][T10470] usb 4-1: config 0 descriptor?? [ 449.981989][T10965] batman_adv: batadv0: Adding interface: dummy0 [ 449.999341][T10965] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.033897][T10470] xbox_remote_probe: Unexpected endpoint_in [ 450.042699][T10470] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 450.051846][T10965] batman_adv: batadv0: Interface activated: dummy0 [ 450.063053][T10968] batadv0: mtu less than device minimum [ 450.069202][T10968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 450.080256][T10968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 450.091118][T10968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 450.101926][T10968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 450.112822][T10968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 450.123609][T10968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 450.134413][T10968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 450.145204][T10968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 450.155997][T10968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 450.298957][ T5874] usb 4-1: USB disconnect, device number 37 [ 451.356979][T10988] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.364149][T10988] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.376356][T10988] bridge0: entered allmulticast mode [ 451.401667][T10988] bridge_slave_1: left allmulticast mode [ 451.408535][T10988] bridge_slave_1: left promiscuous mode [ 451.464683][T10988] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.704278][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'. [ 452.211248][T10988] bridge_slave_0: left allmulticast mode [ 452.217207][T10988] bridge_slave_0: left promiscuous mode [ 452.436572][T10988] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.677835][ T30] audit: type=1400 audit(1745177432.556:516): avc: denied { read } for pid=11002 comm="syz.1.1492" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 452.703727][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 452.798706][ T30] audit: type=1400 audit(1745177432.659:517): avc: denied { ioctl } for pid=11005 comm="syz.0.1494" path="socket:[31907]" dev="sockfs" ino=31907 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 452.918314][ T91] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 453.089476][ T91] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.145158][ T91] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.214273][ T91] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 453.224575][ T91] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.234973][ T91] usb 5-1: config 0 descriptor?? [ 453.293568][ T5874] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 453.521690][ T5874] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 453.881854][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.889742][T11025] FAULT_INJECTION: forcing a failure. [ 453.889742][T11025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.928730][ T5874] usb 2-1: config 0 descriptor?? [ 453.939541][T11025] CPU: 1 UID: 0 PID: 11025 Comm: syz.0.1496 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 453.939564][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 453.939574][T11025] Call Trace: [ 453.939580][T11025] [ 453.939585][T11025] dump_stack_lvl+0x16c/0x1f0 [ 453.939611][T11025] should_fail_ex+0x512/0x640 [ 453.939632][T11025] _copy_from_user+0x2e/0xd0 [ 453.939652][T11025] copy_msghdr_from_user+0x98/0x160 [ 453.939672][T11025] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 453.939704][T11025] ___sys_sendmsg+0xfe/0x1d0 [ 453.939724][T11025] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.939768][T11025] __sys_sendmsg+0x16d/0x220 [ 453.939788][T11025] ? __pfx___sys_sendmsg+0x10/0x10 [ 453.939812][T11025] ? rcu_is_watching+0x12/0xc0 [ 453.939838][T11025] do_syscall_64+0xcd/0x260 [ 453.939861][T11025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.939876][T11025] RIP: 0033:0x7f045118e169 [ 453.939888][T11025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.939904][T11025] RSP: 002b:00007f0451f2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.939920][T11025] RAX: ffffffffffffffda RBX: 00007f04513b6160 RCX: 00007f045118e169 [ 453.939930][T11025] RDX: 0000000000008800 RSI: 00002000000001c0 RDI: 0000000000000008 [ 453.939940][T11025] RBP: 00007f0451f2d090 R08: 0000000000000000 R09: 0000000000000000 [ 453.939949][T11025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.939958][T11025] R13: 0000000000000000 R14: 00007f04513b6160 R15: 00007ffe25a898c8 [ 453.939979][T11025] [ 454.106121][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.286942][ T91] steelseries 0003:1038:12B6.0017: unknown main item tag 0x3 [ 454.297707][ T91] steelseries 0003:1038:12B6.0017: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 454.313985][ T5874] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 454.323793][ T5874] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 454.340591][ T5874] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 454.347577][ T5874] [drm] Initialized udl on minor 2 [ 454.597211][ T5874] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 454.756712][ T5874] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 454.807278][ T24] usb 5-1: USB disconnect, device number 48 [ 455.010328][ T5873] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 2 failed err ffffffb9 [ 455.011094][ T24] usb 2-1: USB disconnect, device number 48 [ 455.018480][ T5873] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 455.055547][ T91] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 455.216460][ T91] usb 1-1: no configurations [ 455.221145][ T91] usb 1-1: can't read configurations, error -22 [ 455.365887][ T91] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 455.540600][ T91] usb 1-1: no configurations [ 455.557788][ T91] usb 1-1: can't read configurations, error -22 [ 455.576992][ T91] usb usb1-port1: attempt power cycle [ 455.700134][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'. [ 455.975404][ T91] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 456.177632][ T91] usb 1-1: no configurations [ 456.182357][ T91] usb 1-1: can't read configurations, error -22 [ 456.227749][T11048] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1506'. [ 456.362262][ T30] audit: type=1400 audit(1745177435.998:518): avc: denied { setopt } for pid=11055 comm="syz.4.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 456.382317][ T91] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 456.397377][ T30] audit: type=1400 audit(1745177436.026:519): avc: denied { map } for pid=11055 comm="syz.4.1509" path="/dev/urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 456.422331][ T91] usb 1-1: no configurations [ 456.427344][ T91] usb 1-1: can't read configurations, error -22 [ 456.434016][ T91] usb usb1-port1: unable to enumerate USB device [ 457.730065][T11073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1513'. [ 457.771860][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 457.814441][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 457.826444][ T5873] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 457.997452][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.008590][ T5873] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 458.021672][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 458.047653][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.054445][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.102839][ T5873] usb 5-1: config 0 descriptor?? [ 458.110111][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.179664][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 458.196491][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.282645][ T24] usb 2-1: config 0 descriptor?? [ 458.369415][ T24] hub 2-1:0.0: USB hub found [ 458.651295][ T24] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 458.652492][ T5873] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 458.676914][ T5873] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0018/input/input47 [ 458.963155][ T5873] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 459.035450][T11068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1512'. [ 459.051389][T11092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.360954][ T24] hid-generic 0003:046D:C31C.0019: item fetching failed at offset 0/1 [ 459.378174][ T24] hid-generic 0003:046D:C31C.0019: probe with driver hid-generic failed with error -22 [ 459.513076][ T24] usb 5-1: USB disconnect, device number 49 [ 459.663692][T10470] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 459.786188][ T5873] usb 2-1: USB disconnect, device number 49 [ 459.834991][T10470] usb 1-1: Using ep0 maxpacket: 16 [ 459.845841][T10470] usb 1-1: config 8 has an invalid interface number: 198 but max is 0 [ 460.303920][T10470] usb 1-1: config 8 has an invalid descriptor of length 36, skipping remainder of the config [ 460.314238][T10470] usb 1-1: config 8 has no interface number 0 [ 460.320549][T10470] usb 1-1: config 8 interface 198 has no altsetting 0 [ 460.336205][T10470] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=6c.67 [ 460.345885][T10470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.356304][T10470] usb 1-1: Product: syz [ 460.360741][T10470] usb 1-1: Manufacturer: syz [ 460.365376][T10470] usb 1-1: SerialNumber: syz [ 460.931484][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 461.652548][ T5931] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 461.826775][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.841038][ T5931] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 461.850312][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.860050][ T5931] usb 2-1: config 0 descriptor?? [ 462.308989][ T5931] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 462.332299][ T5931] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001A/input/input48 [ 462.744839][ T5931] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 462.798801][T10470] ums-onetouch 1-1:8.198: USB Mass Storage device detected [ 462.885900][T10470] usb 1-1: USB disconnect, device number 59 [ 463.059122][ T30] audit: type=1326 audit(1745177442.265:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.0.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045118e169 code=0x7fc00000 [ 463.480966][ T5874] usb 2-1: USB disconnect, device number 50 [ 463.547090][ T30] audit: type=1400 audit(1745177442.723:521): avc: denied { read write } for pid=11153 comm="syz.3.1538" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 463.573602][ T30] audit: type=1400 audit(1745177442.723:522): avc: denied { open } for pid=11153 comm="syz.3.1538" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 463.810181][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 463.819625][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.827830][T11159] FAULT_INJECTION: forcing a failure. [ 463.827830][T11159] name failslab, interval 1, probability 0, space 0, times 0 [ 463.865878][T11159] CPU: 0 UID: 0 PID: 11159 Comm: syz.0.1539 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 463.865903][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.865912][T11159] Call Trace: [ 463.865918][T11159] [ 463.865924][T11159] dump_stack_lvl+0x16c/0x1f0 [ 463.865953][T11159] should_fail_ex+0x512/0x640 [ 463.865970][T11159] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 463.865990][T11159] should_failslab+0xc2/0x120 [ 463.866009][T11159] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 463.866026][T11159] ? __alloc_skb+0x2b2/0x380 [ 463.866050][T11159] __alloc_skb+0x2b2/0x380 [ 463.866068][T11159] ? __pfx___alloc_skb+0x10/0x10 [ 463.866086][T11159] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 463.866108][T11159] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 463.866137][T11159] netlink_alloc_large_skb+0x69/0x130 [ 463.866162][T11159] netlink_sendmsg+0x6a1/0xdd0 [ 463.866188][T11159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.866220][T11159] ____sys_sendmsg+0xa95/0xc70 [ 463.866245][T11159] ? copy_msghdr_from_user+0x10a/0x160 [ 463.866265][T11159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.866301][T11159] ___sys_sendmsg+0x134/0x1d0 [ 463.866322][T11159] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.866372][T11159] __sys_sendmsg+0x16d/0x220 [ 463.866391][T11159] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.866417][T11159] ? rcu_is_watching+0x12/0xc0 [ 463.866445][T11159] do_syscall_64+0xcd/0x260 [ 463.866469][T11159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.866486][T11159] RIP: 0033:0x7f045118e169 [ 463.866500][T11159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.866516][T11159] RSP: 002b:00007f0451f2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.866532][T11159] RAX: ffffffffffffffda RBX: 00007f04513b6160 RCX: 00007f045118e169 [ 463.866543][T11159] RDX: 0000000000008800 RSI: 00002000000001c0 RDI: 0000000000000008 [ 463.866553][T11159] RBP: 00007f0451f2d090 R08: 0000000000000000 R09: 0000000000000000 [ 463.866563][T11159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.866573][T11159] R13: 0000000000000000 R14: 00007f04513b6160 R15: 00007ffe25a898c8 [ 463.866595][T11159] [ 464.960962][ T5874] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 465.439113][ T5874] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 465.587232][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.693248][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 465.934135][ T5874] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 465.992158][ T5874] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 466.015910][ T5874] usb 2-1: Manufacturer: syz [ 466.039980][ T5874] usb 2-1: config 0 descriptor?? [ 466.123626][T11180] serio: Serial port ptm0 [ 466.389114][ T5903] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 466.440949][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1551'. [ 466.482084][ T5874] appleir 0003:05AC:8243.001B: unknown main item tag 0x0 [ 466.490590][ T5874] appleir 0003:05AC:8243.001B: No inputs registered, leaving [ 466.504360][ T5874] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 466.574701][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 466.594127][ T5903] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 466.608186][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.622054][ T5903] usb 1-1: config 0 descriptor?? [ 467.312346][T10470] usb 2-1: USB disconnect, device number 51 [ 469.047106][ T5874] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 469.179515][T10470] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 469.300731][T11214] netlink: 'syz.1.1558': attribute type 1 has an invalid length. [ 469.309897][T11214] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1558'. [ 469.329395][ T5874] usb 5-1: not running at top speed; connect to a high speed hub [ 469.329892][T10470] usb 4-1: device descriptor read/64, error -71 [ 469.338205][ T5874] usb 5-1: config 2 has an invalid interface number: 130 but max is 1 [ 469.361275][ T5874] usb 5-1: config 2 has an invalid interface number: 156 but max is 1 [ 469.574035][ T5874] usb 5-1: config 2 has no interface number 0 [ 469.651459][T10470] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 469.675693][ T5874] usb 5-1: config 2 has no interface number 1 [ 469.681817][ T5874] usb 5-1: config 2 interface 130 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 469.714399][ T5874] usb 5-1: config 2 interface 130 altsetting 6 endpoint 0x4 has invalid maxpacket 1935, setting to 64 [ 469.735464][ T5874] usb 5-1: config 2 interface 130 altsetting 6 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 469.759610][ T5903] usb 1-1: USB disconnect, device number 60 [ 469.767512][ T5874] usb 5-1: config 2 interface 156 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 469.799816][ T5874] usb 5-1: config 2 interface 156 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 469.810641][T10470] usb 4-1: device descriptor read/64, error -71 [ 469.820970][ T5874] usb 5-1: config 2 interface 156 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 469.842358][ T5874] usb 5-1: config 2 interface 156 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 469.864574][ T5874] usb 5-1: config 2 interface 130 has no altsetting 0 [ 469.930138][T10470] usb usb4-port1: attempt power cycle [ 469.935683][ T5874] usb 5-1: config 2 interface 156 has no altsetting 0 [ 470.120518][ T30] audit: type=1400 audit(1745177448.840:523): avc: denied { connect } for pid=11216 comm="syz.0.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 470.170876][ T5874] usb 5-1: New USB device found, idVendor=2001, idProduct=3308, bcdDevice=76.04 [ 470.185796][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.202538][ T5874] usb 5-1: Product: Њ [ 470.213311][ T5874] usb 5-1: Manufacturer: በ[ 470.224088][ T5874] usb 5-1: SerialNumber: ⢱ï­î‘¨î“탸ꬾ䬼礢뢃아瓘㠔꫑ç¶éŸé¶œï¬ŸïŒ„㮺ꆗij誇༾ç‚븯声ê¾å¡“뒰䚆姲䶫è°â˜¬èŸ·ëŸ½ç‘¤åƒ¾ç­¯ï…å©ï¿—攥㛫 [ 470.250101][ T30] audit: type=1400 audit(1745177448.989:524): avc: denied { accept } for pid=11216 comm="syz.0.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 470.313096][T10470] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 470.345605][T10470] usb 4-1: device descriptor read/8, error -71 [ 470.663143][ T5874] usb 5-1: USB disconnect, device number 50 [ 470.708462][T10470] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 470.733096][T10470] usb 4-1: device descriptor read/8, error -71 [ 470.758008][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 470.841804][T11230] netlink: 'syz.0.1563': attribute type 1 has an invalid length. [ 470.876861][T11230] 8021q: adding VLAN 0 to HW filter on device bond6 [ 471.332583][T10470] usb usb4-port1: unable to enumerate USB device [ 471.671518][T11230] ip6erspan0: entered promiscuous mode [ 471.834978][T11230] bond6: (slave ip6erspan0): making interface the new active one [ 471.844386][T11230] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 471.919458][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 471.944734][T11239] netlink: 'syz.3.1565': attribute type 1 has an invalid length. [ 471.972272][T11239] netlink: 'syz.3.1565': attribute type 2 has an invalid length. [ 472.007767][T11230] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 472.031053][ T30] audit: type=1400 audit(1745177450.635:525): avc: denied { read } for pid=11243 comm="syz.2.1568" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 472.078609][ T30] audit: type=1400 audit(1745177450.635:526): avc: denied { open } for pid=11243 comm="syz.2.1568" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 472.102607][ T30] audit: type=1400 audit(1745177450.635:527): avc: denied { ioctl } for pid=11243 comm="syz.2.1568" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 472.143614][ T30] audit: type=1400 audit(1745177450.682:528): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.167669][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.175328][ T30] audit: type=1400 audit(1745177450.682:529): avc: denied { open } for pid=5825 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.220474][T11252] 9pnet_fd: Insufficient options for proto=fd [ 472.237461][ T30] audit: type=1400 audit(1745177450.682:530): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.265175][ T30] audit: type=1400 audit(1745177450.682:531): avc: denied { prog_load } for pid=11243 comm="syz.2.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 472.284427][ T30] audit: type=1400 audit(1745177450.682:532): avc: denied { bpf } for pid=11243 comm="syz.2.1568" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 472.397760][ T5931] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 472.457387][T11254] netlink: 'syz.1.1570': attribute type 1 has an invalid length. [ 472.472908][T10470] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 472.501995][T11254] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1570'. [ 472.607640][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 472.633037][T10470] usb 5-1: Using ep0 maxpacket: 16 [ 472.644779][T10470] usb 5-1: config 8 has an invalid interface number: 198 but max is 0 [ 472.658499][T10470] usb 5-1: config 8 has an invalid descriptor of length 36, skipping remainder of the config [ 472.689699][ T5931] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 472.865163][T10470] usb 5-1: config 8 has no interface number 0 [ 472.873762][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.884544][T10470] usb 5-1: config 8 interface 198 has no altsetting 0 [ 472.897861][T10470] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=6c.67 [ 472.909770][T10470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.918820][T10470] usb 5-1: Product: syz [ 472.928056][T10470] usb 5-1: Manufacturer: syz [ 472.933216][ T5931] usb 4-1: config 0 descriptor?? [ 472.938304][T10470] usb 5-1: SerialNumber: syz [ 473.998133][T11267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1574'. [ 475.197807][T10470] ums-onetouch 5-1:8.198: USB Mass Storage device detected [ 476.191078][T11255] Process accounting paused [ 476.197631][T10470] usb 5-1: USB disconnect, device number 51 [ 476.329974][ T5874] usb 4-1: USB disconnect, device number 42 [ 476.921140][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 476.921158][ T30] audit: type=1400 audit(1745177454.760:577): avc: denied { write } for pid=11282 comm="syz.4.1579" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 477.400655][ T30] audit: type=1400 audit(1745177455.424:578): avc: denied { map_read map_write } for pid=11284 comm="syz.0.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 477.441425][ T30] audit: type=1400 audit(1745177455.714:579): avc: denied { create } for pid=11286 comm="syz.1.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 477.478984][ T30] audit: type=1400 audit(1745177455.742:580): avc: denied { write } for pid=11286 comm="syz.1.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 477.743829][ T30] audit: type=1400 audit(1745177455.995:581): avc: denied { create } for pid=11282 comm="syz.4.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 477.882862][ T30] audit: type=1400 audit(1745177456.116:582): avc: denied { name_bind } for pid=11296 comm="syz.0.1583" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 477.905607][ T30] audit: type=1400 audit(1745177456.116:583): avc: denied { node_bind } for pid=11296 comm="syz.0.1583" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 478.054495][ T30] audit: type=1400 audit(1745177456.116:584): avc: denied { create } for pid=11296 comm="syz.0.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 478.100010][ T30] audit: type=1400 audit(1745177456.125:585): avc: denied { ioctl } for pid=11296 comm="syz.0.1583" path="socket:[32595]" dev="sockfs" ino=32595 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 478.126395][T11300] netlink: 'syz.3.1584': attribute type 1 has an invalid length. [ 478.127135][ T30] audit: type=1400 audit(1745177456.125:586): avc: denied { write } for pid=11296 comm="syz.0.1583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 478.155217][T11300] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1584'. [ 478.302250][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1585'. [ 478.721693][T11318] netlink: 'syz.4.1589': attribute type 1 has an invalid length. [ 478.755146][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1589'. [ 478.785411][T11318] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 478.804178][T11318] bond2: (slave batadv5): Enslaving as a backup interface with an up link [ 478.824641][T11323] netlink: 'syz.1.1591': attribute type 10 has an invalid length. [ 478.826872][T11324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.848677][T11320] bond2 (unregistering): (slave batadv5): Releasing backup interface [ 478.859997][T11320] bond2 (unregistering): Released all slaves [ 479.039968][T11328] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 479.046492][T11328] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 479.065184][T11328] vhci_hcd vhci_hcd.0: Device attached [ 479.315451][ T5931] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 479.609339][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 479.642887][T11332] vhci_hcd: connection reset by peer [ 479.664406][ T8107] vhci_hcd: stop threads [ 479.671432][ T8107] vhci_hcd: release socket [ 479.677064][ T8107] vhci_hcd: disconnect device [ 479.766432][T11348] nbd: must specify at least one socket [ 479.772932][T11348] net_ratelimit: 11 callbacks suppressed [ 479.772945][T11348] dccp_invalid_packet: P.Data Offset(4) too small [ 480.009533][T11355] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 480.018515][T11355] overlayfs: missing 'lowerdir' [ 480.381806][ T972] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 480.477668][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1599'. [ 480.501892][ T972] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 480.522675][ T972] usb 3-1: USB disconnect, device number 55 [ 480.553577][T11342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 480.622144][T11342] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 480.632529][T11361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.863931][T11342] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 480.897966][T11342] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 480.907180][T11342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 480.991014][T11342] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 481.016101][T11342] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 481.030211][T11342] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 481.366955][ T91] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 481.861046][ T5903] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 481.918633][ T91] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 481.950994][ T91] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 481.988980][T11385] wireguard0: entered promiscuous mode [ 481.994649][T11385] wireguard0: entered allmulticast mode [ 482.051572][ T91] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.061956][ T91] usb 3-1: config 0 descriptor?? [ 482.062198][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1608'. [ 482.098884][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 482.217564][ T5903] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 482.298203][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.328098][ T5903] usb 4-1: Product: syz [ 482.428581][ T91] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 482.480438][ T5903] usb 4-1: Manufacturer: syz [ 482.489679][ T5903] usb 4-1: SerialNumber: syz [ 482.527185][ T5903] usb 4-1: config 0 descriptor?? [ 482.599472][ T91] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.613205][ T91] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 482.625141][ T91] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.644793][ T91] usb 5-1: config 0 descriptor?? [ 482.783748][ T5903] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 483.103826][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 483.103842][ T30] audit: type=1400 audit(1745177461.017:610): avc: denied { read write } for pid=11389 comm="syz.4.1609" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 483.106408][ T91] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 483.110088][ T30] audit: type=1400 audit(1745177461.017:611): avc: denied { open } for pid=11389 comm="syz.4.1609" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 483.559606][ T91] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001C/input/input49 [ 483.660589][ T30] audit: type=1400 audit(1745177461.531:612): avc: denied { read } for pid=5181 comm="acpid" name="event4" dev="devtmpfs" ino=3342 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 483.687240][ T30] audit: type=1400 audit(1745177461.531:613): avc: denied { open } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3342 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 483.728239][ T91] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 483.757926][ T30] audit: type=1400 audit(1745177461.531:614): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3342 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 483.936534][ T30] audit: type=1400 audit(1745177461.793:615): avc: denied { read write } for pid=11399 comm="syz.0.1611" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 483.986078][ T30] audit: type=1400 audit(1745177461.793:616): avc: denied { open } for pid=11399 comm="syz.0.1611" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 484.219273][T11402] netlink: 'syz.0.1611': attribute type 25 has an invalid length. [ 484.229762][T10470] usb 5-1: USB disconnect, device number 52 [ 484.278575][ T91] usb 3-1: USB disconnect, device number 56 [ 484.302561][T11402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1611'. [ 484.359818][T11407] tmpfs: Unknown parameter 'huge½always' [ 484.360882][ T30] audit: type=1400 audit(1745177462.186:617): avc: denied { create } for pid=11406 comm="syz.2.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 484.617592][ T30] audit: type=1400 audit(1745177462.392:618): avc: denied { create } for pid=11406 comm="syz.2.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 484.841446][ T30] audit: type=1400 audit(1745177462.420:619): avc: denied { ioctl } for pid=11406 comm="syz.2.1612" path="socket:[34844]" dev="sockfs" ino=34844 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 484.883276][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1613'. [ 484.922416][ T5903] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 484.946797][ T5903] usb 4-1: USB disconnect, device number 43 [ 484.980508][T11413] lo speed is unknown, defaulting to 1000 [ 485.014304][ T5931] vhci_hcd: vhci_device speed not set [ 485.822372][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 486.029474][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 486.130638][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.142494][ T24] usb 5-1: Product: syz [ 486.146736][ T24] usb 5-1: Manufacturer: syz [ 486.152813][ T24] usb 5-1: SerialNumber: syz [ 486.184206][ T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 486.200823][ T972] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 486.362232][T11444] hub 6-0:1.0: USB hub found [ 486.367218][T11444] hub 6-0:1.0: 1 port detected [ 487.292742][T11453] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1617'. [ 487.633581][T11452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 487.742533][ T972] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 487.749651][ T972] ath9k_htc: Failed to initialize the device [ 487.781286][ T972] usb 5-1: ath9k_htc: USB layer deinitialized [ 487.964533][T11455] program syz.0.1622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.483669][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 488.483684][ T30] audit: type=1400 audit(1745177466.039:642): avc: denied { unlink } for pid=5825 comm="syz-executor" name="control" dev="tmpfs" ino=1626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 488.688272][T11476] netlink: 'syz.1.1629': attribute type 1 has an invalid length. [ 488.727822][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1629'. [ 488.744693][T11476] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 488.754904][T11476] bond5: (slave batadv1): Enslaving as a backup interface with an up link [ 488.803418][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 488.813382][T11479] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 488.821221][T11479] netlink: 'syz.1.1630': attribute type 2 has an invalid length. [ 488.927499][ T5831] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 488.935219][ T5873] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 488.960075][ T5903] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 489.024884][ T91] usb 5-1: USB disconnect, device number 53 [ 489.089210][ T5831] usb 4-1: device descriptor read/64, error -71 [ 489.097050][ T30] audit: type=1400 audit(1745177466.610:643): avc: denied { create } for pid=11483 comm="syz.4.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 489.117626][T10562] Bluetooth: hci5: sending frame failed (-49) [ 489.124998][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 489.125949][ T30] audit: type=1400 audit(1745177466.610:644): avc: denied { bind } for pid=11483 comm="syz.4.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 489.141649][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 489.163984][ T5873] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.175468][ T5873] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.180275][ T5903] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 489.185271][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 489.185302][ T5873] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 489.185321][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.196156][ T5873] usb 3-1: config 0 descriptor?? [ 489.207424][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.241599][ T5903] usb 1-1: config 0 descriptor?? [ 489.365974][ T5831] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 489.515892][ T5831] usb 4-1: device descriptor read/64, error -71 [ 489.644350][ T5831] usb usb4-port1: attempt power cycle [ 489.979332][ T5873] magicmouse 0003:05AC:0269.001D: item fetching failed at offset 5/7 [ 490.090358][ T5873] magicmouse 0003:05AC:0269.001D: magicmouse hid parse failed [ 490.098612][ T5873] magicmouse 0003:05AC:0269.001D: probe with driver magicmouse failed with error -22 [ 490.110908][ T5873] usb 3-1: USB disconnect, device number 57 [ 490.253253][ T5831] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 490.275283][ T5831] usb 4-1: device descriptor read/8, error -71 [ 490.542053][ T5831] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 490.665555][ T5831] usb 4-1: device descriptor read/8, error -71 [ 491.196078][ T5831] usb usb4-port1: unable to enumerate USB device [ 492.286681][ T5831] usb 1-1: USB disconnect, device number 61 [ 492.335061][ T30] audit: type=1400 audit(1745177469.640:645): avc: denied { create } for pid=11499 comm="syz.0.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 492.335747][T11500] IPv6: addrconf: prefix option has invalid lifetime [ 492.389144][T11502] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1636'. [ 492.398469][ T30] audit: type=1400 audit(1745177469.640:646): avc: denied { ioctl } for pid=11499 comm="syz.0.1637" path="socket:[34153]" dev="sockfs" ino=34153 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 492.423945][T11502] netlink: 'syz.2.1636': attribute type 6 has an invalid length. [ 492.454591][T11502] netlink: 'syz.2.1636': attribute type 5 has an invalid length. [ 492.476383][T11505] program syz.3.1639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.484137][T11502] netlink: 'syz.2.1636': attribute type 4 has an invalid length. [ 492.527862][T11508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1641'. [ 492.607662][ T30] audit: type=1400 audit(1745177469.902:647): avc: denied { connect } for pid=11513 comm="syz.2.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 492.810845][ T30] audit: type=1400 audit(1745177469.902:648): avc: denied { write } for pid=11513 comm="syz.2.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 492.982210][T11525] ntfs3(nullb0): Primary boot signature is not NTFS. [ 492.989017][T11525] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 493.321983][ T30] audit: type=1400 audit(1745177469.912:649): avc: denied { name_bind } for pid=11516 comm="syz.3.1645" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 493.343640][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.352342][ T30] audit: type=1400 audit(1745177470.192:650): avc: denied { read } for pid=11513 comm="syz.2.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 493.386063][ T972] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 493.738946][ T30] audit: type=1400 audit(1745177470.248:651): avc: denied { mounton } for pid=11513 comm="syz.2.1643" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 493.865625][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 493.865640][ T30] audit: type=1400 audit(1745177471.071:654): avc: denied { map } for pid=11532 comm="syz.2.1648" path="socket:[35064]" dev="sockfs" ino=35064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 493.894953][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.918632][ T30] audit: type=1400 audit(1745177471.071:655): avc: denied { read write } for pid=11532 comm="syz.2.1648" path="socket:[35064]" dev="sockfs" ino=35064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 493.957219][ T30] audit: type=1400 audit(1745177471.071:656): avc: denied { create } for pid=11532 comm="syz.2.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 493.992736][ T972] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 494.003633][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.016893][ T972] usb 1-1: Product: syz [ 494.021087][ T972] usb 1-1: Manufacturer: syz [ 494.025769][ T30] audit: type=1400 audit(1745177471.071:657): avc: denied { setopt } for pid=11532 comm="syz.2.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 494.048893][ T5831] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 494.056473][ T972] usb 1-1: SerialNumber: syz [ 494.065831][ T972] usb 1-1: config 0 descriptor?? [ 494.076275][T11537] netlink: 'syz.3.1649': attribute type 1 has an invalid length. [ 494.076769][ T30] audit: type=1400 audit(1745177471.071:658): avc: denied { connect } for pid=11532 comm="syz.2.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 494.102416][T11537] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1649'. [ 494.235652][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 494.654682][ T30] audit: type=1400 audit(1745177471.801:659): avc: denied { ioctl } for pid=11509 comm="syz.0.1640" path="socket:[34218]" dev="sockfs" ino=34218 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 494.679567][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.986865][ T5831] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 494.996127][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.006126][ T5831] usb 5-1: config 0 descriptor?? [ 495.013026][ T972] usb 1-1: USB disconnect, device number 62 [ 495.943743][ T30] audit: type=1400 audit(1745177472.568:660): avc: denied { create } for pid=11544 comm="syz.1.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 496.658007][ T5873] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 496.700307][ T30] audit: type=1400 audit(1745177473.718:661): avc: denied { create } for pid=11556 comm="syz.3.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 496.843358][ T5873] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 496.852479][ T5873] usb 1-1: config 0 has no interface number 0 [ 496.858828][ T5873] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 496.888249][ T5873] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 497.025291][ T5873] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 497.105935][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.122914][ T5873] usb 1-1: config 0 descriptor?? [ 497.223880][ T30] audit: type=1400 audit(1745177474.214:662): avc: denied { write } for pid=11567 comm="syz.1.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 497.224639][T11553] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 497.243992][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.259454][ T5873] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 497.383652][T11572] netdevsim netdevsim2 ªªªªª»: renamed from netdevsim0 (while UP) [ 497.426885][T11568] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 497.436300][ T30] audit: type=1400 audit(1745177474.382:663): avc: denied { create } for pid=11567 comm="syz.1.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 497.456738][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.036525][ T5873] usb 5-1: USB disconnect, device number 54 [ 499.297418][T11589] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 499.311619][ T5873] usb 1-1: USB disconnect, device number 63 [ 499.325503][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 499.325516][ T30] audit: type=1400 audit(1745177476.178:665): avc: denied { accept } for pid=11583 comm="syz.3.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 499.412487][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 499.509365][T11597] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 499.517901][T11597] bond2: (slave batadv6): Enslaving as a backup interface with an up link [ 499.577408][T11589] bond2 (unregistering): (slave batadv6): Releasing backup interface [ 499.602588][T11589] bond2 (unregistering): Released all slaves [ 499.703854][T11606] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 499.729265][ T30] audit: type=1400 audit(1745177476.533:666): avc: denied { setopt } for pid=11602 comm="syz.2.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 499.926237][ T5873] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 499.997677][T11608] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1671'. [ 500.036493][T11608] netlink: zone id is out of range [ 500.061641][T11608] netlink: get zone limit has 8 unknown bytes [ 500.089665][ T30] audit: type=1400 audit(1745177476.889:667): avc: denied { accept } for pid=11607 comm="syz.1.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 500.132593][ T5873] usb 1-1: device descriptor read/64, error -71 [ 500.156359][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 500.314390][ T30] audit: type=1400 audit(1745177477.104:668): avc: denied { read write } for pid=11617 comm="syz.3.1675" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 500.442768][ T5873] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 500.523609][ T30] audit: type=1400 audit(1745177477.104:669): avc: denied { open } for pid=11617 comm="syz.3.1675" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 500.656886][ T5873] usb 1-1: device descriptor read/64, error -71 [ 500.742240][ T5931] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 500.760890][ T30] audit: type=1400 audit(1745177477.291:670): avc: denied { getopt } for pid=11617 comm="syz.3.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 500.788142][ T30] audit: type=1400 audit(1745177477.347:671): avc: denied { mount } for pid=11617 comm="syz.3.1675" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 500.811579][ T30] audit: type=1400 audit(1745177477.515:672): avc: denied { getopt } for pid=11617 comm="syz.3.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 500.811878][T11621] block device autoloading is deprecated and will be removed. [ 500.843159][ T5873] usb usb1-port1: attempt power cycle [ 500.845464][ T30] audit: type=1400 audit(1745177477.553:673): avc: denied { read } for pid=11617 comm="syz.3.1675" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 500.867247][T11618] md: md2 stopped. [ 500.883019][ T30] audit: type=1400 audit(1745177477.553:674): avc: denied { open } for pid=11617 comm="syz.3.1675" path="/323/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 500.944093][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1677'. [ 500.945302][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 500.954504][T11626] FAULT_INJECTION: forcing a failure. [ 500.954504][T11626] name failslab, interval 1, probability 0, space 0, times 0 [ 500.984289][T11626] CPU: 0 UID: 0 PID: 11626 Comm: syz.3.1677 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 500.984316][T11626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 500.984325][T11626] Call Trace: [ 500.984330][T11626] [ 500.984336][T11626] dump_stack_lvl+0x16c/0x1f0 [ 500.984361][T11626] should_fail_ex+0x512/0x640 [ 500.984378][T11626] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 500.984398][T11626] should_failslab+0xc2/0x120 [ 500.984416][T11626] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 500.984432][T11626] ? __alloc_skb+0x2b2/0x380 [ 500.984455][T11626] __alloc_skb+0x2b2/0x380 [ 500.984473][T11626] ? __pfx___alloc_skb+0x10/0x10 [ 500.984493][T11626] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 500.984518][T11626] netlink_alloc_large_skb+0x69/0x130 [ 500.984539][T11626] netlink_sendmsg+0x6a1/0xdd0 [ 500.984564][T11626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.984594][T11626] ____sys_sendmsg+0xa95/0xc70 [ 500.984618][T11626] ? copy_msghdr_from_user+0x10a/0x160 [ 500.984635][T11626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.984670][T11626] ___sys_sendmsg+0x134/0x1d0 [ 500.984691][T11626] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.984742][T11626] __sys_sendmsg+0x16d/0x220 [ 500.984762][T11626] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.984788][T11626] ? rcu_is_watching+0x12/0xc0 [ 500.984815][T11626] do_syscall_64+0xcd/0x260 [ 500.984839][T11626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.984857][T11626] RIP: 0033:0x7f396098e169 [ 500.984870][T11626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.984885][T11626] RSP: 002b:00007f39617f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.984901][T11626] RAX: ffffffffffffffda RBX: 00007f3960bb5fa0 RCX: 00007f396098e169 [ 500.984912][T11626] RDX: 0000000000000010 RSI: 0000200000001300 RDI: 0000000000000003 [ 500.984923][T11626] RBP: 00007f39617f8090 R08: 0000000000000000 R09: 0000000000000000 [ 500.984933][T11626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.984943][T11626] R13: 0000000000000000 R14: 00007f3960bb5fa0 R15: 00007ffd125cb108 [ 500.984965][T11626] [ 501.205624][ T5931] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 501.214721][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.312488][ T5873] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 501.341463][ T5873] usb 1-1: device descriptor read/8, error -71 [ 501.586875][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 501.610994][ T5873] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 501.661658][ T972] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 501.780113][ T5873] usb 1-1: device descriptor read/8, error -71 [ 501.781910][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.862754][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.893612][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 501.922302][ T972] usb 2-1: Using ep0 maxpacket: 8 [ 501.936078][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.944962][T11639] netlink: 'syz.4.1683': attribute type 1 has an invalid length. [ 501.955486][ T5873] usb usb1-port1: unable to enumerate USB device [ 501.965913][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 501.966615][T11639] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1683'. [ 501.982318][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 502.001594][ T972] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 502.031873][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 502.045200][ T972] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 502.055776][ T972] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 502.064963][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.073704][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 503.089006][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1687'. [ 503.894300][ T5918] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 504.056631][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 504.070823][ T5918] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 504.081217][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.090655][ T5918] usb 5-1: Product: syz [ 504.094940][ T5918] usb 5-1: Manufacturer: syz [ 504.099928][ T5918] usb 5-1: SerialNumber: syz [ 504.609563][T11667] wireguard0: entered promiscuous mode [ 504.618265][T11667] wireguard0: entered allmulticast mode [ 504.789655][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 504.789670][ T30] audit: type=1400 audit(1745177481.294:686): avc: denied { write } for pid=11671 comm="syz.1.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 504.826800][ T30] audit: type=1400 audit(1745177481.322:687): avc: denied { nlmsg_write } for pid=11671 comm="syz.1.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 505.048045][T11672] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1692'. [ 505.465048][T11683] netlink: 'syz.3.1695': attribute type 1 has an invalid length. [ 505.473923][T11683] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1695'. [ 506.860023][T11693] tipc: Cannot configure node identity twice [ 507.090995][T11701] netlink: 'syz.1.1700': attribute type 5 has an invalid length. [ 508.126374][T11714] 9pnet_virtio: no channels available for device syz [ 508.136084][ T30] audit: type=1400 audit(1745177484.427:688): avc: denied { write } for pid=11704 comm="syz.3.1701" path="socket:[35849]" dev="sockfs" ino=35849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 510.389889][T11696] Process accounting resumed [ 510.581700][T11746] netlink: 'syz.2.1711': attribute type 1 has an invalid length. [ 510.593916][T11746] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1711'. [ 510.813562][T11753] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 510.849368][T11753] vlan2: entered allmulticast mode [ 510.854558][T11753] batadv0: entered allmulticast mode [ 511.187374][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1713'. [ 511.556311][T11762] ntfs3(nullb0): Primary boot signature is not NTFS. [ 511.563417][T11762] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 511.992843][ T30] audit: type=1400 audit(1745177488.028:689): avc: denied { ioctl } for pid=11763 comm="syz.1.1715" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35970 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 512.170146][T11772] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 512.186430][ T30] audit: type=1400 audit(1745177488.196:690): avc: denied { mounton } for pid=11770 comm="syz.2.1717" path="/333/file0" dev="tmpfs" ino=1734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 512.257749][ T30] audit: type=1400 audit(1745177488.262:691): avc: denied { execute_no_trans } for pid=11770 comm="syz.2.1717" path="/333/file0" dev="tmpfs" ino=1734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 512.533465][T11776] FAULT_INJECTION: forcing a failure. [ 512.533465][T11776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.551350][T11776] CPU: 0 UID: 0 PID: 11776 Comm: syz.2.1720 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 512.551375][T11776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 512.551384][T11776] Call Trace: [ 512.551390][T11776] [ 512.551396][T11776] dump_stack_lvl+0x16c/0x1f0 [ 512.551422][T11776] should_fail_ex+0x512/0x640 [ 512.551445][T11776] _copy_to_user+0x32/0xd0 [ 512.551467][T11776] simple_read_from_buffer+0xcb/0x170 [ 512.551495][T11776] proc_fail_nth_read+0x197/0x270 [ 512.551520][T11776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.551548][T11776] ? rw_verify_area+0xcf/0x680 [ 512.551569][T11776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 512.551592][T11776] vfs_read+0x1de/0xc70 [ 512.551617][T11776] ? __pfx___mutex_lock+0x10/0x10 [ 512.551638][T11776] ? __pfx_vfs_read+0x10/0x10 [ 512.551669][T11776] ? __fget_files+0x20e/0x3c0 [ 512.551692][T11776] ksys_read+0x12a/0x240 [ 512.551705][T11776] ? __pfx_ksys_read+0x10/0x10 [ 512.551727][T11776] ? rcu_is_watching+0x12/0xc0 [ 512.551752][T11776] do_syscall_64+0xcd/0x260 [ 512.551775][T11776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.551791][T11776] RIP: 0033:0x7f110a98cb7c [ 512.551804][T11776] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 512.551819][T11776] RSP: 002b:00007f110b871030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.551834][T11776] RAX: ffffffffffffffda RBX: 00007f110abb5fa0 RCX: 00007f110a98cb7c [ 512.551844][T11776] RDX: 000000000000000f RSI: 00007f110b8710a0 RDI: 0000000000000007 [ 512.551853][T11776] RBP: 00007f110b871090 R08: 0000000000000000 R09: 0000000000000000 [ 512.551862][T11776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.551871][T11776] R13: 0000000000000000 R14: 00007f110abb5fa0 R15: 00007ffd2e8d9918 [ 512.551892][T11776] [ 512.899741][T11786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1722'. [ 513.008459][T11788] tipc: Cannot configure node identity twice [ 513.433515][T11789] tipc: Enabled bearer , priority 0 [ 513.476116][ T5874] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 513.607624][T11789] syzkaller0: entered promiscuous mode [ 513.613200][T11789] syzkaller0: entered allmulticast mode [ 513.619965][T11789] tipc: Resetting bearer [ 513.636556][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 513.644727][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.655918][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.665788][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 513.667457][T11794] netlink: 'syz.1.1726': attribute type 1 has an invalid length. [ 513.678703][ T5874] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 513.678728][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.708555][T11794] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1726'. [ 513.837039][T11781] tipc: Resetting bearer [ 514.918394][ T30] audit: type=1400 audit(1745177490.759:692): avc: denied { ioctl } for pid=11800 comm="syz.1.1728" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 515.583735][T11781] tipc: Disabling bearer [ 515.670213][ T30] audit: type=1400 audit(1745177491.470:693): avc: denied { block_suspend } for pid=11817 comm="syz.1.1733" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 515.735081][T11820] Cannot find del_set index 4 as target [ 515.934889][T11809] bond0 (unregistering): Released all slaves [ 516.988923][T11831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1738'. [ 517.321997][ T30] audit: type=1400 audit(1745177493.013:694): avc: denied { write } for pid=11832 comm="syz.3.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 517.611396][T11840] netlink: 'syz.0.1740': attribute type 10 has an invalid length. [ 517.621449][T11840] syz_tun: entered promiscuous mode [ 517.640313][T11840] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 517.722762][T11842] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.497954][ T30] audit: type=1400 audit(1745177495.052:695): avc: denied { ioctl } for pid=11854 comm="syz.3.1746" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 519.543060][ T30] audit: type=1400 audit(1745177495.089:696): avc: denied { mount } for pid=11854 comm="syz.3.1746" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 519.566915][ T30] audit: type=1400 audit(1745177495.099:697): avc: denied { read } for pid=11854 comm="syz.3.1746" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 519.591527][ T30] audit: type=1400 audit(1745177495.099:698): avc: denied { open } for pid=11854 comm="syz.3.1746" path="/345/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 519.614142][ T30] audit: type=1400 audit(1745177495.136:699): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 519.722813][ T5903] hid-generic C990:0003:0000.001E: unknown main item tag 0x0 [ 519.730211][ T5903] hid-generic C990:0003:0000.001E: unknown main item tag 0x0 [ 520.808568][ T30] audit: type=1326 audit(1745177496.268:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.1.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5a18e169 code=0x50000 [ 520.931830][ T30] audit: type=1326 audit(1745177496.305:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.1.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5a18e169 code=0x50000 [ 521.044711][ T30] audit: type=1326 audit(1745177496.305:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.1.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5a18e169 code=0x50000 [ 521.172059][ T30] audit: type=1326 audit(1745177496.315:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.1.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5a18e169 code=0x50000 [ 521.217170][ T30] audit: type=1326 audit(1745177496.315:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.1.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5a18e169 code=0x50000 [ 521.229246][T11867] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 522.197942][T11886] dvmrp8: entered allmulticast mode [ 522.206088][T11886] dvmrp8: left allmulticast mode [ 522.888998][T10470] kernel read not supported for file /video7 (pid: 10470 comm: kworker/1:7) [ 523.604713][T10562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 523.617438][T10562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 523.626001][T10562] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 523.638658][T10562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 523.646520][T10562] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 523.658303][ T5137] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 523.665981][ T5137] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 523.673205][ T5137] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 523.683930][ T5137] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 523.693694][ T5137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 523.727732][T11898] lo speed is unknown, defaulting to 1000 [ 523.828858][T11898] chnl_net:caif_netlink_parms(): no params data found [ 523.894074][T11898] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.901253][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.908330][T11898] bridge_slave_0: entered allmulticast mode [ 523.915767][T11898] bridge_slave_0: entered promiscuous mode [ 523.924562][T11898] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.931645][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.940346][T11898] bridge_slave_1: entered allmulticast mode [ 523.947941][T11898] bridge_slave_1: entered promiscuous mode [ 523.973101][T11898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.984068][T11898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.011879][T11898] team0: Port device team_slave_0 added [ 524.019677][T11898] team0: Port device team_slave_1 added [ 524.040054][T11898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.046998][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.074722][T11898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.087182][T11898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.094711][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.120567][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.126690][T11898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.164030][T11898] hsr_slave_0: entered promiscuous mode [ 524.170345][T11898] hsr_slave_1: entered promiscuous mode [ 524.176205][T11898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.183880][T11898] Cannot create hsr debugfs directory [ 524.913034][ T30] kauditd_printk_skb: 617 callbacks suppressed [ 524.913049][ T30] audit: type=1400 audit(1745177500.112:1322): avc: denied { getopt } for pid=11909 comm="syz.2.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 525.900201][T10562] Bluetooth: hci5: command tx timeout [ 526.153259][T11915] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 528.124292][T10562] Bluetooth: hci5: command tx timeout [ 529.498080][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 530.347991][T10562] Bluetooth: hci5: command tx timeout [ 532.571951][T10562] Bluetooth: hci5: command tx timeout [ 536.097946][ T5137] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 536.109174][ T5137] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 536.117634][ T5137] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 536.128388][ T5137] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 536.136579][ T5137] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 538.303003][ T5137] Bluetooth: hci6: command tx timeout [ 539.166169][T10562] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 539.179026][T10562] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 539.186984][T10562] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 539.196064][T10562] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 539.203996][T10562] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 540.537386][T10562] Bluetooth: hci6: command tx timeout [ 541.167749][ T5137] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 541.175510][ T5137] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 541.184724][ T5137] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 541.192892][ T5137] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 541.204799][ T5137] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 541.382267][ T5137] Bluetooth: hci7: command tx timeout [ 542.750758][ T5137] Bluetooth: hci6: command tx timeout [ 543.111955][T10562] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 543.124050][T10562] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 543.133416][T10562] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 543.142922][T10562] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 543.151243][T10562] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 543.435570][ T5137] Bluetooth: hci8: command tx timeout [ 543.605969][ T5137] Bluetooth: hci7: command tx timeout [ 544.974634][ T5137] Bluetooth: hci6: command tx timeout [ 545.327346][ T5137] Bluetooth: hci9: command tx timeout [ 545.658807][ T5137] Bluetooth: hci8: command tx timeout [ 545.829864][ T5137] Bluetooth: hci7: command tx timeout [ 547.541946][ T5137] Bluetooth: hci9: command tx timeout [ 547.882860][ T5137] Bluetooth: hci8: command tx timeout [ 548.053790][ T5137] Bluetooth: hci7: command tx timeout [ 549.764445][ T5137] Bluetooth: hci9: command tx timeout [ 550.106582][ T5137] Bluetooth: hci8: command tx timeout [ 551.988378][ T5137] Bluetooth: hci9: command tx timeout [ 578.772203][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 588.166958][T10562] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 588.175796][T10562] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 588.184692][T10562] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 588.192959][T10562] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 588.200452][T10562] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 590.393946][ T5137] Bluetooth: hci10: command tx timeout [ 592.617562][ T5137] Bluetooth: hci10: command tx timeout [ 594.841507][ T5137] Bluetooth: hci10: command tx timeout [ 595.187839][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 597.076356][ T5137] Bluetooth: hci10: command tx timeout [ 601.163991][T10562] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 601.172065][T10562] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 601.179686][T10562] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 601.188813][T10562] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 601.201106][T10562] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 603.395154][ T5137] Bluetooth: hci11: command tx timeout [ 604.233841][T10562] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 604.245765][T10562] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 604.255765][T10562] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 604.268113][T10562] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 604.275728][T10562] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 605.618894][T10562] Bluetooth: hci11: command tx timeout [ 606.243534][ T5137] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 606.252692][ T5137] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 606.260579][ T5137] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 606.268727][ T5137] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 606.276443][ T5137] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 606.474468][ T5137] Bluetooth: hci12: command tx timeout [ 607.671522][T10562] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 607.679576][T10562] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 607.689567][T10562] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 607.698733][T10562] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 607.708188][T10562] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 607.843060][T10562] Bluetooth: hci11: command tx timeout [ 608.442200][T10562] Bluetooth: hci13: command tx timeout [ 608.698285][T10562] Bluetooth: hci12: command tx timeout [ 609.906627][T10562] Bluetooth: hci14: command tx timeout [ 610.066807][T10562] Bluetooth: hci11: command tx timeout [ 610.666610][T10562] Bluetooth: hci13: command tx timeout [ 610.922068][T10562] Bluetooth: hci12: command tx timeout [ 612.119555][T10562] Bluetooth: hci14: command tx timeout [ 612.889900][T10562] Bluetooth: hci13: command tx timeout [ 613.146247][T10562] Bluetooth: hci12: command tx timeout [ 614.343688][T10562] Bluetooth: hci14: command tx timeout [ 615.113709][ T5137] Bluetooth: hci13: command tx timeout [ 616.578835][ T5137] Bluetooth: hci14: command tx timeout [ 653.317583][T10562] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 653.325390][T10562] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 653.336071][T10562] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 653.344813][T10562] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 653.353476][T10562] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 655.571455][ T5137] Bluetooth: hci15: command tx timeout [ 657.634884][ T5137] Bluetooth: hci5: command 0x0406 tx timeout [ 657.806061][T10562] Bluetooth: hci15: command tx timeout [ 660.029947][T10562] Bluetooth: hci15: command tx timeout [ 660.877056][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.892138][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 660.900033][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 660.907935][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 660.916591][ T31] task:kworker/1:0 state:D stack:20680 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 660.928946][ T31] Workqueue: usb_hub_wq hub_event [ 660.935453][ T31] Call Trace: [ 660.938776][ T30] audit: type=1400 audit(1745177627.330:1323): avc: denied { write } for pid=5807 comm="syz-executor" path="pipe:[3643]" dev="pipefs" ino=3643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 660.976615][ T31] [ 660.979560][ T31] __schedule+0x116f/0x5de0 [ 660.984350][ T31] ? number+0x9aa/0xc70 [ 660.988510][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 660.993811][ T31] ? __pfx___schedule+0x10/0x10 [ 660.998674][ T31] ? find_held_lock+0x2b/0x80 [ 661.012204][ T31] ? schedule+0x2d7/0x3a0 [ 661.016600][ T31] schedule+0xe7/0x3a0 [ 661.020673][ T31] schedule_timeout+0x257/0x290 [ 661.025754][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 661.031152][ T31] ? mark_held_locks+0x49/0x80 [ 661.036326][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.042232][ T31] __wait_for_common+0x2fc/0x4e0 [ 661.047209][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 661.052558][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 661.058392][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 661.063605][ T31] devtmpfs_submit_req+0xa8/0x100 [ 661.068703][ T31] devtmpfs_create_node+0x18a/0x230 [ 661.073897][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 661.079654][ T31] ? up_write+0x1b2/0x520 [ 661.083981][ T31] ? kernfs_create_link+0x1bd/0x240 [ 661.089210][ T31] ? kernfs_put+0x35/0x60 [ 661.093533][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 661.099118][ T31] device_add+0x10bd/0x1a70 [ 661.103612][ T31] ? __pfx_device_add+0x10/0x10 [ 661.108442][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 661.114181][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 661.120069][ T31] usb_new_device+0xd07/0x1a20 [ 661.124937][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 661.129956][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 661.135196][ T31] ? mark_held_locks+0x49/0x80 [ 661.139957][ T31] hub_event+0x2eb7/0x4fa0 [ 661.144433][ T31] ? __pfx_hub_event+0x10/0x10 [ 661.149189][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 661.154889][ T31] ? rcu_is_watching+0x12/0xc0 [ 661.159692][ T31] process_one_work+0x9cc/0x1b70 [ 661.165552][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 661.170841][ T31] ? __pfx_process_one_work+0x10/0x10 [ 661.176498][ T31] ? assign_work+0x1a0/0x250 [ 661.181095][ T31] worker_thread+0x6c8/0xf10 [ 661.185736][ T31] ? __pfx_worker_thread+0x10/0x10 [ 661.190848][ T31] kthread+0x3c2/0x780 [ 661.194902][ T31] ? __pfx_kthread+0x10/0x10 [ 661.199568][ T31] ? __pfx_kthread+0x10/0x10 [ 661.204151][ T31] ? __pfx_kthread+0x10/0x10 [ 661.208755][ T31] ? __pfx_kthread+0x10/0x10 [ 661.213343][ T31] ? rcu_is_watching+0x12/0xc0 [ 661.218170][ T31] ? __pfx_kthread+0x10/0x10 [ 661.222763][ T31] ret_from_fork+0x45/0x80 [ 661.227172][ T31] ? __pfx_kthread+0x10/0x10 [ 661.231766][ T31] ret_from_fork_asm+0x1a/0x30 [ 661.237496][ T31] [ 661.240785][ T31] INFO: task kworker/1:2:972 blocked for more than 143 seconds. [ 661.248406][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 661.256111][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.267053][ T31] task:kworker/1:2 state:D stack:21944 pid:972 tgid:972 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 661.279081][ T31] Workqueue: usb_hub_wq hub_event [ 661.284186][ T31] Call Trace: [ 661.287460][ T31] [ 661.290385][ T31] __schedule+0x116f/0x5de0 [ 661.294915][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 661.299854][ T31] ? __pfx___schedule+0x10/0x10 [ 661.304745][ T31] ? find_held_lock+0x2b/0x80 [ 661.309425][ T31] ? schedule+0x2d7/0x3a0 [ 661.313781][ T31] schedule+0xe7/0x3a0 [ 661.317842][ T31] schedule_timeout+0x257/0x290 [ 661.322665][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 661.328082][ T31] ? mark_held_locks+0x49/0x80 [ 661.332834][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.338052][ T31] __wait_for_common+0x2fc/0x4e0 [ 661.342982][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 661.349688][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 661.355156][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 661.360374][ T31] devtmpfs_submit_req+0xa8/0x100 [ 661.365406][ T31] devtmpfs_create_node+0x18a/0x230 [ 661.371111][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 661.376850][ T31] ? up_write+0x1b2/0x520 [ 661.381194][ T31] ? kernfs_create_link+0x1bd/0x240 [ 661.386387][ T31] ? kernfs_put+0x35/0x60 [ 661.390814][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 661.396372][ T31] device_add+0x10bd/0x1a70 [ 661.400910][ T31] ? __pfx_device_add+0x10/0x10 [ 661.405747][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 661.411489][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 661.417374][ T31] usb_new_device+0xd07/0x1a20 [ 661.422159][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 661.427182][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 661.432431][ T31] ? mark_held_locks+0x49/0x80 [ 661.437192][ T31] hub_event+0x2eb7/0x4fa0 [ 661.441645][ T31] ? __pfx_hub_event+0x10/0x10 [ 661.446397][ T31] ? insn_get_modrm+0x440/0x720 [ 661.451236][ T31] ? insn_get_modrm+0x440/0x720 [ 661.457570][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 661.462991][ T31] process_one_work+0x9cc/0x1b70 [ 661.467928][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 661.473240][ T31] ? __pfx_process_one_work+0x10/0x10 [ 661.478656][ T31] ? assign_work+0x1a0/0x250 [ 661.483952][ T31] worker_thread+0x6c8/0xf10 [ 661.488522][ T31] ? __kthread_parkme+0x19e/0x250 [ 661.493521][ T31] ? __pfx_worker_thread+0x10/0x10 [ 661.498665][ T31] kthread+0x3c2/0x780 [ 661.502724][ T31] ? __pfx_kthread+0x10/0x10 [ 661.507313][ T31] ? __pfx_kthread+0x10/0x10 [ 661.511893][ T31] ? __pfx_kthread+0x10/0x10 [ 661.516489][ T31] ? __pfx_kthread+0x10/0x10 [ 661.521076][ T31] ? rcu_is_watching+0x12/0xc0 [ 661.525834][ T31] ? __pfx_kthread+0x10/0x10 [ 661.530435][ T31] ret_from_fork+0x45/0x80 [ 661.534854][ T31] ? __pfx_kthread+0x10/0x10 [ 661.539458][ T31] ret_from_fork_asm+0x1a/0x30 [ 661.544240][ T31] [ 661.547306][ T31] INFO: task kworker/0:3:5831 blocked for more than 143 seconds. [ 661.555047][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 661.564030][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.572721][ T31] task:kworker/0:3 state:D stack:21624 pid:5831 tgid:5831 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 661.584834][ T31] Workqueue: md_misc mddev_delayed_delete [ 661.591020][ T31] Call Trace: [ 661.594290][ T31] [ 661.597197][ T31] __schedule+0x116f/0x5de0 [ 661.601727][ T31] ? __pfx___schedule+0x10/0x10 [ 661.606589][ T31] ? __pfx___schedule+0x10/0x10 [ 661.611434][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 661.616814][ T31] ? find_held_lock+0x2b/0x80 [ 661.621485][ T31] ? schedule+0x2d7/0x3a0 [ 661.625833][ T31] schedule+0xe7/0x3a0 [ 661.629896][ T31] schedule_timeout+0x257/0x290 [ 661.634757][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 661.640135][ T31] ? mark_held_locks+0x49/0x80 [ 661.645011][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.650210][ T31] __wait_for_common+0x2fc/0x4e0 [ 661.655176][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 661.660541][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 661.666011][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 661.671217][ T31] devtmpfs_submit_req+0xa8/0x100 [ 661.677655][ T31] devtmpfs_delete_node+0xf6/0x160 [ 661.682769][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 661.688513][ T31] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 661.694659][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 661.700373][ T31] ? kernfs_put+0x4e/0x60 [ 661.704702][ T31] ? sysfs_remove_group+0xc6/0x180 [ 661.709825][ T31] device_del+0x734/0x9f0 [ 661.714159][ T31] ? __pfx_device_del+0x10/0x10 [ 661.719006][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 661.724213][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 661.729416][ T31] del_gendisk+0x486/0xc40 [ 661.737167][ T31] ? __pfx_del_gendisk+0x10/0x10 [ 661.742475][ T31] ? kernfs_put.part.0+0x18b/0x630 [ 661.747588][ T31] md_kobj_release+0xb2/0x100 [ 661.752561][ T31] kobject_put+0x1e4/0x5a0 [ 661.756983][ T31] process_one_work+0x9cc/0x1b70 [ 661.762045][ T31] ? __pfx_process_one_work+0x10/0x10 [ 661.767405][ T31] ? assign_work+0x1a0/0x250 [ 661.771979][ T31] worker_thread+0x6c8/0xf10 [ 661.776915][ T31] ? __kthread_parkme+0x19e/0x250 [ 661.783769][ T31] ? __pfx_worker_thread+0x10/0x10 [ 661.788875][ T31] kthread+0x3c2/0x780 [ 661.792915][ T31] ? __pfx_kthread+0x10/0x10 [ 661.797602][ T31] ? __pfx_kthread+0x10/0x10 [ 661.802189][ T31] ? __pfx_kthread+0x10/0x10 [ 661.806797][ T31] ? __pfx_kthread+0x10/0x10 [ 661.811830][ T31] ? rcu_is_watching+0x12/0xc0 [ 661.816845][ T31] ? __pfx_kthread+0x10/0x10 [ 661.821440][ T31] ret_from_fork+0x45/0x80 [ 661.825859][ T31] ? __pfx_kthread+0x10/0x10 [ 661.830478][ T31] ret_from_fork_asm+0x1a/0x30 [ 661.835245][ T31] [ 661.838328][ T31] INFO: task kworker/0:7:5918 blocked for more than 144 seconds. [ 661.846025][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 661.853698][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 661.862399][ T31] task:kworker/0:7 state:D stack:21592 pid:5918 tgid:5918 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 661.874471][ T31] Workqueue: usb_hub_wq hub_event [ 661.879531][ T31] Call Trace: [ 661.882803][ T31] [ 661.885728][ T31] __schedule+0x116f/0x5de0 [ 661.890258][ T31] ? number+0x9aa/0xc70 [ 661.895362][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 661.900297][ T31] ? __pfx___schedule+0x10/0x10 [ 661.905182][ T31] ? find_held_lock+0x2b/0x80 [ 661.909850][ T31] ? schedule+0x2d7/0x3a0 [ 661.914192][ T31] schedule+0xe7/0x3a0 [ 661.918675][ T31] schedule_timeout+0x257/0x290 [ 661.923579][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 661.928961][ T31] ? mark_held_locks+0x49/0x80 [ 661.933737][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.938938][ T31] __wait_for_common+0x2fc/0x4e0 [ 661.943903][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 661.949266][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 661.954739][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 661.959945][ T31] devtmpfs_submit_req+0xa8/0x100 [ 661.964970][ T31] devtmpfs_create_node+0x18a/0x230 [ 661.970203][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 661.975942][ T31] ? up_write+0x1b2/0x520 [ 661.980280][ T31] ? kernfs_create_link+0x1bd/0x240 [ 661.985474][ T31] ? kernfs_put+0x35/0x60 [ 661.989806][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 661.995343][ T31] device_add+0x10bd/0x1a70 [ 661.999870][ T31] ? __pfx_device_add+0x10/0x10 [ 662.005659][ T31] ? add_device_randomness+0xb7/0xf0 [ 662.010967][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 662.016854][ T31] usb_new_device+0xd07/0x1a20 [ 662.021641][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 662.027069][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 662.032309][ T31] ? mark_held_locks+0x49/0x80 [ 662.037064][ T31] hub_event+0x2eb7/0x4fa0 [ 662.041524][ T31] ? __pfx_hub_event+0x10/0x10 [ 662.046283][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 662.051958][ T31] ? rcu_is_watching+0x12/0xc0 [ 662.056723][ T31] process_one_work+0x9cc/0x1b70 [ 662.061688][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 662.066971][ T31] ? __pfx_process_one_work+0x10/0x10 [ 662.072352][ T31] ? assign_work+0x1a0/0x250 [ 662.076919][ T31] worker_thread+0x6c8/0xf10 [ 662.081484][ T31] ? __kthread_parkme+0x19e/0x250 [ 662.086522][ T31] ? __pfx_worker_thread+0x10/0x10 [ 662.091626][ T31] kthread+0x3c2/0x780 [ 662.095696][ T31] ? __pfx_kthread+0x10/0x10 [ 662.100274][ T31] ? __pfx_kthread+0x10/0x10 [ 662.104876][ T31] ? __pfx_kthread+0x10/0x10 [ 662.109464][ T31] ? __pfx_kthread+0x10/0x10 [ 662.115023][ T31] ? rcu_is_watching+0x12/0xc0 [ 662.119785][ T31] ? __pfx_kthread+0x10/0x10 [ 662.124347][ T31] ret_from_fork+0x45/0x80 [ 662.128799][ T31] ? __pfx_kthread+0x10/0x10 [ 662.133380][ T31] ret_from_fork_asm+0x1a/0x30 [ 662.138670][ T31] [ 662.141697][ T31] INFO: task kworker/1:6:5931 blocked for more than 144 seconds. [ 662.149430][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 662.157046][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.165744][ T31] task:kworker/1:6 state:D stack:21576 pid:5931 tgid:5931 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 662.177766][ T31] Workqueue: usb_hub_wq hub_event [ 662.182823][ T31] Call Trace: [ 662.186096][ T31] [ 662.189021][ T31] __schedule+0x116f/0x5de0 [ 662.193594][ T31] ? number+0x9aa/0xc70 [ 662.197752][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 662.202712][ T31] ? __pfx___schedule+0x10/0x10 [ 662.207725][ T31] ? find_held_lock+0x2b/0x80 [ 662.212427][ T31] ? schedule+0x2d7/0x3a0 [ 662.216762][ T31] schedule+0xe7/0x3a0 [ 662.221837][ T31] schedule_timeout+0x257/0x290 [ 662.226681][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 662.232033][ T31] ? mark_held_locks+0x49/0x80 [ 662.236815][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 662.242004][ T31] __wait_for_common+0x2fc/0x4e0 [ 662.243634][T10562] Bluetooth: hci15: command tx timeout [ 662.247454][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 662.257727][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 662.263178][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 662.268384][ T31] devtmpfs_submit_req+0xa8/0x100 [ 662.273406][ T31] devtmpfs_create_node+0x18a/0x230 [ 662.278630][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 662.284347][ T31] ? up_write+0x1b2/0x520 [ 662.288840][ T31] ? kernfs_create_link+0x1bd/0x240 [ 662.294036][ T31] ? kernfs_put+0x35/0x60 [ 662.298383][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 662.303935][ T31] device_add+0x10bd/0x1a70 [ 662.308466][ T31] ? __pfx_device_add+0x10/0x10 [ 662.313311][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 662.319061][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 662.324959][ T31] usb_new_device+0xd07/0x1a20 [ 662.330759][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 662.335782][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 662.341000][ T31] ? mark_held_locks+0x49/0x80 [ 662.345759][ T31] hub_event+0x2eb7/0x4fa0 [ 662.350196][ T31] ? __pfx_hub_event+0x10/0x10 [ 662.355358][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 662.361319][ T31] ? rcu_is_watching+0x12/0xc0 [ 662.366089][ T31] process_one_work+0x9cc/0x1b70 [ 662.371026][ T31] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 662.377531][ T31] ? __pfx_process_one_work+0x10/0x10 [ 662.382975][ T31] ? assign_work+0x1a0/0x250 [ 662.387563][ T31] worker_thread+0x6c8/0xf10 [ 662.392149][ T31] ? __kthread_parkme+0x19e/0x250 [ 662.397192][ T31] ? __pfx_worker_thread+0x10/0x10 [ 662.402292][ T31] kthread+0x3c2/0x780 [ 662.406379][ T31] ? __pfx_kthread+0x10/0x10 [ 662.410960][ T31] ? __pfx_kthread+0x10/0x10 [ 662.415653][ T31] ? __pfx_kthread+0x10/0x10 [ 662.420242][ T31] ? __pfx_kthread+0x10/0x10 [ 662.424837][ T31] ? rcu_is_watching+0x12/0xc0 [ 662.429606][ T31] ? __pfx_kthread+0x10/0x10 [ 662.434188][ T31] ret_from_fork+0x45/0x80 [ 662.439746][ T31] ? __pfx_kthread+0x10/0x10 [ 662.444335][ T31] ret_from_fork_asm+0x1a/0x30 [ 662.449147][ T31] [ 662.452206][ T31] INFO: task syz.4.1699:11698 blocked for more than 144 seconds. [ 662.459949][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 662.468151][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.476803][ T31] task:syz.4.1699 state:D stack:29048 pid:11698 tgid:11697 ppid:5820 task_flags:0x400040 flags:0x00000004 [ 662.488709][ T31] Call Trace: [ 662.491998][ T31] [ 662.494931][ T31] __schedule+0x116f/0x5de0 [ 662.499435][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 662.504866][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 662.507251][ T30] audit: type=1400 audit(1745177628.798:1324): avc: denied { write } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.510343][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 662.510371][ T31] ? __pfx___schedule+0x10/0x10 [ 662.510398][ T31] ? find_held_lock+0x2b/0x80 [ 662.510421][ T31] ? schedule+0x2d7/0x3a0 [ 662.510444][ T31] schedule+0xe7/0x3a0 [ 662.510466][ T31] schedule_preempt_disabled+0x13/0x30 [ 662.510488][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 662.510519][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 662.510554][ T31] ? __pfx___might_resched+0x10/0x10 [ 662.510579][ T31] ? try_to_unlazy+0x24e/0x660 [ 662.510607][ T31] down_read+0xef/0x480 [ 662.510632][ T31] ? __pfx_down_read+0x10/0x10 [ 662.540578][ T30] audit: type=1400 audit(1745177628.798:1325): avc: denied { remove_name } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.541820][ T31] ? lookup_fast+0x156/0x610 [ 662.546681][ T30] audit: type=1400 audit(1745177628.798:1326): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 662.551936][ T31] path_openat+0x88a/0x2d40 [ 662.583040][ T30] audit: type=1400 audit(1745177628.798:1327): avc: denied { add_name } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.587040][ T31] ? __pfx_path_openat+0x10/0x10 [ 662.587071][ T31] do_filp_open+0x20b/0x470 [ 662.587090][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 662.587127][ T31] ? alloc_fd+0x471/0x7d0 [ 662.587152][ T31] do_sys_openat2+0x11b/0x1d0 [ 662.587174][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 662.587206][ T31] __x64_sys_openat+0x174/0x210 [ 662.587229][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 662.587252][ T31] ? do_user_addr_fault+0x843/0x1370 [ 662.587280][ T31] do_syscall_64+0xcd/0x260 [ 662.587307][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.587326][ T31] RIP: 0033:0x7f5e66b8cad0 [ 662.587340][ T31] RSP: 002b:00007f5e67a1ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 662.587360][ T31] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f5e66b8cad0 [ 662.596554][ T30] audit: type=1400 audit(1745177628.798:1328): avc: denied { unlink } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 662.621061][ T31] RDX: 0000000000010000 RSI: 00007f5e67a1ac10 RDI: 00000000ffffff9c [ 662.648695][ T30] audit: type=1400 audit(1745177628.798:1329): avc: denied { create } for pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 662.678203][ T31] RBP: 00007f5e67a1ac10 R08: 0000000000000000 R09: 0023617363762f76 [ 662.807416][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 662.815444][ T31] R13: 0000000000000001 R14: 00007f5e66db5fa0 R15: 00007ffc9ac3db48 [ 662.823460][ T31] [ 662.826499][ T31] [ 662.826499][ T31] Showing all locks held in the system: [ 662.834254][ T31] 3 locks held by kworker/1:0/24: [ 662.839267][ T31] #0: ffff888021ad8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 662.854539][ T31] #1: ffffc900001e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 662.865804][ T31] #2: ffff888146711198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 662.874700][ T31] 2 locks held by kdevtmpfs/26: [ 662.880484][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0 [ 662.891239][ T31] #1: ffffffff8eef4368 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 662.900751][ T31] 1 lock held by khungtaskd/31: [ 662.906030][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 662.915881][ T31] 3 locks held by kworker/1:2/972: [ 662.921003][ T31] #0: ffff888021ad8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 662.932247][ T31] #1: ffffc900039dfd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 662.943619][ T31] #2: ffff888028d69198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 662.952649][ T31] 2 locks held by getty/5577: [ 662.957305][ T31] #0: ffff88803202f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 662.967068][ T31] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 662.977189][ T31] 2 locks held by kworker/0:3/5831: [ 662.982406][ T31] #0: ffff888021ad8d48 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 662.994338][ T31] #1: ffffc900042cfd18 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 663.005982][ T31] 3 locks held by kworker/0:6/5874: [ 663.011169][ T31] #0: ffff888021ad8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 663.022472][ T31] #1: ffffc9000446fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 663.033736][ T31] #2: ffff888028c79198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 663.042623][ T31] 4 locks held by kworker/1:5/5903: [ 663.047823][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 663.058285][ T31] #1: ffffc900045efd18 ((work_completion)(&uhid->worker)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 663.069623][ T31] #2: ffff88804e0e5a20 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 663.078871][ T31] #3: ffffffff8fe7f230 (minors_rwsem){+.+.}-{4:4}, at: hidraw_connect+0x75/0x440 [ 663.088136][ T31] 3 locks held by kworker/0:7/5918: [ 663.093314][ T31] #0: ffff888021ad8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 663.105162][ T31] #1: ffffc9000466fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 663.116428][ T31] #2: ffff888146729198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 663.126017][ T31] 3 locks held by kworker/1:6/5931: [ 663.131233][ T31] #0: ffff888021ad8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 663.142057][ T31] #1: ffffc900046afd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 663.153326][ T31] #2: ffff888146701198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 663.162210][ T31] 1 lock held by syz.0.564/7849: [ 663.167146][ T31] #0: ffff888028c79198 (&dev->mutex){....}-{4:4}, at: usbdev_release+0x81/0x470 [ 663.176309][ T31] 3 locks held by kworker/u8:12/8099: [ 663.181667][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 663.192799][ T31] #1: ffffc9000c667d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 663.203175][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 663.213270][ T31] 3 locks held by kworker/u8:13/8103: [ 663.218686][ T31] #0: ffff8880319fe948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 663.229766][ T31] #1: ffffc900037e7d18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 663.243518][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 663.253053][ T31] 1 lock held by syz.4.1699/11698: [ 663.258145][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: path_openat+0x88a/0x2d40 [ 663.268321][ T31] 1 lock held by syz.3.1747/11859: [ 663.273482][ T31] #0: ffff88804b124068 (&uhid->devlock){+.+.}-{4:4}, at: uhid_char_write+0x6b/0x10f0 [ 663.283102][ T31] 1 lock held by syz.1.1758/11892: [ 663.288193][ T31] #0: ffff888028c79198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 663.297159][ T31] 2 locks held by syz-executor/11898: [ 663.302547][ T31] #0: ffffffff90868640 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 663.312137][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 663.322157][ T31] 2 locks held by syz.2.1762/11910: [ 663.327378][ T31] #0: ffffffff90114fd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 663.336813][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 663.347892][ T31] 2 locks held by syz.0.1764/11917: [ 663.353076][ T31] #0: ffffffff90867e80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 663.362791][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 663.371871][ T31] 1 lock held by syz-executor/11919: [ 663.377532][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 663.386953][ T31] 1 lock held by syz-executor/11922: [ 663.392259][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 663.401694][ T31] 1 lock held by syz-executor/11925: [ 663.406960][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 663.416360][ T31] 1 lock held by syz-executor/11928: [ 663.421653][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 663.432102][ T31] 1 lock held by syz-executor/11932: [ 663.437373][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 663.446814][ T31] 1 lock held by syz-executor/11936: [ 663.452502][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 663.461933][ T31] 1 lock held by syz-executor/11939: [ 663.467208][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 663.476652][ T31] 1 lock held by syz-executor/11942: [ 663.481915][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 663.491305][ T31] 1 lock held by syz-executor/11945: [ 663.496601][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 663.506043][ T31] 1 lock held by syz-executor/11954: [ 663.511316][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 663.520738][ T31] [ 663.523045][ T31] ============================================= [ 663.523045][ T31] [ 663.531538][ T31] NMI backtrace for cpu 1 [ 663.531549][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 663.531569][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 663.531579][ T31] Call Trace: [ 663.531584][ T31] [ 663.531591][ T31] dump_stack_lvl+0x116/0x1f0 [ 663.531616][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 663.531634][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 663.531654][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 663.531673][ T31] watchdog+0xf70/0x12c0 [ 663.531694][ T31] ? __pfx_watchdog+0x10/0x10 [ 663.531709][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.531732][ T31] ? __kthread_parkme+0x19e/0x250 [ 663.531758][ T31] ? __pfx_watchdog+0x10/0x10 [ 663.531775][ T31] kthread+0x3c2/0x780 [ 663.531794][ T31] ? __pfx_kthread+0x10/0x10 [ 663.531809][ T31] ? __pfx_kthread+0x10/0x10 [ 663.531825][ T31] ? __pfx_kthread+0x10/0x10 [ 663.531840][ T31] ? __pfx_kthread+0x10/0x10 [ 663.531856][ T31] ? rcu_is_watching+0x12/0xc0 [ 663.531877][ T31] ? __pfx_kthread+0x10/0x10 [ 663.531895][ T31] ret_from_fork+0x45/0x80 [ 663.531911][ T31] ? __pfx_kthread+0x10/0x10 [ 663.531927][ T31] ret_from_fork_asm+0x1a/0x30 [ 663.531962][ T31] [ 663.531968][ T31] Sending NMI from CPU 1 to CPUs 0: [ 663.665682][ C0] NMI backtrace for cpu 0 [ 663.665695][ C0] CPU: 0 UID: 0 PID: 8107 Comm: kworker/u8:16 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 663.665712][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 663.665720][ C0] Workqueue: bat_events batadv_nc_worker [ 663.665738][ C0] RIP: 0010:check_preemption_disabled+0x2d/0xe0 [ 663.665758][ C0] Code: 53 48 83 ec 08 65 8b 1d 85 34 34 08 65 8b 05 7a 34 34 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc 9c <58> f6 c4 02 74 ea 48 89 fd 65 48 8b 05 3a 34 34 08 f6 40 2f 04 74 [ 663.665770][ C0] RSP: 0018:ffffc90003437a88 EFLAGS: 00000046 [ 663.665780][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 663.665788][ C0] RDX: 0000000000000000 RSI: ffffffff8dce09fb RDI: ffffffff8bf46540 [ 663.665795][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 663.665803][ C0] R10: 0000000000000400 R11: 0000000000000000 R12: 0000000000000000 [ 663.665810][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.665817][ C0] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 663.665831][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.665839][ C0] CR2: 00007f3e684e7d60 CR3: 000000000e180000 CR4: 00000000003526f0 [ 663.665847][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 663.665854][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 663.665861][ C0] Call Trace: [ 663.665865][ C0] [ 663.665870][ C0] ? __kasan_check_byte+0x13/0x50 [ 663.665885][ C0] lock_acquire+0x140/0x350 [ 663.665897][ C0] ? batadv_nc_worker+0x895/0x1030 [ 663.665912][ C0] batadv_nc_worker+0x16a/0x1030 [ 663.665925][ C0] ? batadv_nc_worker+0x159/0x1030 [ 663.665939][ C0] ? try_to_wake_up+0x157/0x1680 [ 663.665955][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 663.665971][ C0] ? rcu_is_watching+0x12/0xc0 [ 663.665987][ C0] process_one_work+0x9cc/0x1b70 [ 663.666004][ C0] ? __pfx_bond_mii_monitor+0x10/0x10 [ 663.666018][ C0] ? __pfx_process_one_work+0x10/0x10 [ 663.666035][ C0] ? assign_work+0x1a0/0x250 [ 663.666048][ C0] worker_thread+0x6c8/0xf10 [ 663.666064][ C0] ? __kthread_parkme+0x19e/0x250 [ 663.666082][ C0] ? __pfx_worker_thread+0x10/0x10 [ 663.666095][ C0] kthread+0x3c2/0x780 [ 663.666108][ C0] ? __pfx_kthread+0x10/0x10 [ 663.666119][ C0] ? __pfx_kthread+0x10/0x10 [ 663.666131][ C0] ? __pfx_kthread+0x10/0x10 [ 663.666142][ C0] ? __pfx_kthread+0x10/0x10 [ 663.666154][ C0] ? rcu_is_watching+0x12/0xc0 [ 663.666168][ C0] ? __pfx_kthread+0x10/0x10 [ 663.666180][ C0] ret_from_fork+0x45/0x80 [ 663.666193][ C0] ? __pfx_kthread+0x10/0x10 [ 663.666205][ C0] ret_from_fork_asm+0x1a/0x30 [ 663.666228][ C0] [ 663.666698][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 663.944851][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 663.956636][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 663.966669][ T31] Call Trace: [ 663.969929][ T31] [ 663.972839][ T31] dump_stack_lvl+0x3d/0x1f0 [ 663.978025][ T31] panic+0x71c/0x800 [ 663.981897][ T31] ? __pfx_panic+0x10/0x10 [ 663.986289][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 663.991644][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 663.997604][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 664.002957][ T31] ? watchdog+0xdda/0x12c0 [ 664.007351][ T31] ? watchdog+0xdcd/0x12c0 [ 664.011747][ T31] watchdog+0xdeb/0x12c0 [ 664.015973][ T31] ? __pfx_watchdog+0x10/0x10 [ 664.020628][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 664.025808][ T31] ? __kthread_parkme+0x19e/0x250 [ 664.030819][ T31] ? __pfx_watchdog+0x10/0x10 [ 664.035476][ T31] kthread+0x3c2/0x780 [ 664.039528][ T31] ? __pfx_kthread+0x10/0x10 [ 664.044101][ T31] ? __pfx_kthread+0x10/0x10 [ 664.048668][ T31] ? __pfx_kthread+0x10/0x10 [ 664.053236][ T31] ? __pfx_kthread+0x10/0x10 [ 664.057803][ T31] ? rcu_is_watching+0x12/0xc0 [ 664.062559][ T31] ? __pfx_kthread+0x10/0x10 [ 664.067128][ T31] ret_from_fork+0x45/0x80 [ 664.071526][ T31] ? __pfx_kthread+0x10/0x10 [ 664.076093][ T31] ret_from_fork_asm+0x1a/0x30 [ 664.080852][ T31] [ 664.083951][ T31] Kernel Offset: disabled [ 664.088249][ T31] Rebooting in 86400 seconds..