last executing test programs: 8m9.987813381s ago: executing program 3 (id=4): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x101000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{}, {0x0}, {}, {}, {}, {}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x7, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, "c1c30bab373ff7fe"}}}}}, 0x32) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000001c0)={r2, &(0x7f0000000100)=""/136}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000380)={0x7fff, 0x1, 0x8, 0x20, 0x52e, 0x0, 0x65f40}) 8m6.585337912s ago: executing program 3 (id=18): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x20000000}, 0x8014) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)="f00fe9e12042c338563584521ac65d06fb95e9a7f8f2e9a0b553e7265afaadce6d750d970554987b890e51e61c7409d0e96873777a8b068ea5dff4f2ddcc22ab70b711b2634466f6d3211dc6427e4e2bea582a11a3bdb57e9564b628a0e9fae308d42ad965c8c4c3859324c4df2088851ca1c846db70b8eeb28baca2ba2b3f979e27412327671e45a6566e70341861ce10069609eb17f767ded305a3e351100d4991df0fd41922cee43c9cfd498e") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x1, 0x2, "004004", 0x5a, 0x40}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 8m6.343605382s ago: executing program 3 (id=22): timer_create(0x0, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp(r1, r1, 0x5, r3, r2) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x840) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = socket(0xa, 0x3, 0x87) ioctl$int_in(r4, 0x5452, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001a00010028bd70000000000002202000000000070000000008000300", @ANYRES32=r6, @ANYBLOB="08000100ac14148719"], 0x34}}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x4c844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000001c0020002abd7000fddbdf25070000004478f69cd2721130b33318230d0e12a5", @ANYRES32=r6, @ANYBLOB="010080040a0001004edcd66b47f50000140003000c00000000000006f7ffffff4000200008000d00090000000a000100ffffffffffff0000060006004e200000060006004e230000"], 0x60}}, 0x0) 8m5.383586839s ago: executing program 3 (id=25): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdfeffff000000000400000085000000360000001801000020646c3c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r0, r2, 0x25, 0x4, @val=@tracing={0x0, 0x5}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18"], 0x0, 0x8}, 0x94) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc, r4}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000100)={0x30}) syz_emit_ethernet(0x4a, &(0x7f0000001000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa9503090c43bc626f0101000014110000000000000000000000020000000000000000000000000000000000000000aa6c000400014004004e200e22000c9078c1b20001"], 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=unc']) syz_usb_connect$midi(0x0, 0x4f, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000002035120c8040000102030109023d00010118100109040000020103000609058e0b00020fd7020568b4db7609058c0200026df70714250110"], 0x0) 8m4.731294302s ago: executing program 3 (id=28): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20fffe82) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240)={0xe18c}, 0x4) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x84, &(0x7f0000000080)={0x4b5a9da54893e123, 0x1, 0xfe00, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, &(0x7f0000000100), 0x0}, 0x20) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x58}}, 0x8000002) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_emit_ethernet(0x1c0, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "dfdb70", 0x18a, 0x6, 0xff, @local, @private2, {[@hopopts={0x88, 0x4, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0x0, [0x4]}}, @pad1, @hao={0xc9, 0x10, @mcast1}]}, @dstopts={0x21, 0x2, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @pad1]}, @hopopts={0x6, 0x2, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}, @routing={0x2b, 0x0, 0x0, 0xbe}, @routing={0x0, 0x4, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00', @rand_addr=' \x01\x00']}, @fragment={0x2c, 0x0, 0x7, 0x1, 0x0, 0x10, 0x66}, @routing={0x5c, 0x6, 0x3, 0x2, 0x0, [@remote, @empty, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x2c, 0x10, 0x4, 0x8, 0xc, 0x50, 0x7, [@private1, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, @rand_addr=' \x01\x00']}], @payload_direct={{{{0x22, 0x0, 0x0, 0x0, 0x1, 0x8, 0x2, 0x2, 0xfffe, 0x0, 0x26188df589ed6e79, 0xc, 0x3, 0x3, 0x1, 0x9, 0x1, 0x4e21, 0x4e20}, 0x1, 0x3}}, [0x0, 0x0]}}}}}}, 0x0) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @empty}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x84}}, 0x0) 8m3.747116799s ago: executing program 32 (id=28): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20fffe82) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240)={0xe18c}, 0x4) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x84, &(0x7f0000000080)={0x4b5a9da54893e123, 0x1, 0xfe00, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, &(0x7f0000000100), 0x0}, 0x20) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x58}}, 0x8000002) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_emit_ethernet(0x1c0, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "dfdb70", 0x18a, 0x6, 0xff, @local, @private2, {[@hopopts={0x88, 0x4, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0x0, [0x4]}}, @pad1, @hao={0xc9, 0x10, @mcast1}]}, @dstopts={0x21, 0x2, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @pad1]}, @hopopts={0x6, 0x2, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}, @routing={0x2b, 0x0, 0x0, 0xbe}, @routing={0x0, 0x4, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00', @rand_addr=' \x01\x00']}, @fragment={0x2c, 0x0, 0x7, 0x1, 0x0, 0x10, 0x66}, @routing={0x5c, 0x6, 0x3, 0x2, 0x0, [@remote, @empty, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x2c, 0x10, 0x4, 0x8, 0xc, 0x50, 0x7, [@private1, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, @rand_addr=' \x01\x00']}], @payload_direct={{{{0x22, 0x0, 0x0, 0x0, 0x1, 0x8, 0x2, 0x2, 0xfffe, 0x0, 0x26188df589ed6e79, 0xc, 0x3, 0x3, 0x1, 0x9, 0x1, 0x4e21, 0x4e20}, 0x1, 0x3}}, [0x0, 0x0]}}}}}}, 0x0) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @empty}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x84}}, 0x0) 2m11.928172905s ago: executing program 5 (id=1082): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) syz_fuse_handle_req(r1, &(0x7f00000021c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00', 0x2000, &(0x7f00000041c0)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x75e, 0x5020860e, 0x0, 0xc, 0x0, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_fuse_handle_req(r1, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x200000000101, 0xb, 0x0, {0x1, 0xffffffffffffffff, 0xbdd7, 0x400, 0x10000, 0x5, 0x9d1f, 0x4, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc1c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) (async, rerun: 32) stat(&(0x7f00000003c0)='./file0\x00', 0x0) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x35, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x28, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0x2, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x2, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xc6, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0x6}, {0x3, 0x7, 0x5, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000003380)=[@text16={0x10, 0x0}], 0x1, 0x6, 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (rerun: 64) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x10000005) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) (rerun: 64) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, 0x0) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (rerun: 32) 2m10.655874612s ago: executing program 5 (id=1084): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='net/softnet_stat\x00') read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000140)={0x18, r2, 0x7, 0x0, &(0x7f0000000240)=[{0x9, 0x7}, {0x3, 0x8}, {0xfffffffffffffffe, 0x42}, {0x40000000007, 0x3}, {0x6, 0x5}, {0x2, 0x6}, {0x2, 0x7}]}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) geteuid() mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x4) shmctl$IPC_SET(0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019300)=@bloom_filter={0x1e, 0x19, 0x1, 0x0, 0x1081, r1, 0x5, '\x00', 0x0, r1, 0x1, 0x1, 0x1, 0x3}, 0x50) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wg1\x00'}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="036000000006cb1e390012800e00010069703665c22323069028510afffc028008000500f28752519518eb40f11e81de679ceb53003eea426ab2459f6ffe1c9af285cf340e63661ced4836fc41b4", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08002800d5750000"], 0x95}}, 0x10000800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000580), &(0x7f0000000080)=@tcp=r5, 0x1}, 0x20) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xfc, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xfffffffefffffffe, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@offload={0xc, 0x1c, {r9, 0x3}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x880}, 0x2014) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) 2m9.804586172s ago: executing program 5 (id=1087): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x2000, 0x80000}, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r5 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000700)=[0x1, 0x2ff]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 2m6.57169104s ago: executing program 5 (id=1098): r0 = syz_usb_connect(0x6, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4000, &(0x7f0000000000)=ANY=[@ANYBLOB='rB=', @ANYRES32=r0, @ANYRESOCT=r1, @ANYBLOB=',']) read$FUSE(r1, &(0x7f0000004280)={0x2020}, 0x2020) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_create1(0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi4\x00', 0x802000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="220000000400000010000000", @ANYRES32], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x78, &(0x7f0000000380)={@multicast, @remote, @val={@val={0x88a8, 0x6, 0x1, 0x1}, {0x8100, 0x2, 0x1}}, {@llc_tr={0x11, {@llc={0x0, 0xdbe8e73e3fe4ba9a, "1b36", "702be59252a67c119492059adbbd8d4451026d69727da3ecace1c2fc5b4d4ee255e6a0bb5369851f31aa93d546428032bc7a38acc25e4e7c4ff3b071679bd25138d15378c1bef9cbd586bda66531ca95c507559dd4654c8eca164ab64e9d"}}}}}, 0x0) wait4(r8, 0x0, 0x8, 0x0) ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, 0x0) 2m3.230249591s ago: executing program 5 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="380100001a000308feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107170e2300050a0000203a000000ab143b47496d214d9e40775c0bccd85502de98c05005646a5eb062039f3b8be758c158376075a211fd0e8793283b736634bbef32cc1f1ddbcbf1c02796c0947cdc882a9989a967447112d865fe31eb90577470fbb708c9265704167c73e84bcbd9591e09d5c424eebe4322bfd3ced54cff796dd133f204f5ebf88635b225e8920a25fe23cb68c1f331d7f24c1652355715", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b00000000080001000100000000001c250800000000000500000000000000a0440000000000000400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c61746500"/240], 0x138}}, 0x844) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) mq_timedsend(r0, &(0x7f0000000140)="c37f825da2855a028b71d1d5f0749a2ec4e122a8a0e830ce1b18d41afffd52353e3952a70fb819ab698c32ccfb959fe4b7f3263bcc19f75650e6a80ce5", 0x3d, 0x4, &(0x7f0000000180)={0x0, 0x3938700}) 2m3.031357989s ago: executing program 5 (id=1112): fsopen(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffd7b) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000080)={0x1008, r3}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002a00), &(0x7f0000002a40)='%pB \x00'}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000100000000000000000000000000000000000000f1f9ca8baf2e5d3cf0fdae6c07d2160c1fc46584aca354729e4402258cbe2a24cdb48f9b8ffd0b5d6e4e62d2"], 0x50) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0x18, 0x1f, &(0x7f0000032840)=ANY=[@ANYBLOB="18000000000000008000000009000000183a000004000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018350000030000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000326fa186f6f58ed15e8f5434bb7c86d7cea1e095f47f4293638d0929673127cc1774d57202bf244f1216f89507", @ANYBLOB="e2e63297c200ca71a65adbdd88c9d388ff43e9f620ea4cf04171683b03dff1f5d1062c1b0a48e76031fcd2d17574ed5ac189dfeabaaeaa57b9b34b998079c08d521dcf0311cbf8ae4342c5128f8beb218ea1a7753be8fa8dda0fef2109af67dca7eb45203e17ba97402f32c8b0a0340555820d492f80fd7b4d0cd97a47d62cf5e005a95a0a5e12bc7786079cbf", @ANYBLOB="0000000000000000b70500000800000085000000a5000000180000000800000000000000040000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002900)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x4, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r5, r6, r7, r1], &(0x7f0000002b80)=[{0x0, 0x5, 0x10, 0x5}, {0x2, 0x2, 0x14, 0x1}, {0x4, 0x5, 0xc, 0x6}, {0x1, 0x2, 0x8, 0xc}], 0x10, 0xfff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) 1m46.955827364s ago: executing program 33 (id=1112): fsopen(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffd7b) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000080)={0x1008, r3}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002a00), &(0x7f0000002a40)='%pB \x00'}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000100000000000000000000000000000000000000f1f9ca8baf2e5d3cf0fdae6c07d2160c1fc46584aca354729e4402258cbe2a24cdb48f9b8ffd0b5d6e4e62d2"], 0x50) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0x18, 0x1f, &(0x7f0000032840)=ANY=[@ANYBLOB="18000000000000008000000009000000183a000004000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018350000030000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000326fa186f6f58ed15e8f5434bb7c86d7cea1e095f47f4293638d0929673127cc1774d57202bf244f1216f89507", @ANYBLOB="e2e63297c200ca71a65adbdd88c9d388ff43e9f620ea4cf04171683b03dff1f5d1062c1b0a48e76031fcd2d17574ed5ac189dfeabaaeaa57b9b34b998079c08d521dcf0311cbf8ae4342c5128f8beb218ea1a7753be8fa8dda0fef2109af67dca7eb45203e17ba97402f32c8b0a0340555820d492f80fd7b4d0cd97a47d62cf5e005a95a0a5e12bc7786079cbf", @ANYBLOB="0000000000000000b70500000800000085000000a5000000180000000800000000000000040000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002900)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x4, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r5, r6, r7, r1], &(0x7f0000002b80)=[{0x0, 0x5, 0x10, 0x5}, {0x2, 0x2, 0x14, 0x1}, {0x4, 0x5, 0xc, 0x6}, {0x1, 0x2, 0x8, 0xc}], 0x10, 0xfff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) 17.214364754s ago: executing program 4 (id=1410): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = inotify_init() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x1f, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4200004b) pwrite64(r2, &(0x7f0000000100)="075b9c9b6e33", 0x6, 0x10) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r4, &(0x7f0000000040)='7', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) syz_usb_disconnect(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) landlock_restrict_self(r9, 0xb) close(r0) 12.130641737s ago: executing program 6 (id=1424): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = inotify_init() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x1f, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4200004b) pwrite64(r2, &(0x7f0000000100)="075b9c9b6e33", 0x6, 0x10) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r4, &(0x7f0000000040), 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) syz_usb_disconnect(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) landlock_restrict_self(r9, 0xb) close(r0) 11.277958165s ago: executing program 4 (id=1428): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r1, &(0x7f0000003440)={0x2020}, 0x2020) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x5, 0xe0, 0x8e, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x400, 0x0, 0xe}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x2, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x9, 0x16}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0xd, 0xe, 0x10, 0x9}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xb, 0xaa, 0x7ff}]}, 0x4, [{0xb9, &(0x7f0000000140)=@string={0xb9, 0x3, "87d68620f34d4b2098280aed6066f0e9bcf00e2fce61696f8c7662d613f86416766ce92f18b73ff2d23f1675d9652cea564fb8eec14263b78800dfd722a473368d6d0c8c807322c0e00133a66eff12ef061acf976b71340733097737b7f1c71503fb632443d08ac6efb9bf7496eb8d67fadc289414f43ec6fca2a5a622ca9a273c4cb6e87012d06557ea26cf4efee528262e1c11fe35dcf36a3cc4b36d61d9b84209b16830e1c706a6b2d3c1ffccf2c19aaa4801f02810"}}, {0x54, &(0x7f0000000200)=@string={0x54, 0x3, "23654470f67079364d7c435b3eede2df2460eac694dfe2189299d9e67d651348c59b2a113aa1ca37cdfafca612d43b32ec5aa9b1ce33b473fcfcb5001d1b6f136b83f483cb780c95e5b803b0bc5f99720475"}}, {0xfd, &(0x7f0000000280)=@string={0xfd, 0x3, "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"}}, {0x2d, &(0x7f0000000380)=@string={0x2d, 0x3, "f05b869ef4465d93c497c477e938f501a27374eeb393bdd65710fdd15680b30d68d2ad2719aef328a4cfa5"}}]}) syz_usb_control_io(r2, 0x0, 0x0) 8.995401153s ago: executing program 1 (id=1432): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000a80)={0x0, 0x0, 0x1b, 0xf, 0x1e0, &(0x7f0000000680)="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"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000480)={0x6, 0x0, @ioapic={0x100000000000000, 0x9fc, 0x0, 0x0, 0x0, [{0x4, 0x8, 0x87, '\x00', 0x81}, {0x4, 0x6, 0x0, '\x00', 0xc}, {0xff, 0x5, 0xff, '\x00', 0x2}, {0x2, 0x10, 0x1, '\x00', 0x1f}, {0xf, 0xff, 0x2, '\x00', 0x3}, {0x0, 0x41, 0x7, '\x00', 0x78}, {0xb, 0x7, 0x7, '\x00', 0x4e}, {0x3, 0x7, 0x6, '\x00', 0x1}, {0x2, 0x8, 0x3d, '\x00', 0x6}, {0xd, 0x1, 0x1, '\x00', 0x2}, {0x7f, 0x9, 0xff, '\x00', 0x9d}, {0x6, 0x1, 0x22, '\x00', 0x7b}, {0x5, 0x6, 0x3b, '\x00', 0x2}, {0x3, 0xf, 0x33, '\x00', 0x9}, {0x8a, 0xb, 0x30, '\x00', 0x7}, {0xe, 0x5, 0x4}, {0x0, 0x4, 0x7, '\x00', 0xc}, {0x4, 0x0, 0x2, '\x00', 0x42}, {0xf2, 0x6, 0x8d, '\x00', 0x80}, {0x81, 0x0, 0x12, '\x00', 0xb}, {0x12, 0x8, 0x99, '\x00', 0x83}, {0x16, 0x46, 0x9b, '\x00', 0x4}, {0x7f, 0x23, 0x7d, '\x00', 0xd3}, {0x0, 0x8, 0x3a, '\x00', 0x5}]}}) mkdir(0x0, 0x21) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x2000)=nil) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000300)={r5, 0x9}, &(0x7f0000000340)=0x8) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) r6 = socket$can_raw(0x1d, 0x3, 0x1) accept4(r6, 0x0, 0x0, 0x80800) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) fchdir(r7) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x1}, 0x1a) 7.910554395s ago: executing program 4 (id=1436): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x6627993fc9cad4e5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc489, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_io_uring_setup(0x2aa8, &(0x7f0000000140)={0x0, 0x4b5, 0x800}, 0x0, 0x0, &(0x7f0000000000)) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(r4, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x8c) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) 7.787483299s ago: executing program 1 (id=1437): syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a"], 0x0) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) r0 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000180)={0xed46, 0x80000001, {}, {0xee00}, 0x11e8460f, 0x2}) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000201, r5, &(0x7f00000001c0)='./file0\x00') (async) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000201, r5, &(0x7f00000001c0)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r4, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) io_submit(0x0, 0x1, &(0x7f0000000940)=[0x0]) (async) io_submit(0x0, 0x1, &(0x7f0000000940)=[0x0]) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) (async) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)=@vmx={0x105, 0x0, 0x2080, {0xa000, 0xeeee0000, {0x2}}}) syz_usb_ep_write(r0, 0x1, 0xc, &(0x7f0000000040)="88ba2b56eaa942af97cebe2f") syz_usb_disconnect(r0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000e0000002000000000000000000000000ac1414230000000000000000000000004e200c1a000000000000200002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff03000000000000000000000000000000030000000000000000002000000000000700000000000000000000000000000000000400fd0800ffe80a080000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x78}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) (async) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r7, r10, 0x0, 0x106f) ioctl$SNDCTL_TMR_TIMEBASE(r7, 0xc0045401, &(0x7f0000000100)=0x358) 7.057035557s ago: executing program 4 (id=1439): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000200)=0x4) r1 = openat(0xffffffffffffffff, 0x0, 0x312514d, 0x184) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f00000000c0)={r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x4, 0xc380) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00') shutdown(r5, 0x1) pselect6(0x40, &(0x7f0000000000)={0x800000000000e, 0xfffffffffffffffc, 0xd0, 0x79, 0x4, 0x8000, 0x8, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x3, 0xa, 0x80000006, 0xa29}, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) recvmmsg(r1, 0x0, 0xfe294535ea158f31, 0x10141, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902290001000000000904290000020201000524"], 0x0) 7.025032961s ago: executing program 6 (id=1440): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64f42, 0x22) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = epoll_create1(0x80000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x2000000c}) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) pwritev2(r1, 0x0, 0x0, 0x9c00, 0x0, 0xcccc) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000001400)={&(0x7f0000001380)=[{0x1, 0x8000, 0x700, 0x0}], 0x1}) 6.843506037s ago: executing program 2 (id=1441): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000979000/0x1000)=nil}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x7, 0x208080) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f00000001c0)={0x401, 0x2, @vsb={0x9}}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) poll(&(0x7f0000000540)=[{r1, 0x2020}], 0x1, 0xb8) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="54010000", @ANYRES16=r9, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="30ae15d13404d9ab9da59024ea9fe7b16cf6b63d36709b5436d093a4bb31ffbb3d1eb5b31d7ebcc47f998aaa49f0873b2a4837b4693b4e7f47fc0d35752f610c75128bc24530ec1a80bfe5dc6fb484f3712d4b1bbf179bd6925e7e1138e774852408b671dfc1656b0366f200561b9503aa2cb25eb56088d75e4a87366d92f0acd903333f9eef8de65a3eda81af9578312a18226904d664aee79d5ae2550e86d8b8e505e8848ab4bc4f6f51d54df4ce7dee67a715863f0f76c0d8fd5088b8fb5fa384d404aea71c49b05f0f59f086356acebf484aac7aebe4990aa2"], 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fedbdf2510000000050010006700000008000100", @ANYRES32=0x0, @ANYBLOB="8daef0c392dc352c3447afab603af6c3599c962ed097d6149393cdd2b7a5e65400000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 4.771000957s ago: executing program 1 (id=1443): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000001240), 0x0, 0x40002) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x5) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4.254699072s ago: executing program 2 (id=1445): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000098bb1da98555fd744bc2e0bf000004003d0e0000000020"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100072020703c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7035f6a5042062fcb9ede9c0000424c00008500", @ANYBLOB="3c6b92a5656a9adf", @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) io_uring_enter(r3, 0x1, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x500}, 0x1, 0x0, 0x0, 0x24040004}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 3.782702286s ago: executing program 1 (id=1447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="142200001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01837700000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000078000000060a010400000000000000000100000008000b40000000000900010073797a30000000005000048020000180070001007274000014000280080001400000001508000240000000012c000180090001"], 0x100}}, 0x0) 3.519465475s ago: executing program 6 (id=1448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000003c0)={0x0, 0x0, 0x3f, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000940)={r1, 0x4, 0x800, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r4 = semget$private(0x0, 0x207, 0x70d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000005c0)=""/152) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x8010) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004f40)=ANY=[@ANYRES32], 0x94}}, 0x4) syz_usb_connect(0x6, 0x454, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000001540)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x310, 0x7, 0x86, 0x4, 0x40, 0xf}, 0x26, &(0x7f0000001200)={0x5, 0xf, 0x26, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x14, "55393fbfce435980a6c6ee4c1301c72c"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x29, 0x8, 0x5}]}, 0x6, [{0x0, 0x0}, {0x7e, &(0x7f0000001280)=@string={0x7e, 0x3, "059254a4eb376f9434cad8293bd16606f701550eb15e919bdb35c13037c33e0dd4fbcbfe137ccbda1beb0a2d72a5f644afb210466c2e954a842ce8d258c501193e02f3b2bd645fc4985280ffd417f543bbb5e0ebc3e71889f3ce5011b8506d83f6b77f787cfb65d23d93e73ffccc2675db8060265278b67e1ab406ce"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x424}}, {0xbe, &(0x7f0000001380)=@string={0xbe, 0x3, "2094ae305a5067fa1a89cf0fa415e2fa75cc94efe5018d1c83bef79f704c74b7f4428a1863d29934ad16dc1c2a699628e4ea98496c9c6b86c00cbdc3da18e98bf7f0909d18d9bc5cd94c93a092a1b63becd2a0045f70f72a5242f3cf58d9771b35a20df88f4d66c7fa1b89377b6c5ae379ee3f8e11d142f663b77e2e83305a04853e04a94e340cd02748abde52e4726e0ebb16dac9d9b75d1e7015391addf9f9e0190ac04b95343b55e914c8a63e254a4eeb8cc4934afaaee5870f2e"}}, {0x0, 0x0}, {0x0, 0x0}]}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4040044}, 0xc090) 3.5135188s ago: executing program 1 (id=1449): poll(&(0x7f0000004200)=[{}, {}], 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000080)='esdfs\x00', 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffd, 0x44200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000480)={{0x7, 0x4, 0x4, 0x0, 'syz1\x00', 0x4e8}, 0x0, [0x6d3c, 0x6, 0x8000000000000000, 0x9, 0x6, 0x8, 0x7fff, 0xfffffffffffffffc, 0x400, 0x9, 0x204, 0xffffffffffffffff, 0x8, 0x5, 0x0, 0xe, 0x1, 0x0, 0x362, 0x1, 0x0, 0xcda5, 0x9, 0xf, 0x7d5, 0x6, 0xffffffffffffffff, 0x7, 0x10000, 0xffffffffffff8001, 0x2, 0x300000000000, 0x3, 0xc19, 0x416, 0x0, 0x33c244e4, 0xff, 0x86, 0x6, 0x2, 0x2076524200000000, 0xfa3, 0x10, 0x4, 0x7, 0x0, 0x8000, 0x5, 0x4, 0x6, 0x1, 0x2, 0x9, 0xbec7, 0x6, 0x54, 0x5, 0x9, 0x42, 0xfeb4, 0x5, 0x5, 0x1, 0x3ac, 0x80000000, 0x1, 0xd, 0x1, 0x5, 0x1, 0x2, 0x8, 0x3, 0x8, 0x3, 0xf6, 0x8000000000000000, 0x8, 0x0, 0xfffffffffffffffb, 0xacc, 0x0, 0x4c06, 0x7, 0xfffffffffffffff7, 0xaf, 0x3, 0xffffffffffffffff, 0xffffffff, 0x2a, 0x4, 0x4, 0x2, 0x8000, 0x80000, 0x0, 0x14fd, 0x7fff, 0x9, 0x2, 0x4, 0x6, 0xb01f, 0x8001, 0x8, 0x8000001000, 0x401, 0x7ca, 0x2, 0x7, 0x2, 0x8000000000000001, 0x7, 0xd5, 0xff, 0xfffffffffffffffa, 0x6, 0x2, 0x6c1, 0xb87, 0x9, 0x256, 0x3, 0x4, 0x2, 0x3, 0xeff]}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='\x00', 0x0, r0) syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000180)=ANY=[], 0x0) poll(&(0x7f0000004200)=[{}, {}], 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fsopen(&(0x7f0000000080)='esdfs\x00', 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffd, 0x44200) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000480)={{0x7, 0x4, 0x4, 0x0, 'syz1\x00', 0x4e8}, 0x0, [0x6d3c, 0x6, 0x8000000000000000, 0x9, 0x6, 0x8, 0x7fff, 0xfffffffffffffffc, 0x400, 0x9, 0x204, 0xffffffffffffffff, 0x8, 0x5, 0x0, 0xe, 0x1, 0x0, 0x362, 0x1, 0x0, 0xcda5, 0x9, 0xf, 0x7d5, 0x6, 0xffffffffffffffff, 0x7, 0x10000, 0xffffffffffff8001, 0x2, 0x300000000000, 0x3, 0xc19, 0x416, 0x0, 0x33c244e4, 0xff, 0x86, 0x6, 0x2, 0x2076524200000000, 0xfa3, 0x10, 0x4, 0x7, 0x0, 0x8000, 0x5, 0x4, 0x6, 0x1, 0x2, 0x9, 0xbec7, 0x6, 0x54, 0x5, 0x9, 0x42, 0xfeb4, 0x5, 0x5, 0x1, 0x3ac, 0x80000000, 0x1, 0xd, 0x1, 0x5, 0x1, 0x2, 0x8, 0x3, 0x8, 0x3, 0xf6, 0x8000000000000000, 0x8, 0x0, 0xfffffffffffffffb, 0xacc, 0x0, 0x4c06, 0x7, 0xfffffffffffffff7, 0xaf, 0x3, 0xffffffffffffffff, 0xffffffff, 0x2a, 0x4, 0x4, 0x2, 0x8000, 0x80000, 0x0, 0x14fd, 0x7fff, 0x9, 0x2, 0x4, 0x6, 0xb01f, 0x8001, 0x8, 0x8000001000, 0x401, 0x7ca, 0x2, 0x7, 0x2, 0x8000000000000001, 0x7, 0xd5, 0xff, 0xfffffffffffffffa, 0x6, 0x2, 0x6c1, 0xb87, 0x9, 0x256, 0x3, 0x4, 0x2, 0x3, 0xeff]}) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='\x00', 0x0, r0) (async) syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000180)=ANY=[], 0x0) (async) 2.7512576s ago: executing program 2 (id=1451): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030000480", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x404c011}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002580)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) getresgid(&(0x7f00000025c0)=0x0, &(0x7f0000002600), &(0x7f0000002640)) lstat(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002900)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002940)='./file0\x00', &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f0000002a00), &(0x7f0000002a40)=0x0, &(0x7f0000002a80)) statx(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0\x00', 0x400, 0x2, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) fstat(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000002fc0)=[0xee00]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000280)="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", 0x2000, &(0x7f0000003140)={&(0x7f0000002280)={0x50, 0x0, 0x6, {0x7, 0x2d, 0xfffffffc, 0x3040, 0x4, 0x8, 0x400, 0x80000000, 0x0, 0x0, 0x2, 0x9}}, &(0x7f0000002300)={0x18, 0x0, 0x10001, {0x47}}, &(0x7f0000002340)={0x18, 0xfffffffffffffffe, 0x1, {0xfffffffffffffffb}}, &(0x7f0000002380)={0x18, 0xe2bb235656c71e30, 0x9}, &(0x7f00000023c0)={0x18, 0x0, 0x6}, &(0x7f0000002400)={0x28, 0xfffffffffffffffe, 0x2, {{0x6, 0x9, 0x1, r1}}}, &(0x7f0000002440)={0x60, 0x0, 0x7fffffff, {{0xffffffffffffff94, 0x374, 0x8, 0x7, 0x1, 0x6, 0x5, 0x2b}}}, &(0x7f00000024c0)={0x18, 0x0, 0x2a373203, {0x4}}, &(0x7f0000002500)={0x12, 0x0, 0x5, {'[\x00'}}, &(0x7f0000002540)={0x20, 0xfffffffffffffff5, 0xce7d, {0x0, 0x14}}, &(0x7f0000002680)={0x78, 0x0, 0xe744, {0xd, 0x8, 0x0, {0x5, 0x6, 0x8, 0x4, 0x6, 0xb0cf, 0x1, 0xd7, 0x6, 0x4000, 0x7, r2, r3, 0x6, 0x7}}}, &(0x7f00000027c0)={0x90, 0xfffffffffffffffe, 0x7, {0x6, 0x1, 0x56, 0x0, 0x1, 0x40000, {0x6, 0xffff, 0x6, 0x7, 0x9, 0xb82b, 0x7ff, 0x0, 0x5, 0x8000, 0x2, 0xee00, r4, 0x0, 0xfff}}}, &(0x7f0000002880)={0x78, 0x0, 0x0, [{0x4, 0x6, 0x2, 0x4b8c, '))'}, {0x5, 0x5, 0x0, 0xa}, {0x3, 0x4, 0x0, 0xb062c8f}, {0x6, 0xbb2, 0x0, 0x3}]}, &(0x7f0000002c00)={0x150, 0x0, 0x1c00000000000000, [{{0x1, 0x1, 0x0, 0x1, 0x3ff, 0x8, {0x3, 0x9, 0x3, 0x4, 0x1, 0x8, 0x5, 0x8, 0xffff577e, 0x1000, 0x80000000, r5, r6, 0x5, 0x6}}, {0x1, 0x7, 0x1, 0x5, '#'}}, {{0x5, 0x1, 0x3ff, 0xb12b, 0xab, 0x6, {0x5, 0xe, 0x200, 0xf81, 0x4, 0x8, 0x1000, 0x0, 0xd65, 0x2000, 0x7, r7, r8, 0x80000001, 0x10}}, {0x1, 0x5, 0x1, 0x2, '{'}}]}, &(0x7f0000002ec0)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x3, 0x1, 0xc74, 0x4, {0x2, 0x0, 0x4, 0x3, 0x9, 0x0, 0x3, 0x8, 0x9, 0x6000, 0x7, r9, r10, 0x7, 0x3}}, {0x0, 0x1}}}, &(0x7f0000002f80)={0x20, 0x0, 0x5, {0xc2, 0x0, 0x5, 0x10000}}, &(0x7f0000003000)={0x130, 0x24, 0xa0b2, {0x4, 0x7, 0x0, '\x00', {0x4, 0x5cc, 0xb, 0x3, 0xffffffffffffffff, r11, 0x6000, '\x00', 0x3, 0xff, 0xe, 0x6, {0x4, 0x7}, {0x2, 0x4}, {0xffffffffffffffff, 0x1}, {0x7, 0x8001}, 0x4, 0x5, 0x2, 0x8001}}}}) 2.679863101s ago: executing program 2 (id=1452): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0xff2e) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r7 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, &(0x7f0000000640)={0x1}, 0x0) landlock_restrict_self(r7, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000000)={{@my=0x0}, 0x1}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000240)) 2.055836257s ago: executing program 0 (id=1455): socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x100000001, 0x400) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000001c0)={0x6, 0x4, [0x8]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) stat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000240)) setsockopt$sock_attach_bpf(r4, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x1b, &(0x7f0000000040), 0x4) r8 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r8, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.005262075s ago: executing program 0 (id=1456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x3000000, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 1.973192497s ago: executing program 0 (id=1457): socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000101401"], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x385, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x9, 0x3, {{0x21, 0x4, 0x0, 0x1f, 0x84, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast2, @remote, {[@rr={0x7, 0x23, 0x27, [@empty, @broadcast, @empty, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x1b, 0x35, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @private=0xa010101, @remote]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0xdb, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote]}, @noop, @generic={0x83, 0xe, "ab05c8ec27c18256d50e59f4"}, @end, @generic={0x7, 0x6, "0ac68d26"}]}}}}}) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt$sock_buf(r9, 0x1, 0x3d, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'dummy0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r6}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000680)={r5, &(0x7f0000000580)='{-)!!-\x00', 0x101800, &(0x7f00000005c0)={@align=0x40, {0x5, 0x1, 0x4, 0x2}}, 0xa998, &(0x7f0000000600), &(0x7f0000000640)=0x1}) ioctl$VIDIOC_G_MODULATOR(r10, 0xc0445636, &(0x7f0000000800)={0x537, "ab45fbfa3038fd705c45095d6ef4e965e6cb562e099616fbe31d952b03523ade", 0x10, 0x80, 0x7ff, 0x4, 0x5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xf, 0x80000001, 0x1}, 0x10, 0x2de5, r5, 0x4, &(0x7f00000006c0)=[r10, r11], &(0x7f0000000700)=[{0x5, 0x5, 0x7, 0x5}, {0x5, 0x3, 0x7, 0xc}, {0x2, 0x4, 0xb, 0xc}, {0x1, 0x1, 0xe, 0xb}], 0x10, 0x8}, 0x94) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310428bd7000000000001600000018000180140002006e657464657673696d30000009000100050002"], 0x34}}, 0x0) 1.691779374s ago: executing program 2 (id=1458): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffe76, 0xf, 0x6, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c041}, 0x44840) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) ioctl$COMEDI_RANGEINFO(r3, 0x80106408, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[{}, {}, {}, {}]}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x6, 0x6, 0x5, 0xbd, 0x6}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@int=0x9, 0xfffffe86) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r4, 0xfffffff7}, 0x8) close(r3) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(r6, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00', @random="0000008500"}) 1.243070404s ago: executing program 2 (id=1459): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x4000000) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r4, &(0x7f00000009c0)={0x14, &(0x7f0000000000)={0x40, 0x2, 0xf, {0xf, 0x10, "384d8b21f1c471e612633a9984"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000a00)={0x20, 0x31, 0x26, "9a775f15eb759113d9b775a896434081008c077001b99e4adad3f96c9a62391f10afcd78a884"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x96}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000ac0)={0x20, 0x81, 0x2, 'W;'}, &(0x7f0000000b00)={0x20, 0x82, 0x1, "92"}, &(0x7f0000000b40)={0x20, 0x83, 0x2, "bfd5"}, &(0x7f0000000b80)={0x20, 0x84, 0x1, "e6"}, &(0x7f0000000bc0)={0x20, 0x85, 0x3, "6ad059"}}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7feee8140006001e008808", 0x5ee, 0x48084, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14) syz_usb_control_io$uac2(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x40, 0xd, 0x79, {0x79, 0x21, "250436e41df574155092dcbb628747067ec53dc55976732f9645cd3a568a19c12b158b6a8bdfc62d21530fe7d989f445a3ebf979012e38dcff0a34b3a29819816d30bc282aa35047dfef495578cd40a484d97ec1c12e1606adafbac234ab322b963c058958c4d5cc040170da7791863b7f8fb4767c97c9"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f00000001c0)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x3, 0x0, 0x0, [0xff00, 0xe584b45b0b438e06]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x6, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "2d8d64410e397798050c81774e46e11e"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x5, 0x7, "04fcc439", "a5e857cd"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x2, 0x8, 0x1, 0x40, 0x4546, 0x8}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x40, 0x6, 0x5c, "576250ee32d521213beeb57d29e333be21ca9a291cc4da5515ffe7d74185eee0d524e2dbaf3ec49253a34dc17674bc78ec23fb1f0480ae8ffa9a9692a1e0c77371ad33585e397ea494bf9137318820513fa38683f6cfe7443104c828"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x0, 0x40, [0xf0ff]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "0a81"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x6328}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "1e62"}, &(0x7f0000000700)={0x40, 0x1a, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xc7}}) 424.491914ms ago: executing program 0 (id=1460): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) read$msr(r0, &(0x7f0000004240)=""/102395, 0x18ffb) 358.863289ms ago: executing program 0 (id=1461): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x7fffffff, 0xb96f, 0x0, 0x6}) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) sched_setscheduler(r1, 0x3, &(0x7f00000002c0)=0x8000003) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x9, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd700006dbdf250900020073797a300000000008004100736977001400330077673100000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000005c0)={0xf3, [[0x7fffffff, 0x100, 0x8, 0x7, 0x98, 0x5, 0x7, 0x6], [0x7, 0x40, 0x9, 0x3ff, 0x7, 0x0, 0x6, 0x7], [0x1, 0x0, 0x800009, 0x6, 0x5, 0x7fff, 0x1, 0x3]], '\x00', [{0x9, 0x8}, {0xef, 0xef0}, {0x2, 0x0, 0x1, 0x0, 0x1}, {0x101, 0xd33, 0x1, 0x0, 0x0, 0x1}, {0x10, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x9, 0x0, 0x0, 0x1, 0x1}, {0xfee, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xffefffff, 0x6, 0x1}, {0xf, 0x7, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1, 0x1}, {0xfffffffe, 0xb, 0x1}, {0xff, 0x8, 0x0, 0x1}], '\x00', 0xa}) r4 = getpgrp(0xffffffffffffffff) fsetxattr$security_selinux(r3, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:printer_device_t:s0\x00', 0x26, 0x3) waitid(0x3, r4, &(0x7f0000000440), 0x20000003, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x80) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0xfa) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCSETS(r6, 0xc0384707, &(0x7f0000000500)={0x5, 0x0, 0xfffffffe, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"}) getrlimit(0xd, &(0x7f00000000c0)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r7, &(0x7f0000004200)='t', 0x1) 262.603543ms ago: executing program 6 (id=1462): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)="0d765321f98f8c8c52cad7d6c27b95ccbfb8df953446994f2cdbf7b52b66e0930af4c8dc29487f489ab78668dad548ac16cb4288a554976f794d5b047e4378102e4f7fa62d4cea853b7da4a1bfc1947c5a283e5d9af4430caef82bb1b0160a2d1548af1efee39db5653e6503f14b199ed3c98b5d7bec56a38c89bd7c497005d8bcbcca3076b820d1e80220183ec671a5402f551588fee6f05a8d697ad02b6e2dbe974d48dc67b0e03f9b01a7d339ca55559dda42349a3cc19f40f1475e5aed1342491e3501c3c511def9441f0641f4c600e2", 0xd2}], 0x1}}], 0x1, 0x4001c00) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 235.610389ms ago: executing program 4 (id=1463): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) rt_sigsuspend(0x0, 0x0) landlock_restrict_self(r0, 0xa) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x401, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x400c941) r3 = dup(r0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x24000080) sendto$packet(r6, &(0x7f0000000340)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c7161fe77ddaffd8bb7ac17219d7ef4a151899fd0bd1aca3", 0x39, 0x4040890, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x25, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x98, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0x40000d0) 67.717754ms ago: executing program 1 (id=1464): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="38010000100001000000000004000000e0000002000000000000000000000000ff0200000000000000000000000000014e240000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d42b000000ac1414aa00000000000000000000000000000000000000000000000000000000fffffffffffffffffdffffffffffffff0000000000000000db0000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000008000000000000fcffffff0a0004000000000000000000480001"], 0x138}}, 0x0) syz_open_dev$amidi(0x0, 0x2, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) syz_usbip_server_init(0x3) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_complete(0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x48}}, 0x0) sendto$packet(r4, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xdddd0000, 0x1000, &(0x7f0000c15000/0x1000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x24000015}, 0x1) 67.158119ms ago: executing program 4 (id=1465): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x301002, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x4b, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x39, 0x0, r0}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r3) flistxattr(r3, &(0x7f0000000040)=""/4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {{@in6=@empty, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000}, {0xfffffffffffffffc, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000006, 0x4, 0x1, 0x0, 0x10, 0x0, 0x1000}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001240)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x2c}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xd678, 0xfff}}}}}}, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000640)=0x5) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r8 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r0, 0x36, 0x0, 0x1, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback=r5, r0, 0x36, 0x0, 0x0, @void, @value=r0, @void, @void, r9}, 0x20) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 0s ago: executing program 0 (id=1466): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0xffffffffffffffff, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xf0b, 0xfffffffc, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x72}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000010085c40b4040200b16a0102030109021b0001000000000904"], 0x0) close(r4) kernel console output (not intermixed with test programs): :aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.476908][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.486774][T10482] batman_adv: batadv0: Interface activated: ipvlan3 [ 448.218714][T10489] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 448.283788][T10489] cgroup: Name too long [ 449.063462][ T5740] usb 3-1: USB disconnect, device number 61 [ 449.231851][ T5726] hid_parser_main: 7 callbacks suppressed [ 449.231868][ T5726] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 449.574534][T10499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1139'. [ 449.595598][ T5740] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 449.698210][ T5726] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 449.880731][ T5740] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.905047][ T5740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 449.924865][ T5740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 449.986011][T10506] No such timeout policy "syz1" [ 450.377690][ T5719] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 450.389209][ T5740] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 450.409839][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.417877][ T5740] usb 3-1: Product: syz [ 450.422095][ T5740] usb 3-1: Manufacturer: syz [ 450.426681][ T5740] usb 3-1: SerialNumber: syz [ 450.435428][ T5740] usb 3-1: config 0 descriptor?? [ 450.449232][T10493] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 450.528439][ T5740] rc_core: IR keymap rc-streamzap not found [ 450.534412][ T5740] Registered IR keymap rc-empty [ 450.540235][ T5740] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 450.552460][ T5719] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 450.561253][ T5740] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 450.573125][ T5719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.583230][ T5719] usb 2-1: config 0 has no interface number 0 [ 450.589330][ T5719] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 450.599929][ T5719] usb 2-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.653551][ T5719] usb 2-1: config 0 interface 2 has no altsetting 0 [ 450.668194][ T5719] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 450.705981][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.714905][ T5719] usb 2-1: Product: syz [ 450.715728][ T9] usb 3-1: USB disconnect, device number 62 [ 450.719104][ T5719] usb 2-1: Manufacturer: syz [ 450.735500][ T5719] usb 2-1: SerialNumber: syz [ 450.743176][ T5726] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 450.749333][ T5719] usb 2-1: config 0 descriptor?? [ 450.763644][ T5719] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 450.820088][ T5719] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 450.852922][ T6245] udevd[6245]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.912470][ T5726] usb 5-1: Using ep0 maxpacket: 32 [ 450.919136][ T5726] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 450.927366][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.937562][ T5726] usb 5-1: config 0 has no interfaces? [ 450.945101][ T5726] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 450.954730][ T5726] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 450.963272][ T5726] usb 5-1: Product: syz [ 450.967536][ T5726] usb 5-1: Manufacturer: syz [ 451.018986][ T5726] usb 5-1: SerialNumber: syz [ 451.025359][ T5726] usb 5-1: config 0 descriptor?? [ 451.255356][ T5726] usb 5-1: USB disconnect, device number 56 [ 451.542240][ T30] audit: type=1400 audit(1780089582.513:788): avc: denied { connect } for pid=10517 comm="syz.2.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 451.570421][ T30] audit: type=1400 audit(1780089582.532:789): avc: denied { write } for pid=10517 comm="syz.2.1145" path="socket:[34786]" dev="sockfs" ino=34786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 451.594682][ T9] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 451.758968][T10516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.768705][T10516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.974706][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 451.983840][ T9] usb 1-1: can't read configurations, error -71 [ 452.291865][ T5719] usb 2-1: USB disconnect, device number 41 [ 452.549258][T10533] ubi16: attaching mtd0 [ 452.574699][T10533] ubi16: scanning is finished [ 452.579747][T10533] ubi16: empty MTD device detected [ 453.992586][T10533] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 454.408274][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 454.610736][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 454.626655][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 454.652082][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.674595][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.700801][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.725193][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.755828][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 454.772252][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.101566][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 455.109593][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 455.115863][ T9] usbtmc 5-1:16.0: can't read capabilities [ 455.252545][T10554] trusted_key: encrypted_key: insufficient parameters specified [ 455.264451][T10554] trusted_key: encrypted_key: keylen parameter is missing [ 455.276677][T10554] netlink: 'syz.2.1154': attribute type 40 has an invalid length. [ 455.316294][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 455.341623][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 455.370946][ T10] usb 1-1: config 0 has no interface number 0 [ 455.400375][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 455.439582][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.470516][ T10] usb 1-1: Product: syz [ 455.483405][ T10] usb 1-1: Manufacturer: syz [ 455.517921][ T10] usb 1-1: SerialNumber: syz [ 455.526100][ T10] usb 1-1: config 0 descriptor?? [ 455.925560][ T5739] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 455.975775][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 456.020106][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 456.087495][ T30] audit: type=1400 audit(1780089586.760:790): avc: denied { prog_load } for pid=10559 comm="syz.2.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 456.092346][ T5739] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 456.275419][ T5739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 456.286540][ T5739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 456.299541][ T5739] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 456.325744][ T30] audit: type=1400 audit(1780089586.807:791): avc: denied { bpf } for pid=10559 comm="syz.2.1156" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 456.807737][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.865628][ T5739] usb 2-1: Product: syz [ 456.877645][ T5739] usb 2-1: Manufacturer: syz [ 456.896721][ T5739] usb 2-1: SerialNumber: syz [ 456.913494][ T5739] usb 2-1: config 0 descriptor?? [ 456.930710][T10557] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 456.944650][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 456.972345][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 457.010900][ T10] usb 1-1: USB disconnect, device number 37 [ 457.047250][ T5739] rc_core: IR keymap rc-streamzap not found [ 457.057631][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.074882][ T5739] Registered IR keymap rc-empty [ 457.081646][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 457.091400][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 457.105465][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 457.107383][ T5739] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 457.125335][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.153249][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.166216][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 457.173690][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 457.183438][ T30] audit: type=1400 audit(1780089587.799:792): avc: denied { map_create } for pid=10570 comm="syz.2.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 457.203557][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 457.256180][ T30] audit: type=1400 audit(1780089587.817:793): avc: denied { perfmon } for pid=10570 comm="syz.2.1158" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 457.257161][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.642267][ T5739] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 458.119669][ T10] usb 5-1: USB disconnect, device number 57 [ 458.129217][ T5739] usb 2-1: USB disconnect, device number 42 [ 458.953411][ T30] audit: type=1400 audit(1780089589.090:794): avc: denied { read } for pid=10580 comm="syz.1.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 459.158094][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.263459][T10590] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 459.584251][ T50] Bluetooth: hci5: command tx timeout [ 459.946721][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.959011][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.970124][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47077 - 0 [ 459.980851][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 44570 - 0 [ 460.500130][ T5739] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 460.606185][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.619076][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.629951][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47077 - 0 [ 460.641639][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 44570 - 0 [ 460.671573][ T5739] usb 1-1: Using ep0 maxpacket: 32 [ 460.682179][ T5739] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 460.698144][ T5739] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 460.724417][ T5739] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 460.741615][ T5739] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 460.757398][ T5739] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 460.767048][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.770486][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.775233][ T5739] usb 1-1: Product: syz [ 460.775251][ T5739] usb 1-1: Manufacturer: syz [ 460.775265][ T5739] usb 1-1: SerialNumber: syz [ 460.781841][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 460.813660][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.818513][ T5739] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input32 [ 460.834859][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47077 - 0 [ 460.867282][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 44570 - 0 [ 460.922160][T10567] wg1 speed is unknown, defaulting to 1000 [ 460.970479][T10610] syzkaller0: entered promiscuous mode [ 460.976721][T10610] syzkaller0: entered allmulticast mode [ 461.027738][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.038134][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.038176][ T5739] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 461.048926][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47077 - 0 [ 461.067519][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 44570 - 0 [ 461.068047][ T5739] (id 0x00) [ 461.142016][ T5739] rc_core: IR keymap rc-imon-pad not found [ 461.147935][ T5739] Registered IR keymap rc-empty [ 461.153129][ T5739] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 461.169054][ T5739] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 461.241200][ T5739] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 461.271639][ T5739] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input33 [ 461.291953][ T5625] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 461.292291][ T5739] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:38> initialized [ 461.805231][ T5625] Bluetooth: hci5: command tx timeout [ 463.631587][ T9] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 463.876008][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 463.979709][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 464.007942][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 464.028397][ T5625] Bluetooth: hci5: command tx timeout [ 464.034562][ T9] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 464.044669][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.056563][ T9] usb 3-1: Product: syz [ 464.079023][ T9] usb 3-1: Manufacturer: syz [ 464.092979][ T9] usb 3-1: SerialNumber: syz [ 464.114532][ T9] usb 3-1: config 0 descriptor?? [ 464.134282][T10634] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 464.217818][ T9] rc_core: IR keymap rc-streamzap not found [ 464.223926][ T9] Registered IR keymap rc-empty [ 464.229543][ T9] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 464.251420][ T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input34 [ 464.374942][ T5739] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 464.563055][ T5739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.600065][ T5739] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 464.609468][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.629397][ T5739] usb 2-1: Product: syz [ 464.633682][ T5739] usb 2-1: Manufacturer: syz [ 464.638502][ T5739] usb 2-1: SerialNumber: syz [ 464.662623][ T5739] usb 2-1: config 0 descriptor?? [ 464.681102][ T5739] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 465.020629][T10642] raw_sendmsg: syz.1.1171 forgot to set AF_INET. Fix it! [ 465.087039][T10628] imon:send_packet: task interrupted [ 465.092735][T10628] imon:send_packet: packet tx failed (-512) [ 465.098718][T10628] imon:vfd_write: send packet #3 failed [ 465.185313][ T5739] usb 1-1: USB disconnect, device number 38 [ 465.363633][T10650] set match dimension is over the limit! [ 466.252409][ T5625] Bluetooth: hci5: command tx timeout [ 466.796097][ T5739] usb 3-1: USB disconnect, device number 63 [ 466.951552][ T30] audit: type=1400 audit(1780089596.929:795): avc: denied { map_read map_write } for pid=10655 comm="syz.4.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 467.088689][ T5739] usb 2-1: USB disconnect, device number 43 [ 467.219856][ T12] bridge_slave_1: left promiscuous mode [ 467.227852][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.273017][ T12] bridge_slave_0: left allmulticast mode [ 467.294122][ T12] bridge_slave_0: left promiscuous mode [ 467.323901][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.364958][T10668] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 467.384851][ T150] Bluetooth: hci4: Frame reassembly failed (-84) [ 467.623248][ T12] bond0 (unregistering): (slave gretap1): Releasing active interface [ 467.635294][ T12] gretap1 (unregistering): left allmulticast mode [ 467.836395][ T12] bond0 (unregistering): Released all slaves [ 467.860306][ T12] bond1 (unregistering): Released all slaves [ 469.435326][ T12] tipc: Disabling bearer [ 469.460218][ T29] syz2: Port: 1 Link ACTIVE [ 469.497963][ T12] tipc: Left network mode [ 469.504540][ T5625] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 469.609729][ T30] audit: type=1400 audit(1780089599.418:796): avc: denied { mount } for pid=10692 comm="syz.1.1181" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 469.714852][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 469.752666][T10697] loop4: detected capacity change from 0 to 2640 [ 469.773276][T10567] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.785011][T10697] buffer_io_error: 138 callbacks suppressed [ 469.785026][T10697] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.804077][T10567] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.821964][T10697] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.832415][T10567] bridge_slave_0: entered allmulticast mode [ 469.853019][T10697] Buffer I/O error on dev loop4, logical block 0, async page read [ 469.860928][ T30] audit: type=1400 audit(1780089599.642:797): avc: denied { map } for pid=10692 comm="syz.1.1181" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 469.860976][ T30] audit: type=1400 audit(1780089599.642:798): avc: denied { execute } for pid=10692 comm="syz.1.1181" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 469.863919][T10567] bridge_slave_0: entered promiscuous mode [ 469.960611][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 469.967323][ T30] audit: type=1400 audit(1780089599.745:799): avc: denied { read } for pid=10701 comm="syz.0.1183" name="video1" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 469.977488][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 469.998728][ T10] usb 3-1: config 0 has no interface number 0 [ 470.045926][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 470.047085][T10697] Buffer I/O error on dev loop4, logical block 0, async page read [ 470.057950][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 470.080389][T10706] set match dimension is over the limit! [ 470.084304][ T30] audit: type=1400 audit(1780089599.745:800): avc: denied { open } for pid=10701 comm="syz.0.1183" path="/dev/video1" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 470.187754][T10567] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.196354][T10692] Buffer I/O error on dev loop4, logical block 0, async page read [ 470.251454][T10692] Buffer I/O error on dev loop4, logical block 0, async page read [ 470.259908][T10567] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.260049][T10567] bridge_slave_1: entered allmulticast mode [ 470.261348][T10567] bridge_slave_1: entered promiscuous mode [ 470.297843][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.304591][T10692] Buffer I/O error on dev loop4, logical block 0, async page read [ 470.323439][ T10] usb 3-1: Product: syz [ 470.331020][ T10] usb 3-1: Manufacturer: syz [ 470.336080][ T10] usb 3-1: SerialNumber: syz [ 470.506542][T10694] Buffer I/O error on dev loop4, logical block 0, async page read [ 470.543214][T10697] Buffer I/O error on dev loop4, logical block 0, async page read [ 470.580276][ T10] usb 3-1: config 0 descriptor?? [ 470.581242][T10709] Buffer I/O error on dev loop4, logical block 0, async page read [ 470.598030][ T30] audit: type=1400 audit(1780089600.344:801): avc: denied { write } for pid=10684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.603537][T10697] ldm_validate_partition_table(): Disk read failed. [ 470.673350][T10697] Dev loop4: unable to read RDB block 0 [ 470.691183][T10697] loop4: unable to read partition table [ 470.716771][T10697] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 470.744080][ T30] audit: type=1400 audit(1780089600.484:802): avc: denied { write } for pid=10711 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.822924][ T30] audit: type=1400 audit(1780089600.540:803): avc: denied { read } for pid=10692 comm="syz.1.1181" dev="nsfs" ino=4026533316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 470.852769][ T30] audit: type=1400 audit(1780089600.540:804): avc: denied { open } for pid=10692 comm="syz.1.1181" path="net:[4026533316]" dev="nsfs" ino=4026533316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 470.895727][T10567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.909774][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 470.938576][T10567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.077217][T10567] team0: Port device team_slave_0 added [ 471.096476][T10567] team0: Port device team_slave_1 added [ 471.128527][ T12] hsr_slave_0: left promiscuous mode [ 471.135219][ T12] hsr_slave_1: left promiscuous mode [ 471.141383][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.149359][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.157271][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.165260][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.170943][ T995] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 471.181323][ T12] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 471.188112][ T12] batman_adv: batadv0: Removing interface: ipvlan2 [ 471.200020][ T12] veth1_macvtap: left promiscuous mode [ 471.205853][ T12] veth0_macvtap: left promiscuous mode [ 471.212304][ T12] veth1_vlan: left promiscuous mode [ 471.220920][ T12] veth0_vlan: left promiscuous mode [ 471.265389][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 471.370642][ T995] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 471.381723][ T995] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 471.402687][ T995] usb 1-1: config 8 has no interface number 0 [ 471.409120][ T995] usb 1-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 471.422557][ T995] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 471.432261][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.441907][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 471.455365][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.476444][ T9] usb 2-1: config 0 descriptor?? [ 471.493509][ T995] usb 1-1: NFC: intf ffff8880355d7000 id ffffffff8f7e4760 [ 471.604521][ T12] team0 (unregistering): Port device team_slave_1 removed [ 471.624925][ T12] team0 (unregistering): Port device team_slave_0 removed [ 471.729731][ T995] usb 1-1: USB disconnect, device number 39 [ 471.841128][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 471.848917][T10567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.851903][ T10] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 471.858969][T10567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.891288][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 471.902448][T10567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.916741][T10567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.924316][T10567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.927815][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 471.953722][T10567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.967145][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 471.994379][ T10] usb 3-1: USB disconnect, device number 64 [ 472.164793][T10567] hsr_slave_0: entered promiscuous mode [ 472.182145][T10567] hsr_slave_1: entered promiscuous mode [ 472.196991][T10567] debugfs: 'hsr0' already exists in 'hsr' [ 472.292245][T10567] Cannot create hsr debugfs directory [ 472.552462][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 472.552478][ T30] audit: type=1400 audit(1780089602.178:807): avc: denied { block_suspend } for pid=10741 comm="syz.0.1187" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 472.633931][T10747] netlink: 'syz.2.1188': attribute type 1 has an invalid length. [ 472.704074][T10747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.856251][ T9] usb 2-1: Cannot set autoneg [ 472.862038][ T9] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 472.901491][ T9] usb 2-1: USB disconnect, device number 44 [ 472.938644][ T30] audit: type=1400 audit(1780089602.533:808): avc: denied { prog_run } for pid=10754 comm="syz.0.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 472.942792][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. [ 472.990007][T10762] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 473.006507][ T76] Bluetooth: hci4: Frame reassembly failed (-84) [ 473.016844][T10753] gretap1: entered promiscuous mode [ 473.025278][T10766] openvswitch: netlink: Missing valid actions attribute. [ 473.041008][T10753] bond0: (slave gretap1): making interface the new active one [ 473.045855][ T30] audit: type=1400 audit(1780089602.627:809): avc: denied { write } for pid=10739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.071772][T10753] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 473.075433][T10766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.144285][ T30] audit: type=1400 audit(1780089602.720:810): avc: denied { write } for pid=10770 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.168502][T10758] macvlan2: entered promiscuous mode [ 473.184960][T10758] macvlan2: entered allmulticast mode [ 473.208853][T10758] bond0: entered promiscuous mode [ 473.219920][T10758] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 473.227317][T10758] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 473.244573][T10758] bond0: left promiscuous mode [ 473.263425][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 473.403833][T10567] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 473.418861][T10567] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.427318][T10567] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 473.441264][T10567] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.449575][T10567] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 473.462401][T10567] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 473.472041][T10567] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 473.481967][T10567] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.587429][T10567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.608926][T10567] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.621432][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.628633][ T7755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.664623][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.671828][ T7755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.846152][T10794] trusted_key: encrypted_key: insufficient parameters specified [ 473.856106][T10794] trusted_key: encrypted_key: keylen parameter is missing [ 473.868154][T10794] netlink: 'syz.1.1192': attribute type 40 has an invalid length. [ 474.045391][ T30] audit: type=1400 audit(1780089603.562:811): avc: denied { write } for pid=10774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.248686][T10798] ref_ctr_offset mismatch. inode: 0x510 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x1002 [ 474.356677][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1193'. [ 474.392388][ T30] audit: type=1400 audit(1780089603.824:812): avc: denied { write } for pid=10801 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.558756][T10810] trusted_key: encrypted_key: insufficient parameters specified [ 474.568616][T10810] trusted_key: encrypted_key: keylen parameter is missing [ 474.581045][T10810] netlink: 'syz.2.1194': attribute type 40 has an invalid length. [ 474.998159][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 475.147076][T10186] Bluetooth: hci4: command 0x1003 tx timeout [ 475.159760][ T5625] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 475.748495][ T30] audit: type=1400 audit(1780089605.162:813): avc: denied { write } for pid=10820 comm="syz.0.1196" name="video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 475.975610][ T30] audit: type=1400 audit(1780089605.358:814): avc: denied { allowed } for pid=10828 comm="syz.4.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 476.088483][T10835] overlayfs: failed lookup in lower (newroot/221, name='file0', err=-40): overlapping layers [ 476.473940][T10567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.588211][ T10] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 476.708259][T10844] FAULT_INJECTION: forcing a failure. [ 476.708259][T10844] name failslab, interval 1, probability 0, space 0, times 0 [ 476.721281][T10844] CPU: 1 UID: 0 PID: 10844 Comm: syz.0.1200 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.721309][T10844] Tainted: [L]=SOFTLOCKUP [ 476.721315][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 476.721325][T10844] Call Trace: [ 476.721331][T10844] [ 476.721338][T10844] dump_stack_lvl+0x100/0x190 [ 476.721363][T10844] should_fail_ex.cold+0x5/0xa [ 476.721388][T10844] should_failslab+0xc2/0x120 [ 476.721407][T10844] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 476.721432][T10844] ? __proc_create+0x2cb/0x8c0 [ 476.721469][T10844] __proc_create+0x2cb/0x8c0 [ 476.721495][T10844] ? __pfx___proc_create+0x10/0x10 [ 476.721531][T10844] proc_mkdir+0x81/0x170 [ 476.721557][T10844] ? __pfx_proc_mkdir+0x10/0x10 [ 476.721583][T10844] ? mark_held_locks+0x40/0x70 [ 476.721604][T10844] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.721628][T10844] register_handler_proc+0x349/0x470 [ 476.721656][T10844] ? __pfx_register_handler_proc+0x10/0x10 [ 476.721697][T10844] __setup_irq+0x11ee/0x2020 [ 476.721723][T10844] ? kasan_save_track+0x14/0x30 [ 476.721742][T10844] request_threaded_irq+0x261/0x3e0 [ 476.721767][T10844] univ8250_setup_irq+0x55f/0x6d0 [ 476.721792][T10844] ? io_serial_out+0x65/0xb0 [ 476.721807][T10844] ? io_serial_in+0x60/0xb0 [ 476.721826][T10844] serial8250_do_startup+0xaa7/0x31b0 [ 476.721854][T10844] ? mark_held_locks+0x40/0x70 [ 476.721877][T10844] serial8250_startup+0x62/0x80 [ 476.721899][T10844] uart_startup+0x50f/0x1330 [ 476.721926][T10844] uart_ioctl+0x1335/0x2eb0 [ 476.721949][T10844] ? __pfx_uart_ioctl+0x10/0x10 [ 476.721969][T10844] ? tomoyo_path_number_perm+0x188/0x580 [ 476.722001][T10844] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 476.722024][T10844] ? tty_jobctrl_ioctl+0x152/0xce0 [ 476.722051][T10844] ? __pfx_uart_ioctl+0x10/0x10 [ 476.722073][T10844] tty_ioctl+0x26a/0x1640 [ 476.722095][T10844] ? __pfx_tty_ioctl+0x10/0x10 [ 476.722115][T10844] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 476.722149][T10844] ? __fget_files+0x215/0x3d0 [ 476.722171][T10844] ? hook_file_ioctl_common+0x149/0x410 [ 476.722197][T10844] ? selinux_file_ioctl+0x13b/0x290 [ 476.722221][T10844] ? selinux_file_ioctl+0xb6/0x290 [ 476.722249][T10844] ? __pfx_tty_ioctl+0x10/0x10 [ 476.722272][T10844] __x64_sys_ioctl+0x18e/0x210 [ 476.722293][T10844] do_syscall_64+0x115/0x870 [ 476.722315][T10844] ? clear_bhb_loop+0x40/0x90 [ 476.722336][T10844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.722353][T10844] RIP: 0033:0x7f9dc639ce59 [ 476.722369][T10844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.722385][T10844] RSP: 002b:00007f9dc7279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.722402][T10844] RAX: ffffffffffffffda RBX: 00007f9dc6616090 RCX: 00007f9dc639ce59 [ 476.722413][T10844] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000005 [ 476.722422][T10844] RBP: 00007f9dc7279090 R08: 0000000000000000 R09: 0000000000000000 [ 476.722432][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.722442][T10844] R13: 00007f9dc6616128 R14: 00007f9dc6616090 R15: 00007ffed706bbf8 [ 476.722472][T10844] [ 477.100423][ T30] audit: type=1400 audit(1780089606.425:815): avc: denied { audit_write } for pid=10848 comm="syz.2.1201" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 477.103238][T10850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10850 comm=syz.2.1201 [ 477.122061][ T10] usb 5-1: device descriptor read/64, error -71 [ 477.157682][ T30] audit: type=1400 audit(1780089606.434:816): avc: denied { watch watch_reads } for pid=10848 comm="syz.2.1201" path="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 477.236359][T10567] veth0_vlan: entered promiscuous mode [ 477.247607][T10567] veth1_vlan: entered promiscuous mode [ 477.308044][T10567] veth0_macvtap: entered promiscuous mode [ 477.317895][T10567] veth1_macvtap: entered promiscuous mode [ 477.345688][T10567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.390677][T10567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.401119][ T10] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 477.490853][ T3300] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.521061][T10858] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1203'. [ 477.532361][ T3300] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.544227][ T3300] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.605771][ T10] usb 5-1: device descriptor read/64, error -71 [ 477.626746][ T112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.664283][T10858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.718979][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.727250][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.743761][ T10] usb usb5-port1: attempt power cycle [ 477.803507][T10859] sctp: [Deprecated]: syz.0.1203 (pid 10859) Use of int in maxseg socket option. [ 477.803507][T10859] Use struct sctp_assoc_value instead [ 477.823446][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.831978][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.056074][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 478.056089][ T30] audit: type=1400 audit(1780089607.323:823): avc: denied { checkpoint_restore } for pid=10860 comm="syz.6.1157" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 478.116609][ T10] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 478.149244][ T10] usb 5-1: device descriptor read/8, error -71 [ 478.653029][ T10] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 478.706542][ T10] usb 5-1: device descriptor read/8, error -71 [ 478.822840][ T10] usb usb5-port1: unable to enumerate USB device [ 478.995848][T10876] syz_tun: entered allmulticast mode [ 479.024188][T10876] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 479.032768][T10876] mroute: pending queue full, dropping entries [ 479.047208][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 479.055773][ C1] mroute: pending queue full, dropping entries [ 479.090376][ T3300] Bluetooth: hci4: Frame reassembly failed (-84) [ 479.104880][ T30] audit: type=1400 audit(1780089608.305:824): avc: denied { ioctl } for pid=10875 comm="syz.2.1206" path="/dev/video3" dev="devtmpfs" ino=937 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 479.210691][ T30] audit: type=1326 audit(1780089608.333:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.1206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacbb9ce59 code=0x7ffc0000 [ 479.295864][ T30] audit: type=1326 audit(1780089608.333:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.1206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacbb9ce59 code=0x7ffc0000 [ 479.421664][ T30] audit: type=1326 audit(1780089608.333:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.1206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacbb9ce59 code=0x7ffc0000 [ 479.449765][ T30] audit: type=1326 audit(1780089608.333:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.1206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feacbb5d68e code=0x7ffc0000 [ 479.541857][T10884] trusted_key: encrypted_key: insufficient parameters specified [ 479.551678][T10884] trusted_key: encrypted_key: keylen parameter is missing [ 479.563559][T10884] netlink: 'syz.2.1208': attribute type 40 has an invalid length. [ 479.869924][ T30] audit: type=1326 audit(1780089608.343:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.1206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacbb9ce59 code=0x7ffc0000 [ 479.896654][ T30] audit: type=1326 audit(1780089608.343:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.1206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacbb9ce59 code=0x7ffc0000 [ 479.961870][ T30] audit: type=1326 audit(1780089608.343:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.1206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feacbb9ce59 code=0x7ffc0000 [ 480.011611][ T30] audit: type=1326 audit(1780089608.343:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.2.1206" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feacbb9ce59 code=0x7ffc0000 [ 480.134739][T10888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1209'. [ 481.309527][ T5625] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 481.313072][T10186] Bluetooth: hci4: command 0x1003 tx timeout [ 481.807961][T10892] comedi comedi3: 8255: I/O base address not correctly aligned [ 481.836432][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 482.253583][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 482.281772][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.294281][ T10] usb 2-1: Product: syz [ 482.298678][ T10] usb 2-1: Manufacturer: syz [ 482.303748][ T10] usb 2-1: SerialNumber: syz [ 482.657052][T10898] wg1 speed is unknown, defaulting to 1000 [ 482.766392][ T5740] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 482.916156][ T5740] usb 3-1: device descriptor read/64, error -71 [ 483.161888][ T5719] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 483.174199][ T5740] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 483.295852][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 483.322410][ T5740] usb 3-1: device descriptor read/64, error -71 [ 483.331975][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 483.345134][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 483.348874][ T5719] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.376142][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 483.399668][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 483.411012][ T10] usb 2-1: USB disconnect, device number 45 [ 483.437528][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 483.457985][ T5740] usb usb3-port1: attempt power cycle [ 483.485675][ T5719] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 483.498179][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.514138][ T5719] usb 5-1: Product: syz [ 483.526675][ T5719] usb 5-1: Manufacturer: syz [ 483.550550][ T5719] usb 5-1: SerialNumber: syz [ 483.587253][ T5719] usb 5-1: config 0 descriptor?? [ 483.600711][T10922] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 484.075352][ T5740] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 484.124431][ T5740] usb 3-1: device descriptor read/8, error -71 [ 484.231752][ T5719] rc_core: IR keymap rc-streamzap not found [ 484.244336][ T5719] Registered IR keymap rc-empty [ 484.272358][ T5719] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 484.370245][ T5719] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 484.414871][ T5719] usb 5-1: USB disconnect, device number 62 [ 484.423222][ T5740] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 484.449106][ T5740] usb 3-1: device descriptor read/8, error -71 [ 484.575885][ T5740] usb usb3-port1: unable to enumerate USB device [ 484.711950][ T5726] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 484.872347][ T5726] usb 2-1: Using ep0 maxpacket: 8 [ 484.880900][ T5726] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 484.978398][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.008125][ T5726] usb 2-1: Product: syz [ 485.019003][ T5726] usb 2-1: Manufacturer: syz [ 485.033999][ T5726] usb 2-1: SerialNumber: syz [ 485.141529][T10943] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 485.453062][ T5726] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 485.473846][ T5726] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 485.483330][ T5726] mxuport 2-1:254.0: probe with driver mxuport failed with error -71 [ 485.496635][ T5726] usb 2-1: USB disconnect, device number 46 [ 485.965229][T10959] overlayfs: failed to resolve './file1': -2 [ 487.291596][ T5625] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 487.548785][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 487.548801][ T30] audit: type=1400 audit(1780089616.201:865): avc: denied { write } for pid=10955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.580007][ T5740] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 487.753768][ T5740] usb 5-1: Using ep0 maxpacket: 32 [ 487.777062][ T5740] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 487.811227][ T5740] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.833202][T10993] fuse: Bad value for 'group_id' [ 487.843581][T10993] fuse: Bad value for 'group_id' [ 487.849742][ T5740] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 487.878514][ T5740] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 487.895840][ T5740] usb 5-1: config 0 interface 0 has no altsetting 0 [ 487.910770][ T5740] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 487.920705][ T5740] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 487.929560][ T5740] usb 5-1: Product: syz [ 487.940226][ T5740] usb 5-1: Manufacturer: syz [ 487.944890][ T5740] usb 5-1: SerialNumber: syz [ 487.956413][ T5740] usb 5-1: config 0 descriptor?? [ 487.971033][ T5740] ldusb 5-1:0.0: Interrupt in endpoint not found [ 488.060663][ T30] audit: type=1400 audit(1780089616.687:866): avc: denied { write } for pid=10997 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.211900][ T5740] usb 5-1: USB disconnect, device number 63 [ 488.410545][ T30] audit: type=1400 audit(1780089617.015:867): avc: denied { write } for pid=11003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.772461][ T30] audit: type=1400 audit(1780089617.342:868): avc: denied { write } for pid=11017 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.109233][T11028] trusted_key: encrypted_key: insufficient parameters specified [ 489.119339][T11028] trusted_key: encrypted_key: keylen parameter is missing [ 489.131696][T11028] netlink: 'syz.0.1237': attribute type 40 has an invalid length. [ 490.391065][T11042] set match dimension is over the limit! [ 490.934800][ T30] audit: type=1400 audit(1780089619.372:869): avc: denied { bind } for pid=11046 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 491.007465][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 491.028112][T11058] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 491.028788][ T30] audit: type=1400 audit(1780089619.457:870): avc: denied { write } for pid=11043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.076513][T11061] netlink: 'syz.2.1246': attribute type 4 has an invalid length. [ 491.086979][T11061] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1246'. [ 491.241316][ T30] audit: type=1400 audit(1780089619.653:871): avc: denied { write } for pid=11063 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.457015][ T9954] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 491.457100][T11073] bridge2: entered promiscuous mode [ 491.469903][T11073] bridge2: entered allmulticast mode [ 491.627825][ T9954] usb 3-1: Using ep0 maxpacket: 16 [ 491.634303][ T9954] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 491.642695][ T9954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.652960][ T9954] usb 3-1: config 1 has no interface number 0 [ 491.659072][ T9954] usb 3-1: config 1 interface 105 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 491.670382][ T9954] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.683490][ T9954] usb 3-1: config 1 interface 105 has no altsetting 0 [ 491.692282][ T9954] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 491.701497][ T9954] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 491.709666][ T9954] usb 3-1: Product: syz [ 491.713983][ T9954] usb 3-1: Manufacturer: syz [ 491.718714][ T9954] usb 3-1: SerialNumber: syz [ 491.942787][ T9954] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 492.297268][T11079] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1251'. [ 492.456796][ T30] audit: type=1400 audit(1780089620.794:872): avc: denied { write } for pid=11077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.516040][ T30] audit: type=1400 audit(1780089620.850:873): avc: denied { write } for pid=11092 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.621951][ T5719] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 492.783860][ T5719] usb 5-1: unable to get BOS descriptor or descriptor too short [ 492.792433][ T5719] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 492.800630][ T5719] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 492.810864][ T5719] usb 5-1: config 63 has no interface number 0 [ 492.817084][ T5719] usb 5-1: config 63 interface 66 has no altsetting 0 [ 492.825541][ T5719] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 492.834579][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.843719][ T5719] usb 5-1: Product: syz [ 492.848935][ T5719] usb 5-1: Manufacturer: syz [ 492.853543][ T5719] usb 5-1: SerialNumber: syz [ 493.098008][ T5719] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 493.116969][ T5719] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 493.127870][ T5719] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 493.138529][ T5719] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 493.149204][ T5719] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 493.161361][ T5719] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 493.173156][ T5719] uvcvideo 5-1:63.66: No streaming interface found for terminal 29. [ 493.181556][ T5719] uvcvideo 5-1:63.66: Entity type for entity Output 32773 was not initialized! [ 493.192244][T10186] Bluetooth: hci4: command 0x1003 tx timeout [ 493.204520][ T5625] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 493.265391][ T5719] usb 5-1: USB disconnect, device number 64 [ 493.856347][T11108] futex_wake_op: syz.0.1256 tries to shift op by -1; fix this program [ 494.048782][ T30] audit: type=1400 audit(1780089622.282:874): avc: denied { module_load } for pid=11109 comm="syz.6.1257" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 494.049120][T11110] kernel read not supported for file /policy (pid: 11110 comm: syz.6.1257) [ 494.140049][ T5719] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 494.150796][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 494.222565][T11115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.231246][T11115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.316765][ T5719] usb 5-1: unable to get BOS descriptor or descriptor too short [ 494.327944][ T5719] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 494.334055][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 494.346187][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.347913][ T5719] usb 5-1: can't read configurations, error -71 [ 494.357495][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 494.372392][ T10] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 494.398724][ T10] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 494.421491][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 494.434139][ T10] usb 1-1: config 1 interface 1 has no altsetting 0 [ 494.525061][ T10] usb 1-1: string descriptor 0 read error: -22 [ 494.533302][ T10] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 494.544360][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.922340][ T10] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 495.153630][ T10] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 495.170901][ T10] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 495.181342][ T10] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 495.433456][ T5719] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 495.438055][ T10] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 495.531831][ T10] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 495.554470][ T29] usb 3-1: USB disconnect, device number 69 [ 495.568193][ T10] usb 1-1: USB disconnect, device number 40 [ 495.653575][T11129] loop5: detected capacity change from 0 to 7 [ 495.668497][ T5719] usb 5-1: Using ep0 maxpacket: 8 [ 495.676280][T11129] Dev loop5: unable to read RDB block 7 [ 495.687213][ T5719] usb 5-1: unable to get BOS descriptor or descriptor too short [ 495.695130][T11129] loop5: AHDI p1 [ 495.701626][T11129] loop5: partition table partially beyond EOD, truncated [ 495.709030][ T5719] usb 5-1: config 2 has an invalid interface number: 76 but max is 0 [ 495.723868][ T5719] usb 5-1: config 2 has no interface number 0 [ 495.741304][ T5719] usb 5-1: config 2 interface 76 has no altsetting 0 [ 495.766613][ T5719] usb 5-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 495.783157][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.795921][ T5719] usb 5-1: Product: syz [ 495.807354][ T5719] usb 5-1: Manufacturer: syz [ 495.820064][ T5719] usb 5-1: SerialNumber: syz [ 496.009453][T11134] Cannot find set identified by id 0 to match [ 496.284634][T11136] netlink: 'syz.4.1262': attribute type 11 has an invalid length. [ 496.297396][T11136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.311298][T11136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.464394][T11135] set match dimension is over the limit! [ 497.116701][ T5719] go7007 5-1:2.76: Sensoray 2250 found [ 497.132892][ T5719] go7007 5-1:2.76: probe with driver go7007 failed with error -12 [ 497.175654][ T5719] usb 5-1: USB disconnect, device number 66 [ 497.547693][ T30] audit: type=1804 audit(1780089625.537:875): pid=11158 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1271" name="bus" dev="ramfs" ino=38660 res=1 errno=0 [ 497.548727][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 497.813897][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 497.824602][ T30] audit: type=1400 audit(1780089625.799:876): avc: denied { setopt } for pid=11145 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 497.862131][T11149] ceph: No mds server is up or the cluster is laggy [ 498.516992][ T30] audit: type=1400 audit(1780089626.426:877): avc: denied { setopt } for pid=11173 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 498.519239][T11176] loop5: detected capacity change from 0 to 7 [ 498.593968][T11176] Dev loop5: unable to read RDB block 7 [ 498.607195][T11176] loop5: AHDI p1 [ 498.613848][T11176] loop5: partition table partially beyond EOD, truncated [ 498.754680][T11171] SELinux: failed to load policy [ 498.863767][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 499.316176][ T5726] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 499.441922][ T5712] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 499.823173][ T5726] usb 5-1: unable to get BOS descriptor or descriptor too short [ 499.835328][ T5726] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 499.852273][ T5726] usb 5-1: config 63 has an invalid descriptor of length 6, skipping remainder of the config [ 499.852420][ T5712] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 499.894218][ T5712] usb 2-1: config 5 has no interface number 0 [ 499.910015][ T5712] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 499.920048][ T5726] usb 5-1: config 63 has no interface number 0 [ 499.928090][ T5712] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 499.940186][ T5712] usb 2-1: config 5 interface 123 has no altsetting 0 [ 499.947661][ T5726] usb 5-1: config 63 interface 66 has no altsetting 0 [ 499.966473][ T5712] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 499.975967][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.985047][ T5712] usb 2-1: Product: syz [ 499.990049][ T5712] usb 2-1: Manufacturer: syz [ 499.995785][ T5712] usb 2-1: SerialNumber: syz [ 500.000866][ T5726] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 500.034304][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.057755][ T5726] usb 5-1: Product: syz [ 500.070040][ T5726] usb 5-1: Manufacturer: syz [ 500.083493][ T5726] usb 5-1: SerialNumber: syz [ 500.247649][T11185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.268511][T11185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.362464][ T5726] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 500.394653][ T5726] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 500.427076][ T5726] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 500.465504][ T30] audit: type=1400 audit(1780089628.288:878): avc: denied { append } for pid=11196 comm="syz.1.1280" name="dvr0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 500.508438][ T5712] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 500.524645][ T5726] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 500.546537][ T5726] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 500.567435][ T5726] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 500.617380][ T5726] uvcvideo 5-1:63.66: No streaming interface found for terminal 29. [ 500.617407][ T5726] uvcvideo 5-1:63.66: Entity type for entity Output 32773 was not initialized! [ 500.618327][ T5712] usb 2-1: USB disconnect, device number 47 [ 501.005149][ T5726] usb 5-1: USB disconnect, device number 67 [ 501.576192][ T5726] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 501.610187][ T30] audit: type=1400 audit(1780089629.354:879): avc: denied { ioctl } for pid=11208 comm="syz.6.1282" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 501.661846][T11172] block nbd4: shutting down sockets [ 501.705257][ T30] audit: type=1400 audit(1780089629.373:880): avc: denied { mount } for pid=11210 comm="syz.1.1284" name="/" dev="hugetlbfs" ino=39965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 501.965720][T11220] loop5: detected capacity change from 0 to 7 [ 501.994140][ T5726] usb 5-1: device not accepting address 68, error -71 [ 502.017512][T11223] FAULT_INJECTION: forcing a failure. [ 502.017512][T11223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.039830][T11223] CPU: 1 UID: 0 PID: 11223 Comm: syz.4.1288 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.039858][T11223] Tainted: [L]=SOFTLOCKUP [ 502.039864][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.039874][T11223] Call Trace: [ 502.039879][T11223] [ 502.039886][T11223] dump_stack_lvl+0x100/0x190 [ 502.039912][T11223] should_fail_ex.cold+0x5/0xa [ 502.039943][T11223] _copy_from_user+0x2e/0xd0 [ 502.039966][T11223] copy_mount_options+0x76/0x190 [ 502.039986][T11223] __x64_sys_mount+0x1ab/0x310 [ 502.040012][T11223] ? __pfx___x64_sys_mount+0x10/0x10 [ 502.040041][T11223] ? rcu_is_watching+0x12/0xc0 [ 502.040070][T11223] do_syscall_64+0x115/0x870 [ 502.040092][T11223] ? clear_bhb_loop+0x40/0x90 [ 502.040113][T11223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.040131][T11223] RIP: 0033:0x7fa40439ce59 [ 502.040146][T11223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.040162][T11223] RSP: 002b:00007fa405215028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 502.040179][T11223] RAX: ffffffffffffffda RBX: 00007fa404615fa0 RCX: 00007fa40439ce59 [ 502.040190][T11223] RDX: 0000200000000180 RSI: 0000200000000300 RDI: 0000000000000000 [ 502.040201][T11223] RBP: 00007fa405215090 R08: 0000200000000340 R09: 0000000000000000 [ 502.040211][T11223] R10: 0000000002004890 R11: 0000000000000246 R12: 0000000000000001 [ 502.040221][T11223] R13: 00007fa404616038 R14: 00007fa404615fa0 R15: 00007fff3afed798 [ 502.040244][T11223] [ 502.044154][T11220] Dev loop5: unable to read RDB block 7 [ 502.213266][T11220] loop5: AHDI p1 [ 502.221749][T11220] loop5: partition table partially beyond EOD, truncated [ 502.261871][ T30] audit: type=1400 audit(1780089629.962:881): avc: denied { read } for pid=11225 comm="syz.4.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 502.670021][T11240] ipvlan2: entered allmulticast mode [ 502.675380][T11240] batadv_slave_1: entered allmulticast mode [ 502.692472][T11240] batman_adv: batadv0: Adding interface: ipvlan2 [ 502.698862][T11240] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.724247][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.735052][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.745167][T11240] batman_adv: batadv0: Interface activated: ipvlan2 [ 503.762330][ T10] IPVS: starting estimator thread 0... [ 503.890320][T11254] IPVS: using max 47 ests per chain, 112800 per kthread [ 504.045544][T11258] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 504.065253][ T76] Bluetooth: hci4: Frame reassembly failed (-84) [ 506.246480][ T5625] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 506.260672][T10186] Bluetooth: hci4: command 0x1003 tx timeout [ 506.750142][T11277] Cannot find set identified by id 0 to match [ 507.462373][T11289] ipvlan5: entered allmulticast mode [ 507.473742][T11289] batman_adv: batadv0: Adding interface: ipvlan5 [ 507.480180][T11289] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.505552][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.516062][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.525967][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 507.535832][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.545987][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 507.556061][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.586822][T11289] batman_adv: batadv0: Interface activated: ipvlan5 [ 508.036841][T11297] FAULT_INJECTION: forcing a failure. [ 508.036841][T11297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.050343][T11297] CPU: 0 UID: 0 PID: 11297 Comm: syz.4.1308 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.050373][T11297] Tainted: [L]=SOFTLOCKUP [ 508.050379][T11297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 508.050388][T11297] Call Trace: [ 508.050394][T11297] [ 508.050401][T11297] dump_stack_lvl+0x100/0x190 [ 508.050427][T11297] should_fail_ex.cold+0x5/0xa [ 508.050452][T11297] _copy_from_user+0x2e/0xd0 [ 508.050475][T11297] kstrtouint_from_user+0xd6/0x1d0 [ 508.050502][T11297] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 508.050527][T11297] ? __lock_acquire+0x4a5/0x2630 [ 508.050559][T11297] ? lock_acquire+0x1b1/0x370 [ 508.050585][T11297] proc_fail_nth_write+0x83/0x220 [ 508.050605][T11297] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 508.050631][T11297] vfs_write+0x2aa/0x1070 [ 508.050657][T11297] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 508.050679][T11297] ? __pfx_vfs_write+0x10/0x10 [ 508.050698][T11297] ? __fget_files+0x215/0x3d0 [ 508.050726][T11297] ? __fget_files+0x21f/0x3d0 [ 508.050755][T11297] ksys_write+0x12a/0x250 [ 508.050774][T11297] ? __pfx_ksys_write+0x10/0x10 [ 508.050795][T11297] ? rcu_is_watching+0x12/0xc0 [ 508.050825][T11297] do_syscall_64+0x115/0x870 [ 508.050847][T11297] ? clear_bhb_loop+0x40/0x90 [ 508.050869][T11297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.050886][T11297] RIP: 0033:0x7fa40435d68e [ 508.050902][T11297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 508.050918][T11297] RSP: 002b:00007fa4051d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 508.050939][T11297] RAX: ffffffffffffffda RBX: 00007fa4051d36c0 RCX: 00007fa40435d68e [ 508.050950][T11297] RDX: 0000000000000001 RSI: 00007fa4051d30a0 RDI: 0000000000000006 [ 508.050960][T11297] RBP: 00007fa4051d3090 R08: 0000000000000000 R09: 0000000000000000 [ 508.050970][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.050980][T11297] R13: 00007fa404616218 R14: 00007fa404616180 R15: 00007fff3afed798 [ 508.051003][T11297] [ 508.390995][T11305] FAULT_INJECTION: forcing a failure. [ 508.390995][T11305] name failslab, interval 1, probability 0, space 0, times 0 [ 508.403847][T11305] CPU: 0 UID: 0 PID: 11305 Comm: syz.1.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.403874][T11305] Tainted: [L]=SOFTLOCKUP [ 508.403881][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 508.403891][T11305] Call Trace: [ 508.403897][T11305] [ 508.403903][T11305] dump_stack_lvl+0x100/0x190 [ 508.403928][T11305] should_fail_ex.cold+0x5/0xa [ 508.403954][T11305] should_failslab+0xc2/0x120 [ 508.403975][T11305] __kmalloc_cache_noprof+0x7a/0x6f0 [ 508.403999][T11305] ? p9_fd_create+0x163/0x460 [ 508.404022][T11305] p9_fd_create+0x163/0x460 [ 508.404042][T11305] p9_client_create+0x563/0xd40 [ 508.404068][T11305] ? __pfx_p9_client_create+0x10/0x10 [ 508.404099][T11305] ? lockdep_init_map_type+0x5c/0x250 [ 508.404124][T11305] ? __raw_spin_lock_init+0x3a/0x110 [ 508.404153][T11305] v9fs_session_init+0x3c/0xd20 [ 508.404180][T11305] ? kasan_save_track+0x14/0x30 [ 508.404199][T11305] v9fs_get_tree+0xb8/0xb50 [ 508.404214][T11305] ? rcu_is_watching+0x12/0xc0 [ 508.404240][T11305] ? __pfx_v9fs_get_tree+0x10/0x10 [ 508.404260][T11305] ? bpf_lsm_capable+0x9/0x10 [ 508.404278][T11305] ? security_capable+0x80/0x260 [ 508.404302][T11305] vfs_get_tree+0x92/0x320 [ 508.404321][T11305] path_mount+0x7d0/0x23d0 [ 508.404357][T11305] ? __pfx_path_mount+0x10/0x10 [ 508.404382][T11305] ? lockdep_hardirqs_on+0x78/0x100 [ 508.404406][T11305] ? putname+0xb1/0x110 [ 508.404428][T11305] ? kmem_cache_free+0x127/0x6c0 [ 508.404461][T11305] ? __x64_sys_mount+0x293/0x310 [ 508.404484][T11305] __x64_sys_mount+0x293/0x310 [ 508.404510][T11305] ? __pfx___x64_sys_mount+0x10/0x10 [ 508.404536][T11305] ? rcu_is_watching+0x12/0xc0 [ 508.404563][T11305] do_syscall_64+0x115/0x870 [ 508.404583][T11305] ? clear_bhb_loop+0x40/0x90 [ 508.404604][T11305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.404622][T11305] RIP: 0033:0x7f5f4cb9ce59 [ 508.404637][T11305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.404653][T11305] RSP: 002b:00007f5f4d9c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 508.404670][T11305] RAX: ffffffffffffffda RBX: 00007f5f4ce15fa0 RCX: 00007f5f4cb9ce59 [ 508.404681][T11305] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 508.404692][T11305] RBP: 00007f5f4d9c3090 R08: 0000200000000040 R09: 0000000000000000 [ 508.404702][T11305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 508.404713][T11305] R13: 00007f5f4ce16038 R14: 00007f5f4ce15fa0 R15: 00007fffa3631f68 [ 508.404737][T11305] [ 509.382104][T11311] ipvlan3: entered allmulticast mode [ 509.390119][T11311] batman_adv: batadv0: Adding interface: ipvlan3 [ 509.396523][T11311] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.422350][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.432822][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.442683][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 509.452566][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.462413][T11311] batman_adv: batadv0: Interface activated: ipvlan3 [ 510.959642][T11325] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 512.411910][T11342] bridge_slave_0: left allmulticast mode [ 512.425219][T11342] bridge_slave_0: left promiscuous mode [ 512.435455][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.447151][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1322'. [ 512.459763][T11342] bridge_slave_1: left allmulticast mode [ 512.465523][T11342] bridge_slave_1: left promiscuous mode [ 512.471809][T11342] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.497396][T11342] team0: Port device team_slave_0 removed [ 512.539822][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 512.548581][T11342] team0: Port device team_slave_1 removed [ 512.582738][T11342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.591389][T11342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.619421][T11342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.628402][T11342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.720829][T11342] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 512.856825][ T10] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 512.957710][ T10] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 513.040956][T11345] ipvlan2: entered allmulticast mode [ 513.046300][T11345] batadv_slave_1: entered allmulticast mode [ 513.053793][T11345] batman_adv: batadv0: Adding interface: ipvlan2 [ 513.060159][T11345] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.085522][T11345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.096239][T11345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.103970][ T10] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 513.106246][T11345] batman_adv: batadv0: Interface activated: ipvlan2 [ 513.116615][T10186] Bluetooth: hci4: command 0x1003 tx timeout [ 513.124107][ T5625] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 513.132902][ T10] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 513.181669][ T10] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 513.216645][ T10] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 513.234080][ T10] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 513.249131][ T10] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 513.261941][ T10] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 513.279783][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 513.303080][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.314813][ T10] usb 2-1: Product: syz [ 513.320305][ T10] usb 2-1: Manufacturer: syz [ 513.325581][ T10] usb 2-1: SerialNumber: syz [ 513.346882][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 513.529227][ T9954] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 513.676509][T11365] vlan2: entered promiscuous mode [ 513.691392][T11365] hsr0: entered promiscuous mode [ 513.712404][T11365] vlan2: entered allmulticast mode [ 513.748551][T11365] hsr0: entered allmulticast mode [ 513.911577][T11365] hsr_slave_0: entered allmulticast mode [ 513.932002][T11365] hsr_slave_1: entered allmulticast mode [ 514.789701][ T9954] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 514.960645][ T9954] ath9k_htc: Failed to initialize the device [ 515.319007][ T9954] usb 2-1: ath9k_htc: USB layer deinitialized [ 515.617546][ T10] usb 2-1: USB disconnect, device number 48 [ 516.333164][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1332'. [ 516.651510][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 516.817868][T11395] ipvlan4: entered allmulticast mode [ 516.831729][T11395] batman_adv: batadv0: Adding interface: ipvlan4 [ 516.838157][T11395] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.863841][T11395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 516.873925][T11395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.883897][T11395] batman_adv: batadv0: Interface activated: ipvlan4 [ 517.132664][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 517.144506][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 517.157954][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.174347][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 517.189063][ T10] pvrusb2: ********** [ 517.194915][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 517.205269][ T10] pvrusb2: Important functionality might not be entirely working. [ 517.213600][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 517.225625][ T10] pvrusb2: ********** [ 517.397841][ T2363] pvrusb2: Invalid write control endpoint [ 518.041114][T11405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1337'. [ 518.258373][T11402] wg1 speed is unknown, defaulting to 1000 [ 518.318351][ T2363] pvrusb2: Invalid write control endpoint [ 518.345005][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 518.354962][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 518.382249][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 518.393299][ T2363] pvrusb2: Device being rendered inoperable [ 518.404473][T11411] netlink: 'syz.0.1333': attribute type 21 has an invalid length. [ 518.416060][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 518.822588][T11411] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1333'. [ 518.825796][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 518.905412][ T2363] pvrusb2: Attached sub-driver cx25840 [ 518.915774][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 518.926535][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 519.082204][ T5719] usb 1-1: USB disconnect, device number 41 [ 519.428716][T11415] ipvlan3: entered allmulticast mode [ 519.435912][T11415] batman_adv: batadv0: Adding interface: ipvlan3 [ 519.442447][T11415] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.467776][T11415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.478570][T11415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.488427][T11415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 519.498259][T11415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.508106][T11415] batman_adv: batadv0: Interface activated: ipvlan3 [ 519.544482][T11417] ipvlan5: entered allmulticast mode [ 519.551628][T11417] batman_adv: batadv0: Adding interface: ipvlan5 [ 519.558006][T11417] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.583374][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 519.593732][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.603572][T11417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 519.613424][T11417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.623286][T11417] batman_adv: batadv0: Interface activated: ipvlan5 [ 520.018920][T11427] netem: change failed [ 522.240378][ T30] audit: type=1400 audit(1780089648.654:882): avc: denied { setopt } for pid=11434 comm="syz.4.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 522.410375][T11439] Cannot find set identified by id 0 to match [ 523.000718][T11448] ipvlan4: entered allmulticast mode [ 523.008440][T11448] batman_adv: batadv0: Adding interface: ipvlan4 [ 523.014858][T11448] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.040322][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.051256][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.061132][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 523.071026][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.080896][T11448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 523.090758][T11448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.312548][T11451] trusted_key: encrypted_key: insufficient parameters specified [ 523.321500][T11451] trusted_key: encrypted_key: keylen parameter is missing [ 523.353670][T11451] netlink: 'syz.2.1349': attribute type 40 has an invalid length. [ 523.730511][T11448] batman_adv: batadv0: Interface activated: ipvlan4 [ 524.329185][T11461] tipc: Started in network mode [ 524.334376][T11461] tipc: Node identity caf1a730e74a, cluster identity 4711 [ 524.343437][T11461] tipc: Enabled bearer , priority 0 [ 524.703516][T11464] syzkaller0: entered promiscuous mode [ 524.709278][T11464] syzkaller0: entered allmulticast mode [ 524.728327][T11460] tipc: Resetting bearer [ 524.811548][T11460] tipc: Disabling bearer [ 524.832057][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 525.973650][ T30] audit: type=1400 audit(1780089652.097:883): avc: denied { bind } for pid=11474 comm="syz.6.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 526.114187][T11484] ipvlan6: entered allmulticast mode [ 526.121331][T11484] batman_adv: batadv0: Adding interface: ipvlan6 [ 526.127773][T11484] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.153177][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.163663][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.173669][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 526.183542][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.193421][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 526.203325][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.213196][T11484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 526.223180][T11484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.233138][T11484] batman_adv: batadv0: Interface activated: ipvlan6 [ 526.741778][ T30] audit: type=1400 audit(1780089652.854:884): avc: denied { accept } for pid=11485 comm="syz.4.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 526.850998][ T30] audit: type=1400 audit(1780089652.948:885): avc: denied { wake_alarm } for pid=11490 comm="syz.1.1359" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 526.988700][T11493] FAULT_INJECTION: forcing a failure. [ 526.988700][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.992738][T11494] No such timeout policy "syz1" [ 527.006917][T11493] CPU: 0 UID: 0 PID: 11493 Comm: syz.1.1359 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.006943][T11493] Tainted: [L]=SOFTLOCKUP [ 527.006948][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.006957][T11493] Call Trace: [ 527.006962][T11493] [ 527.006969][T11493] dump_stack_lvl+0x100/0x190 [ 527.006995][T11493] should_fail_ex.cold+0x5/0xa [ 527.007020][T11493] _copy_from_user+0x2e/0xd0 [ 527.007042][T11493] do_fcntl+0xf0c/0x1670 [ 527.007071][T11493] ? __pfx_do_fcntl+0x10/0x10 [ 527.007103][T11493] ? selinux_file_fcntl+0xea/0x170 [ 527.007132][T11493] __x64_sys_fcntl+0x163/0x200 [ 527.007162][T11493] do_syscall_64+0x115/0x870 [ 527.007185][T11493] ? clear_bhb_loop+0x40/0x90 [ 527.007206][T11493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.007224][T11493] RIP: 0033:0x7f5f4cb9ce59 [ 527.007239][T11493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.007256][T11493] RSP: 002b:00007f5f4d9a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 527.007273][T11493] RAX: ffffffffffffffda RBX: 00007f5f4ce16090 RCX: 00007f5f4cb9ce59 [ 527.007283][T11493] RDX: 0000200000000100 RSI: 0000000000000025 RDI: 0000000000000009 [ 527.007296][T11493] RBP: 00007f5f4d9a2090 R08: 0000000000000000 R09: 0000000000000000 [ 527.007305][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.007314][T11493] R13: 00007f5f4ce16128 R14: 00007f5f4ce16090 R15: 00007fffa3631f68 [ 527.007334][T11493] [ 527.817573][T11503] ipvlan4: entered allmulticast mode [ 527.830239][T11503] batman_adv: batadv0: Adding interface: ipvlan4 [ 527.836663][T11503] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.862094][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.872580][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.882472][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 527.892376][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.902221][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 527.912403][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.922473][T11503] batman_adv: batadv0: Interface activated: ipvlan4 [ 528.374925][T11511] trusted_key: encrypted_key: insufficient parameters specified [ 528.384165][T11511] trusted_key: encrypted_key: keylen parameter is missing [ 528.394832][T11511] netlink: 'syz.4.1364': attribute type 40 has an invalid length. [ 528.785056][T11510] set match dimension is over the limit! [ 529.936086][T11525] set match dimension is over the limit! [ 530.807814][T11531] ipvlan5: entered allmulticast mode [ 530.820011][T11531] batman_adv: batadv0: Adding interface: ipvlan5 [ 530.826419][T11531] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.851835][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.862609][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.872815][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 530.882680][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.892551][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 530.902427][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.912313][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 530.922552][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.932422][T11531] batman_adv: batadv0: Interface activated: ipvlan5 [ 531.067044][T11533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1370'. [ 535.867348][T11560] ipvlan3: entered allmulticast mode [ 535.877368][T11560] batman_adv: batadv0: Adding interface: ipvlan3 [ 535.883801][T11560] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.909593][T11560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.920407][T11560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.930261][T11560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 535.940144][T11560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.950049][T11560] batman_adv: batadv0: Interface activated: ipvlan3 [ 536.234716][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 536.286595][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1377'. [ 536.459169][T11569] FAULT_INJECTION: forcing a failure. [ 536.459169][T11569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.472367][T11569] CPU: 1 UID: 0 PID: 11569 Comm: syz.4.1378 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.472394][T11569] Tainted: [L]=SOFTLOCKUP [ 536.472400][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.472411][T11569] Call Trace: [ 536.472417][T11569] [ 536.472424][T11569] dump_stack_lvl+0x100/0x190 [ 536.472449][T11569] should_fail_ex.cold+0x5/0xa [ 536.472474][T11569] _copy_to_user+0x32/0xd0 [ 536.472497][T11569] simple_read_from_buffer+0xcb/0x170 [ 536.472522][T11569] proc_fail_nth_read+0x1af/0x230 [ 536.472542][T11569] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.472563][T11569] ? rw_verify_area+0xce/0x6d0 [ 536.472580][T11569] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.472599][T11569] vfs_read+0x1e4/0xb30 [ 536.472621][T11569] ? __pfx_vfs_read+0x10/0x10 [ 536.472641][T11569] ? __fget_files+0x215/0x3d0 [ 536.472671][T11569] ? __fget_files+0x21f/0x3d0 [ 536.472700][T11569] ksys_read+0x12a/0x250 [ 536.472720][T11569] ? __pfx_ksys_read+0x10/0x10 [ 536.472742][T11569] ? rcu_is_watching+0x12/0xc0 [ 536.472771][T11569] do_syscall_64+0x115/0x870 [ 536.472794][T11569] ? clear_bhb_loop+0x40/0x90 [ 536.472816][T11569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.472834][T11569] RIP: 0033:0x7fa40435d68e [ 536.472849][T11569] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 536.472866][T11569] RSP: 002b:00007fa4051d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.472883][T11569] RAX: ffffffffffffffda RBX: 00007fa4051d36c0 RCX: 00007fa40435d68e [ 536.472894][T11569] RDX: 000000000000000f RSI: 00007fa4051d30a0 RDI: 000000000000000d [ 536.472904][T11569] RBP: 00007fa4051d3090 R08: 0000000000000000 R09: 0000000000000000 [ 536.472914][T11569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.472924][T11569] R13: 00007fa404616218 R14: 00007fa404616180 R15: 00007fff3afed798 [ 536.472948][T11569] [ 536.767460][ T9] usb 2-1: device descriptor read/64, error -71 [ 536.943817][T11568] ipvlan5: entered allmulticast mode [ 537.028174][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 537.175007][ T9] usb 2-1: device descriptor read/64, error -71 [ 537.293202][ T9] usb usb2-port1: attempt power cycle [ 537.356849][ T9954] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 537.557916][T11583] ipvlan5: entered allmulticast mode [ 537.570130][T11583] batman_adv: batadv0: Adding interface: ipvlan5 [ 537.576555][T11583] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.601920][T11583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.612382][T11583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.622228][T11583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 537.632105][T11583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.642008][T11583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 537.652494][T11583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.662548][T11583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 537.672401][T11583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.682249][T11583] batman_adv: batadv0: Interface activated: ipvlan5 [ 537.773586][ T9954] usb 1-1: Using ep0 maxpacket: 8 [ 537.781555][ T9954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 537.793840][ T9954] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.816355][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 537.823969][ T9954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 537.836841][ T9954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.852833][ T9] usb 2-1: device descriptor read/8, error -71 [ 537.864032][ T9954] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 537.873942][ T9954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.884301][ T9954] usb 1-1: Product: syz [ 537.888527][ T9954] usb 1-1: Manufacturer: syz [ 537.894807][ T9954] usb 1-1: SerialNumber: syz [ 537.902568][ T9954] usb 1-1: config 0 descriptor?? [ 537.931142][T11575] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 538.116574][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 538.159168][ T9] usb 2-1: device descriptor read/8, error -71 [ 538.268702][ T9954] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 538.291973][ T9954] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input36 [ 538.303063][ T9] usb usb2-port1: unable to enumerate USB device [ 538.408062][ T30] audit: type=1400 audit(1780089663.781:886): avc: denied { watch } for pid=11585 comm="syz.2.1383" path="/proc/972/fd" dev="proc" ino=42335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 538.517206][T11575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.574136][T11575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.658682][T11575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.702261][T11575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.353289][ C0] powermate: config urb returned -71 [ 539.355185][ T5719] usb 1-1: USB disconnect, device number 42 [ 539.358641][ C0] powermate: usb_submit_urb(config) failed [ 539.358861][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 539.489448][ T30] audit: type=1400 audit(1780089664.792:887): avc: denied { read } for pid=11596 comm="syz.1.1388" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 539.555314][ T30] audit: type=1400 audit(1780089664.792:888): avc: denied { open } for pid=11596 comm="syz.1.1388" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 539.584262][ T30] audit: type=1400 audit(1780089664.792:889): avc: denied { ioctl } for pid=11596 comm="syz.1.1388" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 539.719204][T11604] set match dimension is over the limit! [ 540.592774][T11616] ipvlan6: entered allmulticast mode [ 540.605702][T11616] batman_adv: batadv0: Adding interface: ipvlan6 [ 540.612127][T11616] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.637502][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 540.647371][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.657625][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 540.667710][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.701998][T11616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 540.712234][T11616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.722323][T11616] batman_adv: batadv0: Interface activated: ipvlan6 [ 540.785258][ T5719] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 541.055381][ T5719] usb 1-1: Using ep0 maxpacket: 8 [ 541.074948][ T5719] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 542.007456][ T5719] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.028262][ T5719] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 542.082218][T11625] ipvlan7: entered allmulticast mode [ 542.089077][T11625] batman_adv: batadv0: Adding interface: ipvlan7 [ 542.095443][T11625] batman_adv: batadv0: The MTU of interface ipvlan7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.121754][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.132359][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.142945][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 542.152952][T11623] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1394'. [ 542.162164][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.172134][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 542.183437][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.194015][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 542.203901][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.206365][ T5719] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 542.214580][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 542.224020][ T5719] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.224064][ T5719] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 542.234381][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.247445][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.256141][T11625] batman_adv: batadv0: Interface activated: ipvlan7 [ 542.551946][ T5719] usb 1-1: usb_control_msg returned -32 [ 542.559760][ T30] audit: type=1400 audit(1780089667.664:890): avc: denied { create } for pid=11606 comm="syz.0.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 542.577066][ T5719] usbtmc 1-1:16.0: can't read capabilities [ 542.680561][ T30] audit: type=1400 audit(1780089667.664:891): avc: denied { write } for pid=11606 comm="syz.0.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 543.436338][T11634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.459787][T11634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.502639][T11640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.516308][T11640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.770843][ T5712] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 543.973546][ T5712] usb 5-1: Using ep0 maxpacket: 8 [ 543.999898][ T5712] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 544.046049][ T5712] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.098840][ T5712] usb 5-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice= 0.40 [ 544.136103][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.150700][ T5712] usb 5-1: Product: syz [ 544.161893][ T5712] usb 5-1: Manufacturer: syz [ 544.174682][ T5712] usb 5-1: SerialNumber: syz [ 544.181854][ T30] audit: type=1400 audit(1780089669.179:892): avc: denied { bind } for pid=11650 comm="syz.1.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 544.438311][ T5712] usb 5-1: skipping empty audio interface (v1) [ 544.595112][ T5712] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 544.604903][ T5712] usb 5-1: selecting invalid altsetting 1 [ 544.612255][ T5712] snd-usb-caiaq 5-1:1.0: can't set alt interface. [ 544.619340][ T5712] usb 5-1: unable to init card! (ret=-5) [ 544.625292][ T5712] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 544.677593][ T5712] usb 5-1: USB disconnect, device number 70 [ 544.733324][T11661] ipvlan6: entered allmulticast mode [ 544.745701][T11661] batman_adv: batadv0: Adding interface: ipvlan6 [ 544.752072][T11661] batman_adv: batadv0: The MTU of interface ipvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.777762][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.788506][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.798397][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 544.808419][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.818295][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 544.828133][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.837998][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 544.874546][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.884436][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 544.894301][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.904237][T11661] batman_adv: batadv0: Interface activated: ipvlan6 [ 544.943706][ T6238] udevd[6238]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.962513][ T9954] usb 1-1: USB disconnect, device number 43 [ 545.386042][T11668] ipvlan4: entered allmulticast mode [ 545.396117][T11668] batman_adv: batadv0: Adding interface: ipvlan4 [ 545.402483][T11668] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.428162][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.439455][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.449354][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 545.459365][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.469191][T11668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 545.479036][T11668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.488911][T11668] batman_adv: batadv0: Interface activated: ipvlan4 [ 547.191640][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 547.192370][ T5712] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 547.470307][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.494027][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.532657][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 547.566675][ T5712] usb 5-1: Using ep0 maxpacket: 32 [ 547.591253][ T5712] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 547.614926][ T5712] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 547.645939][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 547.651229][ T5712] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 547.686784][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.991965][ T9] usb 1-1: config 0 descriptor?? [ 548.011226][ T30] audit: type=1400 audit(1780089672.528:893): avc: denied { create } for pid=11684 comm="syz.6.1414" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 548.020403][ T5712] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 548.090779][ T30] audit: type=1400 audit(1780089672.538:894): avc: denied { mounton } for pid=11684 comm="syz.6.1414" path="/40/file0" dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 548.131340][ T5712] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 548.324684][T11692] netlink: 'syz.2.1415': attribute type 28 has an invalid length. [ 548.332686][T11692] netlink: 'syz.2.1415': attribute type 29 has an invalid length. [ 548.340646][T11692] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1415'. [ 548.521447][ T5712] usb 5-1: config 0 interface 0 has no altsetting 0 [ 548.544997][ T5712] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 548.566499][ T5712] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 548.597394][ T5712] usb 5-1: Product: syz [ 548.607321][ T5712] usb 5-1: Manufacturer: syz [ 548.634701][ T5712] usb 5-1: SerialNumber: syz [ 548.668132][ T5712] usb 5-1: config 0 descriptor?? [ 548.685750][ T5712] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 548.712013][ T9] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 548.729837][ T5712] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 549.060105][T11701] ipvlan7: entered allmulticast mode [ 549.075275][T11701] batman_adv: batadv0: Adding interface: ipvlan7 [ 549.081647][T11701] batman_adv: batadv0: The MTU of interface ipvlan7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.107043][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.118098][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.127981][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 549.137846][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.147984][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 549.183720][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.193614][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 549.203939][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.213776][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 549.223627][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.233848][T11701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 549.243956][T11701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.254209][T11701] batman_adv: batadv0: Interface activated: ipvlan7 [ 549.471749][ T9954] usb 5-1: USB disconnect, device number 71 [ 549.624910][ T30] audit: type=1400 audit(1780089674.250:895): avc: denied { create } for pid=11706 comm="syz.1.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 550.092285][ C0] plantronics 0003:047F:FFFF.0022: usb_submit_urb(ctrl) failed: -1 [ 550.241956][ T9954] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 550.248594][ T9] usb 1-1: reset high-speed USB device number 44 using dummy_hcd [ 550.424931][ T9] usb 1-1: device descriptor read/64, error -32 [ 550.943065][ T5712] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 551.126097][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 551.155440][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 551.193435][ T5712] usb 2-1: New USB device found, idVendor=047f, idProduct=ff02, bcdDevice=81.05 [ 551.220341][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.252577][ T5712] usb 2-1: config 0 descriptor?? [ 551.274566][ T5712] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 551.447462][ T5726] usb 1-1: USB disconnect, device number 44 [ 551.961314][T11743] hugetlbfs: syz.2.1427 (11743): Using mlock ulimits for SHM_HUGETLB is obsolete [ 552.439343][ T5712] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 552.623069][ T5712] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 552.639492][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.719995][ T5712] usb 5-1: config 0 descriptor?? [ 552.760482][ T5712] pwc: Samsung MPC-C10 USB webcam detected. [ 552.782045][T11745] tipc: Enabled bearer , priority 0 [ 552.808271][T11745] syzkaller0: entered promiscuous mode [ 552.823638][T11745] syzkaller0: entered allmulticast mode [ 552.850957][T11745] loop5: detected capacity change from 0 to 7 [ 552.865591][T11745] Dev loop5: unable to read RDB block 7 [ 552.877335][T11745] loop5: AHDI p1 [ 552.887326][T11745] loop5: partition table partially beyond EOD, truncated [ 552.907831][T11744] tipc: Resetting bearer [ 552.970196][ T5712] pwc: send_video_command error -71 [ 552.985705][ T5712] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 552.986373][T11744] tipc: Disabling bearer [ 553.000082][ T5712] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 553.031899][ T5712] usb 5-1: USB disconnect, device number 72 [ 553.558766][T11751] ipvlan8: entered allmulticast mode [ 553.571383][T11751] batman_adv: batadv0: Adding interface: ipvlan8 [ 553.577804][T11751] batman_adv: batadv0: The MTU of interface ipvlan8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.603169][T11751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.613638][T11751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.623487][T11751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 553.633659][T11751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.669012][T11751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 553.678886][T11751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.688742][T11751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 553.698586][T11751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.708442][T11751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 553.718302][T11751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.728208][T11751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 553.738596][T11751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.748453][T11751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 553.758281][T11751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.768101][T11751] batman_adv: batadv0: Interface activated: ipvlan8 [ 553.850431][ T5712] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 553.911542][ T5740] usb 2-1: USB disconnect, device number 53 [ 554.000126][ T5712] usb 5-1: device descriptor read/64, error -71 [ 554.058560][T11755] set match dimension is over the limit! [ 554.256723][ T5712] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 554.321142][T11757] --map-set only usable from mangle table [ 554.362330][T11759] loop8: detected capacity change from 0 to 7 [ 554.381339][T11759] Dev loop8: unable to read RDB block 7 [ 554.392292][T11759] loop8: unable to read partition table [ 554.398638][T11759] loop8: partition table beyond EOD, truncated [ 554.406181][T11759] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 554.427649][ T5712] usb 5-1: device descriptor read/64, error -71 [ 554.482872][ T30] audit: type=1400 audit(1780089678.824:896): avc: denied { mount } for pid=11756 comm="syz.2.1433" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 554.556214][ T5712] usb usb5-port1: attempt power cycle [ 554.923715][ T30] audit: type=1400 audit(1780089679.236:897): avc: denied { accept } for pid=11763 comm="syz.6.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 554.956429][ T5712] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 555.035679][ T5712] usb 5-1: device descriptor read/8, error -71 [ 555.945422][ T5719] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 556.129420][ T5719] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 556.150353][ T5719] usb 2-1: config 0 has no interface number 1 [ 556.166401][ T5719] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 556.200118][ T5719] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 556.241117][ T5719] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 556.268555][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 556.302330][ T5719] usb 2-1: SerialNumber: syz [ 556.377857][ T5719] usb 2-1: config 0 descriptor?? [ 556.488658][ T5719] uvcvideo 2-1:0.199: Found UVC 0.00 device (0002:0000) [ 556.515621][ T5719] uvcvideo 2-1:0.199: No valid video chain found. [ 556.672705][T11770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.708551][T11784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.736246][T11770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.775924][T11784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.092682][T11784] SELinux: ebitmap: empty map [ 557.201160][T11784] SELinux: failed to load policy [ 557.278966][T11786] SELinux: failed to load policy [ 558.182048][ T5719] usb 2-1: USB disconnect, device number 54 [ 558.269071][ T30] audit: type=1400 audit(1780089682.360:898): avc: denied { map } for pid=11791 comm="syz.0.1444" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 558.496833][T11800] ipvlan8: entered allmulticast mode [ 558.509424][T11800] batman_adv: batadv0: Adding interface: ipvlan8 [ 558.515910][T11800] batman_adv: batadv0: The MTU of interface ipvlan8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.541321][T11800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.552095][T11800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.562134][T11800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 558.571992][T11800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.581842][T11800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 558.617214][T11800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.627095][T11800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 558.636940][T11800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.646783][T11800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan6 [ 558.656641][T11800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.666826][T11800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan7 [ 558.676912][T11800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.686754][T11800] batman_adv: batadv0: Interface activated: ipvlan8 [ 560.661938][ T29] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 560.669910][ T5719] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 560.820688][ T5719] usb 2-1: device descriptor read/64, error -71 [ 560.843997][ T29] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 560.853644][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.864579][ T29] usb 5-1: config 0 has no interface number 0 [ 560.873729][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 560.882948][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.891346][ T29] usb 5-1: Product: syz [ 560.896345][ T29] usb 5-1: Manufacturer: syz [ 560.901118][ T29] usb 5-1: SerialNumber: syz [ 560.913305][ T29] usb 5-1: config 0 descriptor?? [ 560.922430][ T29] ims_pcu 5-1:0.41: Missing CDC union descriptor [ 560.928996][ T29] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 561.076766][ T5719] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 561.223314][ T5719] usb 2-1: device descriptor read/64, error -71 [ 561.243821][T11849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1457'. [ 561.536549][ T5719] usb usb2-port1: attempt power cycle [ 562.578320][ T5740] usb 5-1: USB disconnect, device number 77 [ 562.705735][T11859] siw: device registration error -23 [ 562.750470][ T30] audit: type=1400 audit(1780089686.552:899): avc: denied { relabelfrom } for pid=11858 comm="syz.0.1461" name="NETLINK" dev="sockfs" ino=42979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 562.751186][T11859] SELinux: Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped). [ 562.800092][ T29] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 562.864348][ T30] audit: type=1400 audit(1780089686.664:900): avc: denied { relabelto } for pid=11858 comm="syz.0.1461" name="NETLINK" dev="sockfs" ino=42979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:printer_device_t:s0" [ 562.901678][ T5719] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 562.929673][T11866] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 562.936352][T11866] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 562.945540][T11866] vhci_hcd vhci_hcd.0: Device attached [ 562.994426][T11870] smc: removing ib device syz2 [ 563.002549][ T29] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 563.024422][T11870] smbdirect: ib_dev[syz2] removed [ 563.515013][T11870] ------------[ cut here ]------------ [ 563.520485][T11870] !xa_empty(&pool->xa) [ 563.520493][T11870] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.4.1465/11870 [ 563.535936][T11870] Modules linked in: [ 563.540051][T11870] CPU: 0 UID: 0 PID: 11870 Comm: syz.4.1465 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.550991][T11870] Tainted: [L]=SOFTLOCKUP [ 563.555286][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.565352][T11870] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 563.571251][T11870] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 f6 4d 51 f9 5b c3 cc cc cc cc e8 eb 4d 51 f9 90 <0f> 0b 90 e8 e2 4d 51 f9 5b c3 cc cc cc cc e8 f7 30 bf f9 eb d0 0f [ 563.590878][T11870] RSP: 0018:ffffc9000439f160 EFLAGS: 00010246 [ 563.596919][T11870] RAX: 0000000000080000 RBX: ffff88807a565398 RCX: ffffc90006fea000 [ 563.604880][T11870] RDX: 0000000000080000 RSI: ffffffff88b75335 RDI: ffff88807a565418 [ 563.612838][T11870] RBP: ffffffff88b5af20 R08: 0000000000000005 R09: 0000000000000001 [ 563.620943][T11870] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807a564698 [ 563.628964][T11870] R13: ffff88807a563fe0 R14: ffff88807a563fe0 R15: ffff88807a5650f8 [ 563.636927][T11870] FS: 00007fa4052156c0(0000) GS:ffff888124386000(0000) knlGS:0000000000000000 [ 563.645842][T11870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.652450][T11870] CR2: 0000001b33b0fff8 CR3: 0000000078716000 CR4: 00000000003526f0 [ 563.660396][T11870] Call Trace: [ 563.663662][T11870] [ 563.666568][T11870] rxe_dealloc+0x25/0xc0 [ 563.670796][T11870] ib_dealloc_device+0x49/0x230 [ 563.675651][T11870] __ib_unregister_device+0x396/0x480 [ 563.681022][T11870] ib_unregister_device_and_put+0x5a/0x80 [ 563.686744][T11870] nldev_dellink+0x308/0x430 [ 563.691312][T11870] ? __pfx_nldev_dellink+0x10/0x10 [ 563.696423][T11870] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 563.702252][T11870] ? rcu_is_watching+0x12/0xc0 [ 563.707053][T11870] ? cap_capable+0x10b/0x440 [ 563.711650][T11870] ? bpf_lsm_capable+0x9/0x10 [ 563.716305][T11870] ? security_capable+0x80/0x260 [ 563.721239][T11870] ? ns_capable+0xd2/0xf0 [ 563.725556][T11870] ? __pfx_nldev_dellink+0x10/0x10 [ 563.730885][T11870] rdma_nl_rcv_msg+0x392/0x6f0 [ 563.735631][T11870] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 563.740996][T11870] ? __lock_acquire+0x4a5/0x2630 [ 563.745926][T11870] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 563.752361][T11870] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 563.759299][T11870] ? netlink_deliver_tap+0x1ae/0xcc0 [ 563.764562][T11870] netlink_unicast+0x585/0x850 [ 563.769311][T11870] ? __pfx_netlink_unicast+0x10/0x10 [ 563.774620][T11870] netlink_sendmsg+0x8b0/0xda0 [ 563.779372][T11870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.784652][T11870] ? __might_fault+0xa0/0x140 [ 563.789309][T11870] ____sys_sendmsg+0x9e1/0xb70 [ 563.794067][T11870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.799329][T11870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.804616][T11870] ? __pfx_futex_wake_mark+0x10/0x10 [ 563.809882][T11870] ___sys_sendmsg+0x190/0x1e0 [ 563.814582][T11870] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.819772][T11870] __sys_sendmsg+0x170/0x220 [ 563.824839][T11870] ? __pfx___sys_sendmsg+0x10/0x10 [ 563.829951][T11870] ? __x64_sys_futex+0x34f/0x4d0 [ 563.834912][T11870] ? rcu_is_watching+0x12/0xc0 [ 563.839655][T11870] do_syscall_64+0x115/0x870 [ 563.844237][T11870] ? clear_bhb_loop+0x40/0x90 [ 563.848919][T11870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.854783][T11870] RIP: 0033:0x7fa40439ce59 [ 563.859207][T11870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.878848][T11870] RSP: 002b:00007fa405215028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.887244][T11870] RAX: ffffffffffffffda RBX: 00007fa404615fa0 RCX: 00007fa40439ce59 [ 563.895201][T11870] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d [ 563.903173][T11870] RBP: 00007fa404432d6f R08: 0000000000000000 R09: 0000000000000000 [ 563.911573][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.919528][T11870] R13: 00007fa404616038 R14: 00007fa404615fa0 R15: 00007fff3afed798 [ 563.927509][T11870] [ 563.930528][T11870] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 563.937781][T11870] CPU: 0 UID: 0 PID: 11870 Comm: syz.4.1465 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.948684][T11870] Tainted: [L]=SOFTLOCKUP [ 563.952982][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.963005][T11870] Call Trace: [ 563.966256][T11870] [ 563.969170][T11870] dump_stack_lvl+0x100/0x190 [ 563.973823][T11870] vpanic+0x552/0x970 [ 563.977784][T11870] ? __pfx_vpanic+0x10/0x10 [ 563.982260][T11870] panic+0xd1/0xe0 [ 563.985950][T11870] ? __pfx_panic+0x10/0x10 [ 563.990340][T11870] check_panic_on_warn.cold+0x19/0x34 [ 563.995684][T11870] ? rxe_pool_cleanup+0x46/0x60 [ 564.000503][T11870] __warn.cold+0x191/0x328 [ 564.004890][T11870] __report_bug+0x296/0x3d0 [ 564.009366][T11870] ? rxe_pool_cleanup+0x46/0x60 [ 564.014202][T11870] ? __pfx___report_bug+0x10/0x10 [ 564.019199][T11870] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 564.024977][T11870] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 564.030778][T11870] ? __flush_workqueue+0x426/0x1200 [ 564.035946][T11870] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 564.041551][T11870] ? rxe_pool_cleanup+0x46/0x60 [ 564.046375][T11870] report_bug+0xb2/0x220 [ 564.050592][T11870] ? rxe_pool_cleanup+0x46/0x60 [ 564.055411][T11870] handle_bug+0x16a/0x2a0 [ 564.059715][T11870] exc_invalid_op+0x17/0x50 [ 564.064192][T11870] asm_exc_invalid_op+0x1a/0x20 [ 564.069012][T11870] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 564.074440][T11870] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 f6 4d 51 f9 5b c3 cc cc cc cc e8 eb 4d 51 f9 90 <0f> 0b 90 e8 e2 4d 51 f9 5b c3 cc cc cc cc e8 f7 30 bf f9 eb d0 0f [ 564.094016][T11870] RSP: 0018:ffffc9000439f160 EFLAGS: 00010246 [ 564.100051][T11870] RAX: 0000000000080000 RBX: ffff88807a565398 RCX: ffffc90006fea000 [ 564.107991][T11870] RDX: 0000000000080000 RSI: ffffffff88b75335 RDI: ffff88807a565418 [ 564.115932][T11870] RBP: ffffffff88b5af20 R08: 0000000000000005 R09: 0000000000000001 [ 564.123871][T11870] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807a564698 [ 564.131812][T11870] R13: ffff88807a563fe0 R14: ffff88807a563fe0 R15: ffff88807a5650f8 [ 564.139754][T11870] ? __pfx_rxe_dealloc+0x10/0x10 [ 564.144670][T11870] ? rxe_pool_cleanup+0x45/0x60 [ 564.149492][T11870] rxe_dealloc+0x25/0xc0 [ 564.153707][T11870] ib_dealloc_device+0x49/0x230 [ 564.158542][T11870] __ib_unregister_device+0x396/0x480 [ 564.163889][T11870] ib_unregister_device_and_put+0x5a/0x80 [ 564.169579][T11870] nldev_dellink+0x308/0x430 [ 564.174146][T11870] ? __pfx_nldev_dellink+0x10/0x10 [ 564.179229][T11870] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 564.185039][T11870] ? rcu_is_watching+0x12/0xc0 [ 564.189784][T11870] ? cap_capable+0x10b/0x440 [ 564.194354][T11870] ? bpf_lsm_capable+0x9/0x10 [ 564.199001][T11870] ? security_capable+0x80/0x260 [ 564.203911][T11870] ? ns_capable+0xd2/0xf0 [ 564.208216][T11870] ? __pfx_nldev_dellink+0x10/0x10 [ 564.213316][T11870] rdma_nl_rcv_msg+0x392/0x6f0 [ 564.218055][T11870] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 564.223313][T11870] ? __lock_acquire+0x4a5/0x2630 [ 564.228226][T11870] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 564.234616][T11870] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 564.241532][T11870] ? netlink_deliver_tap+0x1ae/0xcc0 [ 564.246792][T11870] netlink_unicast+0x585/0x850 [ 564.251532][T11870] ? __pfx_netlink_unicast+0x10/0x10 [ 564.256792][T11870] netlink_sendmsg+0x8b0/0xda0 [ 564.261530][T11870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.266791][T11870] ? __might_fault+0xa0/0x140 [ 564.271448][T11870] ____sys_sendmsg+0x9e1/0xb70 [ 564.276183][T11870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.281450][T11870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.286708][T11870] ? __pfx_futex_wake_mark+0x10/0x10 [ 564.291965][T11870] ___sys_sendmsg+0x190/0x1e0 [ 564.296614][T11870] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.301798][T11870] __sys_sendmsg+0x170/0x220 [ 564.306363][T11870] ? __pfx___sys_sendmsg+0x10/0x10 [ 564.311457][T11870] ? __x64_sys_futex+0x34f/0x4d0 [ 564.316382][T11870] ? rcu_is_watching+0x12/0xc0 [ 564.321129][T11870] do_syscall_64+0x115/0x870 [ 564.325700][T11870] ? clear_bhb_loop+0x40/0x90 [ 564.330352][T11870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.336225][T11870] RIP: 0033:0x7fa40439ce59 [ 564.340612][T11870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.360198][T11870] RSP: 002b:00007fa405215028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.368589][T11870] RAX: ffffffffffffffda RBX: 00007fa404615fa0 RCX: 00007fa40439ce59 [ 564.376532][T11870] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d [ 564.384472][T11870] RBP: 00007fa404432d6f R08: 0000000000000000 R09: 0000000000000000 [ 564.392411][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.400355][T11870] R13: 00007fa404616038 R14: 00007fa404615fa0 R15: 00007fff3afed798 [ 564.408310][T11870] [ 564.411581][T11870] Kernel Offset: disabled [ 564.415877][T11870] Rebooting in 86400 seconds..