last executing test programs: 8m59.357904991s ago: executing program 2 (id=1929): syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={0x0, 0x0, 0x37, 0x0, 0x1}, 0x28) r1 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2117, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0xd0001, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r4, 0x7ca8e000) io_uring_enter(r1, 0x6f58, 0x0, 0x0, 0x0, 0x0) 8m59.341710081s ago: executing program 2 (id=1932): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/254, 0xfe}], 0x1}}], 0x1, 0x40012001, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8m58.874917821s ago: executing program 2 (id=1935): socket$inet6(0xa, 0x2, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000200)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e20, 0x7f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x200}}, 0x0, 0x0, 0x4c, 0x0, "31147913b33c3a73b15671127ff6f31689cad56b325f545024f1a12f45542d0fffccc86fa580e196d48631b7e928ee1ac1b7c95fea0403b7e2594df579b15de0dec74cafbd20cb332feff5a895e19408"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x0, 0x10001, 0xffff, 0x5, 0x5, 0xfec8, 0x5, 0x7f}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0xa8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0xfffffffc, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x40) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket(0x2, 0x5, 0x0) 8m57.127622734s ago: executing program 2 (id=1938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x1000001, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x10}}, 0x24, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m55.729033253s ago: executing program 2 (id=1944): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 8m55.604982946s ago: executing program 2 (id=1946): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d46705000000000000000000cc00000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_disconnect(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) openat$kvm(0xffffffffffffff9c, 0x0, 0x806400, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r5, 0x0, 0x0, 0x24040011, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff65, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) socket$nl_generic(0x10, 0x3, 0x10) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) 8m40.55651494s ago: executing program 32 (id=1946): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d46705000000000000000000cc00000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_disconnect(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) openat$kvm(0xffffffffffffff9c, 0x0, 0x806400, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r5, 0x0, 0x0, 0x24040011, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff65, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) socket$nl_generic(0x10, 0x3, 0x10) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) 5m42.975220076s ago: executing program 1 (id=2775): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x7) syz_open_dev$video4linux(0x0, 0x691aa76f, 0x101301) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000080)={0x9d, 0x100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x98d4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000040), 0x5f, 0x20004000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000010000800000000000b4a900030e697305c3c0eaa62e8e755c3b0f19cbb5a4008002"], 0xfffffffffffffeec}, 0x1, 0x0, 0x0, 0x20004084}, 0x40000) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 5m41.835603927s ago: executing program 1 (id=2780): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18041}], 0x8}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sendfile(r4, r4, 0x0, 0x200000) 5m40.771247765s ago: executing program 1 (id=2784): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9c) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000010c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x87, 0x3a, '\xaa`W\x99K?\x91)\xaei\x05\x02\x1e7\xc4Y\xcc#\xdch\xc7\xfb6 &\xdaD\xe3dm\x18i\xdb\xb9,\x87Q`\x8b\f\bm\xe4\xb3A\xfe\x9b\xeeo\xa6S\x9d\xcd\xfe@\xa5\xfdB\xa8\xb6\x96\xed\x11n\x10', 0x3a, ',V\x1d\xa7', 0x3a, './file0', 0x3a, [0x50]}, 0x6d) unshare(0x6020400) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x804) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@empty, 0x1b, r5}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000001a40)='cpu.pressure\x00', 0x2, 0x0) read(r7, &(0x7f0000000240)=""/241, 0xf1) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406c256d00000002000001090224000100000000090424d7010300000009210000080122050009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022c080cadc6c88a6f83c"], 0x0}, 0x0) 5m39.728310285s ago: executing program 1 (id=2790): unshare(0x2040400) socket(0x29, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x43) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0443050c"], 0x7) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0, 0x1}, 0xc) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090e0000ff070000fffdffffff000a01000000000000000000000000000000000000000000010006000000000002000100000000000000000c0200006005000500000000000a004e22000000000000000000000000000000000000000100"/111], 0x70}, 0x1, 0x7}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = getpid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="120e9deb10e34d0500b0031002090400f80099a684a3a514f3ee34db7e2693"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x100000000000007, 0x8, 0x3}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2, r4}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) r6 = syz_pidfd_open(r2, 0x0) setns(r6, 0x24020000) prlimit64(0x0, 0xe, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 5m38.415247181s ago: executing program 1 (id=2799): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000), 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 5m36.234917591s ago: executing program 1 (id=2803): lsm_set_self_attr(0x68, 0x0, 0x0, 0x2000) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x7ffc}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) socket$nl_crypto(0x10, 0x3, 0x15) socket$inet(0x2, 0x2, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000002680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090300807000ffdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xe8, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc93a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35c11ac1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x409f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a1a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1853d1d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2325}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6563}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004020}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m35.865173054s ago: executing program 33 (id=2803): lsm_set_self_attr(0x68, 0x0, 0x0, 0x2000) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x7ffc}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) socket$nl_crypto(0x10, 0x3, 0x15) socket$inet(0x2, 0x2, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000002680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090300807000ffdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xe8, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc93a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35c11ac1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x409f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a1a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1853d1d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2325}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6563}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004020}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.291081157s ago: executing program 5 (id=3597): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000004000000dd0000000a0000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00g\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40100) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000700)={'nat\x00', 0x0, 0x0, 0x0, [0x8000, 0x80000001, 0x2, 0x8, 0x81, 0x3], 0x1, &(0x7f0000000640)=[{}], 0x0, [{}]}, 0x88) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x1, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffeff9, 0x2, 0x3, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r8 = socket$netlink(0x10, 0x3, 0x5) preadv(r7, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="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", 0x3c6, 0x6000000000000000, 0x0, 0x0) 10.177168129s ago: executing program 3 (id=3603): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9}]}}, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0xe, 0x5, "5b81349ebf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x9}}) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0xdee7819c4555a45e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r3 = socket(0x6, 0x80805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000004c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x1c) socket$inet6(0xa, 0x800, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0xfffffffe) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f0000000040)=[{0x7, 0x0, 0x3}], 0x1, 0xb2, 0x0, 0x0, 0x0, 0x18}) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98e5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4800000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10000000}, 0x48000) ioprio_get$uid(0x3, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x2, 0x10, 0x4, 0x219}, &(0x7f0000000180)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r5, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r7, 0xda90) 8.550411953s ago: executing program 5 (id=3605): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240), &(0x7f00000003c0)=0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) 8.203812383s ago: executing program 5 (id=3607): unshare(0x6a040000) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x4, 0x2b, 0x20, 0x1f71, 0x3306, 0x1b23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0xe0}}]}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x103180, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'veth1_to_batadv\x00', 0x200}) syz_emit_ethernet(0x4a, &(0x7f0000003140)=ANY=[], 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) socket$inet6_tcp(0xa, 0x1, 0x0) 7.151412472s ago: executing program 6 (id=3609): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0xce23, 0x0, @loopback, 0x3}, 0x1c) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a40)="ec32de2ca833b572025e95ce582885d13f18eddbdd1a1813363d96090100893c87be644cd78472fcee488a7b96a168657bab27d8a89dc55dfae7d85de5e4e6dd89e106389e092a559cf3231d9a4820368b60bc8e7fe356f076d4d4ca762f78a7f2698accb8a260e7c88bfe6b55d6d4f5c569f52a63ebda881be9f9d0c23d4da346f4e805c34c0175125f882b2bfd85673347590bd09629ec217b0c18203b182106edd1d5ca50e8d754d270f8025df2d10d743b13ce87301cded41e15962445f798d288a11ee479e33a6f66508616e331235f2a0ca10261133023d8a0cdd607865e72b2585841dffd69665eec358a2d2920d6638dc5a0c5f84f960f1ec1ad547d9913190b461005f293ba496d76285e83231f74f28908b1c339da6edb2e0a629df3745b0e2accc4807e99f59aec94f4d66cb8ba535c214e9baeec11390497a6f4a2e405abeba7c6b0e88fd0486e094ecb1eda933d0df84026029e40ec072b092d2da3831e00f3f08a5d4f5a2f9307fe8c5bc6cf2900eb1783fd1fed6d816255827d516feb95bcb80b1d7cafc4d800af404ff4908898192e62c0d6ee4a01fdbe3111c65a7e25df8ceebbef49aa277a0d30c6034ef211402abb2c8603a9d83767775b6ceb7e8971a4c3edb289ac9244653dd26ffddde6480fc026265e4776aa0a095c04432e19b28600dc00ab1cc8a80215670364f93b49e70a23c7c21842c1354b3ddbeaac09394e81340f6d82ae04e698fac8ef1166d3187911d9a569ce37b967a03dcfe9cbcf741da23d5cebb268ec88873beac6361138f0b463416f2395c3da46d437bd877581c2b93fb7bdc6a1843d7fd5e06e0256a35bcc8778459b14fe3bfdfc063b70c36a4385986c99158cfc48461a7f6139180727c8f3595c301c44864abf12a7ae73e706cb889b840eeac7d02da52918895b1ab2f2f5d995a9bfde3921562c2e92c36ecb55e3f3889322344991ce55da617cd003c28fb9bfda9f21ff9a51d007947227f3472af1597fad2c2de150974e6964f9bfade6824ce9dfe7ac32bb74c129e7be211faf528a45fc123e51b60f14c4429fa87be918cc58e1ca090338d92f4923203bdd93c0c475349243c078efb93339552c56522503a7f4fc7f6b836a0ef6dfb753e9782a2c80b269dcc7cb4970ec2ce3a4417bde2ac2baef4afa3a934207160fa157124f76fa51bee3b0a962fd5d4c6dd059c95d786b1b1e1e5099e0277f0748371515f4ef6ef998215a72ee90432187a31df4749ba3782af0bda128a92dfd9985c0bd8e45f024f3b03e05136fc9fc0e96f2ddc29f1cb5de6ab4325014c0500b0242c23e479ef78afc14b4943a26d2ea716995d0fbb49c4f61ed15ed55cd52062d531cbe4dc7d82b7cc66a7ad1f2acf52513359873bcd42faa7e503c2c0b216f163c5cab5b4c992037a0c3430dda574a7ff70efa5387042d2404ac3535f351305a98c49340466512910d522beb6f74df4cc1e03c98fcddacedafabf7782ad8fd42dfe0feb8480d32ceef68605056059fdd7a47bfa0d78abbc6e10af96323732dbfa5ed98a7d2c5d0564e5f33cf8cef2132691a2a9137309cfbbf9b566b36abcea2e0c64c0c7d52b419e740aa47fa97815a11bb7ec2272761385f2a5bba60b83f2ae17ae026048f00b22ba7685fbb66ee4de8022db2dbb4fe398576c29be54abfc8d6aa9b8841a1f25e4095a0536b63abd789bb08da5c9c3288f91bf004fe91166f09d52fe688b1e5967c6c76266ed479ce21ac78ef6a0b5f763cd9112944dab2c1adafbaa65d84a55c4fa769c58726d4620c15f1541b2ad2428eccf2d5d048239f62eb968e76bc4dbef2598696b1c355f3ea52846ddf6765ace2dd5abf5d97672677b33abb46290b8d3d46fa61dc2498ab28622ce89830b96589642989381527bf8dccd2059deac90d7cf01fbea5c21ba8a9beb9f0889dcfd38f288e7cf2ad2afec629dea0c6ca745d74ae5489a58cd824f406caf30179d11f9c514ea126b2eb6bd23be7fe7490032903a89a47e6435c81a6c0a4a2e1f3dafaecbfea6f76cb074660387827039998afe3e77420e8521b1891332206a460c043f720bc205ab49ac1ec7daa76d3f5be8dfae8ab3426863533637d71d25eb3a1a237a516a424075a398cb0f269135dbc9d7b5049da255371a59e6f4ed65c3cef598ea0bc2915922917244b5d904ca527e7f6230718a8bab98c3533e74b2bc61e3bd4dfaf54e8b8f1a810a99f4b460be42c175daf4d6c52bc7b5c1027f69075d389de797306834c3bd407d4be7881b8685928cd7104e182941ecd88205909ca0ecdbab2261210d61db36d3cfe00569a2edc26ba13fef0d2faecdf02c2db7e73b723096b277f62a3ceb804f3be13003447c088fca2a5a6c68f65b292dcbf893057e434fc0bbdbb1303026e3e677768b14a295a1f8e765e97fd71608bc9b058a095574a3a53aaccb7f5fcdfdd40a0595879a783a268b7b7dc0eab7c6b40d19d352d1db756a20cec65b017ae43a475625e65cc4a9f05d10a1355423cb962cd1e129741143eeb2e25e41c474f39f890784e9a2fef2ff3278cc16ab2d22d25ba2c7f2d2002e72705aabe2ac26264196ffc105c9aa74b061d296187125589980957a58220052886f3271f13692a16b6847a35d22331473ffa2c57ae47eaf928d9a354faf7261aa2424c0422f70a64169616578901274048d7d665c90706f2aade67bb4611ba807a709558f872a019be09048901f56a03cc04a3fa4ef71b30dc5743b999d124b286dabacd861d31849779a9523ed4d553bbb180d6bcacc1282eef143784d951e89c81248995c39b3f2c907accfd09069fc4f936a4dbea02a9d141192a7715f9d1438f69a347e0e7646ab562a15e30c6529e894f49e656d753e685683c59518b340f7b9c1259b67bb4e16666b6c27b29885ed48140fcae7b72409cf03892914fac4f4edb278257307ca3f9afeb0d2809ae1b4e8cdff28e40d33677239db3933fbeef2b24839b13c247f2ac671343fe704f03ac4799c4b2d979ed13c1698f61c3ed71558d556ed3924889757eca3bf11a2d334bfd0691572af1af415c34925de0d695318fc70ed9b0a53ef1ea4be85e6f69cde6c351d35482c70f4f7ed813df6fde0a4f51dece56cbd9a95d0fac12c29e96b6675c4fec54a551dea044b720f886fb65cb889d8a2ae8c02885894313ab9464e78c531e7574c65d1aaa0332f006752e1e269c055de0ddc1bcd17661eb00119b76ea55f908fa72c323f3e6b986922dd210599d524b55953eca4f36b365b3711aab6e129a83b94145643907fc0e0db57c332a8b763ddc8cbc1299f469e01534b763072ae9d3ffc3714e412edd09c47eacba07b43cf6a0d2e44899d6886afe334590fa3e7ac6d7cd251411bffe55583c5c7d289063e114ebd10965615b987f90b615fe16f8084000b803b6f4aceb3ed84233de0927c9f3bb4361ac52b8ce3aa8e7f3be9216da636248af95966d6cee86f65cf505d7bbfe6b394c898451fb4527afd836a7ff26b950f4b24cb20aa338dd40d8036c7f46f6b8bce8f4f7cdb84839ced33c3152a4911c939e9041d054ce2b0ed57de54c91158d85671f3404275a0a4233c120ebfc7811b918008a0f320fb2977531b8dc173a7f093dcd46248d5be5e88390305afe0d7dc42ddf86bb8cb79c0d9bd0f7a75e1ef96dd5df05050615ad79756acf67603f855dfe2cc36c7fd9e77847cdaa72c9ba632d27b1e38d0ecf171d3609509a93cdf3b96ab1d62fdaf53242c02d0c9730418cae8b7bc781797ee09a31ff698d115d862c6dfa9ef4ede82be004f026994f39bda4b1b2a101d5f4ecf490bfbdfbb609c6f2ba8449054c0ef8981218422e2a9caa55f416a9da6bdd3d8aa2a48fca899477584c0df314b2be329904668c16d2b901d9693116eefcbe66118cd509fdd670e768fe4428892a991fceff63043f2c54365b8489db292ec337f9f599cfb9a113dd9dd4e5f748e49738149284a0ef42c851ba1727ac9cd2d0a669ffd280a430bd8c5ea98184661d14574bb40c2dbb85e7cda549b6239a66201b849aefee6d1c257c1318d911f60c7c44cb9f126f2c483e00422e748daf6c90745e629cc7b36c3b7e87210d6b6a203ba22776d45c9cf0280bbe08a0653ce34c10deb1d2c890517286f1e89277d68f2ffa14c5bc75a6699d1999c562647e0922a08fe72fdaf99812ab0ce6e090abc653a1a6fb45fcb49c88ee0f8c900db4037f53899250930906f7c1bf67b314fe33a73abbb3320770de756581bdae698b93437448971a5e9557d371048f5ede022cd4009aef95fdd3f192b3481450fcf7c4d381128d927adea28f9de5f01bf64817b5b994effb708ab70c4d29265837f28d0c46114b3a84c6a992bc0407ca3250d5af117e6c6c52c69ae8797452a04e3daf56e22b88e55ed14ca27b6b368a877768922ff101803b8083aaaae3324dde385116be778dc0fd6ca459f81842b884c0be1e28ea8f1a79deeeec45bc546732f9c6062426b7a72f5ba96eed399e8f5cf1f3805aabaea87a26af4adf5cd0ee977eec3ca8707e9424d5e6effa17c589cee357f19ae75c92a1a4b4fc40d2bdca6e9e7bde71d8af4ce090818f4258c162c0e8a936c213b69fe8c34b92a64d3a2f358e7d13426bba1cc019cd65a1d37b5ba25673be237938bdb3aecf147823b73160b3f718c9915aad91b3dcb8856ecd5e564906bc6c932bd0c1a47b4ce591fc9af66125553f5c387ec6fa1e2e659a36196de9b0c0a54a78d850577faa6b26351eb92e0e3cc19d54766a2836825178b87b2a79d7ce25e28e8c248a2683fdfff512b4b53b9f8c258bd039dd9460477ec92a95c2d0892b51fc2db03f34f6140f40ef555690658827bd10bea99b7a4aee3dd9ce500d1d52d932e562b442761436efc129c3120f04f59a9d16964c2c5ef835e1e4a4fa30074882eec06c13e631298b53383a73cc4ffc8424460edf338461e028348ed91d05e7ac0ce9d0b98d4d4af9269ea434b91573e67e2f3a35d2838fe0b205c5bd782707282fc32ab6e7fe6735dfdaac79144e0ba813b74cc17a215e0347dd270798bec4d656612d3ccbc711feda125ac85946fee4bed9c79c3d0c4c45119929096010f28f3fefa47084af23489fa5002c25083d65d76da72af0affb841420e5030ed6b03351495bbbeaca65c8b572ef4d58e1b275086ac71ac368ed1aec5acc6bf5347b21fb5bf0e9e1896ed7011c22cf169b778b80f459d2f1fa1bda733f2b06a2e3f4940fd6599214ee9d8f8c167da7f048dabe91b6af56bde24ac17739915642010675d61d9940f6109145141a35bab9a89509805b65c50bff74e10f13f7599cb6de17fd0234fa25efd9c91321fa95fe43bd8fdb67933ea6c6ecd9551892248f65c31c60a5de85152e537e7830f10166e8a69b4c05aa19b1fec4f003c2319d13fbab9e4ab76b49014dde2872e5580578716e11b6e6e2bd7e238974bfc2bc918a6dfc9dcd822459428a467b7b9f163d4bcbcb0f4f58bd0a11572a7febf619bf509f41fa19853dbca214672de4c718fecda0305dc4052613405898c31ffe78abb9ec0c8336ace514ff556588114e8021aa516cfae7f67a1f4e7cc08845eacde27461144fdcd873043d17303a93a24d67c73f386bfe380ddbe38ca718ba05ed4bccd2d666e31cdd3253bdd85c762c7431e2688cd6aeb4b2f98875dabbdad6eabfe60aa4c3b9c0905bda1b3f633766a45ce1c474efd6a69dae44142cb297632e17e7d775a2f190a90a52ddb6ad02192ba12984006132f7f10be30d6435621c2b2209af6a945cb919914ada8a18293e36fdec107fcfe458979ecd622d075c01bf750b601d7afa879f700bc81db01363f776a6fe537acd07b7f6ddd26bf980405d8e6552f3fbd3790fa409798c0a59976f2d0d5b4854b16646b7dd0118af0a0bcfb0bd917687bff241f2db525772d679c7d2f1b7d1cb5cfd4822204b9b76213a57e0329de0ace98c66fece71c4602d4517f3eab1c7ebbd840264b3399c445b79a65c3d78738ab459f3f8a648555c8ba953462c7f48dfd1aa36a09b41d8c4b642986a655e8988319f9e9383f64ddbd8fda6015b5e9625b712928156f6f6b3a3626d4640d65884c52f38b29de1a3b8c9150a1f60c2960759a0e767ec9c9e2de6946f6da22ff9d77fcc38e71b7552784f98d7e4ca9eb8ebefc17f2590bfbc9a2c2097d2b4cb277dd11953bc8ea62b41295696beb9c8eff9e18dc54636f7a272c9a58886db6a1ab41fac8dcd253050e32a7242c4760bee40007d92c1a3ce6990cc8a358329b8fa920b1daf4705bc298a95631147222ca32d6ea2afc01564c71735920a523fee559e4d81578bad66c616153777a2acfdad3005a7967856f9f0b057470468922bace071fa40a5781a67810c737773fd6ed6388fdb6c34503e0c745b04550c3239027e8bb7be35f500c9e912376342bcd258707eacbeec0f437e92c6a6df1a6370ae73fd2a17d09986308955f1ca3586784156bcd30b1c3f44fa5ebeb760d7f13729792337d23a25c5f8145a5bc652d62f05a88b31c5c05df5312d4f3a58beef6f6172ab801d5941d023f400d07d799629bafd236ec798d0bb59c2a5586e7e952e6be08a8b971823eca4a58cf447b10adccb4dab10b771da8a66b3ff55954b73e1a04afa1a0fdd9b2de693ce02882193a987deeba2bc7caa32c3868b54d91ca73fa69db40e12ba883215da7b2c08b150936822a60578345e1860475773c6dcf5a0f880a9144c9ff1e3044947c67412c3db7f5e46b7b21ea690ca728cdb24340474f5952ad1cd4887a8b1e2ee23d647c403045f7cd4dade809076ea246a1896e09c7e42fce5aa8d5ed4a3acd7de99cacc2a5b6bf7008fca0a35cb8b02fb4e07adf902f6b0b0cbb26494a1860811fd8d563a16fa2459d76e7cfd89af57f2c52cb05fb7374729c548b6aad10a2af53bb41c869519853d01734f3783c6576d16bd4feead802d5c21657a747422d8b077ce402c36c58171f384b4c21a8a3afb62eae004b34b19e3f8d2e62d03b54cd73a5fea2bcc900c793f9f9d58c712b366d53cedba2659f83e5e4a23d574eddc221392e59739882b7a5449b22ba5de8003b3e41b6b4788ce33d39e65aefc8aba99373de8e3e0f9fe3cd5ef6d5b73d0d47d4a9ecabe6d8b7bf5ffb7dad01b5fd59e234660a8a16338da91e3ac4ebfe675f97516351aa252e0d360874547a78c229b0cc4948dcd83e9935d01864f84faf3dc462cf5780acd6637a607e571b6d8ff796e4b75843192d21de41cf17109fd8a5e1e30c659b8a2b1e28ecd6e45e79ce6ba3581fe08cf35e30516d58c353d97b00a109f24caf993449c0e9afa80c0d8b821a39d3691456a53387860a974d332d93887690669a559fc54ac1949add774e5004d3819e6ac3f7cdea355c8175b53f0a49529cf4c9d781029d3806fc04cc8e330df6b65a7b84ac8bfd62f057c9819454ba0a9c15078c414c392773656d031d2c8b5bec1e7b8f39986a4ae28cb62fce04fe4ab1e882edb130e1a711d54ee42d35c9edd47529c582d3872a9ea9e56a6b4aebacb86074656714a951a16c2293a137eaac6aa9e3c48585907bea0a68ffe00e87802648c0e769836334fe48b99ccc168ee0a0775d7518519554c98afe343b423ae73bf6b1a5c639f656bc4a254f82061a5e233cbb834778cc10f5ee4300c06fe51151e7c4bcc1b8e9275a930e114764ad4ddc98035f093d36618d0c60cc3d4062950963887f51a1feaddf54afadb44d7c5dea31c64c9b3d4c22817d35c2e67ab2dfd97d01ef36841275a009a2286492c58b1af646522b6119d22b8f387a436faee2f5a1328e5a6e92551a3799f70c9bc19e1d5f716f9350848473a50e10a2d35b395c27532d1d692598bdb2c81aed31aafcfd7eb193a5452adb7cae467a2a8a9998b986eac95978c82967f5e8b33c9c741a062bf9071d1c5934745bca0a93ec763c531f2270b7c2bf76c6d9c304998372661e645860db36e25a0ab585b6e490b06b9c87501524784d0301db30fb9e1d7690f1b61ce5236f58312b98489caf19678dbfcd61e9908d7140757057152a813c3e5a3eb003560799019c52e2ad5f1bc77ca55d44d9c2739db4c89869e0b3d43529fd5c8cb5912fe3cdc4ffe48853962078c385bbf16ac42a2316dfe7043e99c2d2b06670602f97e16b4903d32d29059cb7d7ba9f7a9bfc4ac97a378cc3fc5d99724c09f7d7b1e1f49cec676ac79a951251f4b7b50134ee12192f411c4c70b7a6dcc7c6fb4afb07ae822a3377f715268447e1b7564296427d31d7717ac4ad38814fe3350b874556ebc88131878d07e6a7002f0da83a435633dca9d15ee7372f38624ade9e5c19221d92038cf9811987ce344e91420991bcddf42f59a9a2fcae8e94d0c65ce2e8aba2ebbce735ac3689ca3ef1661b8409dcb0f9ad4e3bf9d489b5c237a391e77f20f96b4ade604713b20152772b262986b93c874a45ffbec3de0c67e402c25d2b57d8673fc6dca522eebb6120aef242ff9786a007ea3f768e6df453b58f09036a26e5100169e0a76423ab24ba8523421918bf4c0e47252a81c643695fdb1998b7c25dc7c5daf3ca046ee2a2d5d4895979b09fc3f19c052f1506f2fc83caf4503e711093865513f2b723878059d9a631cf1d7d5e8bcc5bdc89eab1af4e280981a3b014a8b10ffbbe344c1b76e125b365f5e7abf6002b288418d984c46f907d4b9ac7daa771a7f201ba925884999e0bbbc53ebacb54cb97d6c2b484bba30024e75ecc984aa275c3c42d8637481bbb8fa65bb0d50ae1a59a7238aa93c06afa6d3890531135456758dfd65ac618e15a2459ba3e97c0351de2f9ca96181fc6cf8c01506913474cd00cd45f8439a8ef4417f6d5786ada3270b26ab2a97fad273d9425a247d8a2485086ee8ff5fba4211768a980db675a80687f1b289051f5636a887949a21a5b9ef0f474364932f8c694a4ec1c458726603fcba79e3988dfff628a1a896d7e54b3d61468b5358fb6724fbc5f14589427736d59528c89f647f6da49c5c9b088c6626ee974e226929969dda2a57dee799ee04dc3e80bcdce5770e8fd7547ea74885d7af2b3292b2b897c14a1a239acd0f9f88df462b9617f205b84d8f6b373b0d4fedcb2bd0d570c6672f942cb39dc0e6fcc1d4a70fcaed62a8d2742d4fd3779664c6922a258dfbab2de0334b09ec43fbb16a44e9fff0ebd00e78fa63d7bd7c09b5d2e9efc8198ca66b108d92dbe2e6d3290e6730982ee191a6f3c26f0a2786427c1781cf8e48cd8611342c19df2633175f0744a6b6835b82357c30ee7ca8a46a238e0bf82dd39f2d92089841f32763964a18ebfb85242b126fb98e1d043e4bcb6ed3cd4fe9659aaa97ef1a589b2000d864ef34ca2d6b99945458b5326860978a5915414cd8627aeb0dd2a1c52ee890c970d87897b4b359fe26483765a77dbb64f79d407d856fe60a43c0a427725e7be6624629a07ca1c27bf447064d0135a40675f0c80bb9640e1c909f1b6a81430c24ca15aa94ca7cef64a9e7c7af67b4e84bf7fb7db7ecd1825c740308d38bc993d799164fd3b7bdd941a434b5ecf88697bb15308a5f922579346aef33b7b7c36932566f4f551b106547d76e5f027ea56691fb864aaa09fba2624d5fee282b1878345cd6bea5593885d336b808b51f1139886dd494410b62e5ea97d7c2cc916625a7bb02bea8a28e559b9a8ac8ae48845bd7634ae630f4c9beba07b039fc748beceff37afa797980606d1e7131757c18ab245d6c5d1dc98c25dca6cbe24e3f1ed64090e007f4d6dd82d122b55936604f8d49b8801fbcfb48e2e5687197f82affef2168f358ba601dfce5006b614cbd4943c724c38cb5f4d59d2a9ff00df8938b781c3c4b85f0d359c88e8a343c780689cf724ab8adf8b733a5860283111f8d4f4dd650d439fd73c8b6fa6b04db5d51331118ae494281666a757102ee4fd987c6963644f576b6f5a9177eedb77e9feef3d1b91f229b202a8bd7cc766c9a129f3e8b6352cf2e5a75f65e4a34c18d3dfca3aedcfbee00e43355e3b2b4690311a2620cebf3b1bd9332f633f462923b99890e70db79a5f286c12f35c0ac271da4902f5885e6ca7a7e5ed55a65aeca204323fbcd6807744989c2470771a14b8a119cb02f0a2ca21314a1250e5b58d7b95ff6e489f9cf9cd934c8760b14d9bbf74c5dc4e5d762a37ca5e0275b519ff78f9b3775cb5ef536424120fbc894d51ac4fd6dbe21a7b6598eba208e6af182542275582b15d1317e985d534e44d5602bfa6a609652404bc35062ac1032ccce39e8b99c49b444749151be6d59d2faba0f2b4dbbcc1a745fd8e9bf2229e66ab8093c510e2ccc0c270c00301a04c6a81e082200e2fb179bcfcab6659c1af080b43e1b01c6878a835ecf861a2bf753d34e3c9519068f7b48f34ac2b8a10d9688e76a55fb983a1e221b7d1150b9ab2b9de3964af25df340c64ac9fb0d9727760d2f0b2a9c49f7c0530b3175847a0137a8c59cf24c5c9b2f293ec61aa3c1471b3d29aa00a922d6399cdfc0e41e77860fa6321aa34ac61c8b45fb8d447bc31d12a69fa2693fd1b99c482248d4706e9fe16302d8f304262364bed9f0afbbc28068e706068f401518e27f1414775846466a10bc65a362932e6ba6b139736e3bd61f668bba625bbaeedf0ac06a804baa8ef69a3e663112b88b6b1c37cd4bb2dc6a3fd3651b5be897fe933f37ec8dde95c053865ac502d0dc87480957acfcd489e39350dc5b802889b26d62547cc36e9942a0f203c65da950145eda5797cdf9e3e2f1bed7299ae64c18a82a9136cc2823177e99773644ddc12e706218923407f9d12a1855623538e52ead60e8e5e926996ef4ed79c91dcadbd55a12223a8bea7bd84c6c6a52d9eeef0a782a173faa4df8a5f9d0a72dbba30c2fc12c4e9d541615aa7a71396eb42d5836f805eaed1406abf8debecebd47f96e293e82139dc63245c9048f2d231c16fff48c6c33227a7203caf2093290182cf144230f212829187d55a1c3e776c49a461c283a428b6d3be447ebf9218307c01f9fc642ae3c0f617306e09691cd01688883ea61527a0e6bada5fe15ed2919c9a6b9a64a99c6a6ae6cffb1d6db7c3a5bfcf2587a87ef0a5023ceb9f37cd7c5e1bfdcf2b826a4de6f7ecb0e6f2bec7ff9f20559d26ba8563b53b6dcabcd027755b3678c08027bf6ee52098137a3b38752098e3a976e18c24f0bc079492178621833fdc97c2b9f4a864089efa82b95cae4526558b8e2a855b7e1ceab9ba9ff6bdf7e6a536b75daf84c5a8f2de13afd2853dd2a51dcaa60ed0dc241485d088360112099fd42cee6fbac2d21050dcaf85990f12e7c4ab3882140347d71c92b1f6f78b22e1dcb324dc63cb91e081bb4333a3b022ae102cf0546a09e8dfbd4de8bc08bb6d16224c887073058f7ed8a9b8ac3d879bce8e88a82ac7e005469e26f84d1288ced41c3510236d1ec158c051c7d6a2ee18939bb5f101eedf4d7106e3b7edfce8a67980ab3fb5e4626423445aede337fcf9fe7b323a6f089fe75664dd55cff37855d21919fb75a33a5938942c729ea0f5447a6c4f490598bafa58fdcfca5", 0x2000, &(0x7f0000004600)={&(0x7f0000000340)={0x50, 0x0, 0x2, {0x7, 0x2d, 0x2, 0xb5e529a2567d88b8, 0x4, 0xee, 0x4, 0x0, 0x0, 0x0, 0x1, 0xffffffff}}, &(0x7f0000000280)={0x18, 0xffffffffffffffda, 0x9, {0x7}}, &(0x7f00000003c0)={0x18, 0x0, 0x9, {0x5}}, &(0x7f0000000400)={0x18, 0x0, 0x100000001, {0x5}}, &(0x7f0000000640)={0x18, 0x0, 0xffffffffffffff80, {0x8}}, &(0x7f0000000680)={0x28, 0x0, 0x5, {{0x8, 0x7, 0x2, r0}}}, &(0x7f0000000780)={0x60, 0x0, 0xab1, {{0x9, 0xa, 0x9, 0x2, 0x4, 0xffffff7f, 0xb, 0xa}}}, &(0x7f0000000800)={0x18, 0xfffffffffffffff5, 0x170, {0x4}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="15000000fefffffff9ffffffffffffff6375626963488efcf9ca6524cd4c5c9da5a08f9f6864d81c74e876ee7c74ec3d90db75061df033cb5b2de8f82e0c56b66ef3d7e26c05c769b3213e6ec2c6a28cbd586c25ab1383d0560812e59ab624f00c7e14"], &(0x7f0000000880)={0x20, 0x0, 0x1, {0x0, 0x2}}, &(0x7f0000003a40)={0x78, 0x0, 0x5, {0x3, 0x9, 0x0, {0x0, 0x6, 0x8, 0xffffffff00000001, 0x9, 0x5, 0x7, 0x5, 0x161, 0x1000, 0x7, 0x0, 0x0, 0x5}}}, &(0x7f00000006c0)={0x90, 0x0, 0x3, {0x5, 0x2, 0x5, 0x5, 0x4, 0xd, {0x2, 0x9, 0x8, 0x3ff, 0x2, 0x553c, 0x3, 0x8, 0x42, 0x6000, 0x3, 0xffffffffffffffff, 0x0, 0x81, 0x1}}}, &(0x7f0000003cc0)=ANY=[@ANYBLOB="9800000000000000040000000000000006000000000000009a5c000000000000040000000600000047504c00000000000200000000000000930000000000000002000000fddcffff5d5b00000000000005000000000000008209000000000000030000002e0800002b2b2800000000000300000000000000a1070000000f00bcc4148130215fcbc3329ca0b80000010001002f6465762f76"], &(0x7f00000040c0)=ANY=[@ANYBLOB="e801000000000000080000000000000002000000000000000100000000000000000000000100000000000000000000000800000002000000050000000000000007000000000000000400000000000000df3c000000000000020000000000000000000000000000000440000003000000590000000040000042f20000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6b00000005000000000000000600000000000000060000000000000001000000fdffffff0000000000000000010000000000000003000000000000006cb700000000000002000000000000000300000005000000000000000000000001000000000000000400000000000000ae04d25000000000070000000000000002000000000000000700000007000000090000000060000007b60000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="110000004d0000000000000005000000000000000200000000000000000000000800000002000000000000000100000000000000c8f5000000000000f60b0000000000005600000006000000000000000000000007000000000000000900000000000000000000000000010000000000000018000000008000000000070000000a00000001000100008000000b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="4900000001000000000000000300000000000000040000000000000006000000007d277ba325210000"], &(0x7f0000004300)={0xa0, 0x2f, 0x3, {{0x2, 0x3, 0x8001, 0x3, 0x1, 0x2, {0x0, 0x100000000, 0x5, 0x1, 0x8000000000000001, 0x8, 0x0, 0xfff, 0x2, 0xc000, 0x1, 0x0, 0xffffffffffffffff, 0x8000, 0x8}}, {0x0, 0x3}}}, &(0x7f00000043c0)={0x20, 0x0, 0x10000, {0x1, 0x4, 0x5, 0xe}}, &(0x7f00000044c0)={0x130, 0xfffffffffffffff5, 0x7, {0x8, 0x8eae, 0x0, '\x00', {0x8, 0x5, 0xd, 0x4, r6, r7, 0xa000, '\x00', 0x84ce0000000000, 0x8, 0x1000, 0x800, {0x6800000000000, 0x1}, {0x5}, {0x80000000}, {0x200, 0x800200}, 0x2, 0x2, 0x3, 0xffff}}}}) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000440)=@attr_other={0x0, 0x3, 0x1, &(0x7f00000001c0)=0x3f}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001980)={0x3, 0x0, [{0x5, 0x1000, &(0x7f0000000980)=""/4096}, {0x5000, 0x33, &(0x7f0000000000)=""/51}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 6.195287518s ago: executing program 6 (id=3611): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f00003eb000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x88a8e000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) eventfd(0x3) syz_io_uring_setup(0x1dac, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4003, 0x5}, &(0x7f00000000c0), &(0x7f00000003c0)) (async) r3 = syz_io_uring_setup(0x1dac, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4003, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000005}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) 5.403361085s ago: executing program 6 (id=3612): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) io_uring_setup(0x20ba, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0xfff7fffc}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0xc8, 0x24, 0x20, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x3, 0xf}, {0xc, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x10, 0xf149, 0x0, 0x1, 0x6, 0x4, 0x1}}, {0x6, 0x2, [0xcb]}}, {{0x1c, 0x1, {0x4, 0x6, 0xb113, 0x6, 0x0, 0x9, 0x10000, 0x1}}, {0x6, 0x2, [0xfffd]}}, {{0x1c, 0x1, {0x5, 0x7, 0x3, 0x8000, 0x0, 0x5, 0x5, 0x7}}, {0x12, 0x2, [0x7, 0x5, 0x2, 0x4, 0x0, 0x7, 0x0]}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000003c0)={0x2, 0x3, "d1c236566863f1bd3f54e05cc46654796a3b800413745c40579438931fffaa91", 0x8001, 0x4, 0xc, 0x9, 0x1980}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2000000, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0xf9, 0x6, @remote}, 0x14) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'dac02\x00', [0x2f00, 0x5, 0xd, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x3, 0xffe, 0x80, 0xc, 0x2, 0x4, 0x8, 0xffff, 0x5, 0x4, 0x7fd, 0x834, 0x8, 0x9, 0x9, 0x800, 0x301, 0x2, 0xee, 0x1, 0x3, 0x10000004, 0x5, 0x4]}) 5.389048313s ago: executing program 3 (id=3613): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r2 = syz_io_uring_setup(0x235, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r2, 0x5e5a, 0xb1e3, 0xa, 0x0, 0x0) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x240020c0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\x00') 5.087851744s ago: executing program 5 (id=3615): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000004000000dd0000000a0000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00g\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40100) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000700)={'nat\x00', 0x0, 0x0, 0x0, [0x8000, 0x80000001, 0x2, 0x8, 0x81, 0x3], 0x1, &(0x7f0000000640)=[{}], 0x0, [{}]}, 0x88) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x1, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffeff9, 0x2, 0x3, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r8 = socket$netlink(0x10, 0x3, 0x5) preadv(r7, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba", 0x3c6, 0x6000000000000000, 0x0, 0x0) 4.878911492s ago: executing program 0 (id=3616): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x14408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xa380}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) (async) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpid() (async) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newtaction={0x160, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x14c, 0x1, [@m_skbedit={0xf8, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0xab, 0x6, "d6b15573a51f7d95bc68e219abbe00c349be4f7e8b5cfbb9a8a3646d02a49a81a8a39ad70c8203d8ae8f9b22e6f78525f5fe4e64314653d0df205c9e40c34aa566c8ebfd6dd570d13b0685f1d90094d83933cbd0916931615ad7977198c00e59cb5665830f77faa18f4a9f4469683d9ff116f30d5692461eb64c065d95f71aa817b82625bd461c36815483016ff1a3ba7b3e80ad95e55f48368a71d6d941caef9a9d6919650942"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 4.715427374s ago: executing program 4 (id=3617): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x11}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x1000000, 0x0, 0x0) 4.528781838s ago: executing program 4 (id=3618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x74}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x14000800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.315497775s ago: executing program 3 (id=3619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xc}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) 4.105597931s ago: executing program 3 (id=3620): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0xb6, 0xc, 0x0, 0xf8, 0x0, 0xfb, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0x45, [0x0, 0x89fc]}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) epoll_create(0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000192c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0xffffffff, 0xfffffffd, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000, 0xffffffff}}}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x60}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_int(r8, 0x6, 0x18, &(0x7f0000000240)=0xe, 0x4) r9 = getpgrp(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1, r9}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r6, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) accept4$nfc_llcp(r3, &(0x7f0000000380), &(0x7f0000000100)=0x60, 0x800) 3.637264107s ago: executing program 4 (id=3621): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1e) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0xce23, 0x0, @loopback, 0x3}, 0x1c) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a40)="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", 0x2000, &(0x7f0000004600)={&(0x7f0000000340)={0x50, 0x0, 0x2, {0x7, 0x2d, 0x2, 0xb5e529a2567d88b8, 0x4, 0xee, 0x4, 0x0, 0x0, 0x0, 0x1, 0xffffffff}}, &(0x7f0000000280)={0x18, 0xffffffffffffffda, 0x9, {0x7}}, &(0x7f00000003c0)={0x18, 0x0, 0x9, {0x5}}, &(0x7f0000000400)={0x18, 0x0, 0x100000001, {0x5}}, &(0x7f0000000640)={0x18, 0x0, 0xffffffffffffff80, {0x8}}, &(0x7f0000000680)={0x28, 0x0, 0x5, {{0x8, 0x7, 0x2, r0}}}, &(0x7f0000000780)={0x60, 0x0, 0xab1, {{0x9, 0xa, 0x9, 0x2, 0x4, 0xffffff7f, 0xb, 0xa}}}, &(0x7f0000000800)={0x18, 0xfffffffffffffff5, 0x170, {0x4}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="15000000fefffffff9ffffffffffffff6375626963488efcf9ca6524cd4c5c9da5a08f9f6864d81c74e876ee7c74ec3d90db75061df033cb5b2de8f82e0c56b66ef3d7e26c05c769b3213e6ec2c6a28cbd586c25ab1383d0560812e59ab624f00c7e14"], &(0x7f0000000880)={0x20, 0x0, 0x1, {0x0, 0x2}}, &(0x7f0000003a40)={0x78, 0x0, 0x5, {0x3, 0x9, 0x0, {0x0, 0x6, 0x8, 0xffffffff00000001, 0x9, 0x5, 0x7, 0x5, 0x161, 0x1000, 0x7, 0x0, 0x0, 0x5}}}, &(0x7f00000006c0)={0x90, 0x0, 0x3, {0x5, 0x2, 0x5, 0x5, 0x4, 0xd, {0x2, 0x9, 0x8, 0x3ff, 0x2, 0x553c, 0x3, 0x8, 0x42, 0x6000, 0x3, 0xffffffffffffffff, 0x0, 0x81, 0x1}}}, &(0x7f0000003cc0)=ANY=[@ANYBLOB="9800000000000000040000000000000006000000000000009a5c000000000000040000000600000047504c00000000000200000000000000930000000000000002000000fddcffff5d5b00000000000005000000000000008209000000000000030000002e0800002b2b2800000000000300000000000000a1070000000f00bcc4148130215fcbc3329ca0b80000010001002f6465762f76"], &(0x7f00000040c0)=ANY=[@ANYBLOB="e801000000000000080000000000000002000000000000000100000000000000000000000100000000000000000000000800000002000000050000000000000007000000000000000400000000000000df3c000000000000020000000000000000000000000000000440000003000000590000000040000042f20000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6b00000005000000000000000600000000000000060000000000000001000000fdffffff0000000000000000010000000000000003000000000000006cb700000000000002000000000000000300000005000000000000000000000001000000000000000400000000000000ae04d25000000000070000000000000002000000000000000700000007000000090000000060000007b60000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="110000004d0000000000000005000000000000000200000000000000000000000800000002000000000000000100000000000000c8f5000000000000f60b0000000000005600000006000000000000000000000007000000000000000900000000000000000000000000010000000000000018000000008000000000070000000a00000001000100008000000b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="4900000001000000000000000300000000000000040000000000000006000000007d277ba325210000"], &(0x7f0000004300)={0xa0, 0x2f, 0x3, {{0x2, 0x3, 0x8001, 0x3, 0x1, 0x2, {0x0, 0x100000000, 0x5, 0x1, 0x8000000000000001, 0x8, 0x0, 0xfff, 0x2, 0xc000, 0x1, 0x0, 0xffffffffffffffff, 0x8000, 0x8}}, {0x0, 0x3}}}, &(0x7f00000043c0)={0x20, 0x0, 0x10000, {0x1, 0x4, 0x5, 0xe}}, &(0x7f00000044c0)={0x130, 0xfffffffffffffff5, 0x7, {0x8, 0x8eae, 0x0, '\x00', {0x8, 0x5, 0xd, 0x4, r7, r8, 0xa000, '\x00', 0x84ce0000000000, 0x8, 0x1000, 0x800, {0x6800000000000, 0x1}, {0x5}, {0x80000000}, {0x200, 0x800200}, 0x2, 0x2, 0x3, 0xffff}}}}) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000440)=@attr_other={0x0, 0x3, 0x1, &(0x7f00000001c0)=0x3f}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001980)={0x3, 0x0, [{0x5, 0x1000, &(0x7f0000000980)=""/4096}, {0x5000, 0x33, &(0x7f0000000000)=""/51}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) 3.575855776s ago: executing program 0 (id=3622): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)=""/212, 0xd4}], 0x3}, 0x9}], 0x1, 0x40012162, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0xfffffffffffffe92, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3, 0x2, 0xfa0e, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x0) accept$unix(r2, &(0x7f00000001c0), &(0x7f00000002c0)=0x6e) r3 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0003}]}) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$input_event(r6, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) close_range(r4, 0xffffffffffffffff, 0x0) acct(0x0) accept4$alg(r2, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 3.304029636s ago: executing program 0 (id=3623): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) 3.22602325s ago: executing program 5 (id=3624): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000640)) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcb, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x20a0, 0x20000000, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)}}, 0x0) fchdir(0xffffffffffffffff) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000680)="e6a7302a674d009a3c1e7b9ab3856b881d3aa48f378f3e6aba4ebf6dad1e3fc524345d51e77b07fdb61e1035b5f2595b13cb92a394b8d663c71f835576426bcf8b53c352e0009f7b75c88c501c9c6f9dd21ed1626267f1eb25d74d79e81ac4a369330bccd33fd10c6565ef41afe0ca78d8bf92ca9519d1e4d63c4d7dec03398fab7059bc0cc28d05b9555c02ca7d856c43704970587b6e6529b93578529a1bc01707130a5f28e157a7c1cc6368fe5eb5c2e3e8ae802e3877d5b61ee5a237f7aafa37819766475bdaec6411b23fd8863ee6d2a628432ec075c9201801371aa3c570c9d45f4852c24c8c0a24d4a09d1dab1d6aced58c2911", 0xf7}, {&(0x7f0000000200)="65de5a3afa99faf3c4aa66f928a3ebc46cbbd5e22ff52cb32a6be4b77f6822f13e0e6846221f05557238e832671b0aefc28a1556d30df400242c5bbfbd8924226f51e92013d23f8ddf41e6d536e770c6a9d7b0c82369f98fd682136e6e3327e5c201884212e75b1d4fb679108cdcbc7b", 0x70}, {&(0x7f0000000000)="92596ccf0f49850addc70b77f406e3e521e84c1a0833522950e76b2c445197d9bb4813303abefe1773543bc64b9c1f", 0x2f}, {&(0x7f0000000080)="f453ae69613097", 0x7}, {&(0x7f0000000280)="245fd7ee708b75063c3e", 0xa}, {&(0x7f0000000300)="eeee18758db298d3371715b933c133b2ec687c4c474409ae7a048356d3a8bbe622f9de35bc8b501a473ef0b4e9d385d7d87661", 0x33}], 0x6, 0xc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) 3.118724567s ago: executing program 3 (id=3625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xec65e000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, 0x0, 0xc, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x6) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) get_mempolicy(0x0, &(0x7f0000000100), 0x3, &(0x7f0000ffb000/0x4000)=nil, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'macvtap0\x00', {0x3}, 0xfffd}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000140)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x9c) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001940)}, 0x20002100) 3.023549607s ago: executing program 0 (id=3626): syz_emit_vhci(0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x0, 0xc8, 0x3, 0x7fff}}}, 0x9) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @bcast, @netrom={'nr', 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x25}, "396208250be8e985c9f6bd8c3a5608ea5eae4d16885403e60cbb81f39ed33758ab6cb85f77"}, 0x29) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, 0x0) socket(0x5, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r3 = socket(0x2b, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {0x0, 0x3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x3, 0xde, 0xc, {0xc, 0x1, 0x0, 0x400, 0x0, 0x10000}, {0xd, 0x0, 0xb4, 0x7af1}, 0x401, 0xff, 0x5}}]}]}}]}, 0x70}}, 0x24040084) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000002700010000000000fddbdf250a010101000000000000000000000000fe800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) 2.436125073s ago: executing program 4 (id=3627): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000ebff00000000000000003f00"/28], 0x48) 2.297504746s ago: executing program 4 (id=3628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) close(r1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clock_nanosleep(0x1, 0x1, &(0x7f0000000040)={0x77359400}, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x36, 0x0, 0x8}) socket$inet_sctp(0x2, 0x5, 0x84) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x200007) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x4c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 923.835906ms ago: executing program 0 (id=3629): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x1ce}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x9a1bffdda8d29b21) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x14c0a000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYRES64=r1], 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x32) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x12, 0xffffffffffffffff, 0x26a42000) fchdir(r3) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000240), 0x0, 0x4010) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x1492fe, 0xa0) copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0xc615, 0x101, 0x0) 921.901496ms ago: executing program 6 (id=3630): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 548.347846ms ago: executing program 4 (id=3631): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12002, 0x49) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x8400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80047453, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) socket$nl_rdma(0x10, 0x3, 0x14) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 511.682212ms ago: executing program 6 (id=3632): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x5, 0x3, 0x78}}, 0x28) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) poll(&(0x7f00000000c0)=[{r2, 0x10}, {r0}, {r2, 0xa000}, {r2, 0x8002}], 0x4, 0x0) bind$nfc_llcp(r1, &(0x7f0000000180)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0xfe, 0x0, "d92984bd1c381ac3273f52c3571711a077609475b78411e80000000000f2170e65e3f50327e422010200000000001900", 0xa}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) 452.915375ms ago: executing program 5 (id=3633): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r7}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000180)=ANY=[]) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="92276d95ae3a"]}, @typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) 255.752035ms ago: executing program 3 (id=3634): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000004000000dd0000000a0000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00g\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40100) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000700)={'nat\x00', 0x0, 0x0, 0x0, [0x8000, 0x80000001, 0x2, 0x8, 0x81, 0x3], 0x1, &(0x7f0000000640)=[{}], 0x0, [{}]}, 0x88) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x0, 0x1, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffeff9, 0x2, 0x3, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) r8 = socket$netlink(0x10, 0x3, 0x5) preadv(r7, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="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", 0x3c6, 0x6000000000000000, 0x0, 0x0) 255.175604ms ago: executing program 6 (id=3635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x108201) (async) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x108201) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="0f22e30f3566b842000f00d8b805000000f9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) socket(0x80000000000000a, 0x2, 0x0) (async) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000ac0)={0x0, {{0xa, 0x0, 0x400100, @mcast1={0xff, 0x7}, 0x400000}}, {{0xa, 0x4e22, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000ac0)={0x0, {{0xa, 0x0, 0x400100, @mcast1={0xff, 0x7}, 0x400000}}, {{0xa, 0x4e22, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7f030214000600", 0xa, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000007c0)={0x54, 0x0, &(0x7f00000006c0)=[@clear_death, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0x101, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/182, 0xb6, 0x0, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000c00)=""/4096, 0x1000, 0x0, 0xc}}, &(0x7f0000000680)={0x0, 0x18, 0x40}}}], 0x4a, 0x0, &(0x7f0000000740)="25a6ecbca1d9d86e6c9b4739a684565c3c4f5d31fef8e6ab74baa2b5d80d0b2b1679b4fcd0b84a9f2a440993a6f1082a007fffea7c81007877076dc26cb346d777d1734a5d8dd2fc23bc"}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80000000, 0x1f}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "27704f0e161da1aad4c4e215e43ec067"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7c3fe44eb8db722ec781f7f2db941737"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x66}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) write(r5, &(0x7f00000003c0)="fa8a4e785a73c662822e2a36d22d367923ebddbd84fa85c9", 0x18) recvmmsg$unix(r5, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/169, 0xa9}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=3636): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000003a40)=ANY=[@ANYBLOB="aaaaaaaaaaaa9aaaaaaa000002069078640101", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) syz_emit_ethernet(0xf5, &(0x7f0000000400)=ANY=[@ANYRES64=r3], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000003b40)=0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x3) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000e200"/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x14, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): ][T17015] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 877.045810][T17015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.453497][T17666] Invalid ELF header type: 3 != 1 [ 877.733011][T17668] netlink: 'syz.4.3049': attribute type 10 has an invalid length. [ 877.760277][T17015] usb 6-1: Product: syz [ 877.803177][T17015] usb 6-1: Manufacturer: syz [ 877.831769][T17015] usb 6-1: SerialNumber: syz [ 878.092788][T17673] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3051'. [ 878.376185][ T5863] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 878.780386][T17015] usb 6-1: Limiting number of CPorts to U8_MAX [ 878.800235][T17015] usb 6-1: Unknown endpoint type found, address 0x0b [ 878.828929][T17015] usb 6-1: Not enough endpoints found in device, aborting! [ 878.830046][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.016392][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.037923][ T5863] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 879.097703][ T5863] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 879.114174][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.174830][T13679] usb 6-1: USB disconnect, device number 34 [ 879.292629][ T5863] usb 7-1: config 0 descriptor?? [ 879.713899][ T5863] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 879.825760][T17695] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 879.836643][T17695] exFAT-fs (nullb0): invalid boot record signature [ 879.843152][T17695] exFAT-fs (nullb0): failed to read boot sector [ 879.849464][T17695] exFAT-fs (nullb0): failed to recognize exfat type [ 879.936781][T17697] input: syz0 as /devices/virtual/input/input53 [ 879.965573][T17697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=17697 comm=syz.5.3057 [ 880.508007][T17704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17704 comm=syz.6.3051 [ 881.495789][T13679] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 881.635816][T13679] usb 7-1: device descriptor read/64, error -32 [ 881.875991][T13679] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 882.195784][T13679] usb 7-1: device descriptor read/64, error -32 [ 882.422698][T17015] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 882.520531][T13679] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 882.606534][T13679] usb 7-1: device descriptor read/8, error -32 [ 882.730286][T17015] usb 1-1: Using ep0 maxpacket: 32 [ 882.897866][T17015] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.918217][T17015] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 882.965161][T17015] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 882.974609][T17015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.995070][T17015] usb 1-1: Product: syz [ 883.016912][T17015] usb 1-1: Manufacturer: syz [ 883.044684][T17015] usb 1-1: SerialNumber: syz [ 883.073650][T17015] usb 1-1: config 0 descriptor?? [ 883.398582][T17015] usb 1-1: USB disconnect, device number 70 [ 883.551048][ T5863] usb 7-1: USB disconnect, device number 7 [ 883.687344][ T30] audit: type=1400 audit(1774713156.124:2969): avc: denied { ioctl } for pid=17742 comm="syz.3.3068" path="socket:[59180]" dev="sockfs" ino=59180 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 883.747429][T17729] overlayfs: missing 'lowerdir' [ 883.780249][ T30] audit: type=1400 audit(1774713156.154:2970): avc: denied { write } for pid=17742 comm="syz.3.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 884.595518][ T5863] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 884.664601][ T30] audit: type=1400 audit(1774713156.414:2971): avc: denied { watch_sb } for pid=17745 comm="syz.4.3069" path="/94/file0" dev="tmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 884.875922][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 885.423134][ T5863] usb 4-1: config 156 has an invalid interface number: 234 but max is 1 [ 885.440516][ T5863] usb 4-1: config 156 contains an unexpected descriptor of type 0x2, skipping [ 885.483235][ T5863] usb 4-1: config 156 has an invalid interface number: 199 but max is 1 [ 885.522425][ T5863] usb 4-1: config 156 has an invalid interface number: 131 but max is 1 [ 885.581425][ T5863] usb 4-1: config 156 has an invalid interface number: 95 but max is 1 [ 885.670115][ T5863] usb 4-1: config 156 has 4 interfaces, different from the descriptor's value: 2 [ 885.718300][ T5863] usb 4-1: config 156 has no interface number 0 [ 885.739109][ T5863] usb 4-1: config 156 has no interface number 1 [ 885.769717][ T5863] usb 4-1: config 156 has no interface number 2 [ 885.792939][ T5863] usb 4-1: config 156 has no interface number 3 [ 885.812062][ T5863] usb 4-1: config 156 interface 234 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 885.835925][ T5863] usb 4-1: config 156 interface 234 altsetting 64 endpoint 0xD has an invalid bInterval 254, changing to 11 [ 885.951258][ T5863] usb 4-1: config 156 interface 234 altsetting 64 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 885.963258][ T5863] usb 4-1: config 156 interface 234 altsetting 64 endpoint 0x2 has invalid maxpacket 1096, setting to 1024 [ 885.976755][ T5863] usb 4-1: config 156 interface 234 altsetting 64 has a duplicate endpoint with address 0xD, skipping [ 886.535982][ T5863] usb 4-1: config 156 interface 234 altsetting 64 bulk endpoint 0x9 has invalid maxpacket 1023 [ 886.615594][ T5863] usb 4-1: config 156 interface 234 altsetting 64 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 887.340710][ T5863] usb 4-1: too many endpoints for config 156 interface 199 altsetting 34: 119, using maximum allowed: 30 [ 887.641333][ T5863] usb 4-1: config 156 interface 199 altsetting 34 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 887.657934][ T5863] usb 4-1: config 156 interface 199 altsetting 34 endpoint 0x8E has an invalid bInterval 82, changing to 10 [ 887.669621][ T5863] usb 4-1: config 156 interface 199 altsetting 34 endpoint 0x8E has invalid maxpacket 8298, setting to 1024 [ 887.715735][ T5863] usb 4-1: config 156 interface 199 altsetting 34 has an invalid descriptor for endpoint zero, skipping [ 887.805229][ T5863] usb 4-1: config 156 interface 199 altsetting 34 has a duplicate endpoint with address 0x7, skipping [ 887.820261][ T5863] usb 4-1: config 156 interface 199 altsetting 34 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 887.847248][ T5863] usb 4-1: config 156 interface 199 altsetting 34 has 8 endpoint descriptors, different from the interface descriptor's value: 119 [ 887.903715][ T5863] usb 4-1: too many endpoints for config 156 interface 131 altsetting 83: 210, using maximum allowed: 30 [ 887.946312][ T5863] usb 4-1: config 156 interface 131 altsetting 83 has 0 endpoint descriptors, different from the interface descriptor's value: 210 [ 888.004126][ T5863] usb 4-1: config 156 interface 95 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 888.048404][ T5863] usb 4-1: config 156 interface 95 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 888.123004][ T5863] usb 4-1: config 156 interface 234 has no altsetting 0 [ 888.176479][ T5863] usb 4-1: config 156 interface 199 has no altsetting 0 [ 888.215442][T17782] bridge_slave_0: left allmulticast mode [ 888.275422][ T5863] usb 4-1: config 156 interface 131 has no altsetting 0 [ 888.335823][ T5863] usb 4-1: config 156 interface 95 has no altsetting 0 [ 888.344451][T17782] bridge_slave_0: left promiscuous mode [ 888.356043][ T5863] usb 4-1: string descriptor 0 read error: -71 [ 888.387649][ T5863] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=48.5a [ 888.406394][T17787] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3078'. [ 889.384781][T17782] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.416877][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.503041][ T5863] usb 4-1: can't set config #156, error -71 [ 889.641908][ T5863] usb 4-1: USB disconnect, device number 101 [ 889.693459][T17782] bridge_slave_1: left allmulticast mode [ 889.734375][T17782] bridge_slave_1: left promiscuous mode [ 889.750728][T17782] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.940697][T17782] bond0: (slave bond_slave_0): Releasing backup interface [ 889.995798][ T5811] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 891.245919][ T5811] usb 7-1: Using ep0 maxpacket: 32 [ 891.254408][ T5811] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.264739][ T5811] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 891.328339][ T5811] usb 7-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 891.339094][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.348174][ T5811] usb 7-1: Product: syz [ 891.353218][ T5811] usb 7-1: Manufacturer: syz [ 891.366077][ T5811] usb 7-1: SerialNumber: syz [ 891.381781][T17782] bond0: (slave bond_slave_1): Releasing backup interface [ 891.390617][ T5811] usb 7-1: config 0 descriptor?? [ 891.514645][T17782] team0: Port device team_slave_0 removed [ 891.556091][T17782] team0: Port device team_slave_1 removed [ 891.969877][T17782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.996585][T17782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.020085][T17782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.037761][T17782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.060920][T17782] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 892.400956][ T5811] usb 7-1: USB disconnect, device number 8 [ 895.176294][ T30] audit: type=1326 audit(1774713167.614:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 895.286931][T17839] ubi: mtd0 is already attached to ubi31 [ 895.508740][ T30] audit: type=1326 audit(1774713167.644:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 895.671956][T17842] IPVS: length: 218 != 24 [ 895.696537][ T30] audit: type=1326 audit(1774713167.644:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 895.852273][ T30] audit: type=1326 audit(1774713167.644:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 896.290219][ T30] audit: type=1326 audit(1774713167.644:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 896.314718][ T30] audit: type=1326 audit(1774713167.644:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 896.386022][ T30] audit: type=1326 audit(1774713167.644:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 896.472586][ T30] audit: type=1326 audit(1774713167.644:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 896.498915][ T30] audit: type=1326 audit(1774713167.644:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 896.538425][ T30] audit: type=1326 audit(1774713167.644:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17836 comm="syz.4.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 897.529601][T17866] 9pnet_virtio: no channels available for device syz [ 898.485765][ T793] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 898.665535][T17865] syzkaller0: entered promiscuous mode [ 898.671158][ T793] usb 6-1: Using ep0 maxpacket: 32 [ 898.678257][T17865] syzkaller0: entered allmulticast mode [ 898.684688][ T793] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.696936][ T793] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 898.715090][ T793] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 898.826623][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.261071][ T793] usb 6-1: Product: syz [ 899.265292][ T793] usb 6-1: Manufacturer: syz [ 899.270006][ T793] usb 6-1: SerialNumber: syz [ 899.276962][ T793] usb 6-1: config 0 descriptor?? [ 905.537737][T17899] fuse: Unknown parameter '0x000000000000000b' [ 907.270445][T13679] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 907.471840][T13679] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 907.665838][T13679] usb 4-1: can't read configurations, error -22 [ 907.812675][ T793] usb 6-1: USB disconnect, device number 35 [ 907.825767][T13679] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 908.534737][T13679] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 908.561667][T13679] usb 4-1: can't read configurations, error -22 [ 908.584720][T13679] usb usb4-port1: attempt power cycle [ 908.592523][T17939] FAULT_INJECTION: forcing a failure. [ 908.592523][T17939] name failslab, interval 1, probability 0, space 0, times 0 [ 908.605491][T17939] CPU: 1 UID: 0 PID: 17939 Comm: syz.0.3117 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.605520][T17939] Tainted: [L]=SOFTLOCKUP [ 908.605525][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 908.605535][T17939] Call Trace: [ 908.605542][T17939] [ 908.605549][T17939] dump_stack_lvl+0x100/0x190 [ 908.605581][T17939] should_fail_ex.cold+0x5/0xa [ 908.605604][T17939] should_failslab+0xc2/0x120 [ 908.605622][T17939] __kvmalloc_node_noprof+0xfa/0xa00 [ 908.605646][T17939] ? seq_read_iter+0x819/0x1270 [ 908.605672][T17939] seq_read_iter+0x819/0x1270 [ 908.605689][T17939] ? register_lock_class+0x40/0x560 [ 908.605717][T17939] seq_read+0x33b/0x4c0 [ 908.605735][T17939] ? __pfx_seq_read+0x10/0x10 [ 908.605761][T17939] ? selinux_file_permission+0x8f/0x6d0 [ 908.605791][T17939] ? __pfx_seq_read+0x10/0x10 [ 908.605808][T17939] proc_reg_read+0x240/0x330 [ 908.605828][T17939] ? __pfx_proc_reg_read+0x10/0x10 [ 908.605848][T17939] vfs_read+0x1e4/0xb30 [ 908.605877][T17939] ? __pfx_vfs_read+0x10/0x10 [ 908.605902][T17939] ? __fget_files+0x215/0x3d0 [ 908.605925][T17939] ? __fget_files+0x21f/0x3d0 [ 908.605949][T17939] ksys_read+0x12a/0x250 [ 908.605964][T17939] ? __pfx_ksys_read+0x10/0x10 [ 908.605986][T17939] do_syscall_64+0x106/0xf80 [ 908.606010][T17939] ? clear_bhb_loop+0x40/0x90 [ 908.606031][T17939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.606049][T17939] RIP: 0033:0x7fb45cb9c799 [ 908.606065][T17939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.606080][T17939] RSP: 002b:00007fb45d98b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 908.606097][T17939] RAX: ffffffffffffffda RBX: 00007fb45ce16090 RCX: 00007fb45cb9c799 [ 908.606108][T17939] RDX: 0000000000002020 RSI: 00002000000020c0 RDI: 0000000000000005 [ 908.606118][T17939] RBP: 00007fb45d98b090 R08: 0000000000000000 R09: 0000000000000000 [ 908.606127][T17939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.606136][T17939] R13: 00007fb45ce16128 R14: 00007fb45ce16090 R15: 00007ffd2e3fa328 [ 908.606160][T17939] [ 909.222393][T13679] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 909.458356][T13679] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 909.477461][T13679] usb 4-1: can't read configurations, error -71 [ 910.001476][T17954] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3123'. [ 910.816197][ C1] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 912.557768][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 912.557782][ T30] audit: type=1400 audit(1774713184.994:3020): avc: denied { append } for pid=17964 comm="syz.3.3125" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 912.896793][T13679] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 913.176173][T13679] usb 1-1: Using ep0 maxpacket: 32 [ 913.327070][T13679] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.494514][T13679] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 913.588505][T13679] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 913.609622][T13679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.712007][T13679] usb 1-1: Product: syz [ 913.801910][T13679] usb 1-1: Manufacturer: syz [ 913.806988][T13679] usb 1-1: SerialNumber: syz [ 913.820246][T13679] usb 1-1: config 0 descriptor?? [ 913.833620][ T30] audit: type=1400 audit(1774713186.264:3021): avc: denied { watch } for pid=17978 comm="syz.4.3119" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 914.899294][T17986] FAULT_INJECTION: forcing a failure. [ 914.899294][T17986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.936888][T17986] CPU: 1 UID: 0 PID: 17986 Comm: syz.4.3131 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.936919][T17986] Tainted: [L]=SOFTLOCKUP [ 914.936924][T17986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 914.936934][T17986] Call Trace: [ 914.936940][T17986] [ 914.936946][T17986] dump_stack_lvl+0x100/0x190 [ 914.936978][T17986] should_fail_ex.cold+0x5/0xa [ 914.937005][T17986] _copy_to_iter+0x5a4/0x1720 [ 914.937027][T17986] ? __pfx__copy_to_iter+0x10/0x10 [ 914.937042][T17986] ? vlan_seq_from_index+0x189/0x230 [ 914.937067][T17986] ? find_held_lock+0x2b/0x80 [ 914.937088][T17986] ? vlan_seq_stop+0x31/0xb0 [ 914.937107][T17986] ? vlan_seq_stop+0x31/0xb0 [ 914.937130][T17986] seq_read_iter+0xdab/0x1270 [ 914.937155][T17986] seq_read+0x33b/0x4c0 [ 914.937170][T17986] ? __pfx_seq_read+0x10/0x10 [ 914.937195][T17986] ? selinux_file_permission+0x8f/0x6d0 [ 914.937221][T17986] ? __pfx_seq_read+0x10/0x10 [ 914.937236][T17986] proc_reg_read+0x240/0x330 [ 914.937254][T17986] ? __pfx_proc_reg_read+0x10/0x10 [ 914.937270][T17986] vfs_read+0x1e4/0xb30 [ 914.937298][T17986] ? __pfx_vfs_read+0x10/0x10 [ 914.937320][T17986] ? __fget_files+0x215/0x3d0 [ 914.937342][T17986] ? __fget_files+0x21f/0x3d0 [ 914.937365][T17986] ksys_read+0x12a/0x250 [ 914.937380][T17986] ? __pfx_ksys_read+0x10/0x10 [ 914.937401][T17986] do_syscall_64+0x106/0xf80 [ 914.937423][T17986] ? clear_bhb_loop+0x40/0x90 [ 914.937444][T17986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.937459][T17986] RIP: 0033:0x7fbd2a99c799 [ 914.937473][T17986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.937488][T17986] RSP: 002b:00007fbd2b818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 914.937504][T17986] RAX: ffffffffffffffda RBX: 00007fbd2ac16090 RCX: 00007fbd2a99c799 [ 914.937515][T17986] RDX: 0000000000002020 RSI: 00002000000020c0 RDI: 0000000000000005 [ 914.937524][T17986] RBP: 00007fbd2b818090 R08: 0000000000000000 R09: 0000000000000000 [ 914.937533][T17986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.937542][T17986] R13: 00007fbd2ac16128 R14: 00007fbd2ac16090 R15: 00007ffe505475f8 [ 914.937569][T17986] [ 914.952198][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 914.956075][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 914.959089][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 915.002201][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 915.003007][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 915.153095][T13679] usb 1-1: USB disconnect, device number 71 [ 915.595873][T13679] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 915.867170][T13679] usb 7-1: Using ep0 maxpacket: 16 [ 915.871981][T13679] usb 7-1: config 1 interface 0 altsetting 70 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 915.872016][T13679] usb 7-1: config 1 interface 0 has no altsetting 0 [ 915.873750][T13679] usb 7-1: New USB device found, idVendor=2087, idProduct=0703, bcdDevice= 0.40 [ 915.873776][T13679] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.873797][T13679] usb 7-1: Product: 泹㑒ﯶ叏伫꡶ሎ䀜暩ऒ伺矦痝葉蹤糖쐢밵ᗙ갬䅾籘쪰䗂桾陛嬟壳呝璆嗌쨒辛닞笝讎鷋ḋㆆ段㕲蚲뤐렄◘⃗덒Ꝯ懖佩ᚙ谍⒥粼厓㊟ᨒ似옐Ꞌ숩잊紁혾뉴堶鮹竧袅カꇾ瘻㹠ᬣ͙褽쑚໕喼꿘ἧ⼩粇ﴉ놇᧳⻜瞡띞釰邬⾍锋尚襠罫㏇阭巌ᧆ猧癲泼ᚄஹ [ 915.873832][T13679] usb 7-1: Manufacturer: ဌ [ 915.873847][T13679] usb 7-1: SerialNumber: syz [ 916.361702][T17991] chnl_net:caif_netlink_parms(): no params data found [ 916.476300][T18000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.476632][T18000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.532329][T13679] usbhid 7-1:1.0: can't add hid device: -71 [ 916.532415][T13679] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 916.625815][T13679] usb 7-1: USB disconnect, device number 9 [ 917.057492][ T5823] Bluetooth: hci1: command tx timeout [ 917.362930][T17991] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.362998][T17991] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.363102][T17991] bridge_slave_0: entered allmulticast mode [ 917.372969][T17991] bridge_slave_0: entered promiscuous mode [ 917.407773][T18021] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 917.410290][T17991] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.410339][T17991] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.410460][T17991] bridge_slave_1: entered allmulticast mode [ 917.411227][T17991] bridge_slave_1: entered promiscuous mode [ 917.426888][T17991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.431794][T17991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.456980][T17991] team0: Port device team_slave_0 added [ 917.459262][T17991] team0: Port device team_slave_1 added [ 917.858304][T17991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.858326][T17991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.858349][T17991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.859700][T17991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.859713][T17991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.859732][T17991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.013630][T17991] hsr_slave_0: entered promiscuous mode [ 918.422641][T17991] hsr_slave_1: entered promiscuous mode [ 918.431357][T17991] debugfs: 'hsr0' already exists in 'hsr' [ 918.431383][T17991] Cannot create hsr debugfs directory [ 918.688479][T14476] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.982896][T18043] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 918.991349][T18043] tipc: Started in network mode [ 918.991432][T18043] tipc: Node identity 84e, cluster identity 4711 [ 918.991458][T18043] tipc: Node number set to 2126 [ 919.381565][ T5823] Bluetooth: hci1: command tx timeout [ 919.448045][T14476] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.577586][T14476] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.787520][T14476] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.485892][ T5823] Bluetooth: hci1: command tx timeout [ 923.535803][ T5823] Bluetooth: hci1: command tx timeout [ 924.043246][T14476] bond0 (unregistering): Released all slaves [ 924.059644][ T30] audit: type=1400 audit(1774713196.484:3022): avc: denied { ioctl } for pid=18096 comm="syz.6.3151" path="socket:[61739]" dev="sockfs" ino=61739 ioctlcmd=0x6e8b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 924.074042][T14476] bond1 (unregistering): Released all slaves [ 924.173744][T14476] bond2 (unregistering): Released all slaves [ 924.297618][ T30] audit: type=1400 audit(1774713196.574:3023): avc: denied { read } for pid=18096 comm="syz.6.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 924.350286][T18104] FAULT_INJECTION: forcing a failure. [ 924.350286][T18104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.368370][T18104] CPU: 0 UID: 0 PID: 18104 Comm: syz.0.3152 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.368400][T18104] Tainted: [L]=SOFTLOCKUP [ 924.368405][T18104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 924.368412][T18104] Call Trace: [ 924.368416][T18104] [ 924.368421][T18104] dump_stack_lvl+0x100/0x190 [ 924.368444][T18104] should_fail_ex.cold+0x5/0xa [ 924.368461][T18104] _copy_to_user+0x32/0xd0 [ 924.368475][T18104] simple_read_from_buffer+0xcb/0x170 [ 924.368489][T18104] proc_fail_nth_read+0x1af/0x230 [ 924.368507][T18104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 924.368524][T18104] ? rw_verify_area+0xce/0x6d0 [ 924.368542][T18104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 924.368558][T18104] vfs_read+0x1e4/0xb30 [ 924.368577][T18104] ? __pfx_vfs_read+0x10/0x10 [ 924.368594][T18104] ? __fget_files+0x215/0x3d0 [ 924.368610][T18104] ? __fget_files+0x21f/0x3d0 [ 924.368626][T18104] ksys_read+0x12a/0x250 [ 924.368637][T18104] ? __pfx_ksys_read+0x10/0x10 [ 924.368651][T18104] do_syscall_64+0x106/0xf80 [ 924.368669][T18104] ? clear_bhb_loop+0x40/0x90 [ 924.368683][T18104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.368695][T18104] RIP: 0033:0x7fb45cb5cfce [ 924.368706][T18104] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 924.368717][T18104] RSP: 002b:00007fb45d9abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 924.368729][T18104] RAX: ffffffffffffffda RBX: 00007fb45d9ac6c0 RCX: 00007fb45cb5cfce [ 924.368736][T18104] RDX: 000000000000000f RSI: 00007fb45d9ac0a0 RDI: 0000000000000007 [ 924.368743][T18104] RBP: 00007fb45d9ac090 R08: 0000000000000000 R09: 0000000000000000 [ 924.368750][T18104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.368756][T18104] R13: 00007fb45ce16038 R14: 00007fb45ce15fa0 R15: 00007ffd2e3fa328 [ 924.368770][T18104] [ 924.970130][T14476] tipc: Left network mode [ 925.196000][T18111] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 925.588036][T14476] IPVS: stopping backup sync thread 14656 ... [ 926.269985][T18127] FAULT_INJECTION: forcing a failure. [ 926.269985][T18127] name failslab, interval 1, probability 0, space 0, times 0 [ 926.282880][T18127] CPU: 0 UID: 0 PID: 18127 Comm: syz.4.3155 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.282909][T18127] Tainted: [L]=SOFTLOCKUP [ 926.282916][T18127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 926.282928][T18127] Call Trace: [ 926.282935][T18127] [ 926.282943][T18127] dump_stack_lvl+0x100/0x190 [ 926.282977][T18127] should_fail_ex.cold+0x5/0xa [ 926.283002][T18127] ? tomoyo_encode2+0xfb/0x3c0 [ 926.283028][T18127] should_failslab+0xc2/0x120 [ 926.283048][T18127] __kmalloc_noprof+0xe0/0x850 [ 926.283073][T18127] ? d_absolute_path+0x136/0x1b0 [ 926.283105][T18127] tomoyo_encode2+0xfb/0x3c0 [ 926.283136][T18127] tomoyo_encode+0x29/0x50 [ 926.283161][T18127] tomoyo_realpath_from_path+0x18c/0x690 [ 926.283195][T18127] tomoyo_path_number_perm+0x23c/0x580 [ 926.283218][T18127] ? tomoyo_path_number_perm+0x22e/0x580 [ 926.283243][T18127] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 926.283291][T18127] ? find_held_lock+0x2b/0x80 [ 926.283315][T18127] ? __fget_files+0x215/0x3d0 [ 926.283333][T18127] ? hook_file_ioctl_common+0x146/0x410 [ 926.283358][T18127] ? __fget_files+0x21f/0x3d0 [ 926.283382][T18127] security_file_ioctl+0xd3/0x230 [ 926.283410][T18127] __x64_sys_ioctl+0xb7/0x210 [ 926.283439][T18127] do_syscall_64+0x106/0xf80 [ 926.283465][T18127] ? clear_bhb_loop+0x40/0x90 [ 926.283488][T18127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.283508][T18127] RIP: 0033:0x7fbd2a99c799 [ 926.283523][T18127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.283541][T18127] RSP: 002b:00007fbd2b818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 926.283565][T18127] RAX: ffffffffffffffda RBX: 00007fbd2ac16090 RCX: 00007fbd2a99c799 [ 926.283576][T18127] RDX: 0000200000000a00 RSI: 00000000c05064a7 RDI: 0000000000000008 [ 926.283587][T18127] RBP: 00007fbd2b818090 R08: 0000000000000000 R09: 0000000000000000 [ 926.283598][T18127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.283608][T18127] R13: 00007fbd2ac16128 R14: 00007fbd2ac16090 R15: 00007ffe505475f8 [ 926.283633][T18127] [ 926.283866][T18127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 929.083579][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 929.722575][T17015] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 929.895732][T17015] usb 7-1: Using ep0 maxpacket: 32 [ 929.908239][T17015] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.948724][T17015] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 930.033716][T17015] usb 7-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 930.059840][T17015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.085756][T17015] usb 7-1: Product: syz [ 930.089963][T17015] usb 7-1: Manufacturer: syz [ 930.094601][T17015] usb 7-1: SerialNumber: syz [ 930.178816][T17991] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 930.199196][T18161] netlink: 'syz.0.3163': attribute type 21 has an invalid length. [ 930.239175][T17991] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 930.281124][T18162] netlink: 'syz.0.3163': attribute type 1 has an invalid length. [ 930.328738][T18161] netlink: 'syz.0.3163': attribute type 1 has an invalid length. [ 930.368368][T18161] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3163'. [ 930.421647][T17991] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 930.613315][T14476] hsr_slave_0: left promiscuous mode [ 930.633841][T14476] hsr_slave_1: left promiscuous mode [ 931.356263][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.812576][T14476] veth1_macvtap: left promiscuous mode [ 931.848610][T14476] veth0_macvtap: left promiscuous mode [ 931.873273][T14476] veth1_vlan: left promiscuous mode [ 931.898205][T14476] veth0_vlan: left promiscuous mode [ 932.685976][ T5877] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 933.119791][T18191] random: crng reseeded on system resumption [ 933.149112][ T5877] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 933.174518][ T5877] usb 6-1: config 0 has no interface number 0 [ 933.197359][ T5877] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 933.224917][ T5877] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 933.234742][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.254870][ T5877] usb 6-1: Product: syz [ 933.268362][ T5877] usb 6-1: Manufacturer: syz [ 933.288437][ T5877] usb 6-1: SerialNumber: syz [ 933.327712][ T5877] usb 6-1: config 0 descriptor?? [ 933.824965][ T5877] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 934.073648][ T5877] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 934.214764][ T5877] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 934.223177][ T30] audit: type=1400 audit(1774713206.664:3024): avc: denied { mounton } for pid=18210 comm="syz.4.3170" path=2F3131352FE91F7189591E9233614B dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 934.252842][ T5877] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 934.285349][ T5877] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 934.335522][ T5877] usb 6-1: USB disconnect, device number 36 [ 934.363974][ T5877] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 934.390400][ T5877] keyspan 6-1:0.133: device disconnected [ 935.635158][T17015] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 935.665742][T17991] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 935.716724][T17015] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 936.153121][T18241] : entered promiscuous mode [ 936.553345][T18247] gfs2: not a GFS2 filesystem [ 936.931208][T17991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.996272][T17015] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 937.027597][T17015] usb 7-1: USB disconnect, device number 10 [ 937.089491][T13231] udevd[13231]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 937.205194][T17991] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.306368][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.313557][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.012262][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.019553][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.401927][T18283] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3173'. [ 939.801475][T17991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.833084][T18284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3181'. [ 939.974936][T17991] veth0_vlan: entered promiscuous mode [ 939.997886][T17991] veth1_vlan: entered promiscuous mode [ 940.051679][T17991] veth0_macvtap: entered promiscuous mode [ 940.104202][T17991] veth1_macvtap: entered promiscuous mode [ 940.161134][T17991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.191021][T17991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.222581][T13650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.251183][T13650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.273432][T13650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.294712][T13650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.984684][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.035816][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.150203][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.181675][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.290476][T18305] ptrace attach of "./syz-executor exec"[16981] was attempted by "./syz-executor exec"[18305] [ 943.432765][ T30] audit: type=1400 audit(1774713215.754:3025): avc: denied { write } for pid=18301 comm="syz.0.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 943.677149][T17019] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 943.866461][ T5863] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 944.056170][ T5863] usb 6-1: device descriptor read/64, error -71 [ 944.310364][T17019] usb 1-1: Using ep0 maxpacket: 16 [ 944.330001][T17019] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 944.383015][T17019] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 944.412202][T17019] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.434901][T17019] usb 1-1: Product: syz [ 944.446231][T17019] usb 1-1: Manufacturer: syz [ 944.460639][T17019] usb 1-1: SerialNumber: syz [ 944.496254][T17019] usb 1-1: config 0 descriptor?? [ 944.589612][ T5863] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 944.669215][ T30] audit: type=1400 audit(1774713217.084:3026): avc: denied { accept } for pid=18314 comm="syz.6.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 944.755801][ T5863] usb 6-1: device descriptor read/64, error -71 [ 944.817103][T13684] usb 1-1: USB disconnect, device number 72 [ 944.866251][ T5863] usb usb6-port1: attempt power cycle [ 945.103025][T18329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3191'. [ 946.702157][ T5863] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 947.125799][ T5863] usb 6-1: device not accepting address 39, error -71 [ 947.178868][T18336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3193'. [ 947.715952][T18349] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 948.548420][T18358] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3198'. [ 948.569398][ T30] audit: type=1400 audit(1774713220.984:3027): avc: denied { nlmsg_read } for pid=18350 comm="syz.0.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 949.218951][T18372] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3202'. [ 950.015574][T18374] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3203'. [ 950.025888][T18374] atomic_op ffff888055745998 conn xmit_atomic 0000000000000000 [ 950.088307][T18371] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 950.095337][T18371] overlayfs: failed to set xattr on upper [ 950.653916][T18371] overlayfs: ...falling back to redirect_dir=nofollow. [ 950.687599][T18371] overlayfs: ...falling back to index=off. [ 950.693623][ T30] audit: type=1400 audit(1774713223.124:3028): avc: denied { bind } for pid=18376 comm="syz.5.3206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 950.759275][T18371] overlayfs: ...falling back to uuid=null. [ 950.896107][ T5863] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 951.028620][T13684] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 951.095745][ T5877] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 951.106270][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 951.113915][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.126894][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.205353][ T5863] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 951.225763][T13684] usb 6-1: Using ep0 maxpacket: 8 [ 951.232031][T13684] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 951.245705][T13684] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.267919][T18394] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 951.415236][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.442406][T13684] usb 6-1: config 0 has no interface number 0 [ 951.454774][ T5863] usb 4-1: config 0 descriptor?? [ 951.456005][ T5877] usb 7-1: unable to get BOS descriptor or descriptor too short [ 951.467921][T13684] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 951.502857][ T5877] usb 7-1: not running at top speed; connect to a high speed hub [ 951.520916][T13684] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 951.540938][ T5877] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 951.552597][T13684] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 951.645485][T13684] usb 6-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 951.654877][ T5877] usb 7-1: config 2 has 0 interfaces, different from the descriptor's value: 2 [ 951.673540][T13684] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 951.685484][T13684] usb 6-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 951.705055][ T5877] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 951.707941][T13684] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 951.728162][T13684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.734777][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.744767][ T5877] usb 7-1: Product: syz [ 951.744861][T13684] usb 6-1: Product: syz [ 951.760070][T13684] usb 6-1: Manufacturer: syz [ 951.765088][ T5877] usb 7-1: Manufacturer: syz [ 951.765098][T13684] usb 6-1: SerialNumber: syz [ 951.805520][ T5877] usb 7-1: SerialNumber: syz [ 951.806760][T13684] usb 6-1: config 0 descriptor?? [ 951.934505][ T5863] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 951.972810][T18377] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 951.996706][T18377] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 952.658160][T18397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3211'. [ 953.420208][T13684] usb 6-1: NFC: intf ffff8880222ca000 id ffffffff8f7c4180 [ 953.452851][T18381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.472843][T17019] usb 4-1: USB disconnect, device number 106 [ 953.557129][T18381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.559856][T13684] nfcmrvl 6-1:0.122: NFC: registered with nci successfully [ 953.613867][T13684] usb 6-1: USB disconnect, device number 41 [ 953.622955][T13684] usb 6-1: NFC: intf ffff8880222ca000 [ 953.856644][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 953.906902][T18411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.988942][T18411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.470268][ T5877] usb 7-1: USB disconnect, device number 11 [ 955.911595][T18427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3216'. [ 956.911331][T18425] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 956.917982][T18425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 956.936064][T18425] vhci_hcd vhci_hcd.0: Device attached [ 956.968365][T18429] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(14) [ 956.975022][T18429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 957.096147][T18429] vhci_hcd vhci_hcd.0: Device attached [ 957.126147][T18425] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(28) [ 957.132804][T18425] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 957.155893][T18425] vhci_hcd vhci_hcd.0: Device attached [ 957.177004][ T5877] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 957.193210][T18429] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(31) [ 957.199858][T18429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 957.892727][T18425] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(30) [ 957.899480][T18425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 957.956341][T18429] vhci_hcd vhci_hcd.0: Device attached [ 957.957350][T18425] vhci_hcd vhci_hcd.0: Device attached [ 958.586547][T18436] vhci_hcd: connection closed [ 958.589159][ T8192] vhci_hcd vhci_hcd.6: stop threads [ 958.605923][T18431] vhci_hcd: connection closed [ 958.606999][T18426] vhci_hcd: connection reset by peer [ 958.619376][ T8192] vhci_hcd vhci_hcd.6: release socket [ 958.624984][ T8192] vhci_hcd vhci_hcd.6: disconnect device [ 958.631107][ T8192] vhci_hcd vhci_hcd.6: stop threads [ 958.643793][ T8192] vhci_hcd vhci_hcd.6: release socket [ 958.660376][ T8192] vhci_hcd vhci_hcd.6: disconnect device [ 958.680506][ T8192] vhci_hcd vhci_hcd.6: stop threads [ 958.697484][ T8192] vhci_hcd vhci_hcd.6: release socket [ 958.712682][ T8192] vhci_hcd vhci_hcd.6: disconnect device [ 960.034757][T18448] vhci_hcd: connection closed [ 960.034840][T18444] vhci_hcd: connection closed [ 960.042405][ T36] vhci_hcd vhci_hcd.6: stop threads [ 960.054253][ T36] vhci_hcd vhci_hcd.6: release socket [ 960.075963][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 960.094334][ T36] vhci_hcd vhci_hcd.6: stop threads [ 960.141492][ T36] vhci_hcd vhci_hcd.6: release socket [ 960.155992][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 960.285711][ T30] audit: type=1400 audit(1774713232.714:3029): avc: denied { ioctl } for pid=18468 comm="syz.6.3228" path="/dev/ptyr0" dev="devtmpfs" ino=135 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 960.922374][T18479] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 961.169655][T18482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3229'. [ 962.500944][ T5877] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 963.049579][T18492] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 965.095860][T18507] xt_TCPMSS: Only works on TCP SYN packets [ 965.149575][T18507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18507 comm=syz.0.3236 [ 965.238024][T18508] Invalid ELF header type: 3 != 1 [ 966.286997][ T5877] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 966.455736][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 966.651374][ T5877] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 966.690756][ T5877] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 966.721955][ T5877] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 966.739219][ T5877] usb 6-1: config 1 interface 0 has no altsetting 0 [ 966.749147][ T5877] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 966.758833][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.768938][ T5877] usb 6-1: Product: syz [ 966.773122][ T5877] usb 6-1: Manufacturer: syz [ 966.849772][ T5877] usb 6-1: SerialNumber: syz [ 966.920381][T18524] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3240'. [ 967.880917][ T5877] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 968.101468][ T5877] usb 6-1: USB disconnect, device number 42 [ 968.144941][T18529] i2c i2c-0: Invalid block write size 255 [ 968.166562][ T5877] usblp0: removed [ 968.358977][T18531] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 968.575495][T18536] netlink: 'syz.4.3244': attribute type 10 has an invalid length. [ 968.585335][T18536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3244'. [ 969.174780][T18540] tipc: Started in network mode [ 969.181888][T18540] tipc: Node identity 82681f344021, cluster identity 4711 [ 969.189118][T18540] tipc: Enabled bearer , priority 0 [ 969.266990][T18549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 969.300283][T18540] syzkaller0: entered promiscuous mode [ 969.305864][T18540] syzkaller0: entered allmulticast mode [ 969.429966][T18546] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 969.649595][T18539] tipc: Resetting bearer [ 969.846568][T18539] tipc: Disabling bearer [ 970.614834][T18566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3252'. [ 971.724370][T18567] FAULT_INJECTION: forcing a failure. [ 971.724370][T18567] name failslab, interval 1, probability 0, space 0, times 0 [ 971.737927][T18567] CPU: 0 UID: 0 PID: 18567 Comm: syz.4.3253 Tainted: G L syzkaller #0 PREEMPT(full) [ 971.737962][T18567] Tainted: [L]=SOFTLOCKUP [ 971.737969][T18567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 971.737980][T18567] Call Trace: [ 971.737987][T18567] [ 971.737994][T18567] dump_stack_lvl+0x100/0x190 [ 971.738031][T18567] should_fail_ex.cold+0x5/0xa [ 971.738058][T18567] should_failslab+0xc2/0x120 [ 971.738078][T18567] __kmalloc_cache_noprof+0x7a/0x6f0 [ 971.738103][T18567] ? drm_mode_duplicate+0x47/0x200 [ 971.738128][T18567] drm_mode_duplicate+0x47/0x200 [ 971.738148][T18567] drm_add_modes_noedid+0x167/0x200 [ 971.738179][T18567] vkms_conn_get_modes+0x20/0x40 [ 971.738203][T18567] drm_helper_probe_single_connector_modes+0x576/0x16a0 [ 971.738247][T18567] ? __mutex_lock+0x26a/0x1b90 [ 971.738279][T18567] ? __pfx_drm_helper_probe_single_connector_modes+0x10/0x10 [ 971.738308][T18567] ? drm_master_put+0x7c/0xd0 [ 971.738343][T18567] ? drm_is_current_master+0x2c/0x40 [ 971.738365][T18567] ? drm_is_current_master+0x2c/0x40 [ 971.738390][T18567] ? __pfx_drm_helper_probe_single_connector_modes+0x10/0x10 [ 971.738422][T18567] drm_mode_getconnector+0x753/0x1560 [ 971.738453][T18567] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 971.738482][T18567] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 971.738515][T18567] ? drm_dev_exit+0x41/0x60 [ 971.738535][T18567] ? drm_dev_exit+0x41/0x60 [ 971.738560][T18567] drm_ioctl_kernel+0x1f3/0x3e0 [ 971.738580][T18567] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 971.738610][T18567] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 971.738638][T18567] drm_ioctl+0x5e6/0xc60 [ 971.738662][T18567] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 971.738691][T18567] ? __pfx_drm_ioctl+0x10/0x10 [ 971.738722][T18567] ? selinux_file_ioctl+0x139/0x290 [ 971.738749][T18567] ? selinux_file_ioctl+0xb4/0x290 [ 971.738777][T18567] ? __pfx_drm_ioctl+0x10/0x10 [ 971.738798][T18567] __x64_sys_ioctl+0x18e/0x210 [ 971.738829][T18567] do_syscall_64+0x106/0xf80 [ 971.738855][T18567] ? clear_bhb_loop+0x40/0x90 [ 971.738878][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.738896][T18567] RIP: 0033:0x7fbd2a99c799 [ 971.738913][T18567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.738931][T18567] RSP: 002b:00007fbd2b818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.738950][T18567] RAX: ffffffffffffffda RBX: 00007fbd2ac16090 RCX: 00007fbd2a99c799 [ 971.738961][T18567] RDX: 0000200000000a00 RSI: 00000000c05064a7 RDI: 0000000000000008 [ 971.738972][T18567] RBP: 00007fbd2b818090 R08: 0000000000000000 R09: 0000000000000000 [ 971.738982][T18567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 971.738993][T18567] R13: 00007fbd2ac16128 R14: 00007fbd2ac16090 R15: 00007ffe505475f8 [ 971.739018][T18567] [ 973.482294][T18594] xt_l2tp: v2 tid > 0xffff: 134217728 [ 973.782488][T18604] vlan0: entered promiscuous mode [ 973.796539][T18604] bridge0: entered promiscuous mode [ 973.835770][T17019] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 974.244957][T17019] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 974.256905][T17019] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.272254][T17019] usb 7-1: Product: syz [ 974.278100][T17019] usb 7-1: Manufacturer: syz [ 974.282761][T17019] usb 7-1: SerialNumber: syz [ 974.289871][T17019] usb 7-1: config 0 descriptor?? [ 974.297704][T17019] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 974.309101][T17019] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 974.319235][T17019] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 974.328534][T17019] usb 7-1: media controller created [ 974.404262][T17019] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 975.328626][T18611] dvb-usb: bulk message failed: -22 (7/0) [ 975.509264][T17019] DVB: Unable to find symbol mt352_attach() [ 975.830333][T17019] DVB: Unable to find symbol nxt6000_attach() [ 975.843963][T17019] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 975.854312][T18614] Invalid ELF header type: 3 != 1 [ 975.873736][T17019] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input54 [ 975.886696][T17019] dvb-usb: schedule remote query interval to 1000 msecs. [ 975.893754][T17019] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 976.082951][T18621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3266'. [ 976.933753][ T5811] dvb-usb: bulk message failed: -22 (7/0) [ 976.941912][ T5811] dvb-usb: error while querying for an remote control event. [ 976.956211][T17019] dvb-usb: bulk message failed: -22 (7/0) [ 976.961982][T17019] dvb-usb: bulk message failed: -22 (7/0) [ 976.973458][T17019] usb 7-1: USB disconnect, device number 12 [ 977.321889][ T5811] kernel read not supported for file /bluetooth/6lowpan_control (pid: 5811 comm: kworker/0:3) [ 977.332853][T17015] kernel write not supported for file /bluetooth/6lowpan_control (pid: 17015 comm: kworker/0:0) [ 977.530433][T18628] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 977.540544][T17019] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 977.720600][ T30] audit: type=1326 audit(1774713250.154:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18637 comm="syz.5.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 977.799564][ T30] audit: type=1326 audit(1774713250.154:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18637 comm="syz.5.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 977.825843][ T5863] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 977.960149][T18640] ubi: mtd0 is already attached to ubi31 [ 978.213687][ T30] audit: type=1326 audit(1774713250.184:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18637 comm="syz.5.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 978.335741][ T30] audit: type=1326 audit(1774713250.184:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18637 comm="syz.5.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 978.411840][ T30] audit: type=1326 audit(1774713250.184:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18637 comm="syz.5.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 978.438328][ T30] audit: type=1326 audit(1774713250.184:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18637 comm="syz.5.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 978.472715][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.521549][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.535417][ T30] audit: type=1326 audit(1774713250.194:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18637 comm="syz.5.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 978.605731][ T30] audit: type=1326 audit(1774713250.194:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18637 comm="syz.5.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 978.615730][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 978.733351][ T5863] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 978.764146][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.772309][ T30] audit: type=1326 audit(1774713250.194:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18637 comm="syz.5.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 978.772358][ T30] audit: type=1326 audit(1774713250.194:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18637 comm="syz.5.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 978.918119][ T5863] usb 1-1: config 0 descriptor?? [ 978.933101][T18645] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 978.976718][T17019] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 978.999801][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3268'. [ 979.206913][T17019] usb 4-1: Using ep0 maxpacket: 8 [ 979.360623][T17019] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 979.450116][T17019] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 979.478113][T17019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.495887][T17019] usb 4-1: Product: syz [ 979.502891][T17019] usb 4-1: Manufacturer: syz [ 979.511521][T17019] usb 4-1: SerialNumber: syz [ 979.540489][ T5863] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 979.587666][T17019] ch9200 4-1:2.0: probe with driver ch9200 failed with error -22 [ 979.730569][T18656] netlink: 'syz.0.3271': attribute type 5 has an invalid length. [ 979.872726][T18643] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 981.890884][ C1] plantronics 0003:047F:FFFF.001A: usb_submit_urb(ctrl) failed: -1 [ 982.250847][T18679] ubi: mtd0 is already attached to ubi31 [ 982.385011][ T5823] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 982.397872][ T5823] Bluetooth: hci1: Injecting HCI hardware error event [ 982.410520][ T51] Bluetooth: hci1: hardware error 0x00 [ 982.693045][T17019] usb 1-1: USB disconnect, device number 73 [ 982.748620][T18671] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 983.309625][T18700] Invalid ELF header type: 3 != 1 [ 983.990123][T18701] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 984.028626][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 984.028640][ T30] audit: type=1400 audit(1774713256.454:3126): avc: denied { unmount } for pid=15413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 984.545755][ T793] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 984.655889][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 985.189463][ T793] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 985.210969][ T793] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 985.242787][T18721] No such timeout policy "syz1" [ 985.291592][ T793] usb 6-1: Product: syz [ 985.302054][ T793] usb 6-1: Manufacturer: syz [ 985.306757][ T793] usb 6-1: SerialNumber: syz [ 985.320259][ T793] usb 6-1: config 0 descriptor?? [ 985.603570][T18705] can0: slcan on ptm0. [ 985.616803][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3293'. [ 985.689402][T18731] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 985.725755][ T793] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 985.981836][T18704] can0 (unregistered): slcan off ptm0. [ 985.993203][ T793] usb 5-1: Using ep0 maxpacket: 32 [ 986.023187][ T793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.028538][ T5891] usb 6-1: USB disconnect, device number 43 [ 986.069055][ T793] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 986.099087][ T793] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 986.126849][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.200997][ T793] usb 5-1: Product: syz [ 986.205215][ T793] usb 5-1: Manufacturer: syz [ 986.226222][ T793] usb 5-1: SerialNumber: syz [ 986.296236][ T793] usb 5-1: config 0 descriptor?? [ 986.489266][T18754] Invalid ELF header type: 3 != 1 [ 987.209170][T18763] netlink: 'syz.0.3298': attribute type 11 has an invalid length. [ 987.917467][ T30] audit: type=1326 audit(1774713260.354:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18770 comm="syz.5.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 987.954089][ T793] usb 5-1: USB disconnect, device number 44 [ 988.100197][ T30] audit: type=1326 audit(1774713260.384:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18770 comm="syz.5.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 988.171111][ T30] audit: type=1326 audit(1774713260.384:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18770 comm="syz.5.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 988.245712][ T30] audit: type=1326 audit(1774713260.384:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18770 comm="syz.5.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 988.295537][ T30] audit: type=1326 audit(1774713260.384:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18770 comm="syz.5.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 988.329892][ T30] audit: type=1326 audit(1774713260.384:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18770 comm="syz.5.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 988.423710][ T30] audit: type=1326 audit(1774713260.384:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18770 comm="syz.5.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 988.474336][ T30] audit: type=1326 audit(1774713260.384:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18770 comm="syz.5.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 988.540601][ T30] audit: type=1326 audit(1774713260.384:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18770 comm="syz.5.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03939c799 code=0x7ffc0000 [ 989.017973][T17019] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 989.547395][T17019] usb 5-1: config 246 has an invalid interface number: 166 but max is 0 [ 989.746061][T17019] usb 5-1: config 246 has an invalid descriptor of length 55, skipping remainder of the config [ 989.915755][T17019] usb 5-1: config 246 has no interface number 0 [ 989.932323][T17019] usb 5-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid maxpacket 27430, setting to 64 [ 989.955974][T18794] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 989.985895][T17019] usb 5-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 990.058994][T17019] usb 5-1: config 246 interface 166 has no altsetting 0 [ 990.101315][T17019] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 990.125156][T17019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.138187][T17019] usb 5-1: Product: syz [ 990.142381][T17019] usb 5-1: Manufacturer: syz [ 990.150911][T17019] usb 5-1: SerialNumber: syz [ 990.237396][ T5891] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 990.385039][ T5891] usb 1-1: device descriptor read/64, error -71 [ 990.645740][ T5891] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 990.765713][T17019] usb 5-1: Limiting number of CPorts to U8_MAX [ 990.773561][T17019] usb 5-1: Unknown endpoint type found, address 0x0b [ 990.784663][T17019] usb 5-1: Not enough endpoints found in device, aborting! [ 990.786990][ T5891] usb 1-1: device descriptor read/64, error -71 [ 990.936210][ T5891] usb usb1-port1: attempt power cycle [ 990.994780][T17019] usb 5-1: USB disconnect, device number 45 [ 991.198530][T18821] Invalid ELF header type: 3 != 1 [ 991.279453][ T5891] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 991.328830][ T5891] usb 1-1: device descriptor read/8, error -71 [ 991.552842][T18827] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=6 [ 991.725987][ T5891] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 991.766214][ T5891] usb 1-1: device descriptor read/8, error -71 [ 991.794806][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 991.794824][ T30] audit: type=1326 audit(1774713264.224:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 991.898788][ T5891] usb usb1-port1: unable to enumerate USB device [ 991.901529][T18835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.914848][ T30] audit: type=1326 audit(1774713264.224:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 991.940306][T18835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.086222][ T30] audit: type=1326 audit(1774713264.264:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 992.131581][ T30] audit: type=1326 audit(1774713264.264:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 992.160475][ T30] audit: type=1326 audit(1774713264.274:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 992.185317][ T30] audit: type=1326 audit(1774713264.274:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 992.213167][ T30] audit: type=1326 audit(1774713264.274:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 992.237260][ T30] audit: type=1326 audit(1774713264.284:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 992.262295][ T30] audit: type=1326 audit(1774713264.284:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 992.304059][ T30] audit: type=1326 audit(1774713264.284:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18831 comm="syz.4.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 992.739114][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.739422][T17019] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 992.965446][T17019] usb 5-1: config 246 has an invalid interface number: 166 but max is 0 [ 992.979888][T17019] usb 5-1: config 246 has an invalid descriptor of length 158, skipping remainder of the config [ 993.037313][T17019] usb 5-1: config 246 has no interface number 0 [ 993.053498][T17019] usb 5-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid maxpacket 2745, setting to 64 [ 993.083008][T17019] usb 5-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 993.124243][T17019] usb 5-1: config 246 interface 166 has no altsetting 0 [ 993.155447][T17019] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 993.182644][T17019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.202478][T17019] usb 5-1: Product: syz [ 993.217177][T17019] usb 5-1: Manufacturer: syz [ 993.232602][T17019] usb 5-1: SerialNumber: syz [ 993.862461][T18865] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=6 [ 993.946238][T18866] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 993.952881][T18866] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 993.960822][T18866] vhci_hcd vhci_hcd.0: Device attached [ 994.082401][T17019] usb 5-1: Limiting number of CPorts to U8_MAX [ 994.106642][T17019] usb 5-1: Unknown endpoint type found, address 0x0b [ 994.113391][T17019] usb 5-1: Not enough endpoints found in device, aborting! [ 994.629403][T18867] vhci_hcd: connection closed [ 994.631321][ T36] vhci_hcd vhci_hcd.3: stop threads [ 994.668439][ T36] vhci_hcd vhci_hcd.3: release socket [ 994.687528][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 994.952249][T18871] Invalid ELF header type: 3 != 1 [ 994.977797][T17015] usb 5-1: USB disconnect, device number 46 [ 995.205006][T18878] ubi: mtd0 is already attached to ubi31 [ 995.466367][T18885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3329'. [ 995.576536][T18886] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 995.894461][T18885] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 996.537887][T18895] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=6 [ 998.212270][ T30] kauditd_printk_skb: 147 callbacks suppressed [ 998.212287][ T30] audit: type=1326 audit(1774713270.644:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18909 comm="syz.4.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 998.452327][T18913] ubi: mtd0 is already attached to ubi31 [ 998.558045][ T30] audit: type=1326 audit(1774713270.684:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18909 comm="syz.4.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 998.623315][ T30] audit: type=1326 audit(1774713270.684:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18909 comm="syz.4.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 998.655071][ T30] audit: type=1326 audit(1774713270.684:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18909 comm="syz.4.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 998.815797][ T30] audit: type=1326 audit(1774713270.684:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18909 comm="syz.4.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 998.841540][ T30] audit: type=1326 audit(1774713270.684:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18909 comm="syz.4.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 998.866552][ T30] audit: type=1326 audit(1774713270.684:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18909 comm="syz.4.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 998.989303][ T30] audit: type=1326 audit(1774713270.684:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18909 comm="syz.4.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 999.562458][T18922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.615130][ T5891] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 999.643811][ T30] audit: type=1326 audit(1774713270.684:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18909 comm="syz.4.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 999.676467][T18922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.739670][ T30] audit: type=1326 audit(1774713270.684:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18909 comm="syz.4.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2a99c799 code=0x7ffc0000 [ 999.768498][ T5891] usb 6-1: unable to get BOS descriptor or descriptor too short [ 999.806265][ T5891] usb 6-1: config 197 has an invalid interface number: 211 but max is 0 [ 999.838408][ T5891] usb 6-1: config 197 has no interface number 0 [ 999.844717][ T5891] usb 6-1: config 197 interface 211 has no altsetting 0 [ 999.869685][ T5891] usb 6-1: string descriptor 0 read error: -22 [ 999.885844][ T5891] usb 6-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=b1.cd [ 999.902603][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.934261][ T5891] gspca_main: tv8532-2.14.0 probing 0923:010f [ 1000.003853][T18927] Invalid ELF header type: 3 != 1 [ 1000.086523][ T793] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1000.317373][ T793] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.327779][ T793] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1000.361500][ T793] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1000.377934][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.405078][ T793] usb 7-1: config 0 descriptor?? [ 1000.416918][ T793] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1000.435717][ T793] dvb-usb: bulk message failed: -22 (3/0) [ 1000.465757][ T793] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1000.483102][ T793] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1000.514540][ T793] usb 7-1: media controller created [ 1000.528222][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1000.570195][ T793] dvb-usb: bulk message failed: -22 (6/0) [ 1000.585987][ T793] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1000.610021][ T793] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input55 [ 1000.650312][T18933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3342'. [ 1000.666619][ T793] dvb-usb: schedule remote query interval to 150 msecs. [ 1000.692498][ T793] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1000.737054][ T793] usb 7-1: USB disconnect, device number 13 [ 1000.794265][ T793] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1001.303007][T17015] usb 6-1: USB disconnect, device number 44 [ 1001.348120][ T793] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1001.832495][ T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.852137][ T793] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1002.071735][ T793] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1002.080873][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.089458][ T793] usb 1-1: Product: syz [ 1002.093734][ T793] usb 1-1: Manufacturer: syz [ 1002.098989][ T793] usb 1-1: SerialNumber: syz [ 1002.782944][T18955] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3347'. [ 1002.937628][ T793] usb 1-1: config 0 descriptor?? [ 1003.243340][T18976] ubi: mtd0 is already attached to ubi31 [ 1005.121453][T18990] Invalid ELF header type: 3 != 1 [ 1005.237891][T18998] random: crng reseeded on system resumption [ 1005.738681][T17015] usb 1-1: USB disconnect, device number 78 [ 1006.885751][ T5863] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1007.105867][ T5863] usb 7-1: Using ep0 maxpacket: 32 [ 1007.112900][ T5863] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.124874][ T5863] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1007.138421][ T5863] usb 7-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 1007.148289][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.156678][ T5863] usb 7-1: Product: syz [ 1007.160886][ T5863] usb 7-1: Manufacturer: syz [ 1007.165497][ T5863] usb 7-1: SerialNumber: syz [ 1007.182988][ T5863] usb 7-1: config 0 descriptor?? [ 1007.208098][T19011] batadv_slave_1: entered promiscuous mode [ 1007.866595][ T5863] usb 7-1: USB disconnect, device number 14 [ 1007.960867][T19020] syzkaller0: entered promiscuous mode [ 1007.967626][T19020] syzkaller0: entered allmulticast mode [ 1008.082959][T19025] overlayfs: failed to resolve './file1': -2 [ 1008.351768][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 1008.351788][ T30] audit: type=1326 audit(1774713280.784:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0859c799 code=0x7fc00000 [ 1008.928397][ T30] audit: type=1326 audit(1774713280.784:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efd0859c799 code=0x7fc00000 [ 1009.017824][ T30] audit: type=1326 audit(1774713280.784:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0859c799 code=0x7fc00000 [ 1009.134983][ T30] audit: type=1326 audit(1774713280.784:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0859c799 code=0x7fc00000 [ 1009.251837][ T30] audit: type=1326 audit(1774713280.784:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0859c799 code=0x7fc00000 [ 1009.360162][ T30] audit: type=1326 audit(1774713280.784:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0859c799 code=0x7fc00000 [ 1009.394468][ T30] audit: type=1326 audit(1774713280.784:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0859c799 code=0x7fc00000 [ 1009.425806][ T30] audit: type=1326 audit(1774713280.784:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0859c799 code=0x7fc00000 [ 1009.489629][ T30] audit: type=1326 audit(1774713280.784:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0859c799 code=0x7fc00000 [ 1009.675757][ T30] audit: type=1326 audit(1774713280.784:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0859c799 code=0x7fc00000 [ 1010.906420][T19069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=19069 comm=syz.4.3372 [ 1012.966384][T19083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.240107][T19083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.786003][T17015] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1016.005739][ T793] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1016.245988][ T793] usb 5-1: Using ep0 maxpacket: 16 [ 1016.253691][ T793] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1016.264024][ T793] usb 5-1: config 0 has no interface number 0 [ 1016.270505][ T793] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.290751][ T793] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.314107][ T793] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1016.323427][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.582910][ T793] usb 5-1: config 0 descriptor?? [ 1017.684136][ T793] usbhid 5-1:0.1: can't add hid device: -71 [ 1017.691021][ T793] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1017.815995][ T793] usb 5-1: USB disconnect, device number 47 [ 1018.043182][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1018.043194][ T30] audit: type=1400 audit(1774713290.474:3508): avc: denied { ioctl } for pid=19158 comm="syz.3.3394" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1018.449858][T19173] netlink: 'syz.5.3396': attribute type 27 has an invalid length. [ 1018.522359][T19176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3396'. [ 1018.539337][T19176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.761647][T19176] bridge_slave_0 (unregistering): left allmulticast mode [ 1018.769090][T19176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.858451][T19180] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=6 [ 1019.125176][T19185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3399'. [ 1020.315161][ T5891] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1020.536233][T19193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3401'. [ 1020.677212][ T5891] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 1020.690481][ T5891] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 1020.818433][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1020.841997][ T5891] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1020.859017][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1020.882518][ T5891] usb 6-1: Product: syz [ 1020.911791][ T5891] usb 6-1: Manufacturer: syz [ 1020.925729][T17015] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1020.945567][ T5891] usb 6-1: SerialNumber: syz [ 1020.971118][ T5891] usb 6-1: config 0 descriptor?? [ 1020.994680][ T5891] usb 6-1: selecting invalid altsetting 0 [ 1021.109307][T17015] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1021.121578][T17015] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.132314][T17015] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1021.141872][T17015] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1021.222398][T17015] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1021.248822][ T793] usb 6-1: USB disconnect, device number 46 [ 1021.309555][T17015] usb 7-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1021.319129][T17015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.337752][T17015] usb 7-1: Product: syz [ 1021.342395][T17074] udevd[17074]: setting owner of /dev/audio3 to uid=0, gid=29 failed: No such file or directory [ 1021.375790][T17015] usb 7-1: Manufacturer: syz [ 1021.383380][T17015] usb 7-1: SerialNumber: syz [ 1021.447594][ T30] audit: type=1400 audit(1774713293.854:3509): avc: denied { getopt } for pid=19217 comm="syz.5.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1021.581546][ T30] audit: type=1400 audit(1774713293.854:3510): avc: denied { ioctl } for pid=19217 comm="syz.5.3406" path="socket:[67650]" dev="sockfs" ino=67650 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1022.003347][ T30] audit: type=1400 audit(1774713294.314:3511): avc: denied { append } for pid=19220 comm="syz.3.3408" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1023.189851][T17015] usb 7-1: USB disconnect, device number 15 [ 1023.230335][ T30] audit: type=1400 audit(1774713295.664:3512): avc: denied { ioctl } for pid=19228 comm="syz.3.3409" path="socket:[66714]" dev="sockfs" ino=66714 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1023.242663][T19229] Bluetooth: MGMT ver 1.23 [ 1023.292375][T13254] udevd[13254]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1023.721543][ T30] audit: type=1400 audit(1774713296.064:3513): avc: denied { write } for pid=19236 comm="syz.4.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1024.095965][T19245] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3412'. [ 1024.328429][T19245] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3412'. [ 1024.874678][ T30] audit: type=1400 audit(1774713297.274:3514): avc: denied { unmount } for pid=15413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1025.165839][ T30] audit: type=1400 audit(1774713297.604:3515): avc: denied { lock } for pid=19254 comm="syz.3.3417" path="socket:[67763]" dev="sockfs" ino=67763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1025.379768][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 1025.386028][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1025.667897][T19262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3416'. [ 1025.877061][T19264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3416'. [ 1028.109587][T19297] o2cb: This node has not been configured. [ 1028.115429][T19297] o2cb: Cluster check failed. Fix errors before retrying. [ 1028.122719][T19297] (syz.3.3425,19297,0):user_dlm_register:674 ERROR: status = -22 [ 1028.130504][T19297] (syz.3.3425,19297,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 1028.155828][ T30] audit: type=1400 audit(1774713300.544:3516): avc: denied { add_name } for pid=19295 comm="syz.3.3425" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1028.336750][ T30] audit: type=1400 audit(1774713300.544:3517): avc: denied { create } for pid=19295 comm="syz.3.3425" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1028.379584][T19304] netlink: 'syz.0.3426': attribute type 4 has an invalid length. [ 1028.400383][ T30] audit: type=1400 audit(1774713300.544:3518): avc: denied { associate } for pid=19295 comm="syz.3.3425" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1028.573233][ T30] audit: type=1326 audit(1774713301.004:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.4.3428" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fbd2a99c799 code=0x0 [ 1029.156464][T19320] tmpfs: Unknown parameter 'ϰ7O#ZRTO`|["hqsf4K~hnx.?yͨCO7O083lc@k!7~sV$@Pڞrȇ;Ptk1X [ 1029.156464][T19320] p!v4զV[qŇf' [ 1031.716006][ T30] audit: type=1400 audit(1774713304.144:3520): avc: denied { create } for pid=19338 comm="syz.5.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1032.255595][T19347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.286142][T19347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.953801][T19402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3448'. [ 1038.018677][ T30] audit: type=1400 audit(1774713310.424:3521): avc: denied { setattr } for pid=19398 comm="syz.6.3450" name="file2" dev="overlay" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1038.026336][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3451'. [ 1038.060895][T19395] netlink: 'syz.4.3447': attribute type 4 has an invalid length. [ 1038.189623][ T30] audit: type=1400 audit(1774713310.494:3522): avc: denied { rename } for pid=19398 comm="syz.6.3450" name="#52" dev="tmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1038.935980][ T5863] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1038.991849][ T30] audit: type=1400 audit(1774713311.354:3523): avc: denied { listen } for pid=19425 comm="syz.0.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1039.041842][T19428] netlink: 'syz.3.3454': attribute type 23 has an invalid length. [ 1039.209859][ T5863] usb 7-1: Using ep0 maxpacket: 16 [ 1039.236069][ T5863] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.276635][ T5863] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1039.302716][ T5863] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1039.322928][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.348701][ T5863] usb 7-1: config 0 descriptor?? [ 1039.492521][T17015] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1039.666426][T17015] usb 1-1: Using ep0 maxpacket: 16 [ 1039.687260][T17015] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 1039.695587][T17015] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1039.718724][T17015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 55, changing to 9 [ 1039.731177][T17015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8496, setting to 1024 [ 1039.745749][T17015] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1039.778937][T17015] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1039.798787][T17015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.837113][T17015] usb 1-1: config 0 descriptor?? [ 1039.856984][ T5863] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1039.859138][T17015] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input56 [ 1040.273446][T17015] usb 7-1: USB disconnect, device number 16 [ 1042.266908][ T5863] usb 1-1: USB disconnect, device number 79 [ 1054.179054][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1077.698080][ T30] audit: type=1400 audit(1774713350.124:3524): avc: denied { setattr } for pid=19514 comm="syz.3.3460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1077.979034][T19530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3461'. [ 1082.007629][T19554] netlink: 'syz.4.3467': attribute type 4 has an invalid length. [ 1082.181641][T17015] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1082.505684][T17015] usb 7-1: Using ep0 maxpacket: 16 [ 1082.519086][T17015] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.535701][T17015] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1082.550345][T17015] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1082.565744][ T30] audit: type=1400 audit(1774713355.004:3525): avc: denied { compute_member } for pid=19565 comm="syz.3.3470" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1082.576318][T17015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.699437][T19572] netlink: 'syz.3.3471': attribute type 10 has an invalid length. [ 1082.709046][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 1082.710790][T17015] usb 7-1: config 0 descriptor?? [ 1082.850193][ T30] audit: type=1800 audit(1774713355.284:3526): pid=19571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3471" name="bus" dev="tmpfs" ino=339 res=0 errno=0 [ 1083.056085][T13684] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1083.146875][T19581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3474'. [ 1084.096127][T17015] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1084.118483][T13684] usb 6-1: Using ep0 maxpacket: 8 [ 1084.199940][T13684] usb 6-1: config 0 has no interfaces? [ 1084.212560][T13684] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1084.222370][T13684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.230720][T13684] usb 6-1: Product: syz [ 1084.234967][T13684] usb 6-1: Manufacturer: syz [ 1084.239988][T13684] usb 6-1: SerialNumber: syz [ 1084.270024][T13684] usb 6-1: config 0 descriptor?? [ 1084.339371][T17015] usb 7-1: USB disconnect, device number 17 [ 1084.452221][ T1143] Bluetooth: hci0: Frame reassembly failed (-84) [ 1084.483167][T19575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.498788][T19575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.631263][T19592] fuse: Bad value for 'user_id' [ 1084.683276][T19592] fuse: Bad value for 'user_id' [ 1084.740796][T19593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'. [ 1084.776075][ T5863] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1084.991455][ T5863] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 185 [ 1085.089750][ T5863] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1085.195996][ T5863] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1085.225712][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.240998][ T5863] usb 5-1: Product: syz [ 1085.249692][ T5863] usb 5-1: Manufacturer: syz [ 1085.261553][ T5863] usb 5-1: SerialNumber: syz [ 1085.867023][ T5863] usb 5-1: config 0 descriptor?? [ 1085.892934][T19586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1085.956232][ T5863] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1086.032555][ T5863] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1086.080087][ T5863] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1086.088875][ T5863] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1086.107249][ T5863] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1086.123796][ T5863] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1086.139321][ T5863] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1086.224535][ T5863] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1086.235408][ T5863] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1086.243617][ T5863] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 1086.382512][ T5863] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1086.390709][ T5863] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1086.398568][ T5863] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1086.500443][ T5863] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1086.509161][ T51] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1087.597567][T19611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1087.672461][ T5863] usb 6-1: USB disconnect, device number 47 [ 1090.121701][T19632] netlink: 'syz.6.3485': attribute type 4 has an invalid length. [ 1090.376279][T17015] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1090.467800][T13679] usb 5-1: USB disconnect, device number 48 [ 1090.477715][T13679] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1090.535955][T13679] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1090.538980][T17015] usb 1-1: Using ep0 maxpacket: 16 [ 1090.577460][T13679] keyspan 5-1:0.0: device disconnected [ 1090.590132][T17015] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.623671][T17015] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1090.653989][T17015] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1090.688455][T17015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.400928][T17015] usb 1-1: config 0 descriptor?? [ 1092.905095][T17015] nzxt-smart2 0003:1E71:2009.001D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1093.889254][ T5877] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1094.185852][ T5877] usb 7-1: Using ep0 maxpacket: 32 [ 1094.218616][ T5877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.249749][ T5877] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1094.300903][ T5877] usb 7-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 1094.310089][T17015] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1094.336058][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.366421][ T793] usb 1-1: USB disconnect, device number 80 [ 1094.375249][ T5877] usb 7-1: Product: syz [ 1094.406317][ T5877] usb 7-1: Manufacturer: syz [ 1094.410951][ T5877] usb 7-1: SerialNumber: syz [ 1094.451986][ T5877] usb 7-1: config 0 descriptor?? [ 1094.493717][T17015] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1094.514018][T17015] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1094.545908][T17015] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1094.567358][T17015] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1094.587318][T17015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.595450][T17015] usb 5-1: Product: syz [ 1094.625278][T17015] usb 5-1: Manufacturer: syz [ 1094.630626][T17015] usb 5-1: SerialNumber: syz [ 1094.648198][T17015] usb 5-1: config 0 descriptor?? [ 1094.687006][T19677] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1094.694379][T19677] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1094.703093][T17015] usb 5-1: ucan: probing device on interface #0 [ 1094.781985][T19667] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3496'. [ 1094.965375][ T5877] usb 7-1: USB disconnect, device number 18 [ 1095.202798][T19690] Invalid ELF header type: 3 != 1 [ 1095.298467][ T793] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 1095.487684][ T793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1095.496991][ T793] usb 1-1: config 194 has an invalid interface number: 4 but max is 0 [ 1095.505467][ T793] usb 1-1: config 194 has no interface number 0 [ 1095.671430][ T793] usb 1-1: config 194 interface 4 has no altsetting 0 [ 1095.694219][ T793] usb 1-1: string descriptor 0 read error: -22 [ 1095.702227][ T793] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 1095.721536][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.777002][T17015] usb 5-1: ucan: could not read protocol version, ret=-110 [ 1095.799212][T17015] usb 5-1: ucan: probe failed; try to update the device firmware [ 1095.993920][T13684] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1096.008521][ T5863] usb 5-1: USB disconnect, device number 49 [ 1096.210767][T13684] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1097.511825][ T5863] usb 1-1: USB disconnect, device number 81 [ 1097.523303][T13684] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.705814][T19722] netlink: 'syz.4.3505': attribute type 4 has an invalid length. [ 1097.720742][T13684] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1097.740739][T13684] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.629563][T19718] netlink: 'syz.6.3506': attribute type 4 has an invalid length. [ 1098.648313][T13684] usb 6-1: config 0 descriptor?? [ 1098.847249][T13684] usbhid 6-1:0.0: can't add hid device: -71 [ 1098.884195][T13684] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1098.927407][T13684] usb 6-1: USB disconnect, device number 48 [ 1099.152479][T19732] can0: slcan on ptm0. [ 1099.245845][ T5863] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1099.489293][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 1099.500266][ T5863] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.521364][ T5863] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1099.539718][T19731] FAT-fs (nullb0): bogus number of reserved sectors [ 1099.546561][T19731] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1099.566520][ T5863] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1099.587657][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.609373][ T5863] usb 1-1: config 0 descriptor?? [ 1099.676729][T19729] can0 (unregistered): slcan off ptm0. [ 1099.924814][T19743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.020583][T19743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.470469][ T5863] nzxt-smart2 0003:1E71:2009.001E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1100.628015][ T5863] usb 1-1: USB disconnect, device number 82 [ 1101.646305][ T30] audit: type=1400 audit(1774713373.364:3527): avc: denied { connect } for pid=19751 comm="syz.6.3513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1103.146441][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1103.959377][T19806] tmpfs: Unknown parameter 'grpquota_blocke9_hardlimit' [ 1103.983966][T19806] ISOFS: Unable to identify CD-ROM format. [ 1104.176503][T19812] netlink: 'syz.0.3524': attribute type 10 has an invalid length. [ 1104.216100][T19812] team0: Device ipvlan1 failed to register rx_handler [ 1104.256332][T19816] netlink: 'syz.4.3523': attribute type 4 has an invalid length. [ 1104.309828][T19817] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1104.413646][T19818] netlink: 'syz.6.3526': attribute type 2 has an invalid length. [ 1104.451225][T19818] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3526'. [ 1104.496087][ T5877] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 1104.717845][ T5877] usb 6-1: config 246 has an invalid interface number: 166 but max is 0 [ 1104.753568][ T5877] usb 6-1: config 246 has an invalid descriptor of length 222, skipping remainder of the config [ 1104.785707][ T5877] usb 6-1: config 246 has no interface number 0 [ 1104.855693][ T5877] usb 6-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid maxpacket 60313, setting to 64 [ 1104.875687][ T5877] usb 6-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1104.895715][ T5877] usb 6-1: config 246 interface 166 has no altsetting 0 [ 1104.917976][ T5877] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 1104.927418][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.935533][ T5877] usb 6-1: Product: syz [ 1104.942359][ T5877] usb 6-1: Manufacturer: syz [ 1104.980398][ T5877] usb 6-1: SerialNumber: syz [ 1104.985698][ T5863] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1105.136343][ T5863] usb 7-1: Using ep0 maxpacket: 16 [ 1105.152116][ T5863] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.189237][ T5863] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1105.235703][ T5863] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1105.244786][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.436391][ T5863] usb 7-1: config 0 descriptor?? [ 1105.871642][ T5877] usb 6-1: Limiting number of CPorts to U8_MAX [ 1105.879829][ T5877] usb 6-1: Unknown endpoint type found, address 0x0b [ 1105.901883][ T5877] usb 6-1: Not enough endpoints found in device, aborting! [ 1106.093280][T13684] usb 6-1: USB disconnect, device number 49 [ 1106.118537][ T5863] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1106.185455][ T30] audit: type=1400 audit(1774713378.624:3528): avc: denied { map } for pid=19841 comm="syz.0.3531" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1106.245312][T19845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1106.755082][ T5863] usb 7-1: USB disconnect, device number 19 [ 1107.078255][ T5877] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1107.124984][T19867] netlink: 238 bytes leftover after parsing attributes in process `syz.3.3537'. [ 1107.174668][T19867] fuse: Bad value for 'rootmode' [ 1107.626710][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 1107.675886][ T5877] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 1107.701446][ T5877] usb 1-1: config 0 has no interface number 0 [ 1107.717905][ T5877] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1107.740368][ T5877] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1107.749926][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.761793][ T5877] usb 1-1: Product: syz [ 1107.769093][ T5877] usb 1-1: Manufacturer: syz [ 1107.786096][ T5877] usb 1-1: SerialNumber: syz [ 1107.817936][ T5877] usb 1-1: config 0 descriptor?? [ 1107.838992][ T5877] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1108.119324][T19875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3539'. [ 1108.802789][ T5877] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input57 [ 1109.199109][T19882] cgroup: fork rejected by pids controller in /syz4 [ 1109.213117][T19861] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3536'. [ 1109.314538][ T5877] usb 1-1: USB disconnect, device number 83 [ 1109.362117][T19918] netlink: 'syz.3.3542': attribute type 4 has an invalid length. [ 1112.063233][T19939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.094230][T19939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.226156][T19945] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:4 is already present [ 1112.365428][T19947] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3550'. [ 1112.812657][T19952] binder: 19950:19952 ioctl 4018620d 0 returned -22 [ 1113.031447][ T5877] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1114.169848][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1114.199504][ T5877] usb 5-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice= 0.40 [ 1114.230314][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.260622][ T5877] usb 5-1: Product: syz [ 1114.264823][ T5877] usb 5-1: Manufacturer: syz [ 1114.293586][ T5877] usb 5-1: SerialNumber: syz [ 1115.066795][ T5877] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1115.073960][ T5877] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1115.100398][ T5877] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1115.116060][ T5877] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1115.136528][ T5877] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1115.252812][ T5877] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1115.312973][ T5877] usb 5-1: USB disconnect, device number 50 [ 1115.364318][T19534] udevd[19534]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1115.621811][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.025697][ T5877] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1116.183347][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 1116.221930][ T5877] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.245774][ T5877] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1116.285727][ T5877] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1116.289160][T20003] binder: 20001:20003 ioctl 4018620d 0 returned -22 [ 1116.306190][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.332170][ T5877] usb 5-1: config 0 descriptor?? [ 1116.373312][T20006] binder: 20001:20006 ioctl 540f 2000000000c0 returned -22 [ 1116.464809][T20006] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1116.492354][T20008] netlink: 'syz.0.3558': attribute type 4 has an invalid length. [ 1116.524565][T20006] bond0: (slave lo): Enslaving as an active interface with an up link [ 1117.048182][ T5877] nzxt-smart2 0003:1E71:2009.0020: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1117.125885][T20006] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1117.545462][T20016] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=6 [ 1117.699506][T20020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3567'. [ 1117.868216][T20027] netlink: 'syz.6.3568': attribute type 1 has an invalid length. [ 1117.880533][T20027] syz_tun: entered allmulticast mode [ 1117.955793][ T30] audit: type=1400 audit(1774713390.314:3529): avc: denied { create } for pid=20023 comm="syz.6.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1120.015337][ T5811] usb 5-1: USB disconnect, device number 51 [ 1120.038214][T20021] netlink: 'syz.3.3567': attribute type 11 has an invalid length. [ 1120.096421][T20021] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.3567'. [ 1120.169018][T20030] netlink: 'syz.3.3567': attribute type 11 has an invalid length. [ 1120.223605][T20030] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.3567'. [ 1120.609726][ T30] audit: type=1400 audit(1774713392.874:3530): avc: denied { setopt } for pid=20033 comm="syz.4.3570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1121.531565][ T5809] block nbd0: Receive control failed (result -32) [ 1121.532111][ T5823] block nbd0: Receive control failed (result -32) [ 1121.543627][ T51] block nbd0: Receive control failed (result -32) [ 1121.597408][T20047] nbd0: detected capacity change from 0 to 63 [ 1121.632598][T19560] block nbd0: Dead connection, failed to find a fallback [ 1121.641635][T19560] block nbd0: shutting down sockets [ 1121.675692][T19560] blk_print_req_error: 26 callbacks suppressed [ 1121.676179][T19560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1121.748913][T19560] buffer_io_error: 25 callbacks suppressed [ 1121.748929][T19560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1121.794886][T19560] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1121.814940][T19560] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1121.823058][T19560] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1121.834718][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3578'. [ 1121.916855][T20072] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1122.163639][T20077] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=6 [ 1122.245770][T19560] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1122.281814][T19560] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.323917][T19560] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1122.345700][T19560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.365562][T19560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1122.375535][T19560] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.405637][T19560] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1122.413458][T19560] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.453478][T19560] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1122.474155][T19560] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.501378][T19560] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1122.526519][T19560] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.545942][T19560] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1122.553934][T19560] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1122.555732][ T5811] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1122.581783][T19560] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1122.590579][ T30] audit: type=1326 audit(1774713395.014:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20080 comm="syz.6.3581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd7f99c799 code=0x0 [ 1122.622731][T19560] ldm_validate_partition_table(): Disk read failed. [ 1122.631464][T19560] Dev nbd0: unable to read RDB block 0 [ 1122.645103][T19560] nbd0: unable to read partition table [ 1122.654126][T19560] ldm_validate_partition_table(): Disk read failed. [ 1122.661709][T19560] Dev nbd0: unable to read RDB block 0 [ 1122.671675][T19560] nbd0: unable to read partition table [ 1122.757851][ T5811] usb 5-1: Using ep0 maxpacket: 16 [ 1122.773002][ T5811] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.790393][T20091] netlink: 'syz.3.3582': attribute type 4 has an invalid length. [ 1123.009972][ T5811] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1123.033959][ T5811] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1123.070014][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.095186][ T5811] usb 5-1: config 0 descriptor?? [ 1123.375979][ T5863] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1123.617639][ T5811] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1123.617685][ T5863] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1123.655667][ T5863] usb 6-1: not running at top speed; connect to a high speed hub [ 1124.175078][ T5863] usb 6-1: config 70 has an invalid interface number: 78 but max is 0 [ 1124.187712][ T5863] usb 6-1: config 70 has no interface number 0 [ 1124.204201][ T5863] usb 6-1: config 70 interface 78 has no altsetting 0 [ 1124.217213][ T5863] usb 6-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=39.b1 [ 1124.227515][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.238479][ T5863] usb 6-1: Product: syz [ 1124.242758][ T5863] usb 6-1: Manufacturer: syz [ 1124.243471][ T5811] usb 5-1: USB disconnect, device number 52 [ 1124.250951][ T5863] usb 6-1: SerialNumber: syz [ 1124.290643][T20103] fido_id[20103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1124.448913][ T30] audit: type=1326 audit(1774713396.884:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20104 comm="syz.6.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7f99c799 code=0x7ffc0000 [ 1124.477053][ T30] audit: type=1326 audit(1774713396.894:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20104 comm="syz.6.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7f99c799 code=0x7ffc0000 [ 1124.532331][T20106] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.3584'. [ 1124.856058][ T30] audit: type=1326 audit(1774713396.894:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20104 comm="syz.6.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7f99c799 code=0x7ffc0000 [ 1124.979622][T20096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.988546][T20096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.027244][T20108] ubi: mtd0 is already attached to ubi31 [ 1125.054278][ T30] audit: type=1326 audit(1774713396.894:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20104 comm="syz.6.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd7f99c799 code=0x7ffc0000 [ 1125.145259][ T30] audit: type=1326 audit(1774713396.894:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20104 comm="syz.6.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7f99c799 code=0x7ffc0000 [ 1125.185396][ T30] audit: type=1326 audit(1774713396.894:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20104 comm="syz.6.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7f99c799 code=0x7ffc0000 [ 1125.672444][T20121] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3588'. [ 1125.695929][ T30] audit: type=1326 audit(1774713396.894:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20104 comm="syz.6.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fdd7f99c799 code=0x7ffc0000 [ 1125.830170][ T30] audit: type=1326 audit(1774713396.894:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20104 comm="syz.6.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7f99c799 code=0x7ffc0000 [ 1125.875817][ T30] audit: type=1326 audit(1774713396.894:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20104 comm="syz.6.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7f99c799 code=0x7ffc0000 [ 1125.905370][ T30] audit: type=1326 audit(1774713396.894:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20104 comm="syz.6.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdd7f99c799 code=0x7ffc0000 [ 1126.055699][T20126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.064367][T20126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.135016][T20133] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=6 [ 1126.775105][ T5863] usb 6-1: active config #70 != 1 ?? [ 1126.804999][ T5863] usbhid 6-1:70.78: couldn't find an input interrupt endpoint [ 1126.834304][ T5863] usb 6-1: USB disconnect, device number 50 [ 1127.026569][ T5811] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1127.565408][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1127.595831][ T5811] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1127.627147][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1127.644108][T20157] netlink: 'syz.5.3597': attribute type 4 has an invalid length. [ 1127.667786][T20159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.676156][ T5811] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1127.677919][ T5811] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1127.854812][T20159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.883713][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.928104][T20163] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1127.939622][ T5811] usb 7-1: Product: syz [ 1127.943835][ T5811] usb 7-1: Manufacturer: syz [ 1127.949117][ T5811] usb 7-1: SerialNumber: syz [ 1127.956926][ T5811] usb 7-1: config 0 descriptor?? [ 1127.966868][ T5811] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 1128.172866][ T5811] scsi host1: usb-storage 7-1:0.0 [ 1128.256039][ T5811] usb 7-1: USB disconnect, device number 20 [ 1128.637031][T20174] netlink: 7472 bytes leftover after parsing attributes in process `syz.4.3600'. [ 1128.692233][T20174] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1130.550443][T20182] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=6 [ 1130.631940][T20185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.790885][T20185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.695669][ T24] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1132.055667][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1132.180183][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.195099][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1132.226749][ T24] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 1132.345782][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.354082][ T24] usb 6-1: Product: syz [ 1132.358404][ T24] usb 6-1: Manufacturer: syz [ 1132.363095][ T24] usb 6-1: SerialNumber: syz [ 1132.630651][ T24] usb 6-1: config 0 descriptor?? [ 1133.032633][ T24] usb 6-1: USB disconnect, device number 51 [ 1133.997404][T20225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.036504][T20225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.588100][T20241] netlink: 'syz.5.3615': attribute type 4 has an invalid length. [ 1135.783898][T13684] Process accounting resumed [ 1136.153894][ T51] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1136.685245][T20281] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3626'. [ 1138.780042][T20307] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1139.228557][T20324] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1139.302621][ C0] [ 1139.304931][ C0] ================================ [ 1139.310021][ C0] WARNING: inconsistent lock state [ 1139.315147][ C0] syzkaller #0 Tainted: G L [ 1139.321101][ C0] -------------------------------- [ 1139.326179][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 1139.332995][ C0] syz.0.3636/20324 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1139.339379][ C0] ffff8880322f2868 (&dev->spinlock){?...}-{3:3}, at: das16m1_interrupt+0x68/0x120 [ 1139.348568][ C0] {HARDIRQ-ON-W} state was registered at: [ 1139.354261][ C0] lock_acquire+0x1cf/0x380 [ 1139.358855][ C0] _raw_spin_lock_bh+0x33/0x40 [ 1139.363684][ C0] waveform_ao_cancel+0x96/0x150 [ 1139.368679][ C0] do_cancel+0xf4/0x180 [ 1139.372897][ C0] comedi_close+0x2f6/0x470 [ 1139.377456][ C0] __fput+0x3ff/0xb40 [ 1139.381498][ C0] task_work_run+0x150/0x240 [ 1139.386145][ C0] exit_to_user_mode_loop+0x100/0x4a0 [ 1139.391574][ C0] do_syscall_64+0x67c/0xf80 [ 1139.396238][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.402201][ C0] irq event stamp: 1500 [ 1139.406324][ C0] hardirqs last enabled at (1499): [] _raw_spin_unlock_irqrestore+0x52/0x80 [ 1139.416621][ C0] hardirqs last disabled at (1500): [] common_interrupt+0x19/0xe0 [ 1139.425974][ C0] softirqs last enabled at (1434): [] __irq_exit_rcu+0xef/0x150 [ 1139.435245][ C0] softirqs last disabled at (1303): [] __irq_exit_rcu+0xef/0x150 [ 1139.444500][ C0] [ 1139.444500][ C0] other info that might help us debug this: [ 1139.452528][ C0] Possible unsafe locking scenario: [ 1139.452528][ C0] [ 1139.459960][ C0] CPU0 [ 1139.463212][ C0] ---- [ 1139.466462][ C0] lock(&dev->spinlock); [ 1139.470762][ C0] [ 1139.474189][ C0] lock(&dev->spinlock); [ 1139.478663][ C0] [ 1139.478663][ C0] *** DEADLOCK *** [ 1139.478663][ C0] [ 1139.486786][ C0] 2 locks held by syz.0.3636/20324: [ 1139.491966][ C0] #0: ffff8880840f72e8 (&tty->termios_rwsem){++++}-{4:4}, at: uart_ioctl+0x352/0x2ef0 [ 1139.501603][ C0] #1: ffff8880264b8e90 (&port->mutex){+.+.}-{4:4}, at: uart_ioctl+0x386/0x2ef0 [ 1139.510628][ C0] [ 1139.510628][ C0] stack backtrace: [ 1139.516494][ C0] CPU: 0 UID: 0 PID: 20324 Comm: syz.0.3636 Tainted: G L syzkaller #0 PREEMPT(full) [ 1139.516509][ C0] Tainted: [L]=SOFTLOCKUP [ 1139.516513][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1139.516520][ C0] Call Trace: [ 1139.516525][ C0] [ 1139.516529][ C0] dump_stack_lvl+0x100/0x190 [ 1139.516547][ C0] print_usage_bug.part.0+0x257/0x340 [ 1139.516558][ C0] mark_lock+0x74a/0xa20 [ 1139.516566][ C0] ? look_up_lock_class+0x55/0x120 [ 1139.516581][ C0] ? register_lock_class+0x40/0x560 [ 1139.516591][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1139.516601][ C0] __lock_acquire+0x10ff/0x2630 [ 1139.516613][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1139.516625][ C0] lock_acquire+0x1cf/0x380 [ 1139.516634][ C0] ? das16m1_interrupt+0x68/0x120 [ 1139.516644][ C0] ? clockevents_program_event+0x151/0x360 [ 1139.516657][ C0] _raw_spin_lock+0x2e/0x40 [ 1139.516669][ C0] ? das16m1_interrupt+0x68/0x120 [ 1139.516679][ C0] das16m1_interrupt+0x68/0x120 [ 1139.516688][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 1139.516699][ C0] __handle_irq_event_percpu+0x232/0x8e0 [ 1139.516713][ C0] handle_irq_event+0xab/0x1e0 [ 1139.516725][ C0] handle_edge_irq+0x375/0x970 [ 1139.516738][ C0] __common_interrupt+0xd8/0x2f0 [ 1139.516753][ C0] common_interrupt+0xb9/0xe0 [ 1139.516764][ C0] [ 1139.516767][ C0] [ 1139.516771][ C0] asm_common_interrupt+0x26/0x40 [ 1139.516781][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1139.516796][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 3d 51 f6 48 89 df e8 fe 8c 51 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 ad 41 f6 65 8b 05 5e 6e 7a 08 85 c0 74 16 5b [ 1139.516806][ C0] RSP: 0018:ffffc9000622fa68 EFLAGS: 00000246 [ 1139.516814][ C0] RAX: 0000000000000006 RBX: ffffffff9b4aa680 RCX: 0000000000000040 [ 1139.516820][ C0] RDX: 0000000000000000 RSI: ffffffff8de7978e RDI: ffffffff8c1b17a0 [ 1139.516826][ C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 1139.516832][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8f513740 [ 1139.516837][ C0] R13: 0000000000000003 R14: 0000000000000001 R15: 1ffff92000c45f5c [ 1139.516846][ C0] serial8250_config_port+0x1897/0x4ec0 [ 1139.516864][ C0] ? __pfx_serial8250_config_port+0x10/0x10 [ 1139.516879][ C0] ? __pfx___release_region+0x10/0x10 [ 1139.516900][ C0] univ8250_config_port+0x25a/0x380 [ 1139.516910][ C0] ? serial8250_release_std_resource+0x1b1/0x2f0 [ 1139.516924][ C0] uart_ioctl+0x14cc/0x2ef0 [ 1139.516939][ C0] ? __pfx_uart_ioctl+0x10/0x10 [ 1139.516952][ C0] ? tomoyo_path_number_perm+0x188/0x580 [ 1139.516967][ C0] ? futex_wait+0x125/0x380 [ 1139.516979][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1139.516995][ C0] ? tty_jobctrl_ioctl+0x152/0xce0 [ 1139.517004][ C0] ? __pfx_uart_ioctl+0x10/0x10 [ 1139.517018][ C0] tty_ioctl+0x26a/0x1690 [ 1139.517030][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 1139.517043][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1139.517059][ C0] ? __fget_files+0x215/0x3d0 [ 1139.517069][ C0] ? hook_file_ioctl_common+0x146/0x410 [ 1139.517081][ C0] ? selinux_file_ioctl+0x139/0x290 [ 1139.517094][ C0] ? selinux_file_ioctl+0xb4/0x290 [ 1139.517108][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 1139.517121][ C0] __x64_sys_ioctl+0x18e/0x210 [ 1139.517136][ C0] do_syscall_64+0x106/0xf80 [ 1139.517150][ C0] ? clear_bhb_loop+0x40/0x90 [ 1139.517160][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.517170][ C0] RIP: 0033:0x7fb45cb9c799 [ 1139.517178][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.517188][ C0] RSP: 002b:00007fb45d9ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.517196][ C0] RAX: ffffffffffffffda RBX: 00007fb45ce15fa0 RCX: 00007fb45cb9c799 [ 1139.517202][ C0] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003 [ 1139.517208][ C0] RBP: 00007fb45cc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1139.517213][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.517219][ C0] R13: 00007fb45ce16038 R14: 00007fb45ce15fa0 R15: 00007ffd2e3fa328 [ 1139.517227][ C0] [ 1139.517278][ C0] comedi comedi2: fifo overflow [ 1140.013576][T20324] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1140.023852][T20327] netlink: 'syz.3.3634': attribute type 4 has an invalid length. [ 1140.115763][T20319] netlink: 'syz.5.3633': attribute type 23 has an invalid length.