last executing test programs: 22m55.71185192s ago: executing program 0 (id=250): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x14c) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={[&(0x7f00000000c0)='!\x00', &(0x7f0000000100)='[&\x00', &(0x7f0000000140)='(%^&\\\xc2#\x00']}, &(0x7f0000000340)={[&(0x7f00000001c0)='/{\x00', &(0x7f0000000200)='\xc2-@+\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='-(t!}\xcd\x00', &(0x7f00000002c0)='/^\x00', &(0x7f0000000300)='\x00']}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioperm(0x3, 0x4, 0x1000008) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x4, &(0x7f0000000000)={0x0}) 22m55.098407183s ago: executing program 0 (id=252): pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)) read$FUSE(r0, &(0x7f00000095c0)={0x2020}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xf7, &(0x7f0000000700)=""/247, 0x0, 0x37e564fdb2e4d371, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x4, 0x80000000}, 0x10, 0xd8fd, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000bc0)=[{0x2, 0x3, 0x5, 0x3}, {0x0, 0xfffffffe, 0x800c, 0xc}], 0x10, 0xf}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x220002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @mcast2, 0x3213}, 0x1c) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r7) ioctl$KVM_CHECK_EXTENSION(r8, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000040)={0x0, 0x289000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) close(r1) 22m51.57804752s ago: executing program 0 (id=260): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000200)={'r\x00\x00\a', 0x5, 0x5, 0x2, 0x207be, 0x0, "eccb132df52031a1de0480161000", "0200001a", "0400", '\x00', ["8bbb00fda8e45cfe00000900", "ab528617aa00000000387716", '\x00', "000b000000010000401000"]}) 22m50.612395036s ago: executing program 32 (id=260): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000200)={'r\x00\x00\a', 0x5, 0x5, 0x2, 0x207be, 0x0, "eccb132df52031a1de0480161000", "0200001a", "0400", '\x00', ["8bbb00fda8e45cfe00000900", "ab528617aa00000000387716", '\x00', "000b000000010000401000"]}) 15m42.736388327s ago: executing program 33 (id=1794): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="15"], 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x1c, 0x2, 0x0, "b43d70dde5dbbbe40f00f401bbe6c9000000c67f00", 0x49433553}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 15m20.041910813s ago: executing program 5 (id=1865): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000002d80)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="a06fc73e63c37aebb8b5b0be7e59f14b972319a923df1286f06dbd41d1505aec01b81e96909d7127e7aaf12163fb1425e305cd22fdf44da045693741111817a8924330c76eb4e69e5c72fcd10b948bceeb744c6238ef8fd68c05c4c7baea9b4d16a02ee30f27de8216033ce4ec1f4c0294e42421d55774afde55d9299afeacf401ce3993f6ffcbf86798794f665b500cea2060266d34f7e32ea45bf71d8a5ecf688f2edb90584bfdc3a2f906ead67773b6f60afdb39f45891ba8089abfc558bd72182ff3a9f9c364eab7933b4d3db74a9cd77892a0b4d878a20019800800c500040000000800ad00", @ANYRES32=r7, @ANYBLOB="04007e8004003c800800f20009000000e3856fd7bc320747ad9d8a65a94c9e14730d882cdf450b48555318f876a214e6525f8005d29637203ebe9d90afa438b733d42090b71fd7d203b350f2377171e1f96c1c7d782aa9bc2d9fa2920d45cfb4ccef10433ebe7ee2b31fbbe3617302d1b0e654396af80022897d566237254078f26411b74044e5d7195859f5caae00000e0013002f6465762f647370310000000500290000000000000000"], 0x7b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=ANY=[@ANYBLOB="2c0000003e000100fcff070004000000010000000400000008000180040031800c0002000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r10, 0x708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r10, &(0x7f0000001200)=""/4096, 0x1000) close_range(r9, 0xffffffffffffffff, 0x0) 15m18.726525466s ago: executing program 5 (id=1867): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket(0x200000000000011, 0x2, 0x0) 15m18.57770354s ago: executing program 5 (id=1868): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001200)) 15m18.479293263s ago: executing program 5 (id=1869): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x99) (async, rerun: 32) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (rerun: 32) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (async) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x802c, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 15m18.314507874s ago: executing program 5 (id=1870): symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0x1, 0x40008c4, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000380)={0x2, 'dvmrp1\x00', {0x3}, 0x2}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x18, {"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", 0x1000}}, 0x1006) (fail_nth: 2) 15m17.245495023s ago: executing program 5 (id=1873): mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) (async, rerun: 32) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (rerun: 32) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) (async, rerun: 32) r4 = fsopen(&(0x7f0000000080)='proc\x00', 0x1) (rerun: 32) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000240)={0x5, 0x4, 0x1}) (async) close(0x3) r6 = io_uring_setup(0x66e0, &(0x7f00000001c0)={0x0, 0xa99f, 0x80, 0x1ffe, 0x3bd}) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 15m16.856563722s ago: executing program 34 (id=1873): mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) (async, rerun: 32) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (rerun: 32) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) (async, rerun: 32) r4 = fsopen(&(0x7f0000000080)='proc\x00', 0x1) (rerun: 32) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000240)={0x5, 0x4, 0x1}) (async) close(0x3) r6 = io_uring_setup(0x66e0, &(0x7f00000001c0)={0x0, 0xa99f, 0x80, 0x1ffe, 0x3bd}) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 9m57.815362149s ago: executing program 7 (id=2919): add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000240)="3ee3a198ffdf0d7614b261fa795296da35a246096f7ed9946fad86a1af28d75952512e399353e611fe969ba08ddbb824643ab487c1b90e4ed9e26d3f4756e55c6e5dee92f34ed5a69b47416f2a34597bf05f11aa0e6de4632ab70e7f025d105b75c41537", 0x64, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x13, 0x4, 0x40000}, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000003c830be3000000000018010000202070250000000000203e207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff51000000bda0fff10000000007010000f8ffffffb702000008000000b703000000000000850000000600007730f93920d4a38000aedd028c3dc5d8f88ac981b19d08339b17b2649a"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9m57.411526168s ago: executing program 7 (id=2920): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prlimit64(r0, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0), 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120228dc8166699e5282b91e6f0000100004000676d6b35851f000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000280)=@udp}, 0x20) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000900)={0x1d, r5, 0x1}, 0x18) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) 9m51.723233667s ago: executing program 7 (id=2933): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xf9, 0x40, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x40, 0x3}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x1, 0x6, 0x40, 0x8}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40e}}, {0x9b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="9b03f4f650a31532626a5f88f685674edfe668a2dba73e792757213d3a468fed903e8273dbc2057a2aecdcc1c26e6bfdd4c87c6bb884d30f8995805f5930fe4c139224f37ed3079eb7b3d816e69d2f9c436d421957de2eeced1f51616bb747b479b092bba30567650f7a70de7eacfad8edc7e31d1f19b2986478d55c35b751e2eb0debb4ba790d44112409b21a088832ea18cb5dd1d1fe790500ea57717b6cb0"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x240a}}]}) syz_usb_control_io$uac1(r1, &(0x7f00000009c0)={0x14, &(0x7f0000000800)={0x20, 0xd, 0xc7, {0xc7, 0x11, "2cd0583c3906091db3d920daedb0de1d2f90c2802c5fa4fbddd3d73dff7ae89ed74af25740f84808cb6fd392e2a566d50f819375660c1f0b6246e5b286e3bd894ff4c0d2323ee652598843be0bf4c626191617d56b96f9d234804e46ae44e1da317a999fd0de444d2bb522631a7f98e768b91a88e78b67a1b5d7c284da3f7e5f894882e0dc9cdcc39fc503ec95813f87885ee68d3ffe34c523f5cfb19e2fbac24e5c0231b447376adab05b4f0c7ce52b0356dbecbc8f9bb2e94b458b4e15aafde517f99412"}}, &(0x7f0000000900)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "c3f6a27faa23d1474899c36da8a263d87509c619b249034b2172bf4750721e0cf0497a345dd1fb51ea08428edd8fd2b8655ad58e53a19d20c8b6a478e8df80e32559db1f71c864e13b799905b2bde38ce4474e0f88b9f74a966aa251a6c1b390cb7f898c60ed4bbfadb678fa4da9f022976e94eed7f416c102bb07ac35882f58ebea0776964531a1d9ec8bf8c72776e3e5b4f71cf115a35ec1bd6836c1be0f1e1780"}}}, &(0x7f0000000c40)={0x44, &(0x7f0000000a00)={0x0, 0x31, 0x7a, "6acbcc715680241a8498c0ad9e950dfb68336d71ebfb791578743f844ee2e3dcd6815209a8620da3c73f9cb08709691df586041e10e0e8d662da8c501d6cb6fa0a7f61e312e0fd979d341e96b0b2086aa35bb70e9b34c6f61df29fe729dc5364a22ea1aa21525974af293fd6c69eb1c1f2d23079e57214446b35"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000b00)={0x20, 0x81, 0x1, "cb"}, &(0x7f0000000b40)={0x20, 0x82, 0x3, 'Z,]'}, &(0x7f0000000b80)={0x20, 0x83, 0x2, "ef7e"}, &(0x7f0000000bc0)={0x20, 0x84, 0x2, "2aed"}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "11cfd4"}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)={0x14, r3, 0xe2c40cf0776ef37, 0x0, 0x200000, {0x5}}, 0x14}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000440)={0x40, 0x10, 0xbb, {0xbb, 0x3, "d0c0a552ccfb58990ef660598767f955579f8b002b38d07892f90ae4068142e01382298750a6a9133948fc968ae0d68a294bf6741d0f7367804c868a525525e4063692324b7905e105a2aeee0948bcad926a0acbc9cdfb126a2c89a801f78aac1d1024d96aa48b08b5af94ae5d07f7c1f2ecb022a3744aa4f5f908caca4d57c80b88e28a882a64c310afe59a68ad5efc1b1b7a32a909e997cd7b1c5c911a67ff1bc13ad8d894352a87c0b903bca01b8e507747945c53e7cf7a"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000540)={0x0, 0xf, 0xd6, "86cfe3b6c781184292b0fd2584a92950e945a645b087d11d1a1c99a176b56b215ccbabb4c5d80b277422d8dbd91a05a72225461cb8b3f7a74c8de505ade762c421b95461e856289b020c328d41b280279146296923f6a50555efb387a852e52cb9c5884123895c713911fc4e7c44aaa693cb2bc53ce99731e7dd8854436d7b11b76cfbae2d3f15a90d3b008b321cdea525b60aa659b25baaed10bcfab6ee2cbca47245061937bb4e1d13e0ce1b3ee0b622470a3558d190356d72b12e13147e891e69247f9030cf06930663176c99de43aaf4236db7b9"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000006c0)={0x20, 0x0, 0x3e, {0x3c, "2addb37fd2af51dee2f63d0330081f8efabb6f1e5862fa67e9f9e0a1ce2778c584528168f3a6f55153e13cb6cd2fca59a50cc166189bdd37813f3686"}}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x47}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="400a45000000452261639c545d2ce9daa7d45dd3f71b62845befa824c337939610aab1f597b0d2363b6e771fcaad64e23807b2908fceb442c0e7159125"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9m48.146966866s ago: executing program 7 (id=2942): io_uring_enter(0xffffffffffffffff, 0x29ff, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x20, 0x8, 0x76, 0xc2c7, {{0x17, 0x4, 0x2, 0x5, 0x5c, 0x64, 0x0, 0x9, 0x3e, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0x1c, 0xdc, 0x1, 0xd, [{@private=0xa010102, 0x8000}, {@local, 0x8}, {@multicast2, 0xfff}]}, @timestamp_addr={0x44, 0x2c, 0xe9, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x8}, {@remote, 0x3}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x8001}, {@loopback, 0xe}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bdf000fbdbdf251000000008000300", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB='\b\x00;'], 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, &(0x7f0000000700)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="03012abd7000fcdbdf25170000002800018008000100", @ANYRES32=r1, @ANYBLOB="d7117c5f48d9577b133084ddad72c636b71f43db295069ed70adf848c00a73f000000000c7a0500d2fd18cca070e2acb8be1baf86e69373a774b553446a9a1826032c7612d12a516f3c78f601ea3f611abc0c450a736240f318bbbdf4a77dbe20fc6cd9adacfd99fd2b090073997f7bfd0d1fe09da463734eded2d520f4998aa1c21c51212be3e646189fbba47f0350330146718236d2ca1", @ANYRES32=r5, @ANYBLOB="1400020076657468305f746f5f626f6e640000000c0001800800030002000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) accept4(r6, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000004100000000000000000000000000000000000000000000000000000000000000070000ffffffff00000000"]}, 0x108) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0xc20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9m47.560018711s ago: executing program 7 (id=2945): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x2f, 0x0, &(0x7f0000000200)=[0x0]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) io_uring_enter(r1, 0x48ce, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 9m46.986995913s ago: executing program 7 (id=2948): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x2c80, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000100)=0xfffffff8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r4, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 9m46.23663027s ago: executing program 35 (id=2948): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x2c80, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000100)=0xfffffff8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r4, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m29.290695524s ago: executing program 6 (id=4006): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000bc0)={0x59, "9984a69e26edfd9b3b04a4b7f57dd89f93c08ecf40e086a2bf6d3070470ec2175bff03ba91f6a27a0603c6de995ae34b81fb4dec3d44ad144088e68b88dbaea386f1283b716c35f680777326309719e45e5b36835640fdd1dd6c7876cfcd7671beb8d03de6dfcfdaecb9d67593e890bc9dd646e82aa45ec7316449b176c73ecf"}) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3, 0x0, 0x3) 4m27.562702223s ago: executing program 6 (id=4009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}]}, 0x34}}, 0x0) (fail_nth: 8) 4m27.557191808s ago: executing program 6 (id=4010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) munlockall() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x11e, 0x1e, 0xffffffffffffffff, &(0x7f0000000340)=0xfffffffffffffeb8) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x2}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) fchdir(0xffffffffffffffff) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r8, 0x3, 0x0) getdents(r8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r7, r5, 0x7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 4m26.605996014s ago: executing program 6 (id=4011): prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000000000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32, @ANYBLOB="200006"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mremap(&(0x7f0000a9f000/0x4000)=nil, 0x4000, 0x800000, 0x2, &(0x7f00007fe000/0x800000)=nil) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) set_mempolicy(0x2, 0x0, 0xf5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) r7 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x22, &(0x7f0000000340), 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x60, 0xa, 0x40, 0x0, 0x3e, 0x180, 0x2, 0x0, {0x0, 0x0, 0x1}, {}, {}, {0x0, 0x2000000}, 0x1, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000004c0)={0xc}) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000240)={0x556, 0x384, 0x3c00, 0x80, 0x6, 0x7, 0x20, 0x0, {0x8000, 0x3f1, 0x1}, {0x0, 0x1}, {0x7, 0xfffffffb}, {0x9, 0x800}, 0x0, 0x10, 0xc, 0x0, 0x1, 0x2, 0x0, 0x2, 0xfff, 0x9, 0x9e, 0xe, 0x2, 0x2, 0x3, 0x9}) 4m25.402289329s ago: executing program 6 (id=4014): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xa4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x1d, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) io_uring_setup(0x5053, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x0, 0x23b}) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) 4m25.094594s ago: executing program 6 (id=4017): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf, 0x9, &(0x7f0000000080)) sysinfo(&(0x7f0000000000)=""/109) r0 = socket$inet(0x2, 0xa, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@rand_addr=0x64010102, @empty, @empty}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x18) 4m24.696804201s ago: executing program 4 (id=4020): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f9c99062fa422acdb1bc7401ae504e1e7f678a17d42ce8b172f1fbf81547781501055390097045def08e8d42ffab8e7245f7ad802a954efa52f84db5f5c71e67240546a5ddb2d00931c23a1f46d543bf9430f75d0bf173440181da083b0154de17cc285a8b1dd4b0", @ANYRES16=r2, @ANYBLOB="0d0925bd7000fbdbdf254300000008000300", @ANYRES32=r3, @ANYBLOB='\f\x00X\x00M\x00\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x6881}, 0x0) 4m24.432145191s ago: executing program 4 (id=4022): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180), 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$rds(0x15, 0x5, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000700000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="429e82211cf8", @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0x2, 0x6, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) 4m18.398673591s ago: executing program 4 (id=4039): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000b40)="df24ead320b4dae0859dec60eb0dcc2dc884fd6c88348df2b9b4cdabcfeb62ae4c2f2c8581d69df21eb01bc69da23bd57868b2a256c16da38c11e08c3c29dda7a9a5a5d8a838d233b2b0456e3f234c4631071ea196a961cbd82f7162017b5c3e0f63d49402245fc809837fef7fcd4e0851cbfb4290a0be7c129e787de71ab075f86581f2ed4b795935cd7b8f55f97707b07a902f1739a9d197fbedd3aefd0fbcfce7a2a6a7c93cdeecc7e484b2ee736a9cb30ab98920bede4f7a77cc6e9f6e929f0ef50fcd36a8816d54413bbb063d3c884116ee47cb3686c47b5ad7ea283de66c39c7a91c8f1c0d034cc660063223f43f24456918bbf91c0747490400000000000000d5da23d0147468893499e314206201800000b9238850496ace4e9865bec8daad6df4fd", 0x126, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000004c0), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000200)="cc", 0x1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000a00)="da1103b23d6e9ec7b0960f8a45520fdee8bbafd038af5357cc2bf5969a77a332ef6c7c1a675389b16063696dee3af27a8f971dbce5b93d02d840ee08d2d124e67fa17642c4d99d45aa878237a1663a31f7ef396e4b22348c06000000ac87d8f9f5d19ceb0609e3b019c0a4814a268de5def201eb268f1dfb204aa37d70e75db23f9449afe074d5c17bd43d8450cefcb35bdabe30f169ea854c0d09", 0x9b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r3, r5}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={'wp384\x00'}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20) 4m17.164117088s ago: executing program 4 (id=4041): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = gettid() prlimit64(r1, 0x3, &(0x7f0000000140)={0x80, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r5, 0x4068aea3, &(0x7f0000000000)) r6 = syz_clone(0x1002000, &(0x7f0000000000)="2132b9a5f360d81b349228b5f095f692d2e05a384830e31ddac13250aa2f5dd362878625f8505b9e3c43ba5f06425ef074a66f743482259689c8d723c852086a2835262f344013e18556d72e5c558ef17541434c90ee5a9f7637413988bd0c223eadba8dd18c48f6e9876d3b417bb7ad9dd24055c40a223aaa6606deb6b83a2e3832a003d3e034b030eddea98981fd4357040f4979681a9a0eb6d924080cc57034f0541a40a11fd9c1c3130048f5b20c4a479b42f4b2a6ce5d2d3bcd8f0750c660cbea24f261d81fe6b58efd2fd72e25", 0xd0, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000300)="bb0575319d41d2a9edf7591e5945afaeabb90a1a830dda86") sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 4m14.76481904s ago: executing program 4 (id=4049): open$dir(&(0x7f0000000040)='./file0\x00', 0x40800, 0x5a) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0xfb1601, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0xd, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) 4m13.806902774s ago: executing program 4 (id=4052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000001500)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRES32=r1, @ANYRES8=r5, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7, r4}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000074010000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff00080003400000003808000a40000000020c000b"], 0x2f4}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r1, @ANYRES32=r2], 0x34}}, 0x4000010) 4m13.103553543s ago: executing program 36 (id=4052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000001500)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRES32=r1, @ANYRES8=r5, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7, r4}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000074010000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff00080003400000003808000a40000000020c000b"], 0x2f4}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r1, @ANYRES32=r2], 0x34}}, 0x4000010) 4m9.926663554s ago: executing program 37 (id=4017): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf, 0x9, &(0x7f0000000080)) sysinfo(&(0x7f0000000000)=""/109) r0 = socket$inet(0x2, 0xa, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@rand_addr=0x64010102, @empty, @empty}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x18) 3m59.279730479s ago: executing program 0 (id=4068): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000400)=[{&(0x7f00000003c0)="0c07bbf202b4ef24a1f52faaa36edb08dc8ef406943830a0cf8839c0a2dc7c969bc872f402b8fed4d54c", 0x2a}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000100)}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x1}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f00000005c0), 0x0, 0xce49}]) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(r5, &(0x7f00000013c0)=[{&(0x7f0000001480)=""/201, 0xc9}], 0x1, 0x5, 0x6) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x700, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3m59.06261841s ago: executing program 0 (id=4103): r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000024c0)=""/4093, 0x0, 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140)="775aaa6c81d5149168006ba472eba2afb00cfd033329b2c37916571c7a9a9d21f4f71a22cd7472052ec33d3405e993c0fa97231fec74d700eabf67b614129c9e6327d0143726b1a2e1baf1660b688de9136c37e38227a95bd9d70204f587f0f9ef343e2729ab5898238b1a9c6051ececed11c69d069c336ad2a674ac54cbbb79d1b251cdc6cb59e0660f12434180d3", 0x8f, r3}, 0x68) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000500)={[&(0x7f0000000340)='\x00', &(0x7f0000000440)='\x00']}, 0x0, 0x1000) syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x69, 0xdd, 0x34, 0x40, 0xccd, 0x93, 0x235a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0xe0, 0x8d}}]}}]}}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9f, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x6c7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x3, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x50, 0x3, 0x15, 0x9}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x10, 0x5, 0x3, 0x20, 0xb8}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41d}}]}) 3m56.361942986s ago: executing program 0 (id=4114): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000009c0), 0x183106, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder-control\x00', 0x800, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x1000000, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) chdir(&(0x7f00000000c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x478103, 0x60) 3m55.790364115s ago: executing program 38 (id=4114): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000009c0), 0x183106, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder-control\x00', 0x800, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x1000000, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) chdir(&(0x7f00000000c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x478103, 0x60) 13.760921716s ago: executing program 2 (id=4842): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x1, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000600)={0x11, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe, 0x0, 0x4, 0xb}, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xb0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x1}}, {0xc, 0x6}}}, @m_ct={0x3c, 0x1c, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xb0}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x129100, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r3, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) 11.907059785s ago: executing program 2 (id=4849): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0xf4, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffc01}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x751e0867}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbb43}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x66a6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb4}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x5}, 0x100058c0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000003c0)=@buf) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32000000001400000011000100"], 0x88}}, 0x0) 10.828638994s ago: executing program 2 (id=4853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x9) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYBLOB="fcb03d6939bbd9964d63817e588b38c4d2cb664a993b5fd1d717bcff15db944d2e80f94f770845541c626bbc6427182295c76adfda2ff47248ea16985d8076fc675424bf5beab069f1eaa2df0917808e3d335a28dc81ff1e7710d32a901e0354b3807c94dfeb0e8328090add39e327b4616c38953a7aab038a038243428cde8025d6fccbb0c9a798faa3dca083dce73578253d7217e9774d009725a3b98760a8568d34fbbb669d05ad61b88e96271cb85e172388bc80b24cb61fee7a96ea65c37b534a957b8aedbc29052d7dd90144fb13ae649e1b7216332524ad14ae27775ab9d44644f37fdf9e5b9ffde70214dcdd22a4dca4bc3563be17357f4b", @ANYRES16=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES64], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x18}], 0x1, 0x101, 0x0) r4 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x400, 0x1, 0x2a8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2) io_uring_enter(r4, 0x16f6, 0x7f0c, 0x2, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) socket$inet6_udp(0xa, 0x2, 0x0) 10.302566851s ago: executing program 8 (id=4854): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000140)="a8c67d98c42301421a1d34d9628c98ba73e004a112a355fa2a3b8702d19207f0ddb7af0f86c448c646e48af6cadf7cb5b0ac3408") r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000f80)) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 9.555541737s ago: executing program 8 (id=4855): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01000900010073797a30000000000900030073797a3200000000b0000000060a010400000000000000000100000008000b400000000088000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004"], 0x124}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c0003800800010002000000340003800800010000000000280003"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) 9.553710957s ago: executing program 2 (id=4856): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcdd) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x26c0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x7, &(0x7f0000000280)) getpgid(r1) 8.566607812s ago: executing program 3 (id=4857): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 8.39284507s ago: executing program 8 (id=4860): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x1, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000600)={0x11, 0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe, 0x0, 0x4, 0xb}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xb0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x1}}, {0xc, 0x6}}}, @m_ct={0x3c, 0x1c, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xb0}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x129100, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r2, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) 8.383742497s ago: executing program 2 (id=4861): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) munlockall() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x11e, 0x1e, 0xffffffffffffffff, &(0x7f0000000340)=0xfffffffffffffeb8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x0) getdents(r4, 0x0, 0x0) 7.828942772s ago: executing program 3 (id=4863): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r3}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 6.73504077s ago: executing program 9 (id=4867): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x2f, 0x0, &(0x7f0000000200)=[0x0]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) io_uring_enter(r1, 0x48ce, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 6.008694591s ago: executing program 1 (id=4868): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:syslog_conf_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 5.531685141s ago: executing program 9 (id=4869): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001580), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x1801}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0) 5.361261022s ago: executing program 2 (id=4870): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffff}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5", 0x2}], 0x1, 0x8, 0x1, {0x2}}) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000080)={0x2c, &(0x7f0000000b00)={0x0, 0x21, 0x5, {0x5, 0x1, "9665f5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47f8, 0x0, 0x0, 0x0, 0x0) 5.077974695s ago: executing program 3 (id=4871): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x0) getdents(r4, 0x0, 0x0) 5.047620386s ago: executing program 8 (id=4872): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x3, 0x1, 0x4}, 0x38) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x8, 0xfffeffff, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x68, 0x0, 0x7, 0x2b, 0x0, @broadcast, @empty}}}}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000002c0)={@local, r3}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r6 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x1, 0x3, 0x2, 0x0, 0xf6}) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000000)=0x637) read$FUSE(r6, &(0x7f0000004480)={0x2020}, 0x2020) fchown(r6, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) sendmsg$kcm(r0, 0x0, 0x480c4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) 4.842474202s ago: executing program 1 (id=4873): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="cf0e90ee4fec82d9a69b72a2d6df9c13344dbb8a75b6ea8e21a25726cf9948bf0fe75cbd00eeb759688bdb7196ca2a07687f74ee80", 0x35) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='&)\xc2!]\x00', 0x0) r2 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="ac37559f3212b541385f4ae7139501d905cbd9d1bfc67bb77ed595f84ec6574a80a05f6f9776567fcb67e97acbe547a2185bea6b576be1189ddaeb19ed9ace19a8da88201e33d334847cf1caf08ca1c1af3b45ca7fa3e9822c8d01e9793b4c8d67e784cd0cce6592a5cf304e847f472b9f5a2407b2748396b569f35c8773adaa4a0d19b4191793a3916c7e7b018af54153039102c16c1430b1e7", 0x9a, r1) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000140)={0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r2, r3}, &(0x7f0000000440)=""/59, 0x3b, &(0x7f0000000580)={&(0x7f0000000480)={'sha1-neon\x00'}, &(0x7f00000004c0)="294b0fb98eacb49a81b400a15ff30904fb5ff52088cd56e5b533b773174d70140548abc1f5101d607a1160513efc249e54f4cd1f4a949e4d5de67158ec42f7cb7806bbf9fe9ec01add13bf6fe0a2c0b1105a4a368a74fcda357881289e95493bde7b6d3fb9fe12cdc8464a0bb823c306b5b9bcb5e0c2eb04ec49c4d8a78a356ece60563500dbde9e55926c44", 0x8c}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r11, 0xffffffffffffffff, 0x0) 4.510768196s ago: executing program 9 (id=4874): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x0) getdents(r4, 0x0, 0x0) 4.140044734s ago: executing program 3 (id=4875): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xa1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r3, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000006c0)={@dev={0xfe, 0x80, '\x00', 0x13}}, 0x14) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_to_batadv\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x3}, r7}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.9851712s ago: executing program 8 (id=4876): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x3, 0x1, 0x4}, 0x38) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad", 0xf}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000002c0)={@local}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f000000}, 0x600) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r5 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x1, 0x3, 0x2, 0x0, 0xf6}) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f0000000000)=0x637) read$FUSE(r5, &(0x7f0000004480)={0x2020}, 0x2020) fchown(r5, 0x0, 0x0) close(0xffffffffffffffff) getpid() syz_open_dev$sg(&(0x7f0000000100), 0xf65d, 0x501000) sendmsg$kcm(r0, 0x0, 0x480c4) 3.57985191s ago: executing program 1 (id=4877): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a00), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01042abd7000fddbdf2506000000080003002000000008000e00a0000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x4040884) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000007c0)={0x1c, r0, 0xe096044a3fc9e6f1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x44) 3.061166515s ago: executing program 9 (id=4878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x9) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES64], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x18}], 0x1, 0x101, 0x0) r4 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x400, 0x1, 0x2a8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2) io_uring_enter(r4, 0x16f6, 0x7f0c, 0x2, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) socket$inet6_udp(0xa, 0x2, 0x0) 1.557098333s ago: executing program 8 (id=4879): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x65364000) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x20001, 0x0, [0x7, 0x4e6a, 0x7, 0x2d5, 0x9, 0x400, 0x3, 0x7]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000000c0)="2ef2dd050080000048b844410000000000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b9009800000f01d90f01c965470f01c4410f79d226450f01cb660f013b", 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x79, &(0x7f0000000240)={@multicast, @broadcast, @void, {@generic={0x201, "9ef220e3633379370aa2f47bac62a050d96122818b9e9db253b714d652ccb4844c691163478537a9a8e861a355b2c281a48488438bb3587daa8b729889a2341c7f67d72d4a1dc53f6d2fe6a882f5e862ca58688702803dbf26f04fa67be100"/107}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 1.494559199s ago: executing program 9 (id=4880): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x2f, 0x0, &(0x7f0000000200)=[0x0]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) io_uring_enter(r1, 0x48ce, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_open_dev$vim2m(0x0, 0x7, 0x2) 1.439553028s ago: executing program 1 (id=4881): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, &(0x7f0000000040)=0xffffffffffffffa9) r3 = socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x101, 0x8a}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="368e2edcb62c824a75f001984c68681c7845b25c0a391ef19df1adbc7b796f79", 0x20}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xd4, [@dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @local]}, @cipso={0x86, 0x1b, 0x1, [{0x5, 0xd, "bad28101819f55177da3d2"}, {0x1, 0x8, "d89f2d3bab58"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x88, 0x2}, @noop, @end, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x22}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0xf8}}, {{&(0x7f0000000680)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000d40)=[{&(0x7f00000006c0)="0488a7a289a29cf5bda532e28af438e0a5b87de7bdbebcc5c7e4acc052b255a9649a55b684c2030c810746f65ab04a5ae922c4f9ad1c348ba0e33172d3d95c681d9e2ddd8100cd2deb2e3f9cfa16a97d1b2f27b6f9c7bed14ae57ec0f2a6ee6f199507", 0x63}, {&(0x7f0000000740)="27af613f7c2706fb92f2346c32db0087ed42f8fbfd0e689789a72a82fbf7b3253e3919928fbff19e9b6c1b911611441ff7080d977b7f26e8fba0c33adbf7cb36343ffd20f2b629563ffb91055890feb10bd29a0049411ec9801996bce9134f811a", 0x61}, {&(0x7f00000007c0)="08b7da20589d7674a8107a5ea5ba352d69bf5c8e96d503baa010b7f68f74ed802cb4873b83eb3bba6606823d605b17c476b67469477ea578cbdedf1b289e", 0x3e}, {&(0x7f0000000800)="ee6e6fdde2cdf17d2207d63b95f173c5cbd926aa732364c264d6ba765c7e1a1716777c01d8783791bc6fc593187d62909a7f9b4a8c17520ccfe5100fc8f35949349953d9f41806664c0a583a190370e985dc326fa635e2b15540c2b39735be53cee39268831d4ac0281b3f8f03668ec1c79cf6fc2b3e9dd54f534639494d3219efac59444523a4f1747c643ec882ba901e3c18e3f5cd755e927e22d3f349e06fda1f9c", 0xa3}, {&(0x7f00000008c0)="7be46767a94db1f23d1216b85000930f792a73f340650af3b9c1b6a9ca4e9846b972b1bdf1ceada5866a2df1d4bf20fa8b9b8a65867b203e9d06b1b2ebbfe58cb008c1c64ab49d8d068e3500a82167a60d3c6887229277d9ba971856d3c5fee2f0516b0b1ac780ecc2eded4c942ee75c1e1dc320419643dfdf790ad5f50370af2f8694a7513c255877a288f2c927b7b1d4605f8ba870611968c29230b4615933f3022a09cccab4c1bf9c734939b7de7cbfa9f0efa64ef7be3652747a1513155fb3ca6e13fc887a7ce17fa681383ccd1e720145ea1e4b110aac841b77e651e64e0296826c88d1d92d7ea4edc808c162", 0xef}, {&(0x7f00000009c0)="737549912af7c1578b35e696fe24f52c58593df41dd8c7a162810e0c8a8ef66094c88e59aff06e6418124b42340042552bfae0825d06f0c7294d3272791a42b125d7fc2be73f35465ccc8c41dab1109ddfaa5d8e89b7ba1d2c9aae8b832067a7d4f7fb8ab2bd7fbcb78c3fa3b26cff9d3a1992f42d7722fcb5e1d7ed5bbbcc04a0", 0x81}, {&(0x7f0000000a80)="41bff579c80da531a55b052f9822c5fbcc71499ed5996bcb072a4f403d8b37c529a6852c29c475b5627217dae39deb0387268f1e37fb773306d1ffd2e146326b75f564ad0ae3271b85d0fae2b1c72a3c406b84012c9b2588367a2117a0298a58069593f8f6238311b404af2f700b7e37c8739b4704b7c27369395ad27c937c50c53276b33d41a2fcda684a9d8bccaf63959be04734bda58dcbe1d54a6c1b0cd429dc2c9584f4e9922ad54e1e7cd35891bf3db135000f0f7681d1d592a9723329d08f1fe073829278951d0cb72d8916c5ada2d0548375af810f5010a21b027d50d76a", 0xe2}, {&(0x7f0000000b80)="c90ba77aff04cf0e7e44ac7cefd09675088dd3b32c9772907b7e9de7e638d8a680306f33152d7ec292bbd388c82a226a9dcdc52c31f68f951e9ee53969", 0x3d}, {&(0x7f0000000bc0)="c0595157b7331006883fd4532f34ba2cd2e5dd5c70af7f62053062dc42bda7750bc07616f7226bdefc0eb25837e351fa9f120e78a3eebd02f25d6e1c1fe48fd7229e95386600b6bff165afb17e381bebbf", 0x51}, {&(0x7f0000000c40)="88650fba197bdf5031362d77b9181ba75c3b84dc495d301184cfeafd76f881799a123b8c321aa722cced55c249d0baec7fab435e68a387510b5bd217bd31b6b09cd693099b1f699c6bc2cdade761f5c4846858fe31430d574e340da97b43f45ce69f7f2d771b40bc6ffa5b896a0baea6047c68fb59f79b289e0b89154bd59635716098979cd7f39cea54e9a9c04ac1d3f681c36d71fedca3d8ae6126d9f2a98a76c75256bfbda213be0e87eef7dea8773cced63af2ad279df387a395ff4bdd71be5e", 0xc2}], 0xa, &(0x7f0000000e00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}, {{&(0x7f0000000e40)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000e80)="714db1ab5f9fd1b76a7dd286dfc7ed2adf65bdba2843eda6bf87a63e41f6b78e5636aa62df6175adadda6348aca61c0306df4f6e29efec1feda72f1dcb0eb5d3267532dacd24927d52737cc303b76e", 0x4f}], 0x1, &(0x7f0000000f40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc69d4688}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x74, 0x0, 0xc, [0x8, 0x4, 0x1000, 0x1ff, 0xffff6cc2]}, @end, @noop]}}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001000)="4e2054f8b836cc93a8882a35a09bce6cc3b822e4b95188c7972df5dc6c846b45e31291fc9d78edf887dfead9b8438491c4", 0x31}, {&(0x7f0000001040)="a1a6c6dc768d6d864cae8fe1626a60f4d43f29c3e0ce9e651792e04413d8e5f3babc2c325f61be5513d767179b6f1b482d65fde9610d68a57ead279456600f7a8295455ef298adc781ca0bbd8af1d734c43ed11d5c5ac54ddc08f945c387c579e965021610120d19d9c00d0b09", 0x6d}, {&(0x7f00000010c0)}, {&(0x7f0000001100)="2040317fb561258a7af7", 0xa}], 0x4, &(0x7f0000001280)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x40, 0x0, 0x4, [0x2, 0x1, 0x6e31]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @noop, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0xdf, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2f}, @local, @empty, @local, @multicast1]}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x8, 0x49, 0x0, 0x1, [0x8000]}, @ra={0x94, 0x4}, @generic={0x7, 0x4, "872d"}]}}}], 0x100}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001380)="e3f985361112720697e512d36a11f929325abcb427cc4b979d88f3c61147a38b05f038b25de929363b911474074cf460eea9d3b7df4f87ee82", 0x39}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001440)="78a956886f40e31dd108bfea85237bc41f653533e6c7ccc197a24be3e4604af01ef3ed852c9613d0ad632f241ee51c9470ed6989b7224a743703b6baa13d9724dd19a6e1ec02dd81edc01f131fad16460c55f291633747a989df926d57cbf3e0db9a425e73e471f2cbc1572dcc9cee42a360c8197b1538f571999b8b44cc570b2abba96fd8dcab3160f9711459b80f6d2addd0ee8f23027ffbce38b71ffc8c15cd6419a211ff9ed7360fa4e06796b48d3b7d912a81ec5e6955bf4909", 0xbc}, {&(0x7f0000001500)="d42068fccaab0b4c277df6d16a2acbce9f38f746d0297ee96140cecad8fd54324881fe965b6c8ff5cb1f5b50472de07e6e942e2ac13b8917001e799aaaeba48e580cdec696b7f7367763318a2ffb787f6fd288bc63a24801f128dad0eb64655686e56096b4e847ec573c8fd8f11f73dc545e54b943c2fe2e86f902631e365fbbae02915c", 0x84}], 0x2, &(0x7f0000001600)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc}}], 0x18}}], 0x6, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000880)=""/4096, &(0x7f0000000340)=0x1000) 1.328303874s ago: executing program 3 (id=4882): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x11e, 0x1e, 0xffffffffffffffff, &(0x7f0000000340)=0xfffffffffffffeb8) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x2}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r9, 0x3, 0x0) getdents(r9, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r7, r5, 0x7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.210585863s ago: executing program 1 (id=4883): mknodat$loop(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x3100, 0x1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0xd, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 313.657267ms ago: executing program 9 (id=4884): r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc, 0x800}], 0x1) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{&(0x7f00000010c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x2, 0x48000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x130, 0xb, 0x148, 0x0, 0x148, 0x1f8, 0x230, 0x242, 0x1f8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x33}, 0x0, 0xd0, 0x130, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x8, 0x0, [0x9, 0x28, 0xe, 0x2d, 0x3d, 0xc, 0x39, 0x16, 0x30, 0x1d, 0x40, 0x0, 0x33, 0x3c, 0x0, 0x3f], 0x2, 0x377b, 0x8b88}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x20}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x1}, {0x4, 0x3, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 195.966647ms ago: executing program 1 (id=4885): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x0) getdents(r4, 0x0, 0x0) 0s ago: executing program 3 (id=4886): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x3, 0x1, 0x4}, 0x38) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x8, 0xfffeffff, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x68, 0x0, 0x7, 0x2b, 0x0, @broadcast, @empty}}}}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000002c0)={@local, r3}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r6 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x1, 0x3, 0x2, 0x0, 0xf6}) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000000)=0x637) read$FUSE(r6, &(0x7f0000004480)={0x2020}, 0x2020) fchown(r6, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) sendmsg$kcm(r0, 0x0, 0x480c4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) kernel console output (not intermixed with test programs): ermissive=1 [ 1327.955858][T22268] block nbd9: Unsupported socket: shutdown callout must be supported. [ 1329.452789][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4269'. [ 1329.542480][T22285] trusted_key: encrypted_key: keyword 'udt' not recognized [ 1329.571040][T22295] netlink: 'syz.9.4272': attribute type 1 has an invalid length. [ 1329.572320][T22293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4271'. [ 1330.330433][ T30] audit: type=1400 audit(2000001027.388:3164): avc: denied { bind } for pid=22306 comm="syz.9.4276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1330.365641][T22310] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4277'. [ 1330.403178][ T30] audit: type=1400 audit(2000001027.408:3165): avc: denied { accept } for pid=22306 comm="syz.9.4276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1330.451466][ T30] audit: type=1400 audit(2000001027.418:3166): avc: denied { nlmsg_read } for pid=22309 comm="syz.8.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1330.588135][T22319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22319 comm=syz.8.4279 [ 1330.697212][ T30] audit: type=1400 audit(2000001027.748:3167): avc: denied { write } for pid=22321 comm="syz.8.4280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1330.747617][T22322] overlayfs: failed to resolve './file1': -2 [ 1330.778264][ T30] audit: type=1400 audit(2000001027.798:3168): avc: denied { setopt } for pid=22321 comm="syz.8.4280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1330.799644][ T5926] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1330.961583][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1330.993634][ T5926] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1331.013563][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.035192][ T5926] usb 4-1: config 0 descriptor?? [ 1331.298645][ T5862] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1331.333844][T22329] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4283'. [ 1331.595037][ T5926] lua 0003:1E7D:2C2E.002B: item fetching failed at offset 2/3 [ 1331.610110][ T5926] lua 0003:1E7D:2C2E.002B: parse failed [ 1331.732928][ T5926] lua 0003:1E7D:2C2E.002B: probe with driver lua failed with error -22 [ 1331.741264][ T5862] usb 9-1: Using ep0 maxpacket: 8 [ 1331.849838][ T5862] usb 9-1: config 0 has an invalid interface number: 24 but max is 0 [ 1331.869902][ T5862] usb 9-1: config 0 has no interface number 0 [ 1331.904844][T22345] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4285'. [ 1331.923014][ T5862] usb 9-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65 [ 1331.956342][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.979823][ T5862] usb 9-1: Product: syz [ 1331.984166][ T5862] usb 9-1: Manufacturer: syz [ 1332.015484][ T5862] usb 9-1: SerialNumber: syz [ 1332.054694][ T5862] usb 9-1: config 0 descriptor?? [ 1332.602034][ T5862] pegasus 9-1:0.24: probe with driver pegasus failed with error -71 [ 1332.615416][ T5862] usb 9-1: USB disconnect, device number 56 [ 1333.725011][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4294'. [ 1333.887234][ T5875] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1334.803310][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 1334.821246][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.834029][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1334.847077][ T5875] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1334.856240][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.866294][ T5875] usb 3-1: config 0 descriptor?? [ 1334.876352][ T5875] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1334.933218][ T5875] usb 4-1: USB disconnect, device number 5 [ 1334.957267][ T5821] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1335.057211][ T5862] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1335.213157][T22383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4298'. [ 1335.306348][T22381] program syz.9.4292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1335.326115][ T5821] usb 9-1: config 0 has an invalid interface number: 168 but max is 0 [ 1335.366681][ T5821] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.391347][T19947] usb 3-1: USB disconnect, device number 53 [ 1335.398540][T22364] program syz.9.4292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1335.409476][T22364] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1335.427182][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 1335.438075][ T5862] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1335.438101][ T5821] usb 9-1: config 0 has no interface number 0 [ 1335.464066][ T5862] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 1335.477236][ T5862] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1335.484233][ T5821] usb 9-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1335.486070][ T5862] usb 2-1: config 4 has no interface number 0 [ 1335.512463][ T5821] usb 9-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1335.532899][ T5862] usb 2-1: string descriptor 0 read error: -22 [ 1335.535259][ T5821] usb 9-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1335.540192][ T5862] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1335.551748][ T5821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.575954][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.583759][T22387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4299'. [ 1335.614052][ T5862] usb 2-1: Found UVC 0.02 device (04f2:b746) [ 1335.627637][ T5862] usb 2-1: No valid video chain found. [ 1335.656613][ T5821] usb 9-1: config 0 descriptor?? [ 1335.669848][ T5821] HFC-S_USB 9-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1336.038571][ T5862] usb 2-1: USB disconnect, device number 109 [ 1337.162998][ T5862] usb 9-1: USB disconnect, device number 57 [ 1337.174833][T22404] xt_HMARK: proto mask must be zero with L3 mode [ 1337.208173][ T30] audit: type=1400 audit(2000001034.268:3169): avc: denied { map } for pid=22405 comm="syz.2.4305" path="socket:[91135]" dev="sockfs" ino=91135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1337.261255][ T30] audit: type=1400 audit(2000001034.268:3170): avc: denied { accept } for pid=22405 comm="syz.2.4305" path="socket:[91135]" dev="sockfs" ino=91135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1338.968504][T22435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4311'. [ 1338.987443][T22432] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4310'. [ 1339.242009][T22447] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4315'. [ 1339.277256][ T5821] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1339.457221][ T5926] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1339.527041][ T5821] usb 10-1: Using ep0 maxpacket: 8 [ 1339.540617][ T5821] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1339.550039][ T5821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.560452][ T5821] usb 10-1: Product: syz [ 1339.564686][ T5821] usb 10-1: Manufacturer: syz [ 1339.571946][ T5862] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1339.572049][ T5821] usb 10-1: SerialNumber: syz [ 1339.662338][T22451] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1339.675779][T22451] Error validating options; rc = [-22] [ 1340.004140][ T5821] usb 10-1: config 0 descriptor?? [ 1340.012208][ T5821] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1340.109057][T22444] program syz.8.4312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1340.172888][T22452] program syz.8.4312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1340.187311][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 1340.198525][T22452] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1340.199411][ T5926] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1340.217278][ T5926] usb 4-1: config 0 has no interface number 0 [ 1340.233708][ T5862] usb 3-1: config 0 has an invalid interface number: 242 but max is 29 [ 1340.245811][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 30 [ 1340.256866][ T5862] usb 3-1: config 0 has no interface number 0 [ 1340.263197][ T5862] usb 3-1: config 0 interface 242 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.275039][ T5862] usb 3-1: config 0 interface 242 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.285724][ T5862] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1340.285848][ T5926] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1340.351196][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.362281][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.372651][ T5862] usb 3-1: config 0 descriptor?? [ 1340.377834][ T5926] usb 4-1: Product: syz [ 1340.387161][ T5926] usb 4-1: Manufacturer: syz [ 1340.392470][ T5926] usb 4-1: SerialNumber: syz [ 1340.439349][ T5926] usb 4-1: config 0 descriptor?? [ 1340.508288][ T5926] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1340.557715][ T5821] gspca_sonixj: reg_w1 err -110 [ 1340.565100][ T5821] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1341.398343][ T5862] usbhid 3-1:0.242: can't add hid device: -71 [ 1341.414749][ T5862] usbhid 3-1:0.242: probe with driver usbhid failed with error -71 [ 1341.448023][ T5862] usb 3-1: USB disconnect, device number 54 [ 1341.516039][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4319'. [ 1341.560398][T19947] usb 10-1: USB disconnect, device number 5 [ 1341.603350][T22443] xt_bpf: check failed: parse error [ 1342.444056][ T5926] gspca_spca1528: reg_w err -71 [ 1342.706538][ T5926] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1342.733904][ T5926] usb 4-1: USB disconnect, device number 6 [ 1343.995063][T22496] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 1344.228037][T22502] syz.3.4329: attempt to access beyond end of device [ 1344.228037][T22502] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1344.411221][ T30] audit: type=1800 audit(2000001041.468:3171): pid=22519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4332" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1344.585851][T22522] xt_addrtype: ipv6 does not support BROADCAST matching [ 1344.727002][ T30] audit: type=1326 audit(2000001041.778:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22525 comm="syz.9.4334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b4ff8e929 code=0x0 [ 1344.897200][ T5821] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1344.918976][T22533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'. [ 1345.060168][ T5821] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1345.070084][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.078156][ T5821] usb 3-1: Product: syz [ 1345.082395][ T5821] usb 3-1: Manufacturer: syz [ 1345.086997][ T5821] usb 3-1: SerialNumber: syz [ 1345.093126][ T5821] usb 3-1: config 0 descriptor?? [ 1345.167275][T17283] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1345.319570][T17283] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.329551][T17283] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1345.343432][T17283] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1345.352618][T17283] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.363643][T17283] usb 9-1: config 0 descriptor?? [ 1345.390939][T22536] SELinux: Context Z;Ñ is not valid (left unmapped). [ 1347.006606][T17283] kovaplus 0003:1E7D:2D50.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.8-1/input0 [ 1347.029748][ T5821] usb 3-1: f81604_read: reg: 100e failed: -EPROTO [ 1347.044893][ T30] audit: type=1400 audit(2000001044.098:3173): avc: denied { ioctl } for pid=22531 comm="syz.8.4336" path="socket:[91754]" dev="sockfs" ino=91754 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1347.794513][ T5821] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 1347.816898][ T30] audit: type=1400 audit(2000001044.098:3174): avc: denied { watch_reads } for pid=22531 comm="syz.8.4336" path="/273" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1347.828503][T17283] kovaplus 0003:1E7D:2D50.002C: couldn't init struct kovaplus_device [ 1347.842082][ T5821] usb 3-1: USB disconnect, device number 55 [ 1347.858553][T17283] kovaplus 0003:1E7D:2D50.002C: couldn't install mouse [ 1347.885344][ T5821] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 1347.933146][T22561] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4344'. [ 1347.954241][T17283] kovaplus 0003:1E7D:2D50.002C: probe with driver kovaplus failed with error -71 [ 1347.980339][T17283] usb 9-1: USB disconnect, device number 58 [ 1348.013045][ T5821] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 1349.079856][T22591] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1349.443466][ T30] audit: type=1400 audit(2000001046.498:3175): avc: denied { create } for pid=22576 comm="syz.2.4348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1349.496723][T22586] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 1353.812988][T22644] tipc: Started in network mode [ 1353.819198][T22644] tipc: Node identity aa5799c5b23b, cluster identity 4711 [ 1354.247859][T22644] tipc: Enabled bearer , priority 0 [ 1354.255113][T22647] syzkaller0: entered promiscuous mode [ 1354.365050][T22647] syzkaller0: entered allmulticast mode [ 1354.405692][T22644] tipc: Resetting bearer [ 1354.421461][T22644] tipc: Disabling bearer [ 1354.705025][T22652] syz.8.4363: attempt to access beyond end of device [ 1354.705025][T22652] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1354.753618][ T30] audit: type=1400 audit(2000001051.788:3176): avc: denied { setattr } for pid=22638 comm="syz.8.4363" name="HCI" dev="sockfs" ino=91926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1355.017235][ T5821] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1355.289318][ T5821] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1355.311537][ T5821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.350374][T19947] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1355.369303][ T5821] usb 9-1: Product: syz [ 1355.373566][ T5821] usb 9-1: Manufacturer: syz [ 1355.378318][ T5821] usb 9-1: SerialNumber: syz [ 1355.414834][ T5821] usb 9-1: config 0 descriptor?? [ 1355.432152][ T5821] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1355.517196][T19947] usb 2-1: Using ep0 maxpacket: 32 [ 1355.524017][T19947] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1355.530809][T19947] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1355.552298][T19947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.603463][T19947] usb 2-1: config 0 descriptor?? [ 1356.031157][ T5821] gspca_sunplus: reg_r err -110 [ 1356.380354][T19947] usbhid 2-1:0.0: can't add hid device: -71 [ 1356.414563][T19947] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1356.490966][T19947] usb 2-1: USB disconnect, device number 110 [ 1356.995268][ T5821] usb 9-1: USB disconnect, device number 59 [ 1358.037045][T22694] netlink: 584 bytes leftover after parsing attributes in process `syz.9.4376'. [ 1358.060444][T22694] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1358.211156][T22702] 9pnet_fd: Insufficient options for proto=fd [ 1358.777250][ T5821] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1358.917450][ T5821] usb 2-1: device descriptor read/64, error -71 [ 1359.127580][T17972] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1359.140110][ T30] audit: type=1400 audit(2000001056.198:3177): avc: denied { setopt } for pid=22717 comm="syz.9.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1359.168699][ T5821] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1359.238876][T22719] netlink: 'syz.9.4385': attribute type 14 has an invalid length. [ 1359.307221][T17972] usb 3-1: Using ep0 maxpacket: 32 [ 1359.317330][ T5821] usb 2-1: device descriptor read/64, error -71 [ 1359.348903][T17972] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1359.369282][T17972] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1359.400600][T17972] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1359.413896][T17972] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1359.427551][T17972] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1359.428253][ T5821] usb usb2-port1: attempt power cycle [ 1359.435914][T17972] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1359.457219][T17972] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1359.466263][T17972] usb 3-1: Product: syz [ 1359.470553][T17972] usb 3-1: Manufacturer: syz [ 1359.475233][T17972] usb 3-1: SerialNumber: syz [ 1359.523231][T17972] usb 3-1: config 0 descriptor?? [ 1359.849142][T17972] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1359.966622][T17972] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1360.108066][ T5821] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1360.172486][ T5821] usb 2-1: device descriptor read/8, error -71 [ 1360.447281][ T5821] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1360.485808][ T5821] usb 2-1: device descriptor read/8, error -71 [ 1360.607509][ T5821] usb usb2-port1: unable to enumerate USB device [ 1360.688664][T22741] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1360.702107][T22741] Error validating options; rc = [-22] [ 1360.927514][T19947] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1361.157855][T19947] usb 9-1: Using ep0 maxpacket: 16 [ 1361.172076][T19947] usb 9-1: config 10 has an invalid interface number: 131 but max is 0 [ 1361.181100][T19947] usb 9-1: config 10 has no interface number 0 [ 1361.338324][T17972] usb 3-1: USB disconnect, device number 56 [ 1361.353828][T22744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4392'. [ 1361.374601][T22744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4392'. [ 1361.390343][T17972] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1361.442597][T19947] usb 9-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=3f.c4 [ 1361.452889][T19947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.463584][T19947] usb 9-1: Product: syz [ 1361.468137][T19947] usb 9-1: Manufacturer: syz [ 1361.472766][T19947] usb 9-1: SerialNumber: syz [ 1361.524503][T22753] FAULT_INJECTION: forcing a failure. [ 1361.524503][T22753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.557776][ T30] audit: type=1400 audit(2000001058.618:3178): avc: denied { bind } for pid=22746 comm="syz.9.4394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1361.588444][T22753] CPU: 0 UID: 0 PID: 22753 Comm: syz.1.4395 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1361.588468][T22753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1361.588478][T22753] Call Trace: [ 1361.588484][T22753] [ 1361.588491][T22753] dump_stack_lvl+0x16c/0x1f0 [ 1361.588519][T22753] should_fail_ex+0x512/0x640 [ 1361.588545][T22753] ? page_copy_sane+0xcd/0x2d0 [ 1361.588568][T22753] copy_folio_from_iter_atomic+0x375/0x1aa0 [ 1361.588600][T22753] ? fault_in_readable+0x128/0x1d0 [ 1361.588629][T22753] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1361.588655][T22753] ? shmem_write_begin+0x176/0x300 [ 1361.588679][T22753] ? __pfx_shmem_write_begin+0x10/0x10 [ 1361.588702][T22753] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 1361.588725][T22753] generic_perform_write+0x22c/0x930 [ 1361.588756][T22753] ? __pfx_generic_perform_write+0x10/0x10 [ 1361.588779][T22753] ? inode_needs_update_time.part.0+0x191/0x270 [ 1361.588820][T22753] shmem_file_write_iter+0x10e/0x140 [ 1361.588847][T22753] vfs_write+0x6c4/0x1150 [ 1361.588870][T22753] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1361.588897][T22753] ? __pfx___mutex_lock+0x10/0x10 [ 1361.588923][T22753] ? __pfx_vfs_write+0x10/0x10 [ 1361.588962][T22753] ksys_write+0x12a/0x250 [ 1361.588984][T22753] ? __pfx_ksys_write+0x10/0x10 [ 1361.589013][T22753] do_syscall_64+0xcd/0x4c0 [ 1361.589040][T22753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.589058][T22753] RIP: 0033:0x7fe880f8e929 [ 1361.589073][T22753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1361.589090][T22753] RSP: 002b:00007fe881ea9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1361.589106][T22753] RAX: ffffffffffffffda RBX: 00007fe8811b5fa0 RCX: 00007fe880f8e929 [ 1361.589118][T22753] RDX: 000000000000b315 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1361.589128][T22753] RBP: 00007fe881ea9090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.589138][T22753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1361.589147][T22753] R13: 0000000000000000 R14: 00007fe8811b5fa0 R15: 00007fff365442a8 [ 1361.589171][T22753] [ 1361.808991][ C0] vkms_vblank_simulate: vblank timer overrun [ 1361.855235][T19947] usb 9-1: USB disconnect, device number 60 [ 1362.242643][T22761] netlink: 'syz.3.4397': attribute type 1 has an invalid length. [ 1362.320193][T22761] netlink: 'syz.3.4397': attribute type 4 has an invalid length. [ 1362.330920][T22761] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4397'. [ 1362.353253][T22765] FAULT_INJECTION: forcing a failure. [ 1362.353253][T22765] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.373266][T22765] CPU: 0 UID: 0 PID: 22765 Comm: syz.2.4398 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1362.373293][T22765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1362.373305][T22765] Call Trace: [ 1362.373311][T22765] [ 1362.373319][T22765] dump_stack_lvl+0x16c/0x1f0 [ 1362.373350][T22765] should_fail_ex+0x512/0x640 [ 1362.373373][T22765] ? __kmalloc_node_noprof+0xc5/0x500 [ 1362.373400][T22765] should_failslab+0xc2/0x120 [ 1362.373426][T22765] __kmalloc_node_noprof+0xd8/0x500 [ 1362.373450][T22765] ? qdisc_alloc+0xbb/0xc50 [ 1362.373479][T22765] qdisc_alloc+0xbb/0xc50 [ 1362.373504][T22765] ? trace_kmalloc+0x2b/0xd0 [ 1362.373557][T22765] qdisc_create_dflt+0x94/0x490 [ 1362.373586][T22765] taprio_init+0x48f/0x910 [ 1362.373620][T22765] ? __pfx_taprio_init+0x10/0x10 [ 1362.373646][T22765] ? __pfx_taprio_init+0x10/0x10 [ 1362.373669][T22765] qdisc_create+0x457/0xfc0 [ 1362.373693][T22765] tc_modify_qdisc+0x12bb/0x2130 [ 1362.373722][T22765] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1362.373766][T22765] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1362.373788][T22765] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1362.373817][T22765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1362.373850][T22765] ? ref_tracker_free+0x37c/0x830 [ 1362.373877][T22765] netlink_rcv_skb+0x158/0x420 [ 1362.373896][T22765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1362.373924][T22765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1362.373952][T22765] ? netlink_deliver_tap+0x1ae/0xd30 [ 1362.373985][T22765] netlink_unicast+0x53d/0x7f0 [ 1362.374006][T22765] ? __pfx_netlink_unicast+0x10/0x10 [ 1362.374032][T22765] netlink_sendmsg+0x8d1/0xdd0 [ 1362.374054][T22765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1362.374082][T22765] ____sys_sendmsg+0xa95/0xc70 [ 1362.374103][T22765] ? copy_msghdr_from_user+0x10a/0x160 [ 1362.374127][T22765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1362.374159][T22765] ___sys_sendmsg+0x134/0x1d0 [ 1362.374185][T22765] ? __pfx____sys_sendmsg+0x10/0x10 [ 1362.374208][T22765] ? __lock_acquire+0x622/0x1c90 [ 1362.374268][T22765] __sys_sendmsg+0x16d/0x220 [ 1362.374297][T22765] ? __pfx___sys_sendmsg+0x10/0x10 [ 1362.374340][T22765] do_syscall_64+0xcd/0x4c0 [ 1362.374368][T22765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.374386][T22765] RIP: 0033:0x7fae4598e929 [ 1362.374402][T22765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1362.374418][T22765] RSP: 002b:00007fae4675c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1362.374435][T22765] RAX: ffffffffffffffda RBX: 00007fae45bb5fa0 RCX: 00007fae4598e929 [ 1362.374447][T22765] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 1362.374458][T22765] RBP: 00007fae4675c090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.374468][T22765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.374479][T22765] R13: 0000000000000000 R14: 00007fae45bb5fa0 R15: 00007ffd9d3b4e48 [ 1362.374503][T22765] [ 1362.661834][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.197443][T17972] usb 9-1: new full-speed USB device number 61 using dummy_hcd [ 1363.571839][T17972] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1364.124980][T17972] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1364.153591][T17972] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1364.176709][T17972] usb 9-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1364.217246][T17972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.240819][T17972] usb 9-1: config 0 descriptor?? [ 1364.257241][T22769] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1365.360108][T17972] magicmouse 0003:05AC:0269.002D: hidraw0: USB HID v0.01 Device [HID 05ac:0269] on usb-dummy_hcd.8-1/input0 [ 1365.899731][T17972] usb 9-1: USB disconnect, device number 61 [ 1366.786690][T22812] XFS (nullb0): Invalid superblock magic number [ 1366.845427][T22823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.096711][ T30] audit: type=1400 audit(2000001065.148:3179): avc: denied { setopt } for pid=22827 comm="syz.9.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1368.143289][ T30] audit: type=1400 audit(2000001065.148:3180): avc: denied { accept } for pid=22827 comm="syz.9.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1368.317968][T22840] ALSA: mixer_oss: invalid OSS volume '' [ 1368.357317][ T30] audit: type=1400 audit(2000001065.408:3181): avc: denied { remount } for pid=22839 comm="syz.2.4416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1369.181479][T22836] program syz.8.4414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1369.753126][T22856] program syz.8.4414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1369.763128][T22856] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1370.067304][T17972] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1370.137205][ T5862] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1370.239701][T17972] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1370.377185][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 1370.544438][T17972] usb 4-1: can't read configurations, error -61 [ 1370.587944][ T5862] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1370.596984][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.699634][ T5862] usb 2-1: Product: syz [ 1370.703832][ T5862] usb 2-1: Manufacturer: syz [ 1370.709338][ T5862] usb 2-1: SerialNumber: syz [ 1370.726325][ T5862] usb 2-1: config 0 descriptor?? [ 1370.787525][T17972] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1370.956572][T17972] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1370.965440][T17972] usb 4-1: can't read configurations, error -61 [ 1371.300608][ T5862] peak_usb 2-1:0.0: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1371.309417][T17972] usb usb4-port1: attempt power cycle [ 1371.505745][ T5862] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1371.687272][T17972] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1371.735178][T22860] xt_HMARK: proto mask must be zero with L3 mode [ 1371.851162][ T5862] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1371.867603][ T5862] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1371.881654][T17972] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1371.906646][T17972] usb 4-1: can't read configurations, error -61 [ 1371.957910][ T5862] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 1371.967718][ T30] audit: type=1400 audit(2000001069.028:3182): avc: denied { read } for pid=22889 comm="syz.9.4428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1372.007718][T22893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22893 comm=syz.8.4427 [ 1372.067303][T17972] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1372.084288][ T30] audit: type=1400 audit(2000001069.088:3183): avc: denied { bind } for pid=22892 comm="syz.9.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1372.130092][T17972] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1372.137954][T17972] usb 4-1: can't read configurations, error -61 [ 1372.169039][T17972] usb usb4-port1: unable to enumerate USB device [ 1372.209412][T22900] FAULT_INJECTION: forcing a failure. [ 1372.209412][T22900] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.222340][T22900] CPU: 0 UID: 0 PID: 22900 Comm: syz.9.4430 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1372.222362][T22900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1372.222373][T22900] Call Trace: [ 1372.222379][T22900] [ 1372.222385][T22900] dump_stack_lvl+0x16c/0x1f0 [ 1372.222414][T22900] should_fail_ex+0x512/0x640 [ 1372.222436][T22900] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1372.222463][T22900] should_failslab+0xc2/0x120 [ 1372.222488][T22900] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1372.222513][T22900] ? cond_bools_copy+0x45/0xf0 [ 1372.222534][T22900] kmemdup_noprof+0x29/0x60 [ 1372.222556][T22900] cond_bools_copy+0x45/0xf0 [ 1372.222573][T22900] hashtab_duplicate+0x245/0x5d0 [ 1372.222596][T22900] ? __pfx_cond_bools_copy+0x10/0x10 [ 1372.222616][T22900] ? __pfx_cond_bools_destroy+0x10/0x10 [ 1372.222635][T22900] cond_policydb_dup+0x155/0x750 [ 1372.222663][T22900] security_set_bools+0x13f/0x6c0 [ 1372.222696][T22900] ? rep_movs_alternative+0x11/0x90 [ 1372.222719][T22900] ? sel_commit_bools_write+0x25c/0x420 [ 1372.222740][T22900] sel_commit_bools_write+0x36e/0x420 [ 1372.222760][T22900] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 1372.222783][T22900] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 1372.222799][T22900] vfs_write+0x29d/0x1150 [ 1372.222825][T22900] ? __pfx_vfs_write+0x10/0x10 [ 1372.222844][T22900] ? find_held_lock+0x2b/0x80 [ 1372.222865][T22900] ? __fget_files+0x204/0x3c0 [ 1372.222892][T22900] ? __fget_files+0x20e/0x3c0 [ 1372.222923][T22900] __x64_sys_pwrite64+0x1eb/0x250 [ 1372.222947][T22900] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1372.222975][T22900] do_syscall_64+0xcd/0x4c0 [ 1372.223003][T22900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.223021][T22900] RIP: 0033:0x7f1b4ff8e929 [ 1372.223035][T22900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1372.223052][T22900] RSP: 002b:00007f1b4ddd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1372.223069][T22900] RAX: ffffffffffffffda RBX: 00007f1b501b6080 RCX: 00007f1b4ff8e929 [ 1372.223080][T22900] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 1372.223091][T22900] RBP: 00007f1b4ddd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.223101][T22900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.223111][T22900] R13: 0000000000000000 R14: 00007f1b501b6080 R15: 00007ffe4eb078b8 [ 1372.223135][T22900] [ 1372.462637][ C0] vkms_vblank_simulate: vblank timer overrun [ 1373.378340][T22912] syz.3.4434 (22912): /proc/22908/oom_adj is deprecated, please use /proc/22908/oom_score_adj instead. [ 1373.877576][T17972] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1374.108561][T22938] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4439'. [ 1374.127298][T17972] usb 10-1: Using ep0 maxpacket: 8 [ 1374.131422][T17972] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1374.131450][T17972] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.131468][T17972] usb 10-1: Product: syz [ 1374.131484][T17972] usb 10-1: Manufacturer: syz [ 1374.131500][T17972] usb 10-1: SerialNumber: syz [ 1374.133620][T17972] usb 10-1: config 0 descriptor?? [ 1374.225760][ T5862] usb 2-1: USB disconnect, device number 115 [ 1374.711856][T17972] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1374.805009][T22932] tty tty36: ldisc open failed (-12), clearing slot 35 [ 1374.915735][T22949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22949 comm=syz.3.4444 [ 1375.237322][ T5821] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1375.467496][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 1375.550354][ T5821] usb 4-1: config 0 has an invalid interface number: 137 but max is 0 [ 1375.592773][ T5821] usb 4-1: config 0 has no interface number 0 [ 1375.606511][ T5821] usb 4-1: too many endpoints for config 0 interface 137 altsetting 253: 69, using maximum allowed: 30 [ 1375.607482][T22959] netlink: 'syz.8.4447': attribute type 1 has an invalid length. [ 1375.645929][ T5821] usb 4-1: config 0 interface 137 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 1375.673114][ T5821] usb 4-1: config 0 interface 137 has no altsetting 0 [ 1375.701631][ T5821] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1375.733823][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.773980][ T5821] usb 4-1: Product: syz [ 1375.783831][ T5821] usb 4-1: Manufacturer: syz [ 1375.792878][ T5821] usb 4-1: SerialNumber: syz [ 1375.809769][ T5821] usb 4-1: config 0 descriptor?? [ 1375.854537][T22967] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4449'. [ 1375.880964][T22967] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4449'. [ 1375.910542][ T30] audit: type=1400 audit(2000001072.968:3184): avc: denied { accept } for pid=22962 comm="syz.8.4449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1376.037342][ T5875] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1376.217416][ T5875] usb 3-1: device descriptor read/64, error -71 [ 1376.388348][T22973] "syz.3.4445" (22973) uses obsolete ecb(arc4) skcipher [ 1376.467228][ T5875] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1376.614236][T17972] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1376.627216][ T5875] usb 3-1: device descriptor read/64, error -71 [ 1376.635054][T17972] usb 10-1: USB disconnect, device number 6 [ 1376.655032][T22979] overlay: Unknown parameter 'euid' [ 1376.737727][ T5875] usb usb3-port1: attempt power cycle [ 1377.077234][ T5875] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1377.153902][T22983] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1377.167349][T22983] Error validating options; rc = [-22] [ 1377.598060][ T5875] usb 3-1: device descriptor read/8, error -71 [ 1377.849568][T22990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22990 comm=syz.1.4456 [ 1378.367278][ T30] audit: type=1400 audit(2000001075.338:3185): avc: denied { shutdown } for pid=22992 comm="syz.1.4457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1378.493824][ T30] audit: type=1400 audit(2000001075.548:3186): avc: denied { ioctl } for pid=22992 comm="syz.1.4457" path="socket:[94216]" dev="sockfs" ino=94216 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1378.602541][ T5875] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1378.612560][ T5821] gspca_main: se401-2.14.0 probing 047d:5003 [ 1378.647730][ T5875] usb 3-1: device descriptor read/8, error -71 [ 1378.777533][ T5875] usb usb3-port1: unable to enumerate USB device [ 1379.067804][ T30] audit: type=1400 audit(2000001076.128:3187): avc: denied { bind } for pid=23001 comm="syz.9.4459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1379.095066][T23002] random: crng reseeded on system resumption [ 1379.115371][ T30] audit: type=1400 audit(2000001076.148:3188): avc: denied { write } for pid=23001 comm="syz.9.4459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1379.557660][T23016] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4453'. [ 1379.568360][ T30] audit: type=1400 audit(2000001076.148:3189): avc: denied { append } for pid=23001 comm="syz.9.4459" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1379.591547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1380.511344][T23020] trusted_key: encrypted_key: insufficient parameters specified [ 1380.530274][ T5821] gspca_se401: read req failed req 0x06 error -19 [ 1380.540621][T23020] trusted_key: encrypted_key: keylen parameter is missing [ 1380.583592][ T5821] usb 4-1: USB disconnect, device number 11 [ 1380.989740][T23028] netlink: 'syz.1.4463': attribute type 10 has an invalid length. [ 1381.037192][ T5897] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1381.043215][T23028] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 1381.064709][T23028] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 1381.083524][T23028] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1381.378704][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1381.402869][ T5897] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1381.412013][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.422891][ T5897] usb 3-1: config 0 descriptor?? [ 1381.799269][T23049] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1382.254620][T23049] pvfs2: Unknown parameter 'subj_user' [ 1382.569708][T20966] Bluetooth: hci4: command 0x0406 tx timeout [ 1383.007585][ T5821] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1383.396228][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4472'. [ 1383.450188][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 1383.503654][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1383.585418][ T5897] usb 3-1: USB disconnect, device number 61 [ 1383.593052][ T5821] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1383.626607][ T5821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1383.667541][ T5821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1383.709332][ T5821] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1383.824438][ T5821] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1383.838731][ T5821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.849528][ T5821] usb 10-1: config 0 descriptor?? [ 1384.417229][ T5892] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1384.460634][ T5821] plantronics 0003:047F:FFFF.002E: ignoring exceeding usage max [ 1384.482888][ T5821] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1384.509723][T23081] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4477'. [ 1384.569449][ T5897] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1384.614345][T23081] trusted_key: encrypted_key: keyword 'udt' not recognized [ 1384.929526][ T5892] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 1384.938666][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.953141][ T5892] usb 2-1: config 0 has no interface number 0 [ 1384.959864][ T5892] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1384.970945][ T5892] usb 2-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1384.984324][ T5892] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1385.003447][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.032333][ T5892] usb 2-1: config 0 descriptor?? [ 1385.052748][ T5892] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1385.103637][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 1385.198469][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1385.217921][ T5897] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1385.243522][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.534246][ T5897] usb 3-1: config 0 descriptor?? [ 1386.320697][T23066] kvm: pic: non byte write [ 1386.797846][ T5892] usb 10-1: USB disconnect, device number 7 [ 1386.812630][T17972] usb 2-1: USB disconnect, device number 116 [ 1387.604874][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 1387.647985][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1387.781449][ T5897] usb 3-1: USB disconnect, device number 62 [ 1388.502978][T23135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4495'. [ 1389.117977][T23142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4497'. [ 1389.712363][ T5892] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1390.000425][ T5892] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 1390.089484][T13229] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 1390.154127][T23151] program syz.2.4494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1390.185547][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.230631][ T5892] usb 2-1: config 0 has no interface number 0 [ 1390.236778][ T5892] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1390.248874][T23157] program syz.2.4494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1390.259620][T23157] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1390.408619][T13229] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1390.438555][T13229] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1390.447682][ T5892] usb 2-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1390.481217][ T5892] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1390.507327][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.525906][ T5892] usb 2-1: config 0 descriptor?? [ 1390.535363][ T5892] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1390.552726][T13229] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1390.576648][T13229] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.596287][T13229] usb 9-1: Product: syz [ 1390.615100][T13229] usb 9-1: Manufacturer: syz [ 1390.622790][T13229] usb 9-1: SerialNumber: syz [ 1390.638419][T13229] usb 9-1: config 0 descriptor?? [ 1390.679282][T23161] loop2: detected capacity change from 0 to 7 [ 1390.683243][T13229] usb 9-1: selecting invalid altsetting 0 [ 1390.706081][T23161] Dev loop2: unable to read RDB block 7 [ 1390.718026][T23161] loop2: unable to read partition table [ 1390.724176][T23161] loop2: partition table beyond EOD, truncated [ 1390.746446][T23161] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1390.818548][T23158] tmpfs: Bad value for 'mpol' [ 1390.907330][ T5892] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1391.048081][T13229] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1391.109905][T23171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4506'. [ 1391.167842][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 1391.175059][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1391.218905][ T5892] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1391.375042][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1391.382767][ T5892] usb 3-1: can't read configurations, error -61 [ 1391.390757][T13229] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.403704][T13229] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1391.413718][T13229] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1391.423213][T13229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.433991][T13229] usb 10-1: config 0 descriptor?? [ 1391.527307][ T5892] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1391.607804][ T5875] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1391.687542][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 1391.694493][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1391.702451][ T5892] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1391.714898][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1391.722514][ T5892] usb 3-1: can't read configurations, error -61 [ 1391.729178][ T5892] usb usb3-port1: attempt power cycle [ 1391.768528][ T5875] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 1391.776769][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.786988][ T5875] usb 4-1: config 0 has no interface number 0 [ 1391.793132][ T5875] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1391.804101][ T5875] usb 4-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1391.819391][ T5875] usb 4-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1391.830314][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.842458][ T5875] usb 4-1: config 0 descriptor?? [ 1391.857271][ T5875] HFC-S_USB 4-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1391.866152][T13229] playstation 0003:054C:0DF2.002F: unknown main item tag 0x0 [ 1391.873644][T13229] playstation 0003:054C:0DF2.002F: unknown main item tag 0x0 [ 1391.883580][T13229] playstation 0003:054C:0DF2.002F: item fetching failed at offset 2/5 [ 1391.892280][T13229] playstation 0003:054C:0DF2.002F: Parse failed [ 1391.898570][T13229] playstation 0003:054C:0DF2.002F: probe with driver playstation failed with error -22 [ 1392.039435][ T5862] usb 2-1: USB disconnect, device number 117 [ 1392.087217][ T5892] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1392.117708][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 1392.130558][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1392.138431][ T5892] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1392.147790][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1392.155585][ T5892] usb 3-1: can't read configurations, error -61 [ 1392.287248][ T5892] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1392.307850][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 1392.315294][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1392.324364][ T5892] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1392.336313][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1392.344079][ T5892] usb 3-1: can't read configurations, error -61 [ 1392.350776][ T5892] usb usb3-port1: unable to enumerate USB device [ 1392.447290][ T5862] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1392.607169][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 1392.614439][ T5862] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1392.622781][ T5862] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1392.633811][ T5862] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1392.646603][ T5862] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1392.675051][ T5862] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1392.685462][ T5862] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1392.695702][ T5862] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1392.697891][ T5892] usb 9-1: USB disconnect, device number 62 [ 1392.704320][ T5862] usb 2-1: Product: syz [ 1392.715670][ T5862] usb 2-1: Manufacturer: syz [ 1392.720854][ T5862] usb 2-1: SerialNumber: syz [ 1392.743431][ T5862] usb 2-1: config 0 descriptor?? [ 1392.768697][ T5862] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1392.780049][ T5862] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1393.207503][ T5892] usb 2-1: USB disconnect, device number 118 [ 1393.574062][ T5892] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1393.593828][ T5862] usb 10-1: USB disconnect, device number 8 [ 1394.384847][ T5862] usb 4-1: USB disconnect, device number 12 [ 1394.621894][T23198] lo speed is unknown, defaulting to 1000 [ 1394.628569][T23198] lo speed is unknown, defaulting to 1000 [ 1394.634761][T23198] lo speed is unknown, defaulting to 1000 [ 1394.645752][T23198] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1394.662155][T23198] lo speed is unknown, defaulting to 1000 [ 1394.668815][T23198] lo speed is unknown, defaulting to 1000 [ 1394.676739][ T30] audit: type=1400 audit(2000001091.728:3190): avc: denied { connect } for pid=23197 comm="syz.9.4514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1394.698626][T23198] lo speed is unknown, defaulting to 1000 [ 1394.707712][T23198] lo speed is unknown, defaulting to 1000 [ 1394.901478][T23198] lo speed is unknown, defaulting to 1000 [ 1395.006358][T23203] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1395.021380][T23203] Error validating options; rc = [-22] [ 1396.446543][T23216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23216 comm=syz.9.4518 [ 1396.465093][T23216] bridge0: port 3(vlan2) entered blocking state [ 1396.473613][T23216] bridge0: port 3(vlan2) entered disabled state [ 1396.480781][T23216] vlan2: entered allmulticast mode [ 1396.486455][T23216] bond0: entered allmulticast mode [ 1396.491703][T23216] bond_slave_0: entered allmulticast mode [ 1396.497528][T23216] bond_slave_1: entered allmulticast mode [ 1396.504575][T23216] vlan2: entered promiscuous mode [ 1396.509824][T23216] bond0: entered promiscuous mode [ 1396.514936][T23216] bond_slave_0: entered promiscuous mode [ 1396.520896][T23216] bond_slave_1: entered promiscuous mode [ 1396.817265][ T5862] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1396.847235][T17972] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1397.007569][ T5862] usb 10-1: Using ep0 maxpacket: 32 [ 1397.023358][T17972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.040294][T17972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1397.040635][ T5862] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1397.060047][T17972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1397.071191][T17972] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1397.084612][ T5862] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1397.126761][T17972] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1397.153847][ T5862] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1397.180848][T17972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.213525][ T5862] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1397.226951][T17972] usb 3-1: Product: syz [ 1397.231362][T17972] usb 3-1: Manufacturer: syz [ 1397.236049][T17972] usb 3-1: SerialNumber: syz [ 1397.248773][ T5862] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1397.264849][T23224] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1397.317243][ T5892] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1397.334139][ T5862] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1397.344188][ T5862] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1397.352810][ T5862] usb 10-1: Product: syz [ 1397.357324][ T5862] usb 10-1: Manufacturer: syz [ 1397.362052][ T5862] usb 10-1: SerialNumber: syz [ 1397.384365][ T5862] usb 10-1: config 0 descriptor?? [ 1397.397132][ T5862] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1397.409551][ T5862] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1397.499409][ T5892] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1397.510625][ T5892] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1397.520886][ T5892] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1397.530278][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.542476][T23229] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1397.553623][ T5892] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1397.875513][ T5862] usb 10-1: USB disconnect, device number 9 [ 1398.182900][ T5862] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1398.242630][ T5892] usb 2-1: USB disconnect, device number 119 [ 1398.582515][T17972] cdc_ncm 3-1:1.0: bind() failure [ 1398.860915][T17972] usb 3-1: USB disconnect, device number 67 [ 1404.161444][T10217] Bluetooth: hci3: command 0x0406 tx timeout [ 1405.522902][ T5875] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 1405.711998][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.723458][ T5875] usb 2-1: config 0 has no interfaces? [ 1406.064644][ T5875] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1406.081202][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.094864][ T5875] usb 2-1: config 0 descriptor?? [ 1406.227895][T23300] program syz.2.4539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1406.309892][T13229] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1406.367197][ T5882] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1406.907058][T23314] program syz.2.4539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1407.013903][T23314] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1407.088793][T13229] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1407.111085][T13229] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1407.136246][T13229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.160412][T13229] usb 4-1: config 0 descriptor?? [ 1407.177259][ T5882] usb 10-1: Using ep0 maxpacket: 32 [ 1407.188266][ T5882] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1407.196712][ T5882] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1407.223764][ T5882] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1407.241801][ T5882] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1407.255885][ T5882] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1407.268152][ T5882] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1407.280838][ T5882] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1407.289974][ T5882] usb 10-1: Product: syz [ 1407.294699][ T5882] usb 10-1: Manufacturer: syz [ 1407.299545][ T5882] usb 10-1: SerialNumber: syz [ 1407.314565][ T5882] usb 10-1: config 0 descriptor?? [ 1407.323537][ T5882] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1407.488163][ T5882] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1408.035530][T13229] lua 0003:1E7D:2C2E.0030: item fetching failed at offset 2/3 [ 1408.046566][T13229] lua 0003:1E7D:2C2E.0030: parse failed [ 1408.052508][T13229] lua 0003:1E7D:2C2E.0030: probe with driver lua failed with error -22 [ 1408.745205][ T5875] usb 2-1: USB disconnect, device number 120 [ 1408.767912][T13229] usb 10-1: USB disconnect, device number 10 [ 1408.809687][T13229] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1410.473588][ T5875] usb 4-1: USB disconnect, device number 13 [ 1410.919128][T23339] program syz.9.4552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1410.971964][T23352] program syz.9.4552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1411.009557][T23352] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1411.513173][ T30] audit: type=1400 audit(2000001108.568:3191): avc: denied { mounton } for pid=23359 comm="syz.2.4559" path="/74/file0" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1411.609918][ T30] audit: type=1400 audit(2000001108.658:3192): avc: denied { write } for pid=23359 comm="syz.2.4559" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1412.001649][ T30] audit: type=1400 audit(2000001108.658:3193): avc: denied { open } for pid=23359 comm="syz.2.4559" path="/74/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1412.186408][ T30] audit: type=1400 audit(2000001109.238:3194): avc: denied { getopt } for pid=23368 comm="syz.9.4561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1412.397205][ T5875] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1412.527255][ T5882] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1412.781570][ T5882] usb 9-1: Using ep0 maxpacket: 32 [ 1412.920887][ T5875] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 1412.939378][ T5882] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1412.966240][ T5882] usb 9-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1412.971148][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.996994][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.003129][ T5875] usb 2-1: config 0 has no interface number 0 [ 1413.017250][ T5875] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1413.043373][ T5875] usb 2-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1413.058321][ T5882] usb 9-1: config 0 descriptor?? [ 1413.062615][ T5875] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1413.072483][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.085357][ T5875] usb 2-1: config 0 descriptor?? [ 1413.991779][ T5875] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1414.034253][T23373] kvm: pic: non byte write [ 1415.106883][T17972] usb 2-1: USB disconnect, device number 121 [ 1415.127283][ T5862] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1415.180001][ T5882] usbhid 9-1:0.0: can't add hid device: -71 [ 1415.186038][ T5882] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1415.210809][ T5882] usb 9-1: USB disconnect, device number 63 [ 1415.348131][ T5862] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1415.356338][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.397135][ T5862] usb 4-1: config 0 has no interface number 0 [ 1415.403305][ T5862] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1415.447108][ T5862] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1415.501748][ T5862] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1415.511409][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.536927][T23425] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4575'. [ 1415.547150][T17972] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1415.555786][ T5862] usb 4-1: Product: syz [ 1415.568382][ T5862] usb 4-1: Manufacturer: syz [ 1415.573011][ T5862] usb 4-1: SerialNumber: syz [ 1415.600118][ T5862] usb 4-1: config 0 descriptor?? [ 1415.729605][T17972] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1415.769305][T17972] usb 2-1: config 0 has no interface number 0 [ 1415.781155][T17972] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1415.807114][T17972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.825480][T17972] usb 2-1: Product: syz [ 1415.833536][T17972] usb 2-1: Manufacturer: syz [ 1415.847099][T17972] usb 2-1: SerialNumber: syz [ 1415.930842][T17972] usb 2-1: config 0 descriptor?? [ 1415.958899][ T5862] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1415.987401][ T5862] usb 4-1: USB disconnect, device number 14 [ 1416.401556][T23422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.451832][T23422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.480254][T17972] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1416.491448][T17972] usb 2-1: USB disconnect, device number 122 [ 1418.729294][T23461] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1418.742778][T23461] Error validating options; rc = [-22] [ 1419.831602][T13229] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1420.830313][T23473] program syz.3.4584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1420.850039][T13229] usb 2-1: Using ep0 maxpacket: 32 [ 1420.883526][T23482] program syz.3.4584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1420.929326][T23482] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1420.998906][T13229] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1421.247310][T13229] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1421.357845][T13229] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1421.453277][T13229] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1421.510679][T13229] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1421.636832][T13229] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1421.650278][T13229] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1421.787694][T13229] usb 2-1: Product: syz [ 1421.791997][T13229] usb 2-1: Manufacturer: syz [ 1421.797497][T13229] usb 2-1: SerialNumber: syz [ 1421.818202][T13229] usb 2-1: config 0 descriptor?? [ 1421.887768][T13229] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1422.010944][T13229] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1423.042450][T23499] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1423.055826][T23499] Error validating options; rc = [-22] [ 1423.098799][T17972] usb 2-1: USB disconnect, device number 123 [ 1423.228355][T17972] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1424.817254][T17972] usb 2-1: new low-speed USB device number 124 using dummy_hcd [ 1424.945157][T23530] trusted_key: encrypted_key: keyword 'udt' not recognized [ 1425.043605][T17972] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1425.073685][T17972] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1425.085568][T17972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1425.270352][T17972] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1425.281492][T17972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1425.293165][T17972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1425.565286][T23544] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1425.578768][T23544] Error validating options; rc = [-22] [ 1425.627962][T17972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1425.884208][T17972] usb 2-1: string descriptor 0 read error: -22 [ 1425.892286][T17972] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1426.049657][T17972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.381888][T17972] usb 2-1: config 0 descriptor?? [ 1426.389916][T17972] hub 2-1:0.0: bad descriptor, ignoring hub [ 1426.395807][T17972] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1426.457440][ T5875] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1426.468564][T17972] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input74 [ 1426.823140][T13229] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1426.831835][ T5875] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 1426.841679][ T5875] usb 3-1: config 160 has no interface number 0 [ 1426.868577][ T5875] usb 3-1: config 160 interface 200 has no altsetting 0 [ 1426.906169][ T5875] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1426.933331][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.941883][ T5875] usb 3-1: Product: syz [ 1426.947033][ T5897] usb 2-1: USB disconnect, device number 124 [ 1426.955439][ T5875] usb 3-1: Manufacturer: syz [ 1426.965115][ T5875] usb 3-1: SerialNumber: syz [ 1426.978765][T13229] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.990563][T13229] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1427.001713][T13229] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1427.010962][T13229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1427.019207][T13229] usb 10-1: SerialNumber: syz [ 1427.030652][T13229] usb 10-1: 0:2 : does not exist [ 1427.287145][T17972] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1427.421800][T23565] program syz.3.4615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1427.445019][T17972] usb 9-1: config 0 has an invalid interface number: 189 but max is 0 [ 1427.453372][T17972] usb 9-1: config 0 has no interface number 0 [ 1427.459701][T17972] usb 9-1: config 0 interface 189 altsetting 0 endpoint 0x8 has invalid maxpacket 25792, setting to 64 [ 1427.463700][ T5875] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1427.475900][T17972] usb 9-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=e7.7b [ 1427.480803][T13229] usb 10-1: USB disconnect, device number 11 [ 1427.499991][T17972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.510793][ T5875] usb 3-1: MIDIStreaming interface descriptor not found [ 1427.523116][T17972] usb 9-1: Product: syz [ 1427.540595][T17972] usb 9-1: Manufacturer: syz [ 1427.637857][T17972] usb 9-1: SerialNumber: syz [ 1427.656166][ T5875] usb 3-1: USB disconnect, device number 68 [ 1427.675208][T17972] usb 9-1: config 0 descriptor?? [ 1427.690645][T17972] ttusb_dec_send_command: command bulk message failed: error -22 [ 1427.700455][T17972] ttusb-dec 9-1:0.189: probe with driver ttusb-dec failed with error -22 [ 1427.875615][T23573] trusted_key: encrypted_key: keyword 'udt' not recognized [ 1427.933383][T13229] usb 9-1: USB disconnect, device number 64 [ 1427.968731][T23576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.021133][T23576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.247203][ T5875] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1428.427147][ T5875] usb 3-1: device descriptor read/64, error -71 [ 1430.459203][T23605] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1430.473157][T23605] Error validating options; rc = [-22] [ 1430.870376][T23609] trusted_key: encrypted_key: keyword 'udt' not recognized [ 1430.919958][T23611] netlink: 'syz.3.4629': attribute type 10 has an invalid length. [ 1431.216461][ T5897] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1431.230390][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4632'. [ 1431.417157][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 1431.497823][ T5897] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 1431.557135][ T5897] usb 4-1: config 0 has no interface number 0 [ 1431.574607][ T5897] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 1431.586631][ T5897] usb 4-1: New USB device strings: Mfr=128, Product=8, SerialNumber=0 [ 1431.596328][ T5897] usb 4-1: Product: syz [ 1431.602530][ T5897] usb 4-1: Manufacturer: syz [ 1431.648099][ T5897] usb 4-1: config 0 descriptor?? [ 1431.814321][T23618] program syz.9.4627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1431.869775][ T5875] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1431.883307][T23625] program syz.9.4627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1431.895073][T23625] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1432.180202][ T5875] usb 9-1: config 0 has an invalid interface number: 168 but max is 0 [ 1432.239251][T23624] program syz.2.4630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1432.257368][ T5875] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.301781][T23630] program syz.2.4630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1432.378940][T23631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23631 comm=syz.1.4634 [ 1432.396629][ T5875] usb 9-1: config 0 has no interface number 0 [ 1432.400547][ T30] audit: type=1400 audit(2000001129.438:3195): avc: denied { accept } for pid=23610 comm="syz.3.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1432.410045][T23630] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1432.447257][ T5875] usb 9-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1432.487149][ T5875] usb 9-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1432.504413][ T5875] usb 9-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1432.514079][ T5875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.527570][ T5875] usb 9-1: config 0 descriptor?? [ 1432.535483][ T5875] HFC-S_USB 9-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1432.590086][ T5875] usb 4-1: USB disconnect, device number 15 [ 1432.681002][T23634] veth0_to_bridge: mtu less than device minimum [ 1433.502413][T17972] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1433.647691][T23652] trusted_key: encrypted_key: insufficient parameters specified [ 1433.697260][T17972] usb 10-1: Using ep0 maxpacket: 32 [ 1433.706708][T23652] trusted_key: encrypted_key: keylen parameter is missing [ 1433.877812][T17972] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1433.897458][T17972] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1433.908788][T17972] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1433.920124][T17972] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1433.933506][T17972] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1433.950332][T17972] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1433.981934][T17972] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1434.882209][ T5875] usb 9-1: USB disconnect, device number 65 [ 1434.901670][T17972] usb 10-1: Product: syz [ 1435.096194][T17972] usb 10-1: Manufacturer: syz [ 1435.101815][T17972] usb 10-1: SerialNumber: syz [ 1435.107872][T17972] usb 10-1: config 0 descriptor?? [ 1435.114930][T17972] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1435.125517][T17972] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1435.417225][ T5897] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1435.490523][T23687] trusted_key: encrypted_key: insufficient parameters specified [ 1435.509210][T23687] trusted_key: encrypted_key: keylen parameter is missing [ 1435.637744][ T5892] usb 10-1: USB disconnect, device number 12 [ 1435.710620][ T5892] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1436.057126][T17972] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1436.345640][T17972] usb 3-1: Using ep0 maxpacket: 32 [ 1436.352631][T17972] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1436.365047][T17972] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1436.376025][T17972] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1436.387086][T17972] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1436.400223][T17972] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1436.447268][ T5897] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1436.468048][T17972] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1436.667712][T17972] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1436.676550][T17972] usb 3-1: Product: syz [ 1436.680852][T17972] usb 3-1: Manufacturer: syz [ 1436.685486][T17972] usb 3-1: SerialNumber: syz [ 1436.702896][T17972] usb 3-1: config 0 descriptor?? [ 1436.713703][T17972] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1436.729475][T17972] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1436.909084][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1436.923328][ T5897] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1436.932560][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.968235][ T5897] usb 4-1: config 0 descriptor?? [ 1437.777160][ T5862] usb 3-1: USB disconnect, device number 71 [ 1437.795285][ T5862] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1437.936910][T23719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23719 comm=syz.9.4663 [ 1438.021747][ T5897] lua 0003:1E7D:2C2E.0031: item fetching failed at offset 2/3 [ 1438.029831][ T5897] lua 0003:1E7D:2C2E.0031: parse failed [ 1438.035490][ T5897] lua 0003:1E7D:2C2E.0031: probe with driver lua failed with error -22 [ 1438.667381][ T5875] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1438.879058][ T5875] usb 10-1: Using ep0 maxpacket: 8 [ 1438.964891][ T5875] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1438.991671][ T5875] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1439.030202][ T5875] usb 10-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1439.071626][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.095569][ T5875] usb 10-1: config 0 descriptor?? [ 1439.227373][ T5862] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1439.427265][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 1439.439524][ T5862] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1439.449683][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.457755][ T5862] usb 2-1: Product: syz [ 1439.461995][ T5862] usb 2-1: Manufacturer: syz [ 1439.466586][ T5862] usb 2-1: SerialNumber: syz [ 1439.477555][ T5862] usb 2-1: config 0 descriptor?? [ 1439.516514][T23736] trusted_key: encrypted_key: insufficient parameters specified [ 1439.526469][T23736] trusted_key: encrypted_key: keylen parameter is missing [ 1439.564700][ T5875] logitech 0003:046D:C286.0032: hidraw0: USB HID v0.03 Device [HID 046d:c286] on usb-dummy_hcd.9-1/input0 [ 1439.576351][ T5875] logitech 0003:046D:C286.0032: no inputs found [ 1439.590922][T23738] netlink: 'syz.8.4669': attribute type 10 has an invalid length. [ 1439.964031][ T5897] usb 10-1: USB disconnect, device number 13 [ 1439.970224][ T5862] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1440.032040][ T5875] usb 4-1: USB disconnect, device number 17 [ 1442.135898][T23754] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 1442.633405][T23760] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4674'. [ 1442.690744][ T5862] usb write operation failed. (-71) [ 1442.777184][ T5862] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1442.792305][ T5862] dvbdev: DVB: registering new adapter (Terratec H7) [ 1442.800071][ T5862] usb 2-1: media controller created [ 1442.810146][ T5862] usb read operation failed. (-71) [ 1442.818988][ T5862] usb write operation failed. (-71) [ 1442.888799][ T5862] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1442.915663][T23754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1443.022943][ T5862] usb 2-1: USB disconnect, device number 125 [ 1443.667297][T17972] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1443.675435][ T5862] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1444.053894][T17972] usb 10-1: config 0 has an invalid interface number: 168 but max is 0 [ 1444.072715][T17972] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.123406][ T5862] usb 2-1: config index 0 descriptor too short (expected 8192, got 77) [ 1444.154374][T17972] usb 10-1: config 0 has no interface number 0 [ 1444.207629][ T5862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.241535][T17972] usb 10-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1444.479089][ T5862] usb 2-1: config 0 has no interfaces? [ 1444.484626][T17972] usb 10-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1444.513639][T17972] usb 10-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1444.523131][T17972] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.534390][T17972] usb 10-1: config 0 descriptor?? [ 1444.543570][T17972] HFC-S_USB 10-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1444.555786][ T5862] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1444.581364][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.590305][ T5862] usb 2-1: Product: syz [ 1444.597315][ T5862] usb 2-1: Manufacturer: syz [ 1444.602052][ T5862] usb 2-1: SerialNumber: syz [ 1444.612818][ T5862] usb 2-1: config 0 descriptor?? [ 1445.653428][ T30] audit: type=1400 audit(2000001142.698:3196): avc: denied { append } for pid=23764 comm="syz.1.4677" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1445.733959][ T5882] usb 10-1: USB disconnect, device number 14 [ 1445.956030][T23801] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4685'. [ 1445.968580][T23801] syz.8.4685: attempt to access beyond end of device [ 1445.968580][T23801] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1446.260407][ T30] audit: type=1400 audit(2000001143.318:3197): avc: denied { unmount } for pid=17330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1446.767251][ T5897] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1447.367334][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 1447.389377][ T5897] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1447.410903][ T5897] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1447.442471][ T5897] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1447.466600][ T5897] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1447.487537][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1447.562070][ T5897] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1447.607314][ T5897] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1447.637437][ T5897] usb 3-1: Product: syz [ 1447.660578][ T5897] usb 3-1: Manufacturer: syz [ 1447.665218][ T5897] usb 3-1: SerialNumber: syz [ 1447.730244][ T5897] usb 3-1: config 0 descriptor?? [ 1447.780285][ T5897] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1447.827199][ T5897] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1447.840043][ T30] audit: type=1400 audit(2000001144.878:3198): avc: denied { mount } for pid=23830 comm="syz.8.4694" name="/" dev="hugetlbfs" ino=97208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1447.939835][ T5862] usb 2-1: USB disconnect, device number 126 [ 1447.975263][T23835] trusted_key: encrypted_key: keylen parameter is missing [ 1449.271072][ T5821] usb 3-1: USB disconnect, device number 72 [ 1449.278395][ T5821] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1449.344994][T23844] FAULT_INJECTION: forcing a failure. [ 1449.344994][T23844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1449.358405][T23844] CPU: 1 UID: 0 PID: 23844 Comm: syz.1.4697 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1449.358430][T23844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1449.358441][T23844] Call Trace: [ 1449.358447][T23844] [ 1449.358455][T23844] dump_stack_lvl+0x16c/0x1f0 [ 1449.358485][T23844] should_fail_ex+0x512/0x640 [ 1449.358513][T23844] _copy_from_user+0x2e/0xd0 [ 1449.358539][T23844] copy_msghdr_from_user+0x98/0x160 [ 1449.358565][T23844] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1449.358602][T23844] ___sys_sendmsg+0xfe/0x1d0 [ 1449.358634][T23844] ? __pfx____sys_sendmsg+0x10/0x10 [ 1449.358656][T23844] ? __lock_acquire+0x622/0x1c90 [ 1449.358713][T23844] __sys_sendmsg+0x16d/0x220 [ 1449.358738][T23844] ? __pfx___sys_sendmsg+0x10/0x10 [ 1449.358779][T23844] do_syscall_64+0xcd/0x4c0 [ 1449.358807][T23844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.358825][T23844] RIP: 0033:0x7fe880f8e929 [ 1449.358840][T23844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1449.358857][T23844] RSP: 002b:00007fe881e88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1449.358874][T23844] RAX: ffffffffffffffda RBX: 00007fe8811b6080 RCX: 00007fe880f8e929 [ 1449.358885][T23844] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 1449.358896][T23844] RBP: 00007fe881e88090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.358907][T23844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1449.358917][T23844] R13: 0000000000000000 R14: 00007fe8811b6080 R15: 00007fff365442a8 [ 1449.358940][T23844] [ 1450.147113][T13229] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1450.988049][T23859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4701'. [ 1451.131039][T13229] usb 4-1: Using ep0 maxpacket: 16 [ 1451.393171][T13229] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1451.407396][T13229] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1451.450199][T13229] usb 4-1: Product: syz [ 1451.454414][T13229] usb 4-1: Manufacturer: syz [ 1451.460655][T13229] usb 4-1: SerialNumber: syz [ 1452.369488][T13229] usb 4-1: config 0 descriptor?? [ 1453.581558][T17283] usb 4-1: USB disconnect, device number 18 [ 1453.647523][ T5862] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1453.897107][ T5862] usb 9-1: Using ep0 maxpacket: 32 [ 1453.930062][ T5862] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1453.937029][ T5862] usb 9-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1453.948706][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.958901][ T5862] usb 9-1: config 0 descriptor?? [ 1454.624766][T23901] overlayfs: overlapping lowerdir path [ 1454.776153][ T5862] usbhid 9-1:0.0: can't add hid device: -71 [ 1454.797319][ T5862] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1454.809356][ T5862] usb 9-1: USB disconnect, device number 66 [ 1455.999114][ T5897] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1456.418500][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 1456.427215][ T5897] usb 3-1: config 162 has an invalid interface number: 236 but max is 0 [ 1456.435571][ T5897] usb 3-1: config 162 has no interface number 0 [ 1456.443481][ T5897] usb 3-1: config 162 interface 236 has no altsetting 0 [ 1456.452860][ T5897] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e9.c0 [ 1456.462172][ T5821] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1456.476622][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.485171][ T5897] usb 3-1: Product: syz [ 1456.492441][ T5897] usb 3-1: Manufacturer: syz [ 1456.497538][ T5897] usb 3-1: SerialNumber: syz [ 1456.617124][ T5821] usb 10-1: Using ep0 maxpacket: 32 [ 1456.632600][ T5821] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 1456.647160][ T5821] usb 10-1: config 1 has no interface number 0 [ 1456.665511][ T5821] usb 10-1: config 1 interface 3 has no altsetting 0 [ 1456.680425][ T5821] usb 10-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 1456.699865][ T5821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.722400][ T30] audit: type=1400 audit(2000001153.778:3199): avc: denied { connect } for pid=23907 comm="syz.2.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1456.742195][ T5821] usb 10-1: Product: syz [ 1456.746500][ T5821] usb 10-1: Manufacturer: syz [ 1456.767124][ T5821] usb 10-1: SerialNumber: syz [ 1458.577583][ T5897] cypress_cy7c63 3-1:162.236: Cypress CY7C63xxx device now attached [ 1458.597246][ T5897] usb 3-1: USB disconnect, device number 73 [ 1458.611315][ T5897] cypress_cy7c63 3-1:162.236: Cypress CY7C63xxx device now disconnected [ 1458.703021][T23949] netlink: 'syz.2.4728': attribute type 1 has an invalid length. [ 1458.975327][T23949] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4728'. [ 1458.984514][T23949] NCSI netlink: No device for ifindex 0 [ 1459.015552][ T5821] usb 10-1: USB disconnect, device number 15 [ 1459.354373][T23942] program syz.3.4724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1459.416548][T23960] program syz.3.4724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1459.624066][T23960] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1461.962859][T23998] geneve2: entered allmulticast mode [ 1462.057411][T17283] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1462.207191][T17283] usb 3-1: Using ep0 maxpacket: 32 [ 1462.337198][T17283] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1462.435450][T17283] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1462.520419][T17283] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1462.551802][T17283] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1462.609315][T17283] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1462.678384][T17283] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1462.684581][T24018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4742'. [ 1462.697373][T17283] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1462.776800][T17283] usb 3-1: Product: syz [ 1462.808251][T17283] usb 3-1: Manufacturer: syz [ 1462.817436][ T5862] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1462.851571][T17283] usb 3-1: SerialNumber: syz [ 1462.947135][T17283] usb 3-1: config 0 descriptor?? [ 1463.047706][T24015] program syz.3.4736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1463.082200][ T5862] usb 9-1: config 0 has an invalid interface number: 168 but max is 0 [ 1463.097319][T17283] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1463.110797][T24019] program syz.3.4736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1463.168065][T24019] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1463.187333][ T5862] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.267364][T17283] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1463.278047][ T5862] usb 9-1: config 0 has no interface number 0 [ 1463.287411][ T5862] usb 9-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1463.347086][ T5862] usb 9-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1463.367203][ T5862] usb 9-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1463.376333][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.386531][ T5862] usb 9-1: config 0 descriptor?? [ 1463.394213][ T5862] HFC-S_USB 9-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1463.635458][ T30] audit: type=1400 audit(2000001160.688:3200): avc: denied { watch_mount } for pid=24022 comm="syz.9.4743" path="/151" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1463.772822][ T5897] usb 3-1: USB disconnect, device number 74 [ 1464.117346][T17283] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1464.132608][ T5897] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1464.188647][T24030] can0: slcan on ptm0. [ 1464.194507][T24030] overlayfs: failed to resolve './file0': -2 [ 1464.298673][T17283] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 1464.307015][T17283] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.318168][T17283] usb 2-1: config 0 has no interface number 0 [ 1464.324314][T17283] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1464.335407][T17283] usb 2-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1464.348703][T17283] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1464.357765][T17283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.367624][T17283] usb 2-1: config 0 descriptor?? [ 1464.374510][T17283] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1464.457563][ T5862] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1464.658072][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 1464.670440][ T5862] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1464.680718][ T5862] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1464.692243][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1464.702940][ T5862] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1464.715313][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1464.726125][ T5862] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1464.741032][ T5862] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1464.750351][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.977176][ T5862] usb 4-1: GET_CAPABILITIES returned 0 [ 1465.012397][ T5862] usbtmc 4-1:16.0: can't read capabilities [ 1465.013658][T24034] program syz.2.4745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1465.084196][T24035] program syz.2.4745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1465.094543][T24035] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1465.292598][ T5862] usb 9-1: USB disconnect, device number 67 [ 1465.302199][ T5821] usb 4-1: USB disconnect, device number 19 [ 1465.369222][T24029] can0 (unregistered): slcan off ptm0. [ 1466.445578][ T5897] usb 2-1: USB disconnect, device number 127 [ 1466.466219][T24045] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4750'. [ 1466.888276][T24051] syzkaller0: entered promiscuous mode [ 1466.893966][T24051] syzkaller0: entered allmulticast mode [ 1467.903067][ T5821] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1468.126699][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 1468.138826][ T5821] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1468.407433][ T5862] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1468.607166][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 1468.648296][ T5862] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1468.648729][ T5821] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1468.674501][ T5821] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1468.685729][ T5821] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1468.699261][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1468.699555][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1468.707932][ T5821] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1468.726725][ T5821] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1468.735301][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1468.735729][ T5821] usb 2-1: Product: syz [ 1468.751640][ T5821] usb 2-1: Manufacturer: syz [ 1468.756309][ T5821] usb 2-1: SerialNumber: syz [ 1468.769262][ T5821] usb 2-1: config 0 descriptor?? [ 1468.776709][ T5821] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1468.787222][ T5862] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1468.824170][ T5821] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1468.872777][ T5862] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1468.893031][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.749883][ T5892] usb 2-1: USB disconnect, device number 2 [ 1469.766144][ T5892] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1470.500628][ T5862] usb 4-1: GET_CAPABILITIES returned 0 [ 1471.281334][ T5862] usbtmc 4-1:16.0: can't read capabilities [ 1472.144098][ T30] audit: type=1400 audit(2000001167.248:3201): avc: denied { connect } for pid=24075 comm="syz.3.4758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1474.185547][ T30] audit: type=1400 audit(2000001167.318:3202): avc: denied { read } for pid=24075 comm="syz.3.4758" path="socket:[97854]" dev="sockfs" ino=97854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1474.585611][ T5862] usb 4-1: USB disconnect, device number 20 [ 1475.282505][T24110] overlay: Unknown parameter 'smackfshat' [ 1475.317392][ T30] audit: type=1400 audit(2000001172.338:3203): avc: denied { mount } for pid=24099 comm="syz.1.4763" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1475.374756][T24111] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1475.679078][ T30] audit: type=1400 audit(2000001172.338:3204): avc: denied { mounton } for pid=24099 comm="syz.1.4763" path="/363/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1475.967405][ T30] audit: type=1400 audit(2000001172.948:3205): avc: denied { map } for pid=24109 comm="syz.8.4765" path="socket:[98942]" dev="sockfs" ino=98942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1478.022251][ T30] audit: type=1400 audit(2000001175.078:3206): avc: denied { setopt } for pid=24135 comm="syz.2.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1478.061799][ T30] audit: type=1400 audit(2000001175.118:3207): avc: denied { connect } for pid=24135 comm="syz.2.4772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1479.312655][ T30] audit: type=1400 audit(2000001176.358:3208): avc: denied { unmount } for pid=17284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1479.950091][ T30] audit: type=1400 audit(2000001176.718:3209): avc: denied { execute } for pid=24142 comm="syz.8.4774" name="file0" dev="ramfs" ino=98986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1481.005483][ T30] audit: type=1400 audit(2000001176.718:3210): avc: denied { execute_no_trans } for pid=24142 comm="syz.8.4774" path="/file0" dev="ramfs" ino=98986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1481.288271][T24155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4775'. [ 1481.303304][T24155] veth1_macvtap: left promiscuous mode [ 1481.656498][T24156] veth0_vlan: entered allmulticast mode [ 1481.695623][T24166] veth0_vlan: left promiscuous mode [ 1481.710664][T24166] veth0_vlan: entered promiscuous mode [ 1481.760052][T24168] lo speed is unknown, defaulting to 1000 [ 1482.615168][T24185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4784'. [ 1482.785828][T24181] program syz.9.4780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1482.885780][T24187] program syz.9.4780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1482.936139][T24187] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1483.516473][T24193] program syz.8.4782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1484.324919][T24198] program syz.8.4782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1484.362327][T24198] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1484.797136][ T5875] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1485.627267][ T5875] usb 10-1: Using ep0 maxpacket: 32 [ 1485.642706][ T5875] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1485.653295][ T5875] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1486.046893][ T5875] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1486.070735][ T5875] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1486.091902][ T5875] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1486.110976][ T5875] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1486.127405][ T5875] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1486.138066][ T5875] usb 10-1: Product: syz [ 1486.144250][ T5875] usb 10-1: Manufacturer: syz [ 1486.149759][ T5875] usb 10-1: SerialNumber: syz [ 1486.157776][ T5875] usb 10-1: config 0 descriptor?? [ 1486.165253][ T5875] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1486.449016][T24219] netlink: 'syz.1.4794': attribute type 4 has an invalid length. [ 1487.042136][ T5875] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1487.053629][ T5875] usb 10-1: USB disconnect, device number 16 [ 1487.073366][ T5875] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1487.114805][ T30] audit: type=1400 audit(2000001184.168:3211): avc: denied { write } for pid=24232 comm="syz.2.4796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1488.859653][ T5875] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1489.037253][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 1489.048737][ T5875] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1489.063141][ T5875] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1489.085696][ T5875] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1489.194894][ T5875] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1489.224520][ T5875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1490.214804][ T5875] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1490.224773][ T5875] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1490.361552][T24263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4803'. [ 1490.392296][ T5875] usb 2-1: Product: syz [ 1490.407148][T24252] program syz.9.4798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1490.422305][ T5875] usb 2-1: Manufacturer: syz [ 1490.427309][ T5875] usb 2-1: SerialNumber: syz [ 1490.457194][T24264] program syz.9.4798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1490.517475][ T5875] usb 2-1: config 0 descriptor?? [ 1490.528495][T24264] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1490.570634][ T5875] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1490.605573][ T5875] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1490.738519][T24267] SELinux: failed to load policy [ 1490.997244][ T30] audit: type=1400 audit(2000001187.798:3212): avc: denied { load_policy } for pid=24266 comm="syz.2.4804" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1491.738677][T17283] usb 2-1: USB disconnect, device number 3 [ 1491.812395][T24282] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4807'. [ 1492.056335][T17283] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1492.327488][ T5862] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1492.437400][T13229] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1492.600216][T24296] FAULT_INJECTION: forcing a failure. [ 1492.600216][T24296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1492.613546][T24296] CPU: 1 UID: 0 PID: 24296 Comm: syz.9.4813 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1492.613570][T24296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1492.613580][T24296] Call Trace: [ 1492.613586][T24296] [ 1492.613593][T24296] dump_stack_lvl+0x16c/0x1f0 [ 1492.613624][T24296] should_fail_ex+0x512/0x640 [ 1492.613652][T24296] _copy_to_user+0x32/0xd0 [ 1492.613678][T24296] simple_read_from_buffer+0xcb/0x170 [ 1492.613711][T24296] proc_fail_nth_read+0x197/0x270 [ 1492.613735][T24296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1492.613759][T24296] ? rw_verify_area+0xcf/0x680 [ 1492.613778][T24296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1492.613799][T24296] vfs_read+0x1e4/0xc60 [ 1492.613824][T24296] ? __pfx___mutex_lock+0x10/0x10 [ 1492.613851][T24296] ? __pfx_vfs_read+0x10/0x10 [ 1492.613880][T24296] ? __fget_files+0x20e/0x3c0 [ 1492.613910][T24296] ksys_read+0x12a/0x250 [ 1492.613930][T24296] ? __pfx_ksys_read+0x10/0x10 [ 1492.613956][T24296] do_syscall_64+0xcd/0x4c0 [ 1492.613982][T24296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.614001][T24296] RIP: 0033:0x7f1b4ff8d33c [ 1492.614015][T24296] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1492.614033][T24296] RSP: 002b:00007f1b4ddf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1492.614050][T24296] RAX: ffffffffffffffda RBX: 00007f1b501b5fa0 RCX: 00007f1b4ff8d33c [ 1492.614062][T24296] RDX: 000000000000000f RSI: 00007f1b4ddf60a0 RDI: 0000000000000004 [ 1492.614072][T24296] RBP: 00007f1b4ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.614082][T24296] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1492.614093][T24296] R13: 0000000000000000 R14: 00007f1b501b5fa0 R15: 00007ffe4eb078b8 [ 1492.614118][T24296] [ 1492.796228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.836948][T13229] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.847197][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 1492.874066][T13229] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.874829][ T5862] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1492.892619][ T5862] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1492.897092][T13229] usb 9-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1492.904357][ T5862] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1492.923945][ T5862] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1492.938024][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1492.952759][ T5862] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1492.962243][ T5862] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1492.970803][ T5862] usb 4-1: Product: syz [ 1492.974967][ T5862] usb 4-1: Manufacturer: syz [ 1492.979614][ T5862] usb 4-1: SerialNumber: syz [ 1492.986633][ T5862] usb 4-1: config 0 descriptor?? [ 1492.988894][T24299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24299 comm=syz.9.4814 [ 1493.006609][T13229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.024636][ T5862] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1493.050294][T13229] usb 9-1: config 0 descriptor?? [ 1493.921352][ T5862] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1494.645655][T17283] usb 4-1: USB disconnect, device number 21 [ 1494.702018][T24297] program syz.2.4810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1494.770915][T24307] program syz.2.4810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1494.777470][T17283] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1494.827374][T24307] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1494.920579][T13229] usbhid 9-1:0.0: can't add hid device: -71 [ 1494.926527][T13229] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1494.980121][T13229] usb 9-1: USB disconnect, device number 68 [ 1495.005455][T24312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24312 comm=syz.8.4817 [ 1495.019051][T24312] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1495.029267][T24314] FAULT_INJECTION: forcing a failure. [ 1495.029267][T24314] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.030053][T24313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4818'. [ 1495.042912][T24312] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4817'. [ 1495.060815][T24314] CPU: 1 UID: 0 PID: 24314 Comm: syz.9.4816 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1495.060840][T24314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1495.060851][T24314] Call Trace: [ 1495.060857][T24314] [ 1495.060864][T24314] dump_stack_lvl+0x16c/0x1f0 [ 1495.060893][T24314] should_fail_ex+0x512/0x640 [ 1495.060915][T24314] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1495.060939][T24314] should_failslab+0xc2/0x120 [ 1495.060962][T24314] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1495.060984][T24314] ? io_submit_one+0x122/0x1df0 [ 1495.061011][T24314] io_submit_one+0x122/0x1df0 [ 1495.061037][T24314] ? __lock_acquire+0xb8a/0x1c90 [ 1495.061067][T24314] ? __pfx_io_submit_one+0x10/0x10 [ 1495.061099][T24314] ? __might_fault+0xe3/0x190 [ 1495.061120][T24314] ? __might_fault+0x13b/0x190 [ 1495.061147][T24314] ? __x64_sys_io_submit+0x1a9/0x350 [ 1495.061171][T24314] __x64_sys_io_submit+0x1a9/0x350 [ 1495.061197][T24314] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1495.061220][T24314] ? fput+0x70/0xf0 [ 1495.061256][T24314] do_syscall_64+0xcd/0x4c0 [ 1495.061281][T24314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.061299][T24314] RIP: 0033:0x7f1b4ff8e929 [ 1495.061314][T24314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1495.061330][T24314] RSP: 002b:00007f1b4ddc4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1495.061347][T24314] RAX: ffffffffffffffda RBX: 00007f1b501b6080 RCX: 00007f1b4ff8e929 [ 1495.061358][T24314] RDX: 0000200000000300 RSI: 0000000000000002 RDI: 00007f1b4ddc5000 [ 1495.061368][T24314] RBP: 00007f1b4ddc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.061378][T24314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.061388][T24314] R13: 0000000000000001 R14: 00007f1b501b6080 R15: 00007ffe4eb078b8 [ 1495.061411][T24314] [ 1495.252274][ C1] vkms_vblank_simulate: vblank timer overrun [ 1495.419505][T24316] vlan2: entered allmulticast mode [ 1495.424662][T24316] bond0: entered allmulticast mode [ 1495.431355][T24319] loop6: detected capacity change from 0 to 63 [ 1495.477354][T24324] netlink: 748 bytes leftover after parsing attributes in process `syz.2.4821'. [ 1495.486657][T24324] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1495.498366][T24319] Buffer I/O error on dev loop6, logical block 0, async page read [ 1495.506476][T24319] Buffer I/O error on dev loop6, logical block 1, async page read [ 1495.538669][T24319] Buffer I/O error on dev loop6, logical block 2, async page read [ 1495.552356][T24319] Buffer I/O error on dev loop6, logical block 3, async page read [ 1495.860900][T24319] Buffer I/O error on dev loop6, logical block 0, async page read [ 1495.891849][T24319] Buffer I/O error on dev loop6, logical block 1, async page read [ 1496.189182][T24319] Buffer I/O error on dev loop6, logical block 2, async page read [ 1496.227211][T24319] Buffer I/O error on dev loop6, logical block 3, async page read [ 1496.236991][T24332] Buffer I/O error on dev loop6, logical block 0, async page read [ 1496.275855][T24332] Buffer I/O error on dev loop6, logical block 1, async page read [ 1496.437780][ T30] audit: type=1400 audit(2000001193.498:3213): avc: denied { shutdown } for pid=24347 comm="syz.1.4827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1496.478010][ T30] audit: type=1400 audit(2000001193.518:3214): avc: denied { ioctl } for pid=24347 comm="syz.1.4827" path="socket:[99626]" dev="sockfs" ino=99626 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1497.967296][ T5862] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1498.207762][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 1498.246703][ T5862] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1498.273740][ T5862] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1498.299000][ T5862] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1498.310278][ T5862] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1498.324280][ T5862] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1498.344242][ T5862] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1498.363667][ T5862] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1498.485134][ T5862] usb 2-1: Product: syz [ 1498.489857][ T5862] usb 2-1: Manufacturer: syz [ 1498.494472][ T5862] usb 2-1: SerialNumber: syz [ 1498.504871][ T5862] usb 2-1: config 0 descriptor?? [ 1498.517271][ T5862] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1498.527789][T24370] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 1498.540688][ T5862] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1498.566906][T24370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1499.152022][T13229] usb 2-1: USB disconnect, device number 4 [ 1499.476246][T13229] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1499.768234][ T5875] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 1500.175752][ T5875] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1500.253423][ T30] audit: type=1400 audit(2000001197.308:3215): avc: denied { audit_read } for pid=24386 comm="syz.2.4838" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1500.282669][ T5875] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1500.309004][ T5875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.417982][ T5875] usb 9-1: config 0 descriptor?? [ 1501.508551][ T5875] lua 0003:1E7D:2C2E.0033: item fetching failed at offset 2/3 [ 1501.522564][ T5875] lua 0003:1E7D:2C2E.0033: parse failed [ 1501.535691][ T5875] lua 0003:1E7D:2C2E.0033: probe with driver lua failed with error -22 [ 1501.693770][ T30] audit: type=1400 audit(2000001198.748:3216): avc: denied { getopt } for pid=24409 comm="syz.1.4843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1503.413121][T24428] netlink: 'syz.3.4848': attribute type 2 has an invalid length. [ 1503.437944][T24428] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.4848'. [ 1503.475666][T13229] usb 9-1: USB disconnect, device number 69 [ 1503.521222][ T30] audit: type=1400 audit(2000001200.578:3217): avc: denied { map } for pid=24432 comm="syz.8.4850" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1503.700950][ T5897] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1503.747248][ T30] audit: type=1400 audit(2000001200.578:3218): avc: denied { execute } for pid=24432 comm="syz.8.4850" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1504.347112][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4852'. [ 1504.472415][ T5897] usb 4-1: config 0 has an invalid interface number: 242 but max is 29 [ 1504.485472][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 30 [ 1504.517409][ T5897] usb 4-1: config 0 has no interface number 0 [ 1504.525638][ T5897] usb 4-1: config 0 interface 242 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.547927][ T5897] usb 4-1: config 0 interface 242 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1504.777437][ T5897] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1504.798344][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.813757][ T5897] usb 4-1: config 0 descriptor?? [ 1504.923337][ T5862] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1505.127236][ T5862] usb 10-1: Using ep0 maxpacket: 32 [ 1505.148141][ T5862] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1505.257057][ T5862] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1505.491834][ T5897] uclogic 0003:256C:006D.0034: interface is invalid, ignoring [ 1505.497897][ T5862] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1505.525597][ T5862] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1505.552917][T24448] netlink: 'syz.8.4854': attribute type 4 has an invalid length. [ 1505.560810][ T5862] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1505.567982][T24448] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4854'. [ 1505.579883][ T5862] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1505.590956][ T5862] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1505.599856][ T5862] usb 10-1: Product: syz [ 1505.604176][ T5862] usb 10-1: Manufacturer: syz [ 1505.608966][ T5862] usb 10-1: SerialNumber: syz [ 1505.617645][ T5862] usb 10-1: config 0 descriptor?? [ 1505.745719][ T5862] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1505.755984][T24428] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4848'. [ 1505.771982][ T5862] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1505.791965][ T5882] usb 4-1: USB disconnect, device number 22 [ 1507.232441][ T5862] usb 10-1: USB disconnect, device number 17 [ 1507.482661][ T5862] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1508.123047][ T5897] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1508.400500][ T5897] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1508.409879][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.427064][ T5897] usb 4-1: Product: syz [ 1508.436038][ T5897] usb 4-1: Manufacturer: syz [ 1508.450983][ T5897] usb 4-1: SerialNumber: syz [ 1508.461770][ T5897] usb 4-1: config 0 descriptor?? [ 1508.486235][ T5897] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 023 [ 1509.334136][ T5897] (null): failure setting delay to 10us [ 1509.345579][ T5897] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1509.633744][ T5897] usb 4-1: USB disconnect, device number 23 [ 1510.517115][T13229] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1511.278791][T13229] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1511.295213][T13229] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1511.304434][T13229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.316746][T13229] usb 3-1: config 0 descriptor?? [ 1512.582878][ T30] audit: type=1326 audit(2000001209.418:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.3.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc878e929 code=0x7ffc0000 [ 1512.917481][T13229] lua 0003:1E7D:2C2E.0035: item fetching failed at offset 2/3 [ 1512.939372][T13229] lua 0003:1E7D:2C2E.0035: parse failed [ 1512.950431][T13229] lua 0003:1E7D:2C2E.0035: probe with driver lua failed with error -22 [ 1512.968364][ T30] audit: type=1326 audit(2000001209.438:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.3.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc878e929 code=0x7ffc0000 [ 1513.898576][ T30] audit: type=1326 audit(2000001209.438:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.3.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0fc878e929 code=0x7ffc0000 [ 1513.921844][ C1] vkms_vblank_simulate: vblank timer overrun [ 1514.013863][ T30] audit: type=1326 audit(2000001209.438:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.3.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc878e929 code=0x7ffc0000 [ 1514.037327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1514.564030][ T30] audit: type=1326 audit(2000001209.438:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.3.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc878e929 code=0x7ffc0000 [ 1514.997100][ T30] audit: type=1326 audit(2000001209.448:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.3.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f0fc878e929 code=0x7ffc0000 [ 1515.130363][ T30] audit: type=1326 audit(2000001209.448:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.3.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc878e929 code=0x7ffc0000 [ 1515.320702][ T30] audit: type=1326 audit(2000001209.448:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.3.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc878e929 code=0x7ffc0000 [ 1515.834210][ T30] audit: type=1326 audit(2000001209.458:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.3.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc878e929 code=0x7ffc0000 [ 1515.877782][ T30] audit: type=1326 audit(2000001209.458:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24526 comm="syz.3.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc878e929 code=0x7ffc0000 [ 1515.901278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1516.100552][T24572] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN NOPTI [ 1516.112641][T24572] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f] [ 1516.122156][T24572] CPU: 0 UID: 0 PID: 24572 Comm: syz.3.4886 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1516.132452][T24572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1516.142492][T24572] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0 [ 1516.149151][T24572] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 b8 73 8c f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 1516.168748][T24572] RSP: 0018:ffffc90004c7f1e8 EFLAGS: 00010206 [ 1516.174803][T24572] RAX: dffffc0000000000 RBX: ffff88803651b000 RCX: ffffc9000dbba000 [ 1516.182757][T24572] RDX: 00000000000a2403 RSI: ffffffff8b2face8 RDI: 0000000000512018 [ 1516.190709][T24572] RBP: ffff88808a970000 R08: 0000000000000005 R09: 0000000000000000 [ 1516.198663][T24572] R10: 0000000080000001 R11: 0000000000000001 R12: ffff88806392b5e8 [ 1516.206618][T24572] R13: ffff888031c3a140 R14: 0000000000512000 R15: ffff88803651b560 [ 1516.214572][T24572] FS: 00007f0fc96536c0(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 1516.223494][T24572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1516.230065][T24572] CR2: 000020000000e000 CR3: 000000008c093000 CR4: 00000000003526f0 [ 1516.238027][T24572] Call Trace: [ 1516.241287][T24572] [ 1516.244204][T24572] ? netlink_rcv_skb+0x158/0x420 [ 1516.249160][T24572] ? netlink_unicast+0x53d/0x7f0 [ 1516.254083][T24572] ? netlink_sendmsg+0x8d1/0xdd0 [ 1516.259002][T24572] ? ____sys_sendmsg+0xa95/0xc70 [ 1516.263919][T24572] ? ___sys_sendmsg+0x134/0x1d0 [ 1516.268758][T24572] ? __pfx___smc_diag_dump.constprop.0+0x10/0x10 [ 1516.275080][T24572] ? find_held_lock+0x2b/0x80 [ 1516.279745][T24572] ? rcu_read_unlock+0x17/0x60 [ 1516.284508][T24572] ? __lock_acquire+0xb8a/0x1c90 [ 1516.289441][T24572] ? lock_acquire+0x179/0x350 [ 1516.294109][T24572] ? smc_diag_dump_proto+0x2ce/0x420 [ 1516.299388][T24572] smc_diag_dump_proto+0x26d/0x420 [ 1516.304505][T24572] smc_diag_dump+0x84/0x90 [ 1516.308905][T24572] netlink_dump+0x51b/0xce0 [ 1516.313402][T24572] ? __pfx_netlink_dump+0x10/0x10 [ 1516.318429][T24572] __netlink_dump_start+0x6d6/0x990 [ 1516.323608][T24572] smc_diag_handler_dump+0x1f9/0x240 [ 1516.328896][T24572] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 1516.334695][T24572] ? __pfx_smc_diag_dump+0x10/0x10 [ 1516.339790][T24572] ? sock_diag_lock_handler+0x10f/0x2e0 [ 1516.345324][T24572] sock_diag_rcv_msg+0x438/0x790 [ 1516.350249][T24572] netlink_rcv_skb+0x158/0x420 [ 1516.354996][T24572] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1516.360445][T24572] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1516.365727][T24572] ? netlink_deliver_tap+0x1ae/0xd30 [ 1516.371017][T24572] netlink_unicast+0x53d/0x7f0 [ 1516.375782][T24572] ? __pfx_netlink_unicast+0x10/0x10 [ 1516.381070][T24572] ? __build_skb_around+0x278/0x3b0 [ 1516.386266][T24572] netlink_sendmsg+0x8d1/0xdd0 [ 1516.391023][T24572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.396298][T24572] ____sys_sendmsg+0xa95/0xc70 [ 1516.401048][T24572] ? copy_msghdr_from_user+0x10a/0x160 [ 1516.406495][T24572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1516.411766][T24572] ? __pfx_futex_wake_mark+0x10/0x10 [ 1516.417057][T24572] ___sys_sendmsg+0x134/0x1d0 [ 1516.421727][T24572] ? __pfx____sys_sendmsg+0x10/0x10 [ 1516.426910][T24572] ? __lock_acquire+0x622/0x1c90 [ 1516.431849][T24572] __sys_sendmsg+0x16d/0x220 [ 1516.436428][T24572] ? __pfx___sys_sendmsg+0x10/0x10 [ 1516.441538][T24572] ? __x64_sys_futex+0x1e0/0x4c0 [ 1516.446470][T24572] do_syscall_64+0xcd/0x4c0 [ 1516.450964][T24572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.456840][T24572] RIP: 0033:0x7f0fc878e929 [ 1516.461238][T24572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1516.480916][T24572] RSP: 002b:00007f0fc9653038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.489311][T24572] RAX: ffffffffffffffda RBX: 00007f0fc89b6080 RCX: 00007f0fc878e929 [ 1516.497265][T24572] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000005 [ 1516.505230][T24572] RBP: 00007f0fc8810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1516.513185][T24572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1516.521143][T24572] R13: 0000000000000000 R14: 00007f0fc89b6080 R15: 00007ffed826bfb8 [ 1516.529101][T24572] [ 1516.532103][T24572] Modules linked in: [ 1516.537498][T24572] ---[ end trace 0000000000000000 ]--- [ 1516.542998][T24572] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0 [ 1516.549789][T24572] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 b8 73 8c f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 1516.569599][T24572] RSP: 0018:ffffc90004c7f1e8 EFLAGS: 00010206 [ 1516.575704][T24572] RAX: dffffc0000000000 RBX: ffff88803651b000 RCX: ffffc9000dbba000 [ 1516.584931][T24572] RDX: 00000000000a2403 RSI: ffffffff8b2face8 RDI: 0000000000512018 [ 1516.593008][T24572] RBP: ffff88808a970000 R08: 0000000000000005 R09: 0000000000000000 [ 1516.601048][T24572] R10: 0000000080000001 R11: 0000000000000001 R12: ffff88806392b5e8 [ 1516.609093][T24572] R13: ffff888031c3a140 R14: 0000000000512000 R15: ffff88803651b560 [ 1516.617121][T24572] FS: 00007f0fc96536c0(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 1516.626097][T24572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1516.632928][T24572] CR2: 000020000000e000 CR3: 000000008c093000 CR4: 00000000003526f0 [ 1516.641314][T24572] Kernel panic - not syncing: Fatal exception [ 1516.647586][T24572] Kernel Offset: disabled [ 1516.651887][T24572] Rebooting in 86400 seconds..