last executing test programs: 2m34.671608861s ago: executing program 2 (id=833): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xf4000000, &(0x7f0000000100)=0x1, 0xc06620, 0x4) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x1c) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 2m32.954878485s ago: executing program 2 (id=846): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000900)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0, @ib={0x1b, 0x1ff, 0x4, {"831c6f268e9909000000000000c2ad99"}, 0xa, 0x4, 0x489}, @ib={0x1b, 0xb464, 0xfd4f, {"6a35cc328904032021e97498c5dfc4d8"}, 0xffffffffffffffff, 0x9, 0x5}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000880)={0xb, 0x10, 0xfa00, {&(0x7f0000002000), r1, 0x1}}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r2, 0x0, 0x5}, 0x18) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000002680)={{0x3, @bcast, 0x3}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002180)=ANY=[@ANYBLOB="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", @ANYRESDEC=r5, @ANYBLOB="9b08000000dcb8108932d9e3303390eafa71396bbbdef0c0d657fd79147c239d6c70a5e7aeb126c8857b6a170b99f1be938687b1441fd703d101a91c917ea06b683d2847bdab2cfd9ab8200c92601e87665d0b95d10900000000000000f8a7a4942c1ea3fae696d62d1314e2f9"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x24048815) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000600)={0x28, r8, 0x1, 0x2, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f00000013c0), &(0x7f0000002700)=0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000200)={0x24, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffe}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x40}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002140)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002100)={&(0x7f00000029c0)=ANY=[@ANYBLOB="80010000", @ANYRES16=r12, @ANYBLOB="000225bd7000ffdbdf250c0000006c0103803000038008000180040003000c00018008000100040000001800018004000300080001000000000007000200442d0000040001006c000380240001800500020000000000040003000400030008000100ff01000005001d00000000001c00018008000100000000800800020047504c0008000100b70000002800018004000300080001000800000008000100030000000a00020028232f266200000004000300c600040024cffd57ffe9890e262b67fa342af31feeb22d45e70dfe8c4a893ac215cbe746d0a0247ff469569990396085c16846699d646b8206e4ea0455edb7301f307d588e72c05c8dbe16480f7137806a77ecbc6f7c28a8637dd489392c35b7b9527d7149cb4ce7c7c2be2b16f50fe3618431cb3afd158577b8343b51932798ee49ceec634f45e61dea3dbe2933cd9b26e681eac1decfb25a213a18ea351b5fb839882ff9781af90195091eb3ff4f956950b9682b32563c46c9ce345433c7c3490000537a8285a05e31b6885a5b8ac5a88067bde90add7dd419797581807903c14916eb6e39ffad7e797e9e8a3567c476f847842385bd55cfcf69a543fb5c457dc8a93def3b0383700d28c2d5f2f6ecd510aa0da9649c72a3bdb717531f3f40a8f0124892dc6639a1d68bfe61"], 0x180}}, 0x1) ioctl$TIOCMSET(r6, 0x5418, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000200)=""/55, 0x37}], 0x2}, 0x9}, {{&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000028c0)=""/245, 0xf5}, {&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f0000002780)=""/262, 0x106}, {&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f0000000780)=""/78, 0x4e}, {&(0x7f0000000800)=""/70, 0x46}, {&(0x7f0000000a40)=""/225, 0xe1}, {&(0x7f0000001040)=""/10, 0xa}, {&(0x7f00000008c0)=""/21, 0x15}], 0x9}, 0x7}, {{&(0x7f0000000c00)=@hci, 0x80, &(0x7f0000001140)=[{&(0x7f0000000c80)=""/58, 0x3a}, {&(0x7f0000000cc0)=""/141, 0x8d}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000e00)=""/46, 0x2e}, {&(0x7f0000000e40)=""/182, 0xb6}, {&(0x7f0000000f00)=""/197, 0xc5}, {&(0x7f00000024c0)=""/98, 0x62}, {&(0x7f0000001080)=""/158, 0x9e}], 0x8}, 0x100}, {{&(0x7f00000011c0)=@l2, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001240)=""/109, 0x6d}, {&(0x7f00000012c0)=""/193, 0xc1}, {&(0x7f0000002540)=""/169, 0xa9}, {&(0x7f0000002600)=""/104, 0x68}], 0x4, &(0x7f0000001400)=""/202, 0xca}, 0x4}, {{&(0x7f0000001500)=@can, 0x80, &(0x7f0000001980)=[{&(0x7f0000001580)=""/117, 0x75}, {&(0x7f0000001600)=""/61, 0x3d}, {&(0x7f0000001640)=""/78, 0x4e}, {&(0x7f00000016c0)=""/1, 0x1}, {&(0x7f0000001700)=""/171, 0xab}, {&(0x7f00000017c0)=""/116, 0x74}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f00000018c0)=""/127, 0x7f}], 0x8, &(0x7f0000001a00)=""/235, 0xeb}, 0x7}, {{&(0x7f0000001b00)=@nl=@proc, 0x80, &(0x7f0000001000)=[{&(0x7f0000001b80)=""/255, 0xff}, {&(0x7f0000001c80)=""/41, 0x29}, {&(0x7f0000001cc0)=""/40, 0x28}, {&(0x7f0000001d00)=""/51, 0x33}], 0x4, &(0x7f0000001d80)=""/130, 0x82}, 0x5b}], 0x6, 0x103, &(0x7f0000001fc0)={0x77359400}) 2m32.206715955s ago: executing program 2 (id=847): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x5, 0x7, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000180)={0x0, 0x2, 0xfffffffd, 0xc67, 0x0, [0x0, 0x0, 0x0, 0x0], [0x80000001, 0x1, 0xc7a3, 0x400], [0x7, 0xffff, 0x6, 0xffffffff], [0x7d20, 0x200, 0x4, 0x5]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000200)={0x0, 0x4, 0x5, 0x0, 0x1, [0x0], [0xfff, 0x7, 0xfffffffe, 0x4], [0x101, 0x8, 0x74dbdeb4, 0x4], [0x7f, 0x4, 0x7, 0x578c]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000280)={r2, 0x3, 0x1, 0x10, 0x3, [r3, r5], [0x7f, 0x5, 0x9, 0x9], [0x63ac, 0x8, 0x100, 0x1], [0x6, 0xc43f, 0x6, 0x8c]}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x102, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedsend(r6, &(0x7f0000000340)="55b37f5d334f11d53dbd06ae06d1463b8c0be16d89df1c8c6aa13e9182cf290d2fbf18d12ec7301ebd982d471b7018c71f4903f5b4a14a27414da9108a230590d9bcd804", 0x44, 0x0, &(0x7f0000000400)={r7, r8+10000000}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0], 0x1}) ioctl$sock_SIOCBRDELBR(r10, 0x89a1, &(0x7f00000004c0)='vlan1\x00') syz_io_uring_setup(0x10ce, &(0x7f0000000500)={0x0, 0xb55a, 0x100, 0x3, 0x1f0}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000600)=0x0) connect$nfc_llcp(r6, &(0x7f0000000640)={0x27, r13, 0x1, 0x5, 0x54, 0x6, "1b8690b5b4c24c91114cb59864b7072e9d6ee0b0ea4668d27de25bc197b031f8237cac1ca975163eed9f57ea72be9db2becf87bca266416ac8a71a2380c35f", 0x20}, 0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='ext4_ext_remove_space\x00', r6, 0x0, 0x1}, 0x18) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000780)={0x0, &(0x7f0000000740)}, 0x10) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x20, 0x0, 0x3, 0x3, &(0x7f00000007c0)="a3bb2a894383c565a2de175a38a2b68660029bceb97a712f3d82c41a27d8a890a430f3e7d88e971459c00e46386879cc4ecd726d7c64842f1b5a8723004f73bd49df803bcb42b1bf251b586f10bf5f807c17fe4072654c7119e23c6005bdd1cb7cabfad233536f27b554477502ef6b2b1acc6965d93f3cec32ff", 0x1, 0x0, 0x0, {0x2, r14}}) r15 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FIONREAD(r15, 0x541b, &(0x7f0000000880)) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000008c0)=@gcm_256={{0x304}, "05fcc9a409e45efc", "5ca58dd04134ab27db822989f4ae2ab9c95af7e1cb281e4f624fe5d69cfc2785", '=z~9', "0c87b4b69a656db9"}, 0x38) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000900)={0x0, 0x1}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000980)={0x3ff, 0x1, 0x7, 0x0, r16}, &(0x7f00000009c0)=0x10) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000a00)={r1, 0x6, 0x24, 0xc8, 0x2, [0x0, 0x0, 0x0, 0x0], [0x6, 0x4, 0x5, 0x5], [0x2, 0x66, 0xa4cb], [0x200, 0x7]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000a80)={r1, 0x3, 0x5, 0x8, 0x2, [r17, r4, r3, r4], [0x0, 0xc, 0x4, 0x80000000], [0xefa6, 0x6, 0xfff, 0x8], [0xc, 0x4, 0x30000, 0x9]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f0000000b40)) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000b80)={{r18}, "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"}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000001b80), &(0x7f0000001bc0)=0x4) 2m31.571767872s ago: executing program 2 (id=849): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.stat\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002cbd7000fddbdf250100000008000400ff0f00001400028008000400db0e000006000b000200000008000500670800"/58], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40080) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, &(0x7f00000009c0)="0000fc00607bef8eb2bafd0e6083d21ef8b1c6e9ed7ad8f2dd5889e21bd50ef4ae3fdaf23bae3824f4022d14adcb8e43b7fdefe2bb594551881d793d650d0b404ec21499a841e08e2137ddff0c58efc9", 0x50, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 2m29.931048817s ago: executing program 2 (id=855): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x4, @mcast1, 0x6}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)="e0274206000000ff", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 2m29.542611175s ago: executing program 3 (id=861): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x2000, 0x1, 0x1000000}, @ptr={0x70742a85, 0x1, 0x0, 0x1060, 0x2, 0x1f}, @fda={0x66646185, 0x8, 0x101, 0x26}}, &(0x7f0000000240)={0x48, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m29.007311047s ago: executing program 3 (id=863): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100), 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e24, 0x1, @empty, 0x4}}, 0x0, 0x0, 0x17, 0x0, "d3a50ec38f90208f0a60aad300c947c7b790af324c991481f94a2f4cc5e30d0b4f14223c1d77ff30d6ccd4f55807f882837e9d3f5bc7e2869a2695067df11d7a75412017bd3214e7df1fa813a4534f8e"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000ec010000100080c10000000000000000000", 0x58}], 0x1) 2m28.867025216s ago: executing program 2 (id=864): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x6}}], 0x1, 0x81) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r4, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m28.704004259s ago: executing program 3 (id=866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x2}], {0x0, 0x0, 0x8}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000300000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x0) 2m27.489848597s ago: executing program 32 (id=864): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30c6d1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f40e2ab1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c81106db988096bba7772e6acc5956344eaa64fea7c6319a37312ad57490dd2ebcb9bdf2815aae851bbd55317b4fcdaa8b06d30ed3db8a117424fed41f68979ac996e7fcd4549daf29bff6a2643e184580eb0b0bf81046975ea8d5e06e7124790dfca059217a34f4120feb2bb", 0x142}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x6}}], 0x1, 0x81) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r4, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m27.44265593s ago: executing program 3 (id=869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5eaa000000000000711000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x14, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m27.359928251s ago: executing program 3 (id=870): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x241, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r1) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r3, 0x300, 0x315, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r4}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) syz_open_dev$MSR(&(0x7f0000000140), 0x9a, 0x0) r7 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a010102"], 0x40}, 0x20000044) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x4, 0x0, 0x4, {0xd}}, 0x14}}, 0x4041) 2m27.242754941s ago: executing program 3 (id=871): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x200, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xff0f, 0x8c) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x64) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)={0x31, 0x6, 0x0, {0x6, 0x2, 0x8, 0x0, '^!#-(+,\xee'}}, 0x7fec) 2m11.530685002s ago: executing program 33 (id=871): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x200, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xff0f, 0x8c) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x64) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)={0x31, 0x6, 0x0, {0x6, 0x2, 0x8, 0x0, '^!#-(+,\xee'}}, 0x7fec) 13.143521109s ago: executing program 1 (id=1375): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000001c00128009000100766c616e000000000c000280060001000200000008e6b7ecf1d3f067aba403447c5a0400f2fe9e7749fc4f74b60904c24583ea0972455f52931ed134466bfa14132ef210dcb7b9c4213cf517308517316d5e67cbe92f321b3d669500c13ef7dcbaa56ed07fcb153842edf7a198c93c895f042a7ffad17d08cf", @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000144000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12.007291567s ago: executing program 1 (id=1377): close(0xffffffffffffffff) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000012c0)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x300, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 10.522123803s ago: executing program 1 (id=1383): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x800, 0x15) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000000100000003"], 0x101000) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfbc, 0x20000008b}, 0x0) getrlimit(0xb, &(0x7f00000002c0)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000400000000000003aeafd85df314e00f6af3100000008000300def541cb5841b0ded5553796678f247bd5ef0b598c691e07", @ANYRES32=r3, @ANYBLOB="04005b000600650003000000"], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400004000002) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r6 = gettid() (async) syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000014c0)=ANY=[@ANYBLOB="2b6e65745f236c732000667265657a6572202d6d656d6f7279202b64657669636573222b626c6b696f202d706572665f6576656e74209884a9902513cde56ac1d7d1de5dda3b5f278458a61eed1b221ec0e3f37d5b97979fb910"], 0x36) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa1065672a3e705cc7fa"], 0x11) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r7, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x7f, 0x5}, 0x3e, [0x9, 0x2, 0x9, 0xa, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x8, 0x3, 0x4, 0xf252, 0xa, 0x800, 0x300000, 0x7, 0x4000000e, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x1, 0x3, 0xd, 0x4, 0x3a9, 0x8da8, 0x7834, 0x200, 0x3959, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x5, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc2e, 0x30000000, 0x9, 0x40010000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x5a1, 0x981, 0x4, 0x7, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x20000000, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2148, 0x401, 0xc, 0x12003, 0x379, 0x9, 0xe, 0xd, 0x8, 0x6, 0x2, 0x400, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc594, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x7, 0xe8b, 0x1, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x3, 0xfffffffd, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x200004, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x49, 0x2, 0x3, 0x4, 0x8, 0x6d7e, 0x3, 0x40008, 0x8001, 0xbf23, 0x6, 0x4, 0x95a, 0x9, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x2, 0x4, 0x0, 0x9, 0x5, 0x6, 0xd9, 0xc81c, 0x8, 0x401, 0x5], [0x108d, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0x2, 0x402, 0x40, 0x4, 0x6, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x2, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x9, 0x102, 0x1000, 0x3b, 0x2, 0x4, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x8000, 0x7, 0x2, 0x4, 0x4, 0x10, 0x2, 0xffffffff, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x7fff, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0xe, 0xe, 0xfffffffe, 0x133, 0x6]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r7, 0x5501) (async) write$input_event(r7, &(0x7f0000000200)={{}, 0x1f, 0x1, 0x8}, 0x18) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1086, &(0x7f0000002980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60b7f0ed10502c00fe8000000000000000000000000000bbfe800000000000000000000000000034ff0401080000000020010000000000000000000000000002fe80000000000000000000000000001b00000000", @ANYRES32=r8, @ANYRES32=0x41424344, @ANYBLOB="a0200000907800001e03079e51b171c69677af1f4ceb5ba28a099381f10b3688cddbd01582a8da309efe15c9ec8bbcdfc84d303747521c355e15e12288185d52bea16aa13a8e2f3f3dfb2504634c2c8b8ee1ff07ceb0074ea3251b003e63c86c3823fabf2674f298477ada3730317632f4ef8da495c32c585c39743126d2e4589792ba4ec080a8555be1b080282132946c198d8c0b49cfeb170cfc001921d535541e24c81a17e9ec8e26d49016d0f0e081f36f5e263671addc6ad93ff27d79215b15c2eecaddd34276b5fa49140ebdb5d0d8a0874d84e7e8cb5e2794f9c54cf187eef75e80232955e45853794516b8b96f63344bdb7cdd67593f89e7c8c66fb53af633523fd59ec1e173fe653db865e392a8c42455a72250bdfa3d4b9fbeaeccca8ba987209c057d50c287f46ab5e7a4b6c7dc1ab1964355d74b02f2a0d86f4bf6b7c4f9a569ed2649bb155d0456100513b2a81a0e79d7f23ffc6c159f5216220443c7f38cbaa75ea9d60161eb1c6ce7cbe7dcbd60eae153a4a7e1dfdb29126444eb40e196c5a8a80d3f35674a3f241a762da04b6ef8c4d8036131d3e1d6e058114f1b740e9f2507c8b90e735edebf224861dacdc60a8065f033a201a4bff4bc3901dc642ff9aec720d8d195cadefbe8f4fad4a220b899afb28ab3e3f5c1dd4f7590f9b30e19356d55247d90ce594e9e7b9e5158135e44f693716c9fc9b9439c38f4db3e556a94392ae99ff3952cc3256910145f02bf4a6e20b96aff386af8bcb8af9ab339ce6669a61ebc8d072d9886394b27e5638280a3f4723f1b80715f3d62b365d6871c1b7ca3499fcd51f03293a4deaf72ec879fe9f15e87a5f81d5a9271489caa7d6734cd4dcb9abdc71119ad99b46213dfe75d32683c58f26d22a53ac39cfd5e663a1b7f52ba70ce6b9708dab174238733b3fb07bdef61bd7fa792e2bce1cedad99d3702d3296695200e626e3a4059ea2516eec92de3b94dd7264bf74543200042b9a2c8e0cb6ad3331af2e9acc6a672275c520a019509f768ae36927aae499523c90df490630bdb0428564a68021c04fcde044d7a522497b2a38fa2bd9f676b6ffc4bd31d6802836fba99c490a8530274c61871a4042892700f4e1e3b2cfedf3cd501c0241a027f0df520c8955937e73820b731c7cdb2b653541e1f7531aaa8088dd864fb47ec8431392acfa097ff4052648475bb2c306794c1a66d89d731ef488a49815defc4c55e5d00ed3a356df151a0b7f2c78a16397b75dee338433b82afe564adf4ef31c3a854c65b029fb6aef5aa8ff2cb54ac10a6dbe3ff91766ec8f121da45c3d24d661490aca59565fcdd54b08f77fe403e06e7373166b10134e6a5cc75989f2e44a569440d16df220080eb230d476fc1ab46fc457f36d5eca73d38d0045f4936fc54378cc9adbf1afab78de7a21056c137edb2e480679a84772ba422e5cc0689c5827671c6d703986d2e76f0623c06c069a6426477d3c66d0c83fc228e3849759af2716bf7421910ce1f97d685b34bd7fdf841eb4596588e0c46006d8e0d55445e810fa1f299bec68abd074d846bd568e7b53e75d563c37cd554abe79eae5f5b1fc69457e60f7d9e3633ae92f8693ac8effc30561ab99dd4e9a6c0b7095e1184181e6614fc182f60289f052f885920340bb1340792290f67763dcb1126333b6b21fe01d96e88de40e85b50910bcba44b7845836f221eee310f7a45897edd4298fe061700e4cb1a141513cd02feddd5f820b2c70f7ed0b2dc8067bb06a36001df8f16dd051f31abf874dbf033d8c24fabf47cfcc96f858f8ef5d355c5ea7639bc5757fb1453baa8f46f9c4293eb12b0c0d69da8c1690b1a2498afe818b9420871939cc1344e239a6ddf34df4e2d8fce536d02a1a8fe71f162a5f1e9a4cb161756b302209735ae987593092405ba085f79dc10249f43af392532f9ba5220a1d3d8eb5770d73a650b167e4a1bc35942b388ee90d5e275223b7c7e7309b0531c833d48fcf2511eb012d5bc21c778e9d02bc43a6b7284347149da08312ddd9484a00cb83cea5fd633c00ea7c9a24f86e2606cd2b5bfa746f85f0f3030e5991369bb6810d6a3845d5d535b23611afd7b466859d2797cf6e41d0e5697c4f832b0f3cc06bbc9078e6a8070688a76114af86eb4aef036f2c104b1a71ac166fccb799b949c12090ca86f05eb8b6c4a84e53ce8b678c33e8e2c7b04bbdcda1468b72b8b40f46540e1b6d8482d1ba484d2f6602803b3b78fe1416b231041aa1804e4ad77c6caa7a48f6b55bd8ceb1a33d98cb421d84e4365e6a0ffcf3210a0382b09d2c19125fc5282ea774748a654a8ea1c8f26613d7e2ebbe7ab01d318997a6caafca2b84d7b5ffccc258e32099c154a8e639ef4813589e737e7773f1f1bbc8e55863e158a454a0d651ef338d4980f7eb1496aed88c2f6b2c0c29aaf966252b040fee63e8033670ca6b6c3979643dec2dd034d31aa65412cbe3dfa323d01e418235b8cca8178388e780e147d37f59cf4818bd027d8b8efd099b779e7e6a65687387e34d9d6acf210604ae3f28f7512f808961de70de195792fc65d36fa05b1d302c27e81b47eda3f73f89519d0f0a7166795018361a72c4f5f878a24ae835f8a7556620893ca95940172171c851d9b4bdda6fc22bb47a36efff1e54c82bf6ff8c302eede2fa53f7a395aa7c3a1ace2cb171c828168c2a513ebf6926be0553cc0a35e9897f4da40630a0b456fb24c79c89a39caf526501c08fa3e17f1d7fa85ba15a57af5a78356201de580ecd2293fc2495de5b8f29b69e9501557186acd52629f531d42d9df32ceed26ceb12ee07e160a83b26e2d10084a82c8f240150a4c8e15fa868b7aa657924b6e50cfee5ec85d01f4875005eceabdc2ea58ee8569227a89062cdddf15a34fa7cd78878fb048a60d1adea0ac8b6c995759a9f222c05aac0b715285f7e3851ad68d05b9595b20af4f492bd8532efad0249007ecb095e9dac75a62083e2aaebbbae0f7f3af2495aa83e40a10f8cabc5699b31a31deeb1a67c5793b9934c4544cdd04dc70b8cc435534abb966a16d346cf53e16839db6159af7a25c77e7a8a35beb3424ad0f65283221cb624b4e84bc81ce2e1b8719ca515e761100959dcbdf885eb8ca030c0bd3116f367dc9380c6af71fec18908d0b5449940bef0ab4441d5460975dfd6c12b86ff2c6b45bc0079a1a79eef9e74aa84d2812ac3cffe98c0dd56f11fafbdc2b55dbf2b3ef07c1038e8f79c3ad6feaabed1ee3400a119550fa50dbb5222c8695e8d4c4f3f3b4a0d6c76311417c0feae16188a5f4595ed3149812501bf04035008238af59a2fcea380f4357d0bf57bb3d74440bdb14ac508cbd73df380e3fe14c8a6a6698813ac02efb477333c8de9905abcd28b7bde0bdeadb1da07ca5aaa7f1e322fee260487bca3d83133b3ad7766aa04617b32d6ee57cada7648b57e77345cd7d2ff926be1e14f803e27658d2316fef9d8883d4f616e318bdf3e54ba0a4b5162f057333bbdc4139df7943044cc27c0396145d15ac6e7886a452c7b0ba3d6fd66c65168c57cd5958094bf2023e53a9d35bcd8a5da935006aa525bf5dac34c471e761dca2624f069508148703d2f662e56a806da8968b1724ab75f9af80982a6e367bc9f8fcadff394a6532ce8cfad9f78727e135cd93d3a4b48ae0f3abef68f76b0c5762866fdc5e1bdb425b054b828f983336e41da342cb5bb1a7a0aeb6849b7638922c19993b49805d372794a804c713719275614f647da215ebbb578ee1acb9e807586a6c2a8432764a6ec76a029eef935068582c00e414112ef494329619ef8f428b809cdf4dd1386b77087c5d2094d7910164e8cccfb2e3da6a08f7c61a73829394ccc1d23ab1700e172a8cbf1cdba8410c6880308d17e356b3bc1906d13842cdc4b71aa3e47ce2684a4e705309ce0ec28d730071b5443d6fa012a37bdbf52630d5ac2df18239d3414677768622e8f86271402d2f8ef3c0de8b0fddc97354a1fd36e1a3f50e44988e893c8bed7302426bd3ad41ca549ae2c2303b9fb248e94ddb3df6d42eed1ea383c73e543d900a1748574b137cb2ce2cd63e3731a05e814c223ea62132d2441e5f178b5aa3a27eb643a4c26a938b25357f63ad2990d88b066547163717c78fe492fba639ef6a51ad42662c7e053cd54d668ba4c8ec3b4e48364d53913b433ce4d186b0d2a7da24cba3eedc0c5a522c0946aa585407c8862c59ccc193e41442e6abb9030ea394422b407452b79cefdb2d16b8bf1b70e21abe088a8733beb4a1531e2d2a26b94ce8eb6f3ba933c74b48073a50be943dd039c73480ab87f97498bb9642d28293196478fb26ec9046af751f1fe2eb2d8db5275b2c1e4e81670f0836c52b4e8be16088b2b6a9a5592a99610b4949c7ac6259d818cec3a10799d49f8de50183e4720d1674ab8572f73fd413de012ffb02c524f2e6baaba752a885c65530a83499160bdeeef5b9cabe45de473dcde0b0b5c8da1d47af3f51c2a4def057040c5d872118ff6d3c32dae9dccc526fd73dea0e315a77a910c8d509dc201818a86cd72757856f852d53f0955c97f5e4857f3c346d1d13b7f7bd881756daaf6330db535d1c1a3918a2ba1b251187292ea20247e5ba5c7d4a83aae17c3cce65269cdd22c1ba5f756b2660b68718d2c5cf48b25fc040a8dc2b77f0d807000000b47e42cc1bb4d2a8cac999697857ac5872259e39999c069bf80dc8e7becbf7208437496eaa4a695d6867949e7e0f7ff35fea8245545c19a355766dc4483da67cc95698b91ab531689aa642c412bddd120f2ef8a4ffc06734464a58b3647978a7542579a68225ad1c5458fad8d7e19b46a5e13f86fe0d6bacdc25d65cbfcd8a77d6c70a6b9d28cb1c891b5d801c163ec1b38840ab0fcf0a66dbaa320709d7fb6fd5371591279f3b72bf005bdb52bcab4dee56e09d7785d8d192c3d3742367a0b555fb10dae0d6ecd4565cba271ba37b0f2fc7de04e435a7209f60b8f232eda06bbb29483c37500c0abfb0b029e6b8121bccb241a50ffc08a8acb879f2f2cb54b79655f885079a64737f1a53fc32dbada2ca5fd797d3e43afe01968b2d4d8c9993032b29acdc2ddf31dc6c5f8083aea725363cf665df8d652766f3efc85c33b0d2118c14a9fea14504139020a18b9386adb719152cf7eaeef99d1a52cabe865598a851007a381925e02f6d36e9f914ef98c63610a733374c094972a67b40e6e9d20bd12fcb685f951e6386ca3086592e96c01f8eb6cef700e4eb4cbc651af1b6cca6b40c251e1ce67e12601d2a46ddead971053318574c91222d6aa7ae84d783017d978b79b48263c7c64b8d91ba01afde8335abc5a3baf4338496ad7ccbf994d3143c246625fc34155cd13ba1cefe3f1043f914576d92c8b51a8785ba0606d02ac3388968fc946b8dd600a90f4e89c1383c16912cf224ae1b6b3ca26b520c8b11d3a5b234b3ee1d53a0bbb2b13ed4b6c73506730f6739aa29b5864ddbbc5213cdc2145eb71f3f02d04ec7a977e02ff97f1ac4ecd5e9a77d717b0369a92224173b2bfae631e1c992b9c23784ca216adec8be478b9a163eb51dedf755f4b4f03573cf10a5bbf19d95b571de11258abfd948bc8d1684278202eb95d14a126e2cd6f8ec59d9a96cff5f9a8a2e11cf22f703c6fa9f590be686502dc86a1382a3bf853ffeeaacb53d0569e67b27437e8f201d29e2bd1e8987202f40ec9da74d5f457885a68ea149ed6ed77d4fe217ca930aba475b54e73436306310c08fd84479ca6e1548598a3cf6a80488b57663d876b1130c66fe51a975cc77ef3e170204ff00006b8eeffa7ce3def0846a05d5af3d28285ff15f20b63b65f93119096cb60320b5bdaf32d70724046d23a7663f3c181e6a86392e3a52a711e19a884c3745a83370685002fea3a60d8333e868f65ba2721f2617d828342bb629d8800e7d94c34b2713c252d7869d52baacafc1a620bca2df0219e55f95fabe300588f833669a2615bb3439a71b3a35404ef3a39530d0da29"], 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x3) 9.778529513s ago: executing program 4 (id=1385): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000f000000080003003fd7dc219317ab071f1757692031e77f72ea96430b127db2024645c272221a9d83524105", @ANYRES32=0x0, @ANYBLOB="2d000e0080000000ffffffffffff080211000000a92097e51e210000000000000000000064000100250300800500000008000c0064000000"], 0x54}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x26bc80, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000c00)="c100000000000000b47381c96558", 0xe}, {&(0x7f0000000280)="f1fe5fe0360ab373d5026f29", 0x5d}, {&(0x7f0000000040)='y\'', 0x2}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002f0000045a37d5006e657064657673696d0000000f0002006e657464657673696d300000080003"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$P9_RATTACH(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r9, 0x1, 0x0, 0x3}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r10) 9.778013352s ago: executing program 1 (id=1386): r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000440)) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2000, 0x0) r8 = gettid() ptrace$setregset(0x4205, r8, 0x3, &(0x7f0000000500)={&(0x7f00000004c0)="583554c8e8e0b0f06e42eafa66e6d127a674f033d96300d794c468372969064e709c92d72da6239f066ccae44aa8c7edb082798cd3376a4c90", 0x39}) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, 0x0) sendmsg$nl_route(r1, 0x0, 0x20024090) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x5, 0x4) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x35, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4040804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe0ffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7f}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 8.284436929s ago: executing program 4 (id=1389): setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x9}, @timestamp, @mss={0x2, 0x200}, @timestamp, @mss={0x2, 0x7}, @window={0x3, 0x1, 0x1}, @sack_perm, @timestamp, @window={0x3, 0x401b, 0x5696}], 0x9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x8d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x2, 0x40, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x5, 0x6, 0x6}, {0x6, 0x24, 0x1a, 0xe}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x2, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x8, 0x401}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x1, 0xec, 0x81}]}, {{0x9, 0x5, 0x81, 0x3, 0x3df, 0x1, 0x81, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xa5, 0x3d, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x0, 0x2}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x2, 0x1, 0x8, 0xc}, 0x2a, &(0x7f00000001c0)={0x5, 0xf, 0x2a, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0xf6, 0x1, 0x0, 0xf000, 0x2, [0xf0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4c, 0x81, 0x4, 0x101, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x5, 0x800}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2835}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x827}}, {0x42, &(0x7f0000000280)=@string={0x42, 0x3, "15481a29ae75c5bc340305c92f11da7d2ee83b1e09c45c0f2c1f1367bd3e229e87bbc387eafa49f8455318377f333e0afd589fac9de9cf6d9ff2ca9093fb48bd"}}]}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x24d417d6, 0x3, 0x800, 0xe26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x10, 0x701, 0x9, 0x5, {{0xc, 0x4, 0x0, 0x2, 0x30, 0x64, 0x0, 0x8, 0x29, 0x0, @private=0xa010101, @multicast1, {[@cipso={0x86, 0x1a, 0x1, [{0x1, 0x5, "43eecc"}, {0x2, 0xf, "23cd5664e5c821feda9d6b8564"}]}]}}}}}) bind$can_raw(r0, &(0x7f0000000400)={0x1d, r3}, 0x10) 7.327091162s ago: executing program 6 (id=1392): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000f000000080003003fd7dc219317ab071f1757692031e77f72ea96430b127db2024645c272221a9d83524105", @ANYRES32=0x0, @ANYBLOB="2d000e0080000000ffffffffffff080211000000a92097e51e210000000000000000000064000100250300800500000008000c0064000000"], 0x54}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x26bc80, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000c00)="c100000000000000b47381c96558", 0xe}, {&(0x7f0000000280)="f1fe5fe0360ab373d5026f29", 0x5d}, {&(0x7f0000000040)='y\'', 0x2}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002f0000045a37d5006e657064657673696d0000000f0002006e657464657673696d300000080003"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$P9_RATTACH(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r9) 6.197573583s ago: executing program 6 (id=1394): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) signalfd4(r1, &(0x7f00000001c0)={[0x9]}, 0x8, 0x0) syz_usb_connect(0x2, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902310001080010000904df0003080662ff09050c02200006b227071000020102070424", @ANYRESDEC=r1], 0x0) 6.167078965s ago: executing program 1 (id=1395): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12014000f273a440cd060a01c3d90102030109021b040000dd00200904000c01950d18000905", @ANYBLOB="87e295"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) getpid() 5.776999297s ago: executing program 0 (id=1397): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getpriority(0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x930001, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@debug={'debug', 0x3d, 0x2}}, {@privport}, {@posixacl}, {@noextend}, {@cache_readahead}, {@cache_none}], [{@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}]}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0xc5, 0x0, 0x0, 0xd, 0x45, 0x3, 0x8001, 0x0, 0x1, 0xd, 'syz1\x00'}) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000040)={0x3, 0x9, 0xacaf}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=f']) 5.647198037s ago: executing program 5 (id=1398): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0xa, 0x6, 0x3a) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x48, 0x0, &(0x7f0000000040)) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) io_setup(0x3, &(0x7f0000000180)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.586715744s ago: executing program 0 (id=1399): bpf$ENABLE_STATS(0x20, 0x0, 0x0) setresuid(0xee00, 0xee01, 0x0) setreuid(0xffffffffffffffff, 0xee00) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000060000000000000000000850000001700000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 5.459453772s ago: executing program 0 (id=1400): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f00a700fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x0, 0x7, 0x6e5}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 5.315018303s ago: executing program 5 (id=1401): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e20, 0x5401, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="27f40505b7cce2590029f2a5fce0e30935778cdaa2508eb94918a0bcff3dfbd4d7d03f88a313849cf87bc57a0945e37117799aa4ad852e11f0e644552849476ad4b7ab2e05a5c63394b3dbb08f9acb1fd65cd71a3b1f71ab", 0x58}, {&(0x7f0000000100)="34675559484aae204c85be9eba48ccb09d6174855d428fe0c886e1f0ee59f17089b649d345d76ea0cd94c59f98d84408e66c7863ad51ba09ac10ef2fc4c2987e564f015ede904f1994bb0b41071240daf37da5706df85a8dd936af3cdfcd90e260dc84799427663388a124a95b157b3e671b42ad891d07f910ee04e98c545a8104235d3998e8bf70e3da71106d098854cb67b9be2c40c6622bfcbabe3db1acbe638514ca63ada0a0374e32a2f201c9bea385a4297b6e3d8e6485", 0xba}, {&(0x7f00000001c0)="a5cbc121741a16ab1b50f8f9a4551e643cc2cbe582c7df7042ffac9a3e8bbbea9dd1e47afa071798018532325becf6df29285155b4353e54720fb5465e0c0831de0fd88b59098bc135674bda5d246b55f2fcbccab51259a7770716ae0a7fc39538ebef800cca549fe68d79c9bf8ae9c156e0e8349c836aba965643beb884889805f2c781c73cd71207e038c974495bfa", 0x90}, {&(0x7f0000000280)="d681bf1dd0b607a3c94bf571a913f075e2ebbc4dce8c6fbe1dc3c2c01e", 0x1d}], 0x4, &(0x7f0000000300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}, 0x20008804) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x1010, r1, 0x2f924000) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x8, r0}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000400), 0x5, 0x400100) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000440)=""/217) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000540)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f00000005c0)={0xa, 0x4e24, 0x7fe00000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000600)="3177b78fbac28f1cbc10fd65f9c6f03c6b188132264fee9bd9a79b36117de4ee3f72428548637fb71d4ce1a2561c925bae6edefb74e8e5f424b7ee39842bda07687ed7542988eaafba76c48ed75670198f5e6d3845ffb4b11a105afc7d7f1ba6572717efbe549deefac83a72fea8f4accab9b3f734cd9d0963e6aad0c216751324f5bc1f39a4e8f45287c506fc9b7ed1c86852ea70ba388d20946602576628198f927fd61f47b490e26d9008c7493d0d02180faaead71d6be25d1c6eb7a9fa46eb74dc3d7bbc3adae244866a83e4c63f4d9f5441c5f36e42b58ccc8bab047e3e5cebc7d17a41", 0xe6}], 0x1, &(0x7f0000000740)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x30}}], 0x1, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) openat$cgroup_subtree(r7, &(0x7f0000000800), 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r7) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xac, r8, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x70, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e84c5e382670ae337a5776935b"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "bb0ed47569"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x14, 0x4, "85ed3da0e876f276e468fc81c4f5c37c"}, @NL80211_KEY_SEQ={0xf, 0x4, "5f3d744572c65706ae3b30"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b00efa1f97"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x90) r9 = syz_open_procfs(0x0, &(0x7f0000000a00)='net/psched\x00') r10 = openat(r9, &(0x7f0000000a40)='./file0\x00', 0x241, 0x20) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000a80)={0x1, 0x2, @status={[0x7, 0x4, 0x7, 0x9, 0x2, 0x5]}, [0x8, 0xffffffffffffff81, 0x0, 0x9, 0xff8d, 0x5, 0x1, 0x8001, 0x3c, 0xc, 0x8, 0x7f, 0xa18, 0xc1, 0xffffffffffffb8ff, 0x0, 0x8001, 0x7, 0x9, 0x5, 0x400, 0x8, 0x0, 0x4, 0x7f, 0x8001, 0x0, 0x4d, 0x40, 0x8, 0x7, 0xfe00000000000000, 0x0, 0x9, 0x9, 0x8, 0x80000001, 0x9, 0x7, 0x0, 0x4, 0x231a, 0xffffffff, 0xff, 0x3, 0x0, 0x10000, 0x3, 0x7, 0x9, 0x4, 0x10001, 0x3ff, 0x24, 0xb4, 0x8, 0x7fffffff, 0x1, 0x5, 0x7fff, 0x6, 0x9, 0x70ab, 0x101]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)={0x1b, 0x0, 0x0, 0xfffffff1, 0x0, r9, 0xd6, '\x00', 0x0, r10, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000001580)='\x00', 0x3) mount(&(0x7f00000015c0)=@md0, 0xfffffffffffffffd, &(0x7f0000001600)='coda\x00', 0x2, &(0x7f0000001640)='nl80211\x00') ioctl$VHOST_VDPA_GET_VRING_NUM(r10, 0x8002af76, &(0x7f0000001680)) r13 = mq_open(&(0x7f00000016c0)='+}\x00', 0x2, 0x8a, &(0x7f0000001700)={0x4, 0xfffffffffffffffd, 0x4, 0x8}) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000001740)=[r12, r11, r6, r9, r13, r0, 0xffffffffffffffff], 0x7) write$tcp_congestion(r5, &(0x7f0000001780)='dctcp\x00', 0x6) pipe2$watch_queue(&(0x7f00000017c0), 0x80) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000001800)={0x14}, 0x14) 5.139189541s ago: executing program 4 (id=1402): mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x6000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000000c0)={0x9, 0x5, 0x2, 0x3, 0x6, 0x7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40), 0x3, 0xbfb8e0ba4b65479d, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x80080400) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4bc601, 0x0) lseek(r6, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 5.085535158s ago: executing program 5 (id=1403): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600070ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.934919229s ago: executing program 5 (id=1404): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r1, &(0x7f0000000400), 0x20000000}, 0x20) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x1000000008a}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x37}, @val={0x8}, @val={0xc, 0x99, {0x507f, 0x3d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cbbbd0e470ec5d8c51f37ac215c3f9f6a27a0df05f59536d"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x850) socket$kcm(0x2, 0x200000000000001, 0x106) close(0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) 4.581022878s ago: executing program 5 (id=1405): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0, 0x3000000}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 4.422321489s ago: executing program 5 (id=1406): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="a400000010000104000000006f00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000f5007c0012800e00010069703665727370616e0000006800028006000300060000000600020009000000050016001100000004001200080015008af50f00050008000100000014000600fc010000f5ffffffffffffff00000001050016000200000014000700ff"], 0xa4}}, 0x0) 4.091104698s ago: executing program 6 (id=1407): syz_io_uring_setup(0x88f, &(0x7f00000003c0)={0x0, 0xaef2, 0x0, 0x2, 0x3fdffffc}, &(0x7f0000000000), &(0x7f0000000280)) r0 = socket$inet(0xa, 0x801, 0x6) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x1, @rand_addr=0x64010101}, 0x10) listen(r0, 0x8) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, 0x0, 0x0) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40024d00000000000007911d7025b4d5af006b827d72b00000800000540000000000000bd11740000000000"], &(0x7f0000000340)='GPL\x00', 0x2, 0xb5, &(0x7f0000000500)=""/181, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3d1, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r2 = getpid() syz_pidfd_open(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000440)={0x48}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$SNDCTL_SEQ_CTRLRATE(r4, 0xc0045103, &(0x7f0000000080)=0x7) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0), 0x8) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r6, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 2.753595313s ago: executing program 1 (id=1408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b8, 0x2e0, 0x3d0, 0x118, 0x3d0, 0x0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, &(0x7f0000000000), {[{{@ipv6={@private1, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff000000, 0xffffff00], [0xffffff00, 0xffffff00, 0xff], 'gretap0\x00', 'syz_tun\x00', {}, {0xff}, 0x21, 0x5, 0x6, 0x10}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@private=0xa010100, 0x2, 0x18, 0x7ff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x40, 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x38}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@empty, 0x32, 0x3a, 0xd}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@multicast2, 0x17, 0x3f, 0xfff8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000058c0)=ANY=[@ANYBLOB='a'], 0x9) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000081}, 0x2c000001) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x3f}}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc, 0x32}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x400000000000000}, {0x0, 0x2, 0xff}, 0x70bd2d, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfcf1}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd27, 0x70bd2d, 0x70bd2b, 0x4}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 2.75310917s ago: executing program 4 (id=1409): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="120000df04000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@float={0x7, 0x0, 0x0, 0x10, 0x8}, @enum64={0x1, 0x2, 0x0, 0x13, 0x1, 0x0, [{0x10, 0x1ff, 0x9}, {0x10, 0x7ff, 0x9}]}, @func={0x2, 0x0, 0x0, 0xc, 0x5}, @volatile={0x6, 0x0, 0x0, 0x9, 0x2}, @ptr={0x10, 0x0, 0x0, 0x2, 0x5}, @volatile={0xc}]}, {0x0, [0x30, 0x5f, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000280)=""/21, 0x7f, 0x15, 0x0, 0x7, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_open_dev$video(0x0, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x21, 0x30, 0xa, 0xf, 0x0, 0x6, 0x5, 0x13e, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xfffd, 0x4}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000080)=0xe67, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/4082, 0x1020}, 0x80181}], 0x400000000000039, 0x10000, 0x0) 2.410365958s ago: executing program 6 (id=1410): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r2 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0xe8010, &(0x7f0000006380)=ANY=[@ANYBLOB, @ANYBLOB="f1779a2f188cde3bb734255eb52e25833107f9b48f589b374a531b2b7901f6c592b30d7e36781facd0b8957006c7a048f9c32e3e1b3090fc55931d8c458b4e3ae3c3c72f641fb31260ae221cfa210a2e14bd0d633a9a39211df818a6c5609d543dd9fd42cae5381142e9ae1cbbf8f3f928b25aac08b64fa91ad97c220019590624f2c157", @ANYBLOB="2c726f6f746d6f64653d3030300900080000003030303034303030302c757365725f699bc40d780c98fec0351a3d98643dcb4a7c2c0b8ddde7fbdc5a204fce0982cfb72cf69fad3a2662ad844a8a1e651e0fd8a89f2cf272db135a22c80b775cb5841fe7e325d714d6ec6be4918e226faf92df246b207cc32f93a71d161914ad28ee61b85e214f3839306c01372b9dd121b7c1fd88ba9ec00900000000000003ff1fd9de88d79ddc9acc52e91411fce7f02c3bf5f415b1b14b7931aa3738470d", @ANYRES8=r2, @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYBLOB="ad1af5bf401d66c0cc46ad9f2cdeafd2bdfa39ed89e681a7bbfb4c06d2c78d660f7a2f2eb8bbfb99d25ad922d14d70ab52fbfbf0bad269448a8188026c312d60f2be0916ab81b3c50fdb427a05da8b2a613857"]) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x8000, 0x0, r5, 0x0, 0xfcc00000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x3, 0x0, 0xffff, 0x4000000000000, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2000, 0x0, r5, 0x0, 0x440, 0x880000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r8, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x61, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xc000, 0x0, 0x0, r10, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpid() sched_setscheduler(r12, 0x1, &(0x7f0000000100)=0x5) getresuid(&(0x7f0000000380), &(0x7f0000000300), &(0x7f0000000340)=0x0) setresuid(0x0, r13, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000700)="9b49d2f6d47685d20004ae5e250e147e179e6109642b62c085268d53606fb79481e714d1a85532a060dbfe247962f887e07a757559452c1d0727524a4dcd99ee47682946b7a8369c8c2b3c748fba2d2927502c6c72c9919decb61f4eb6b54f14b75c37497941fc85e0bd072a191ff7079c2787204025c42687d4ccc377cc10ac05a2347d44af6d2b317f7a4058717be51fb4591c07a1913fa9cffbef1dc0ef5925f95575bc56dc0c0db65d3a33ce89bf053d0272a18e64ee9b188b9f3ea1423af29c5446ca50dc740be741013c8a12c081e0c42986874e8690ed792ed1d6450f6d108044bec87a29e6e8c7436a56ef29cd1484d86e", 0xf5}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRESDEC=0x0, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRESOCT=0x0, @ANYRES32, @ANYRESOCT=r11, @ANYRESOCT=r6, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="0000000000000001000000020000000000000000ca697705452432ab401e87f454eadfa7aea2759194565be78d4161fe4381702ec52c70d5af", @ANYBLOB="dd977020e6f02a5a4d703ee9593d7f86ded9b3095501b54d41447a995b2373ae0181dc3f8f22cc14af497b9d3f2ea9465eece673c80796950133eb5bbad319835a79b4a415ddf35f7be51b2ee67e41fcc6b5eb989fd717efd0843dcefd57c3590e0d393f882449f53a411145a8ee7ee8ffe064ae766f4f9b52fcb757a14be96230664f32e948e604380f73bdf89eb721c4c53da28ef96a5d205eec6fa682bb981474d20d41d00faf2b141eaf340346a57c4b2855e7f6c36a9ca4d8cdcdf76c9ea4d0fbc76d6852d3a4e09763b2b099da710c016f86be3a4c8ff40f8e19d01bd49ba16d3eb3fd0ebfeee3", @ANYRESDEC=r12, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x4008801}}], 0x1, 0xc1) bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-serpent-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.891221372s ago: executing program 0 (id=1411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100), 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e24, 0x1, @empty, 0x4}}, 0x0, 0x0, 0x17, 0x0, "d3a50ec38f90208f0a60aad300c947c7b790af324c991481f94a2f4cc5e30d0b4f14223c1d77ff30d6ccd4f55807f882837e9d3f5bc7e2869a2695067df11d7a75412017bd3214e7df1fa813a4534f8e"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000000000000000", 0x58}], 0x1) 1.628931679s ago: executing program 4 (id=1412): r0 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x5, 0x101000) r1 = dup(r0) r2 = socket(0x22, 0x80805, 0xfffffffc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0xffffffffffffffff], 0x21) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYRES16=r1], &(0x7f0000000280)='syzkaller\x00', 0xffffffed, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x3e) getpid() sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x5b) mmap(&(0x7f00001a8000/0x2000)=nil, 0x2000, 0x300000f, 0x8031, r2, 0x81a01000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r1, &(0x7f0000000a00)={{}, [@remote, @remote, @bcast, @default, @netrom, @remote, @remote, @bcast]}, &(0x7f00000000c0)=0x48) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f0000000980)=""/110, 0x6e}, {&(0x7f00000005c0)=""/16, 0x10}, {&(0x7f0000000600)=""/140, 0x8c}, {&(0x7f00000006c0)=""/18, 0x12}, {&(0x7f0000000700)=""/108, 0x6c}], 0x6}, 0xb}], 0x1, 0x40010002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdir(0x0, 0x154) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f00000001c0)='.\x00', 0x44101, 0x4) rseq(0x0, 0x0, 0x0, 0x0) r7 = io_uring_setup(0x758a, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) keyctl$read(0xb, r6, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 1.504404007s ago: executing program 6 (id=1413): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000f000711211000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) 1.435103411s ago: executing program 0 (id=1414): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x54) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="67f30f0948b800000000000000000f23c80f21f8350c00d0000f23f8f30f5d7100b9f60b00000f320f01c22cf9664b0f38f64aca0f005e1e0f20e035080000000f22e0", 0x43}], 0x1, 0x66, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r12}) close_range(r0, 0xffffffffffffffff, 0x0) 1.434568876s ago: executing program 4 (id=1415): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000f000000080003003fd7dc219317ab071f1757692031e77f72ea96430b127db2024645c272221a9d83524105", @ANYRES32=0x0, @ANYBLOB="2d000e0080000000ffffffffffff080211000000a92097e51e210000000000000000000064000100250300800500000008000c0064000000"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x26bc80, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000c00)="c100000000000000b47381c96558", 0xe}, {&(0x7f0000000280)="f1fe5fe0360ab373d5026f29", 0x5d}, {&(0x7f0000000040)='y\'', 0x2}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002f0000045a37d5006e657064657673696d0000000f0002006e657464657673696d300000080003"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$P9_RATTACH(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={r0, r8, 0x1, 0x0, 0x3}) close(0xffffffffffffffff) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r9) 380.699963ms ago: executing program 6 (id=1416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb}, {}, {}, {0xdd86}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000001d00)={0x0, 0x1, 0x1, r6, 0xa6}, 0xc) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000001b00)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x7, @remote, 0x10000}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="fd990745689a5393c7a2d949943d56e96f935f25256a6995394e725e7c0ae440b9ffcd9c163ced56fb5c1fddc752e0db5aaa83fac1792657b57a532019cd4ecd00557ac4a58745eaf5f031330eedab41874591407dbf2060606dd998f4cc9a0e352ddbb33378621471e5b69cf733c52e2b4e2e581a7739b903418196e1542ce96a98f05f91aec2ea9971b7d878133885c7fcce55e487e77ca79b7bc47ea1586e22521128e9e59e744a93347f3a00a79089c49cb080b27eeca0eba22c31d6224a8752e276353b0963e6d9f1979bed1753e4595fde61718fd4", 0xd8}], 0x1, &(0x7f00000001c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9ee}}, @hopopts_2292={{0xb8, 0x29, 0x36, {0x2f, 0x13, '\x00', [@enc_lim={0x4, 0x1, 0x91}, @generic={0x6c, 0x55, "37d4a92e70890ab1085f43bf8d5e6046d0e62c5257a347abe702256adc0f42fe928c440699cdd9a13f5f84d7fa499fac82bc7ccd9f0d2c74e73df16335fcdc4aae81b0a4c6b0585845994fd2ced0bb7fc0d149cb4c"}, @ra={0x5, 0x2, 0x200}, @generic={0x3, 0x3d, "572283ce4f247d27b366c18f77056444bf0b37cf632cecf87b3cd4ddce66fe0d5e77d9cba181deaae0ec657908d0b60f9471088ef964214a49a898f98a"}]}}}, @dontfrag={{0x14}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x0, 0x10, 0x2, 0x2, 0x0, [@remote, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x12}, @private2={0xfc, 0x2, '\x00', 0x1}, @local]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x89, 0x2, 0x1, 0xb, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3c}]}}}], 0x1a8}}, {{&(0x7f00000003c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="7bac15f135c36bd2a8279aaa46645341e6a13486c4d822f1a6453de6adea81a8f3ba8e126002d9200c81eaa5febfd8d3e59f1942f4d75bb1a52047da6809fbd38d1aa735605b3f8592d61f8410eaeccc3481a90b3f39d9cb0878000069490eebfe92d5a28a5902984b318b68631e9584c6257d49600b265f2a4284515165a3ad017059f2253cd5698287088a671e64e3b6f7f2bf743e901eddf71a190be98cbaf6906446e67f50", 0xa7}, {&(0x7f0000000580)="32460ce3c96f1b7fdfe9f561c6faf5f3d7b940d65355603dd6564be55b687c4bddf784466068f028f9ca1b5e3fb60d1c2b439a388babc0f2c3ee4b6d113d0afbb489471fd6a726699f93c0afb518d390703d6e1e", 0x54}, {&(0x7f0000000600)="a456c229518ec1c502248c053c4487b0daf0d57f9323b1a38f53ed01eaacff28e9c79f62d31a21833389447f7ac423e7523f650daaa185a2c9fdb8440ceb4dbb23917d78f0b3a66026d0eba018615319266a7a043017bf45631fead00c69f3ae277edf54e74be1b305b55723ec175d0f7bba88094ce97a9daf754a739aeef8b0b21ef88535e8f4c6294fe2c82b31442fdf1a3ade8ab5de3a38979dfc70ad5d47d8413b680c371b739cd91e96b56a5f6e38bb506fe5d5b511b48124", 0xbb}, {&(0x7f0000000780)="1901ff4a95288a32a7c2a749c417e2e545408f5170e89c146d253b6aa848fc4782f313ffe6b7304f507b669d027c73001809f7f83177170e75239e0452c592453219cd492d3341ca94e7dead8ee691d1d65e6a1da018f3e1bea3a2928ea1d1fd99", 0x61}], 0x5, &(0x7f0000000880)}}], 0x3, 0x0) 0s ago: executing program 0 (id=1417): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') iopl(0x3) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x80000, 0x800, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0xfd}, 0x8000000, 0x0, 0x3, 0x1, 0xfffc}, 0x20) io_setup(0x30, &(0x7f0000000600)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000000c0)="01", 0x24}]) kernel console output (not intermixed with test programs): ': attribute type 8 has an invalid length. [ 324.990605][ T9048] netlink: 'syz.0.848': attribute type 8 has an invalid length. [ 325.011912][ T9048] bridge0: entered allmulticast mode [ 325.219558][ T30] audit: type=1400 audit(1746820543.565:622): avc: denied { connect } for pid=9049 comm="syz.2.849" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 325.365474][ T9056] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 808 [ 325.378292][ T30] audit: type=1400 audit(1746820543.715:623): avc: denied { write } for pid=9054 comm="syz.4.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 325.499878][ T5865] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 326.345821][ T30] audit: type=1400 audit(1746820544.685:624): avc: denied { connect } for pid=9059 comm="syz.0.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 327.062617][ T5865] usb 2-1: cp210x converter now attached to ttyUSB0 [ 327.153509][ T5864] usb 2-1: USB disconnect, device number 23 [ 327.164861][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 327.192367][ T5864] cp210x 2-1:0.1: device disconnected [ 327.871718][ T5862] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 328.031316][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 328.041756][ T5862] usb 5-1: too many configurations: 26, using maximum allowed: 8 [ 328.164819][ T5862] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 328.263619][ T5862] usb 5-1: can't read configurations, error -61 [ 328.695872][ T30] audit: type=1400 audit(1746820546.995:625): avc: denied { getopt } for pid=9094 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 328.816276][ T9103] netlink: 56 bytes leftover after parsing attributes in process `syz.3.866'. [ 328.883765][ T5862] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 328.972708][ T9093] Falling back ldisc for ttyprintk. [ 329.075811][ T9101] infiniband syz!: set active [ 329.080920][ T9101] infiniband syz!: added team_slave_0 [ 329.107330][ T9101] RDS/IB: syz!: added [ 329.112306][ T9101] smc: adding ib device syz! with port count 1 [ 329.118753][ T9101] smc: ib device syz! port 1 has pnetid [ 329.193004][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 329.223082][ T5862] usb 5-1: too many configurations: 26, using maximum allowed: 8 [ 329.236554][ T5925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.242097][ T5862] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 329.265180][ T5862] usb 5-1: can't read configurations, error -61 [ 329.280893][ T5862] usb usb5-port1: attempt power cycle [ 329.630714][ T5862] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 329.649890][ T9109] nvme_fabrics: unknown parameter or missing value 'øöE' in ctrl creation request [ 329.683105][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 329.688959][ T5862] usb 5-1: too many configurations: 26, using maximum allowed: 8 [ 329.711913][ T5862] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 329.732101][ T5862] usb 5-1: can't read configurations, error -61 [ 329.743576][ T5925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.759724][ T30] audit: type=1400 audit(1746820548.105:626): avc: denied { mount } for pid=9115 comm="syz.3.871" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 329.881572][ T30] audit: type=1400 audit(1746820548.195:627): avc: denied { write } for pid=9115 comm="syz.3.871" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.890519][ T5862] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 329.951599][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 329.978442][ T5862] usb 5-1: too many configurations: 26, using maximum allowed: 8 [ 329.984699][ T30] audit: type=1400 audit(1746820548.195:628): avc: denied { open } for pid=9115 comm="syz.3.871" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 330.007558][ T30] audit: type=1400 audit(1746820548.205:629): avc: denied { read append } for pid=9115 comm="syz.3.871" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 330.028708][ T30] audit: type=1400 audit(1746820548.205:630): avc: denied { ioctl } for pid=9115 comm="syz.3.871" path="/178/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 330.033624][ T5925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.073857][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'. [ 330.083589][ T30] audit: type=1800 audit(1746820548.215:631): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.871" name="/" dev="9p" ino=2 res=0 errno=0 [ 330.091517][ T5862] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 330.115011][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 330.129177][ T5862] usb 5-1: can't read configurations, error -71 [ 330.153279][ T5862] usb usb5-port1: unable to enumerate USB device [ 330.169850][ T9119] dummy0: entered promiscuous mode [ 330.204158][ T9119] macsec1: entered allmulticast mode [ 330.222642][ T9119] dummy0: entered allmulticast mode [ 330.297812][ T5925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.317086][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.329018][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.390375][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.407162][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.438881][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.824186][ T30] audit: type=1400 audit(1746820549.165:632): avc: denied { mounton } for pid=9121 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 331.082157][ T9130] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 331.091544][ T9130] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 331.100424][ T9130] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 331.109311][ T9130] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 331.135993][ T9130] geneve2: entered allmulticast mode [ 331.243041][ T9121] lo speed is unknown, defaulting to 1000 [ 331.294265][ T9121] lo speed is unknown, defaulting to 1000 [ 331.318558][ T9128] openvswitch: netlink: Message has 4 unknown bytes. [ 331.412962][ T5925] bridge_slave_1: left allmulticast mode [ 331.422826][ T5925] bridge_slave_1: left promiscuous mode [ 331.441763][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.475126][ T5925] bridge_slave_0: left allmulticast mode [ 331.484447][ T5925] bridge_slave_0: left promiscuous mode [ 331.500513][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.836446][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 332.846732][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 332.900552][ T5811] Bluetooth: hci1: command tx timeout [ 333.055897][ T5925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.067911][ T5925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.078357][ T5925] bond0 (unregistering): Released all slaves [ 333.200174][ T5925] tipc: Left network mode [ 333.605396][ T9162] netlink: 'syz.0.882': attribute type 4 has an invalid length. [ 334.990758][ T5811] Bluetooth: hci1: command tx timeout [ 335.057691][ T5925] hsr_slave_0: left promiscuous mode [ 335.066996][ T5925] hsr_slave_1: left promiscuous mode [ 335.110655][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.121063][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.146212][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.153883][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.208906][ T5925] dummy0: left allmulticast mode [ 335.215686][ T5925] veth1_macvtap: left promiscuous mode [ 335.223374][ T5925] veth0_macvtap: left promiscuous mode [ 335.233800][ T5925] veth1_vlan: left promiscuous mode [ 335.291514][ T9176] netlink: 'syz.0.885': attribute type 13 has an invalid length. [ 335.330577][ T5863] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 335.376078][ T9178] netlink: 156 bytes leftover after parsing attributes in process `syz.0.885'. [ 335.521832][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 335.530006][ T5863] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 335.581541][ T5863] usb 2-1: config 1 has an invalid interface number: 10 but max is 0 [ 335.591476][ T5863] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 335.609317][ T5863] usb 2-1: config 1 has no interface number 0 [ 335.617389][ T5863] usb 2-1: config 1 has no interface number 1 [ 335.624322][ T5863] usb 2-1: config 1 interface 242 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 335.638553][ T5863] usb 2-1: config 1 interface 10 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 335.652296][ T5863] usb 2-1: config 1 interface 242 has no altsetting 0 [ 335.659243][ T5863] usb 2-1: config 1 interface 10 has no altsetting 0 [ 335.673509][ T5863] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 335.707769][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.716561][ T5863] usb 2-1: Product: syz [ 335.721473][ T5863] usb 2-1: Manufacturer: syz [ 335.726117][ T5863] usb 2-1: SerialNumber: syz [ 336.013335][ T9183] FAULT_INJECTION: forcing a failure. [ 336.013335][ T9183] name failslab, interval 1, probability 0, space 0, times 0 [ 336.026198][ T9183] CPU: 0 UID: 0 PID: 9183 Comm: syz.4.887 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 336.026223][ T9183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 336.026234][ T9183] Call Trace: [ 336.026240][ T9183] [ 336.026247][ T9183] dump_stack_lvl+0x16c/0x1f0 [ 336.026281][ T9183] should_fail_ex+0x512/0x640 [ 336.026305][ T9183] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 336.026342][ T9183] should_failslab+0xc2/0x120 [ 336.026362][ T9183] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 336.026387][ T9183] ? __alloc_skb+0x2b2/0x380 [ 336.026413][ T9183] __alloc_skb+0x2b2/0x380 [ 336.026429][ T9183] ? __pfx___alloc_skb+0x10/0x10 [ 336.026443][ T9183] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 336.026467][ T9183] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 336.026495][ T9183] netlink_alloc_large_skb+0x69/0x130 [ 336.026519][ T9183] netlink_sendmsg+0x6a1/0xdd0 [ 336.026543][ T9183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.026572][ T9183] ____sys_sendmsg+0xa95/0xc70 [ 336.026596][ T9183] ? copy_msghdr_from_user+0x10a/0x160 [ 336.026614][ T9183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.026647][ T9183] ___sys_sendmsg+0x134/0x1d0 [ 336.026665][ T9183] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.026726][ T9183] __sys_sendmsg+0x16d/0x220 [ 336.026744][ T9183] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.026777][ T9183] do_syscall_64+0xcd/0x260 [ 336.026801][ T9183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.026820][ T9183] RIP: 0033:0x7fbe26f8e969 [ 336.026835][ T9183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.026851][ T9183] RSP: 002b:00007fbe27e74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.026869][ T9183] RAX: ffffffffffffffda RBX: 00007fbe271b6160 RCX: 00007fbe26f8e969 [ 336.026880][ T9183] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 336.026890][ T9183] RBP: 00007fbe27e74090 R08: 0000000000000000 R09: 0000000000000000 [ 336.026900][ T9183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.026910][ T9183] R13: 0000000000000000 R14: 00007fbe271b6160 R15: 00007ffc371e2608 [ 336.026932][ T9183] [ 336.711237][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.745771][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.784082][ T5925] team0 (unregistering): Port device team_slave_1 removed [ 336.849178][ T5925] team0 (unregistering): Port device team_slave_0 removed [ 337.071699][ T5811] Bluetooth: hci1: command tx timeout [ 337.482698][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.490057][ T9176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.499840][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.507001][ T9176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.538852][ T9176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.565841][ T9187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.630043][ T5862] lo speed is unknown, defaulting to 1000 [ 337.638927][ T9121] chnl_net:caif_netlink_parms(): no params data found [ 337.719940][ T5862] syz2: Port: 1 Link ACTIVE [ 337.958926][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.972759][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.983033][ T9121] bridge_slave_0: entered allmulticast mode [ 337.992085][ T9121] bridge_slave_0: entered promiscuous mode [ 338.003910][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.012317][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.023847][ T9121] bridge_slave_1: entered allmulticast mode [ 338.032275][ T9121] bridge_slave_1: entered promiscuous mode [ 338.093847][ T9121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.111994][ T9121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.195125][ T9121] team0: Port device team_slave_0 added [ 338.206789][ T9121] team0: Port device team_slave_1 added [ 338.245677][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.252944][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.279852][ T9121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.294827][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.302032][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.328356][ T9121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.385524][ T9121] hsr_slave_0: entered promiscuous mode [ 338.392585][ T9121] hsr_slave_1: entered promiscuous mode [ 338.399036][ T9121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.408958][ T9121] Cannot create hsr debugfs directory [ 338.582550][ T5863] aqc111 2-1:1.242: probe with driver aqc111 failed with error -22 [ 338.605995][ T5863] usb 2-1: USB disconnect, device number 24 [ 338.939296][ T9201] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 339.351334][ T5811] Bluetooth: hci1: command tx timeout [ 339.416170][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 339.425504][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 339.503958][ T9121] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 339.541121][ T9121] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 339.554508][ T9121] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 339.577362][ T9121] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 339.741533][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.765977][ T9121] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.080661][ T9213] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 340.811520][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.818601][ T5925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.844027][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.851167][ T5925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.923003][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'. [ 341.088069][ T9219] netlink: 56 bytes leftover after parsing attributes in process `syz.4.895'. [ 341.429844][ T9234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.567406][ T30] audit: type=1400 audit(1746820559.915:633): avc: denied { mount } for pid=9235 comm="syz.1.899" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 341.637374][ T9236] netlink: 'syz.1.899': attribute type 10 has an invalid length. [ 341.712842][ T30] audit: type=1400 audit(1746820560.035:634): avc: denied { connect } for pid=9238 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 341.737591][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.746238][ T5862] IPVS: starting estimator thread 0... [ 341.839146][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.901'. [ 341.852498][ T9240] IPVS: using max 50 ests per chain, 120000 per kthread [ 342.080261][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.899'. [ 342.216785][ T9236] veth0_macvtap: left promiscuous mode [ 342.316443][ T9236] batman_adv: batadv0: Adding interface: macvtap0 [ 342.324181][ T9236] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.350849][ T30] audit: type=1400 audit(1746820560.695:635): avc: denied { read } for pid=9244 comm="syz.4.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 342.371395][ T9236] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 342.413263][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.901'. [ 342.560672][ T30] audit: type=1400 audit(1746820560.905:636): avc: denied { create } for pid=9255 comm="syz.0.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 342.894643][ T30] audit: type=1400 audit(1746820561.245:637): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 343.101866][ T9121] veth0_vlan: entered promiscuous mode [ 343.112961][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.115917][ T9121] veth1_vlan: entered promiscuous mode [ 343.144626][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.166823][ T9121] veth0_macvtap: entered promiscuous mode [ 343.180550][ T9121] veth1_macvtap: entered promiscuous mode [ 343.204119][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.217284][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.227666][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.239620][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.249487][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.261054][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.273101][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.284380][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.297364][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.311441][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.322162][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.332022][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.345010][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.354892][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.360650][ T5862] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 343.366070][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.384161][ T9121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.394811][ T9121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.406103][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.418031][ T9121] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.427202][ T9121] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.436193][ T9121] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.445880][ T9121] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.503144][ T5862] usb 5-1: device descriptor read/64, error -71 [ 343.535619][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.550914][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.595144][ T5925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.609634][ T5925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.628759][ T30] audit: type=1400 audit(1746820561.975:638): avc: denied { mounton } for pid=9121 comm="syz-executor" path="/root/syzkaller.g5lVpn/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 343.656175][ T30] audit: type=1400 audit(1746820561.985:639): avc: denied { mount } for pid=9121 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 343.681942][ T30] audit: type=1400 audit(1746820561.985:640): avc: denied { mounton } for pid=9121 comm="syz-executor" path="/root/syzkaller.g5lVpn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 343.709534][ T30] audit: type=1400 audit(1746820561.985:641): avc: denied { mounton } for pid=9121 comm="syz-executor" path="/root/syzkaller.g5lVpn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 343.739423][ T30] audit: type=1400 audit(1746820562.005:642): avc: denied { mounton } for pid=9121 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 343.790639][ T5862] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 344.025041][ T5862] usb 5-1: device descriptor read/64, error -71 [ 344.187952][ T5862] usb usb5-port1: attempt power cycle [ 344.263683][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.909'. [ 344.575073][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.909'. [ 345.302706][ T5862] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 345.332435][ T5862] usb 5-1: device descriptor read/8, error -71 [ 345.570361][ T5862] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 345.593166][ T5862] usb 5-1: device descriptor read/8, error -71 [ 345.710763][ T5862] usb usb5-port1: unable to enumerate USB device [ 345.856045][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.867122][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.877565][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.885717][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.898854][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.899484][ T9297] netfs: Couldn't get user pages (rc=-14) [ 345.975156][ T9303] lo speed is unknown, defaulting to 1000 [ 346.011678][ T9303] lo speed is unknown, defaulting to 1000 [ 346.030328][ T5822] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 346.242380][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.275965][ T9310] ubi: mtd0 is already attached to ubi31 [ 346.316982][ T5822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 346.448231][ T5822] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 346.631133][ T5822] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 346.640955][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.649011][ T5822] usb 1-1: Product: syz [ 346.653312][ T5822] usb 1-1: Manufacturer: syz [ 346.790344][ T6659] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 346.821785][ T5822] usb 1-1: SerialNumber: syz [ 346.828866][ T5822] usb 1-1: config 0 descriptor?? [ 346.836988][ T5822] usb 1-1: Found UVC 34.00 device syz (8086:0b5b) [ 346.846435][ T5822] usb 1-1: No valid video chain found. [ 347.119148][ T9299] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 347.152571][ T9303] chnl_net:caif_netlink_parms(): no params data found [ 347.153417][ T6659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 347.179610][ T5862] usb 1-1: USB disconnect, device number 37 [ 347.206011][ T6659] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 347.216649][ T6659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 347.327839][ T9323] netlink: 'syz.5.919': attribute type 4 has an invalid length. [ 347.466576][ T6659] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 347.581385][ T6659] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 347.594919][ T6659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.609188][ T6659] usb 5-1: Product: syz [ 347.615668][ T6659] usb 5-1: Manufacturer: syz [ 347.621458][ T6659] usb 5-1: SerialNumber: syz [ 347.636359][ T6659] usb 5-1: config 0 descriptor?? [ 347.645212][ T6659] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 347.693068][ T9303] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.701920][ T9303] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.715624][ T9303] bridge_slave_0: entered allmulticast mode [ 347.824692][ T9303] bridge_slave_0: entered promiscuous mode [ 347.916008][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.920'. [ 347.925769][ T9331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'. [ 347.957242][ T9303] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.017029][ T9303] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.057047][ T5811] Bluetooth: hci5: command tx timeout [ 348.087591][ T6659] ums-isd200 5-1:0.0: probe with driver ums-isd200 failed with error -22 [ 348.087967][ T9303] bridge_slave_1: entered allmulticast mode [ 348.177988][ T9303] bridge_slave_1: entered promiscuous mode [ 348.232567][ T9303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.249506][ T9303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.281646][ T5865] usb 5-1: USB disconnect, device number 31 [ 348.310320][ T5822] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 348.354007][ T9303] team0: Port device team_slave_0 added [ 348.390538][ T9303] team0: Port device team_slave_1 added [ 348.446623][ T9303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.454986][ T9303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.499700][ T5822] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 348.523121][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 348.537041][ T9303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.550884][ T5822] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 348.563112][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 348.572174][ T5822] usb 1-1: Product: syz [ 348.580177][ T9303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.583598][ T5822] usb 1-1: Manufacturer: syz [ 348.596577][ T9303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.624693][ T5822] usb 1-1: SerialNumber: syz [ 348.630174][ T9303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.643103][ T5822] usb 1-1: config 0 descriptor?? [ 348.652829][ T5822] usb 1-1: selecting invalid altsetting 0 [ 348.711941][ T9303] hsr_slave_0: entered promiscuous mode [ 348.718217][ T9303] hsr_slave_1: entered promiscuous mode [ 348.728845][ T9303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.736764][ T9303] Cannot create hsr debugfs directory [ 349.037607][ T9350] netlink: 52 bytes leftover after parsing attributes in process `syz.0.921'. [ 349.614600][ T9333] fuse: Bad value for 'fd' [ 349.670378][ T5822] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 349.724202][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 349.724220][ T30] audit: type=1400 audit(1746820568.075:651): avc: denied { create } for pid=9332 comm="syz.0.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 349.738295][ T9333] lo speed is unknown, defaulting to 1000 [ 349.797655][ T9303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 349.852362][ T9333] lo speed is unknown, defaulting to 1000 [ 349.859673][ T9303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 349.900974][ T9303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 349.925178][ T9303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 349.962055][ T5822] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 349.976562][ T5822] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 349.987136][ T5822] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 349.999994][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.016147][ T9349] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 350.032130][ T5822] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.077395][ T9303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.100367][ T5811] Bluetooth: hci5: command tx timeout [ 350.110867][ T9303] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.131106][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.138315][ T5925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.175015][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.182175][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.251099][ T6659] usb 1-1: USB disconnect, device number 38 [ 350.270741][ T9349] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 350.277325][ T9349] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 350.296971][ T9349] vhci_hcd vhci_hcd.0: Device attached [ 350.304274][ T9303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 350.316652][ T9303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.376933][ T9349] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(18) [ 350.383606][ T9349] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 350.392613][ T9349] vhci_hcd vhci_hcd.0: Device attached [ 350.403506][ T9349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 350.424933][ T9349] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(22) [ 350.431600][ T9349] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 350.443350][ T9349] vhci_hcd vhci_hcd.0: Device attached [ 350.456868][ T9349] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(24) [ 350.463541][ T9349] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 350.473056][ T9349] vhci_hcd vhci_hcd.0: Device attached [ 350.484047][ T9349] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(26) [ 350.490715][ T9349] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 350.508973][ T9349] vhci_hcd vhci_hcd.0: Device attached [ 350.530370][ T10] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 350.546864][ T9349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 350.581071][ T9363] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 350.581083][ T9303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.620947][ T9349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 350.648233][ T9374] vhci_hcd: connection closed [ 350.652724][ T9372] vhci_hcd: connection closed [ 350.657581][ T1323] vhci_hcd: stop threads [ 350.661414][ T9366] vhci_hcd: connection closed [ 350.663212][ T9369] vhci_hcd: connection closed [ 350.671901][ T1323] vhci_hcd: release socket [ 350.688587][ T9361] vhci_hcd: connection reset by peer [ 350.691278][ T1323] vhci_hcd: disconnect device [ 350.703194][ T1323] vhci_hcd: stop threads [ 350.707505][ T1323] vhci_hcd: release socket [ 350.715263][ T1323] vhci_hcd: disconnect device [ 350.746515][ T1323] vhci_hcd: stop threads [ 350.753908][ T1323] vhci_hcd: release socket [ 350.835944][ T1323] vhci_hcd: disconnect device [ 350.839748][ T5865] usb 5-1: USB disconnect, device number 32 [ 350.859923][ T1323] vhci_hcd: stop threads [ 350.874595][ T1323] vhci_hcd: release socket [ 350.902618][ T1323] vhci_hcd: disconnect device [ 350.924466][ T1323] vhci_hcd: stop threads [ 350.933274][ T1323] vhci_hcd: release socket [ 350.961400][ T1323] vhci_hcd: disconnect device [ 351.304546][ T9391] 9pnet_fd: Insufficient options for proto=fd [ 352.250419][ T5811] Bluetooth: hci5: command tx timeout [ 352.833671][ T9303] veth0_vlan: entered promiscuous mode [ 353.472346][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.935'. [ 353.481674][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 353.625660][ T9303] veth1_vlan: entered promiscuous mode [ 353.645803][ T9413] netlink: 'syz.5.937': attribute type 4 has an invalid length. [ 353.653709][ T9413] netlink: 20 bytes leftover after parsing attributes in process `syz.5.937'. [ 353.955594][ T9415] ubi: mtd0 is already attached to ubi31 [ 354.269073][ T5811] Bluetooth: hci5: command tx timeout [ 354.343136][ T9303] veth0_macvtap: entered promiscuous mode [ 354.352979][ T9303] veth1_macvtap: entered promiscuous mode [ 354.556151][ T9420] FAULT_INJECTION: forcing a failure. [ 354.556151][ T9420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.569669][ T9420] CPU: 0 UID: 0 PID: 9420 Comm: syz.5.939 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 354.569695][ T9420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 354.569705][ T9420] Call Trace: [ 354.569713][ T9420] [ 354.569721][ T9420] dump_stack_lvl+0x16c/0x1f0 [ 354.569759][ T9420] should_fail_ex+0x512/0x640 [ 354.569791][ T9420] _copy_to_user+0x32/0xd0 [ 354.569819][ T9420] simple_read_from_buffer+0xcb/0x170 [ 354.569849][ T9420] proc_fail_nth_read+0x197/0x270 [ 354.569877][ T9420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.569902][ T9420] ? rw_verify_area+0xcf/0x680 [ 354.569924][ T9420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.569949][ T9420] vfs_read+0x1de/0xc70 [ 354.569976][ T9420] ? __pfx___mutex_lock+0x10/0x10 [ 354.570001][ T9420] ? __pfx_vfs_read+0x10/0x10 [ 354.570031][ T9420] ? __fget_files+0x20e/0x3c0 [ 354.570066][ T9420] ksys_read+0x12a/0x240 [ 354.570089][ T9420] ? __pfx_ksys_read+0x10/0x10 [ 354.570127][ T9420] do_syscall_64+0xcd/0x260 [ 354.570153][ T9420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.570172][ T9420] RIP: 0033:0x7f8d11d8d37c [ 354.570191][ T9420] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 354.570206][ T9420] RSP: 002b:00007f8d12bdf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.570222][ T9420] RAX: ffffffffffffffda RBX: 00007f8d11fb5fa0 RCX: 00007f8d11d8d37c [ 354.570231][ T9420] RDX: 000000000000000f RSI: 00007f8d12bdf0a0 RDI: 000000000000000a [ 354.570239][ T9420] RBP: 00007f8d12bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 354.570248][ T9420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.570257][ T9420] R13: 0000000000000000 R14: 00007f8d11fb5fa0 R15: 00007ffdb4d36d18 [ 354.570280][ T9420] [ 354.750927][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.780148][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.793901][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.804019][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.816200][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.829733][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.843430][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.853586][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.865800][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.883795][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.896536][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.910456][ T9303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.924733][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.935767][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.946066][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.957902][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.967979][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.978703][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.989097][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.004590][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.023723][ T9303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.042891][ T9303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.108433][ T9303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.124366][ T9303] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.135052][ T9303] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.145679][ T9303] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.162298][ T9303] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.895894][ T9430] ubi: mtd0 is already attached to ubi31 [ 355.970319][ T10] vhci_hcd: vhci_device speed not set [ 356.798462][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.817390][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.877555][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.886927][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.105082][ T5865] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 357.699923][ T9438] ceph: No mds server is up or the cluster is laggy [ 357.852067][ T5865] usb 5-1: too many configurations: 205, using maximum allowed: 8 [ 357.872887][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 357.998677][ T9467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.952'. [ 358.099455][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 358.150020][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 358.679658][ T9470] ubi: mtd0 is already attached to ubi31 [ 358.720534][ T5862] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 358.831142][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 358.901499][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 358.912774][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 358.951637][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 359.139306][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 359.161589][ T5862] usb 1-1: unable to get BOS descriptor or descriptor too short [ 359.171519][ T5865] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 359.185857][ T5862] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 359.202718][ T5862] usb 1-1: config 1 has no interface number 1 [ 359.211334][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.948'. [ 359.258856][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 359.274160][ T5862] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 359.382462][ T5865] usb 5-1: Product: syz [ 359.479595][ T30] audit: type=1400 audit(1746820577.625:652): avc: denied { append } for pid=9480 comm="syz.1.954" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 359.936192][ T5865] usb 5-1: Manufacturer: syz [ 359.975334][ T5865] usb 5-1: SerialNumber: syz [ 360.000369][ T5862] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.191281][ T5865] usb 5-1: config 0 descriptor?? [ 360.209433][ T5865] usb 5-1: can't set config #0, error -71 [ 360.210419][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.218615][ T5865] usb 5-1: USB disconnect, device number 33 [ 360.253146][ T5862] usb 1-1: Product: syz [ 360.276090][ T9492] netlink: 64 bytes leftover after parsing attributes in process `syz.4.957'. [ 361.096537][ T5862] usb 1-1: Manufacturer: syz [ 361.116997][ T5862] usb 1-1: SerialNumber: syz [ 361.515927][ T3551] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 361.553297][ T5862] usb 1-1: can't set config #1, error -71 [ 361.569530][ T5862] usb 1-1: USB disconnect, device number 39 [ 361.612179][ T30] audit: type=1400 audit(1746820579.945:653): avc: denied { setopt } for pid=9487 comm="syz.6.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 363.801321][ T9517] 9pnet_fd: Insufficient options for proto=fd [ 364.486315][ T30] audit: type=1400 audit(1746820582.405:654): avc: denied { read } for pid=9515 comm="syz.5.962" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 364.658500][ T30] audit: type=1400 audit(1746820582.405:655): avc: denied { open } for pid=9515 comm="syz.5.962" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 364.816054][ T30] audit: type=1400 audit(1746820582.425:656): avc: denied { ioctl } for pid=9515 comm="syz.5.962" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 364.855007][ T30] audit: type=1400 audit(1746820583.015:657): avc: denied { mount } for pid=9515 comm="syz.5.962" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 364.877500][ T9523] FAULT_INJECTION: forcing a failure. [ 364.877500][ T9523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.907694][ T9523] CPU: 0 UID: 0 PID: 9523 Comm: syz.6.963 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 364.907721][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 364.907732][ T9523] Call Trace: [ 364.907739][ T9523] [ 364.907745][ T9523] dump_stack_lvl+0x16c/0x1f0 [ 364.907779][ T9523] should_fail_ex+0x512/0x640 [ 364.907806][ T9523] __fpu_restore_sig+0xf2/0x13a0 [ 364.907833][ T9523] ? __lock_acquire+0xaa4/0x1ba0 [ 364.907857][ T9523] ? __pfx___fpu_restore_sig+0x10/0x10 [ 364.907892][ T9523] ? __might_fault+0xe3/0x190 [ 364.907909][ T9523] ? __might_fault+0x13b/0x190 [ 364.907929][ T9523] fpu__restore_sig+0x115/0x190 [ 364.907960][ T9523] restore_sigcontext+0x4c9/0x6a0 [ 364.907982][ T9523] ? __pfx_restore_sigcontext+0x10/0x10 [ 364.908019][ T9523] ? __pfx_restore_altstack+0x10/0x10 [ 364.908051][ T9523] ? _raw_spin_unlock_irq+0x23/0x50 [ 364.908070][ T9523] ? lockdep_hardirqs_on+0x7c/0x110 [ 364.908093][ T9523] __do_sys_rt_sigreturn+0x1bb/0x230 [ 364.908114][ T9523] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 364.908142][ T9523] do_syscall_64+0xcd/0x260 [ 364.908162][ T9523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.908178][ T9523] RIP: 0033:0x7f6a8e557df0 [ 364.908191][ T9523] Code: 20 72 37 62 e1 fe 28 6f 06 48 83 fa 40 0f 87 a7 00 00 00 62 e1 fe 28 6f 4c 16 ff 62 e1 fe 28 7f 07 62 e1 fe 28 7f 4c 17 ff c3 <8b> 0e 8b 34 16 89 0f 89 34 17 c3 0f 1f 44 00 00 83 fa 10 73 21 83 [ 364.908206][ T9523] RSP: 002b:00007f6a8c3f6028 EFLAGS: 00010246 [ 364.908220][ T9523] RAX: 0000000000000000 RBX: 00007f6a8e7b5fa0 RCX: 0000000000000004 [ 364.908231][ T9523] RDX: 0000000000000000 RSI: 0000200000c06720 RDI: 0000000000000000 [ 364.908241][ T9523] RBP: 00007f6a8c3f6090 R08: 0000000000000004 R09: 0000000000000000 [ 364.908252][ T9523] R10: 0000000000000000 R11: 0000200000000100 R12: 0000000000000002 [ 364.908262][ T9523] R13: 0000000000000000 R14: 00007f6a8e7b5fa0 R15: 00007ffc560cff58 [ 364.908285][ T9523] [ 365.185573][ T30] audit: type=1400 audit(1746820583.335:658): avc: denied { unmount } for pid=9121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 365.250499][ T30] audit: type=1400 audit(1746820583.465:659): avc: denied { ioctl } for pid=9527 comm="syz.0.964" path="socket:[26137]" dev="sockfs" ino=26137 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 365.486942][ T30] audit: type=1400 audit(1746820583.525:660): avc: denied { node_bind } for pid=9527 comm="syz.0.964" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 365.539041][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 365.564928][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 365.634647][ T9541] dummy0: entered promiscuous mode [ 365.660995][ T9541] macsec1: entered allmulticast mode [ 365.666697][ T9541] dummy0: entered allmulticast mode [ 365.828207][ T5822] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 366.096212][ T5822] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 366.182688][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.413464][ T5822] usb 6-1: config 0 descriptor?? [ 366.426191][ T5822] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 366.741065][ T5822] gp8psk: usb in 128 operation failed. [ 366.745733][ T9568] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 366.778136][ T5822] gp8psk: usb in 137 operation failed. [ 366.850273][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.888139][ T5822] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 366.930543][ T5822] usb 6-1: media controller created [ 366.984096][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.099842][ T5822] gp8psk_fe: Frontend attached [ 367.119151][ T5822] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 367.149782][ T5822] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 367.422662][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 367.431839][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 367.534601][ T9582] netlink: 20 bytes leftover after parsing attributes in process `syz.6.980'. [ 367.543946][ T9582] netlink: 28 bytes leftover after parsing attributes in process `syz.6.980'. [ 368.091034][ T5822] gp8psk: usb in 138 operation failed. [ 368.097211][ T5822] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 368.112295][ T5822] gp8psk: found Genpix USB device pID = 203 (hex) [ 368.121954][ T5822] usb 6-1: USB disconnect, device number 2 [ 368.509614][ T5822] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 369.700491][ T30] audit: type=1400 audit(1746820588.035:661): avc: denied { mounton } for pid=9605 comm="syz.6.987" path="/9/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 369.789629][ T30] audit: type=1400 audit(1746820588.135:662): avc: denied { ioctl } for pid=9612 comm="syz.4.988" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 369.970651][ T5863] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 370.070336][ T5822] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 370.149183][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.164297][ T5863] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 370.173959][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.205403][ T5863] usb 1-1: config 0 descriptor?? [ 370.234826][ T5863] pwc: Askey VC010 type 2 USB webcam detected. [ 370.368484][ T5822] usb 6-1: Using ep0 maxpacket: 8 [ 370.381666][ T5822] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 370.390792][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.402113][ T5822] usb 6-1: config 0 descriptor?? [ 370.734407][ T5822] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 370.825995][ T9633] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 371.221132][ T5822] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 371.253201][ T5822] asix 6-1:0.0: probe with driver asix failed with error -61 [ 371.274449][ T9635] 9pnet_fd: Insufficient options for proto=fd [ 371.349877][ T9635] vivid-007: ================= START STATUS ================= [ 371.364843][ T9635] vivid-007: Enable Output Cropping: true grabbed [ 371.379772][ T9635] vivid-007: Enable Output Composing: true grabbed [ 371.393446][ T9635] vivid-007: Enable Output Scaler: true grabbed [ 371.427368][ T9635] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 371.458086][ T9635] vivid-007: Transmit Mode: HDMI grabbed [ 371.474510][ T9635] vivid-007: Hotplug Present: 0x00000000 [ 371.493581][ T9635] vivid-007: RxSense Present: 0x00000000 [ 371.512392][ T9635] vivid-007: EDID Present: 0x00000000 [ 371.552940][ T9635] vivid-007: ================== END STATUS ================== [ 371.751025][ T9644] veth0_macvtap: entered promiscuous mode [ 371.757947][ T9644] macvtap1: entered allmulticast mode [ 371.763419][ T9644] veth0_macvtap: entered allmulticast mode [ 371.888927][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.997'. [ 371.990952][ T9648] sp0: Synchronizing with TNC [ 372.144371][ T9658] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 372.192313][ T9659] affs: No valid root block on device nullb0 [ 372.215505][ T30] audit: type=1400 audit(1746820590.565:663): avc: denied { remount } for pid=9653 comm="syz.4.999" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 372.236854][ T5863] pwc: recv_control_msg error -32 req 02 val 2b00 [ 372.269074][ T5863] pwc: recv_control_msg error -32 req 02 val 2700 [ 372.288872][ T5863] pwc: recv_control_msg error -32 req 02 val 2c00 [ 372.407399][ T5863] pwc: recv_control_msg error -32 req 04 val 1000 [ 372.422815][ T5863] pwc: recv_control_msg error -32 req 04 val 1300 [ 372.434238][ T5863] pwc: recv_control_msg error -32 req 04 val 1400 [ 372.453219][ T5863] pwc: recv_control_msg error -32 req 02 val 2000 [ 373.208036][ T5863] pwc: recv_control_msg error -71 req 04 val 1500 [ 373.219685][ T5863] pwc: recv_control_msg error -71 req 02 val 2500 [ 373.234383][ T5863] pwc: recv_control_msg error -71 req 02 val 2400 [ 373.246149][ T5864] usb 6-1: USB disconnect, device number 3 [ 373.282096][ T5863] pwc: recv_control_msg error -71 req 02 val 2600 [ 373.294925][ T5863] pwc: recv_control_msg error -71 req 02 val 2900 [ 373.302232][ T5863] pwc: recv_control_msg error -71 req 02 val 2800 [ 373.309852][ T5863] pwc: recv_control_msg error -71 req 04 val 1100 [ 373.318770][ T5863] pwc: recv_control_msg error -71 req 04 val 1200 [ 373.484331][ T5863] pwc: Registered as video103. [ 373.504126][ T5863] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 373.537247][ T5863] usb 1-1: USB disconnect, device number 40 [ 374.384686][ T9684] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1009'. [ 374.639519][ T9691] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1008'. [ 374.660250][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.668974][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.097929][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 375.108026][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 375.188087][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'. [ 375.240337][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'. [ 375.667749][ T9716] netlink: 'syz.0.1017': attribute type 3 has an invalid length. [ 375.675691][ T9716] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 377.105672][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 377.123221][ T30] audit: type=1400 audit(1746820595.375:664): avc: denied { bind } for pid=9723 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 377.502383][ T30] audit: type=1400 audit(1746820595.385:665): avc: denied { connect } for pid=9723 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 377.545103][ T30] audit: type=1400 audit(1746820595.385:666): avc: denied { shutdown } for pid=9723 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 377.696656][ T9735] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 377.850864][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 379.126948][ T9756] netlink: 'syz.1.1029': attribute type 2 has an invalid length. [ 379.207320][ T30] audit: type=1400 audit(1746820597.555:667): avc: denied { map } for pid=9757 comm="syz.6.1030" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.305213][ T30] audit: type=1400 audit(1746820597.655:668): avc: denied { execute } for pid=9757 comm="syz.6.1030" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.662892][ T30] audit: type=1400 audit(1746820598.005:669): avc: denied { ioctl } for pid=9764 comm="syz.1.1032" path="socket:[27678]" dev="sockfs" ino=27678 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 379.931656][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.940408][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.097798][ T9772] xt_NFQUEUE: number of total queues is 0 [ 380.305124][ T5864] kernel read not supported for file /dsp1 (pid: 5864 comm: kworker/1:5) [ 381.478426][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1040'. [ 381.487856][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1040'. [ 382.147412][ T9806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1042'. [ 382.982431][ T9813] ubi: mtd0 is already attached to ubi31 [ 383.277903][ T30] audit: type=1400 audit(1746820601.625:670): avc: denied { create } for pid=9807 comm="syz.0.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 383.362686][ T9810] 9pnet_fd: Insufficient options for proto=fd [ 383.556943][ T9833] hugetlbfs: Unknown parameter 'gid2×' [ 383.617882][ T30] audit: type=1400 audit(1746820601.955:671): avc: denied { ioctl } for pid=9832 comm="syz.6.1050" path="socket:[27106]" dev="sockfs" ino=27106 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 383.676172][ T9840] ubi: mtd0 is already attached to ubi31 [ 384.243583][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'. [ 384.350760][ T9852] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1053'. [ 384.360317][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1053'. [ 385.410286][ T9860] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1055'. [ 385.419884][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1055'. [ 385.773492][ T9866] netlink: 'syz.5.1059': attribute type 4 has an invalid length. [ 385.925190][ T9874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.035183][ T9878] ubi: mtd0 is already attached to ubi31 [ 386.190963][ T5864] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 386.392030][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 386.413576][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.620463][ T5865] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 386.789629][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.815408][ T5864] usb 2-1: New USB device found, idVendor=046d, idProduct=c12b, bcdDevice= 0.00 [ 386.863305][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.877736][ T5864] usb 2-1: config 0 descriptor?? [ 386.922125][ T5865] usb 7-1: config 0 interface 0 has no altsetting 0 [ 386.933293][ T5865] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 386.942488][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 386.960259][ T5865] usb 7-1: Product: syz [ 386.964979][ T5865] usb 7-1: Manufacturer: syz [ 386.969792][ T5865] usb 7-1: SerialNumber: syz [ 386.977287][ T5865] usb 7-1: config 0 descriptor?? [ 386.988684][ T5865] usb 7-1: selecting invalid altsetting 0 [ 387.089922][ T5865] usb 2-1: USB disconnect, device number 25 [ 387.260335][ T5866] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 387.285295][ T9877] lo speed is unknown, defaulting to 1000 [ 387.299595][ T9877] lo speed is unknown, defaulting to 1000 [ 387.328498][ T5865] usb 7-1: USB disconnect, device number 2 [ 387.419731][ T5866] usb 5-1: config 8 has an invalid interface number: 35 but max is 0 [ 387.435443][ T5866] usb 5-1: config 8 has no interface number 0 [ 387.478726][ T5866] usb 5-1: config 8 interface 35 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 387.495629][ T5866] usb 5-1: config 8 interface 35 has no altsetting 0 [ 387.528986][ T5866] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=53.a5 [ 387.539296][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.548296][ T5866] usb 5-1: Product: syz [ 387.553002][ T5866] usb 5-1: Manufacturer: syz [ 387.557721][ T5866] usb 5-1: SerialNumber: syz [ 387.566821][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1068'. [ 388.026040][ T5866] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 388.046455][ T5866] dvb-usb: bulk message failed: -22 (2/0) [ 388.175763][ T5866] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 388.195078][ T5866] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) error while loading driver (-19) [ 388.216409][ T5866] dvb_usb_cxusb 5-1:8.35: probe with driver dvb_usb_cxusb failed with error -22 [ 388.230689][ T58] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 388.264238][ T5866] usb 5-1: USB disconnect, device number 34 [ 388.273689][ T9917] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 388.345062][ T9919] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.1075'. [ 388.390795][ T58] usb 2-1: device descriptor read/64, error -71 [ 389.078709][ T58] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 389.220795][ T58] usb 2-1: device descriptor read/64, error -71 [ 389.332248][ T58] usb usb2-port1: attempt power cycle [ 389.750764][ T58] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 389.855995][ T58] usb 2-1: device descriptor read/8, error -71 [ 390.190643][ T5822] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 390.200453][ T58] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 390.280677][ T58] usb 2-1: device descriptor read/8, error -71 [ 390.382299][ T5822] usb 7-1: Using ep0 maxpacket: 8 [ 390.390828][ T58] usb usb2-port1: unable to enumerate USB device [ 390.393013][ T5822] usb 7-1: New USB device found, idVendor=5ed0, idProduct=495e, bcdDevice= 1.d3 [ 390.439619][ T5822] usb 7-1: New USB device strings: Mfr=105, Product=5, SerialNumber=17 [ 390.473153][ T5822] usb 7-1: Product: syz [ 390.477516][ T5822] usb 7-1: Manufacturer: syz [ 390.485677][ T5822] usb 7-1: SerialNumber: syz [ 390.499961][ T5822] usb 7-1: config 0 descriptor?? [ 390.818058][ T58] usb 7-1: USB disconnect, device number 3 [ 391.106613][ T5822] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 391.262655][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 393.163011][ T9968] syz.1.1090 (9968): drop_caches: 2 [ 393.183910][ T9968] syz.1.1090 (9968): drop_caches: 2 [ 393.366930][ T9973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.439685][ T5822] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 393.582583][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 393.592525][ T5822] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 393.723851][ T5822] usb 1-1: string descriptor 0 read error: -71 [ 393.733236][ T5822] usb 1-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 393.749146][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.778973][ T5822] usb 1-1: config 0 descriptor?? [ 393.794965][ T5822] usb 1-1: can't set config #0, error -71 [ 393.805851][ T5822] usb 1-1: USB disconnect, device number 41 [ 395.216176][ T9994] netlink: 'syz.6.1097': attribute type 11 has an invalid length. [ 395.280044][ T9998] xt_TPROXY: Can be used only with -p tcp or -p udp [ 395.425216][ T30] audit: type=1400 audit(1746820613.775:672): avc: denied { connect } for pid=10003 comm="syz.5.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 396.641751][ T1323] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.680612][ T5862] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 396.820134][ T30] audit: type=1326 audit(1746820615.165:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.0.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2f9cf8e969 code=0x7ffc0000 [ 396.847593][ T30] audit: type=1326 audit(1746820615.165:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.0.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2f9cf8e969 code=0x7ffc0000 [ 396.872304][ T30] audit: type=1326 audit(1746820615.165:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.0.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2f9cf8e969 code=0x7ffc0000 [ 396.905269][ T30] audit: type=1326 audit(1746820615.165:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.0.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2f9cf8e969 code=0x7ffc0000 [ 396.930088][ T5862] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 396.938996][ T5862] usb 7-1: config 0 has no interface number 0 [ 396.997942][ T5862] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 397.055192][T10040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.789516][ T30] audit: type=1326 audit(1746820615.165:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.0.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2f9cf8e969 code=0x7ffc0000 [ 397.820490][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.311632][ T30] audit: type=1326 audit(1746820615.165:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.0.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2f9cf8e969 code=0x7ffc0000 [ 398.358235][ T5862] usb 7-1: Product: syz [ 398.368187][ T5862] usb 7-1: Manufacturer: syz [ 398.398031][ T30] audit: type=1326 audit(1746820615.165:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.0.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2f9cf8e969 code=0x7ffc0000 [ 398.428606][ T5862] usb 7-1: SerialNumber: syz [ 398.523673][ T5862] usb 7-1: config 0 descriptor?? [ 398.595286][ T5862] usb 7-1: can't set config #0, error -71 [ 398.616949][ T30] audit: type=1326 audit(1746820615.165:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.0.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2f9cf8e969 code=0x7ffc0000 [ 398.623599][ T5862] usb 7-1: USB disconnect, device number 4 [ 398.743283][T10049] lo speed is unknown, defaulting to 1000 [ 398.789311][ T30] audit: type=1326 audit(1746820615.165:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.0.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2f9cf8e969 code=0x7ffc0000 [ 398.822580][T10049] lo speed is unknown, defaulting to 1000 [ 401.160055][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1122'. [ 401.836896][T10087] rdma_rxe: rxe_newlink: failed to add lo [ 402.064533][T10093] xt_TPROXY: Can be used only with -p tcp or -p udp [ 402.303718][ T5863] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 403.187211][ T5863] usb 7-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 403.305136][ T5863] usb 7-1: config 0 has an invalid descriptor of length 247, skipping remainder of the config [ 403.319131][ T5863] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 403.334969][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 403.346646][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.361273][ T5863] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 403.383305][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.501674][ T5863] usb 7-1: config 0 descriptor?? [ 403.549255][T10114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1134'. [ 404.777963][T10129] siw: device registration error -23 [ 405.170876][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 405.170901][ T30] audit: type=1400 audit(1746820623.125:717): avc: denied { setopt } for pid=10119 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 405.185864][ T5864] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 405.196940][ T30] audit: type=1400 audit(1746820623.135:718): avc: denied { lock } for pid=10119 comm="syz.4.1136" path="socket:[28873]" dev="sockfs" ino=28873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 405.289170][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 405.298330][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 405.439213][ T5863] dragonrise 0003:0079:0011.000A: unbalanced delimiter at end of report description [ 405.448386][T10135] syz.4.1140 (10135) used greatest stack depth: 20904 bytes left [ 405.469903][ T5863] dragonrise 0003:0079:0011.000A: parse failed [ 405.481458][ T5863] dragonrise 0003:0079:0011.000A: probe with driver dragonrise failed with error -22 [ 405.502198][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short [ 405.522143][ T5864] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 405.656361][ T5863] usb 7-1: USB disconnect, device number 5 [ 405.678998][ T5864] usb 2-1: config 1 has no interface number 1 [ 405.682770][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1141'. [ 405.695036][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1141'. [ 405.873697][ T5864] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 405.896726][ T5864] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.913286][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.022516][ T5864] usb 2-1: Product: syz [ 406.028098][ T5864] usb 2-1: Manufacturer: syz [ 406.032032][T10149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1142'. [ 406.033309][ T5864] usb 2-1: SerialNumber: syz [ 406.041993][T10149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'. [ 406.345489][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1144'. [ 406.389824][ T5864] usb 2-1: 2:1 : sample bitwidth 204 in over sample bytes 2 [ 406.414193][ T5864] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 406.604212][ T5864] usb 2-1: USB disconnect, device number 30 [ 407.433160][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1149'. [ 407.780659][T10182] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1152'. [ 407.795945][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1156'. [ 408.041151][ T5864] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 408.277828][T10201] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.1162'. [ 408.284284][ T5864] usb 1-1: unable to get BOS descriptor or descriptor too short [ 408.314094][ T5864] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 408.325368][ T5864] usb 1-1: config 1 has no interface number 1 [ 408.331970][ T5864] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 408.347629][ T5864] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.360563][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1163'. [ 408.372523][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.386615][ T5864] usb 1-1: Product: syz [ 408.391733][ T5864] usb 1-1: Manufacturer: syz [ 408.402263][ T5864] usb 1-1: SerialNumber: syz [ 408.766396][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1164'. [ 409.488890][ T5864] usb 1-1: 2:1 : sample bitwidth 204 in over sample bytes 2 [ 409.679402][ T5864] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 409.701337][ T5864] usb 1-1: USB disconnect, device number 42 [ 409.839989][T10225] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 411.550564][T10239] loop6: detected capacity change from 0 to 524287999 [ 411.575845][T10236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.010557][T10241] Invalid logical block size (3) [ 412.025605][T10239] Buffer I/O error on dev loop6, logical block 0, async page read [ 412.034621][T10239] Buffer I/O error on dev loop6, logical block 0, async page read [ 412.043436][T10239] Buffer I/O error on dev loop6, logical block 0, async page read [ 412.051862][T10239] Buffer I/O error on dev loop6, logical block 0, async page read [ 412.060612][T10239] Buffer I/O error on dev loop6, logical block 0, async page read [ 412.069476][T10239] Buffer I/O error on dev loop6, logical block 0, async page read [ 412.079899][T10239] Buffer I/O error on dev loop6, logical block 0, async page read [ 412.089292][T10239] Buffer I/O error on dev loop6, logical block 0, async page read [ 412.104410][T10239] ldm_validate_partition_table(): Disk read failed. [ 412.115190][T10239] Buffer I/O error on dev loop6, logical block 0, async page read [ 412.142744][T10239] Buffer I/O error on dev loop6, logical block 0, async page read [ 412.152391][T10239] Dev loop6: unable to read RDB block 0 [ 412.158815][ T30] audit: type=1400 audit(1746820630.505:719): avc: denied { mount } for pid=10254 comm="syz.1.1179" name="/" dev="hugetlbfs" ino=30032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 412.159038][T10239] loop6: unable to read partition table [ 412.181874][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.216302][ T30] audit: type=1400 audit(1746820630.545:720): avc: denied { mounton } for pid=10254 comm="syz.1.1179" path="/231/file0/bus" dev="hugetlbfs" ino=30033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 412.244901][T10239] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 412.377619][T10262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1180'. [ 412.394525][T10262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1180'. [ 413.529270][T10276] mkiss: ax0: crc mode is auto. [ 413.617555][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1184'. [ 413.637472][ T30] audit: type=1400 audit(1746820631.985:721): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 413.651387][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 413.708611][T10277] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 413.737504][T10277] bridge0: port 3(syz_tun) entered disabled state [ 413.744471][T10277] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.753863][T10277] bridge0: port 1(hD&Œ) entered disabled state [ 413.880325][ T5866] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 414.178978][ T5866] usb 6-1: unable to get BOS descriptor or descriptor too short [ 414.194440][ T58] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 414.200594][ T5866] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 414.235467][ T5866] usb 6-1: config 1 has no interface number 1 [ 414.241567][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 414.267323][ T5866] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 414.292758][ T5866] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.310248][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.330798][ T5866] usb 6-1: Product: syz [ 414.353222][ T5866] usb 6-1: Manufacturer: syz [ 414.380572][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 414.390276][ T5866] usb 6-1: SerialNumber: syz [ 414.443056][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 414.460755][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 414.487503][ T58] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 414.501863][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.513881][ T58] usb 5-1: Product: syz [ 414.524732][ T58] usb 5-1: Manufacturer: syz [ 414.555896][ T58] usb 5-1: SerialNumber: syz [ 414.733098][ T58] usb 5-1: config 0 descriptor?? [ 414.750718][ T5866] usb 6-1: 2:1 : sample bitwidth 204 in over sample bytes 2 [ 414.774532][ T5866] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 414.838832][ T5866] usb 6-1: USB disconnect, device number 4 [ 414.868587][ T30] audit: type=1400 audit(1746820633.215:722): avc: denied { setopt } for pid=10298 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 414.898992][T10301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.908137][T10301] tipc: Started in network mode [ 414.913071][T10301] tipc: Node identity 4, cluster identity 4711 [ 414.919206][T10301] tipc: Node number set to 4 [ 414.934460][T10301] SELinux: Context system_u:object_r:tzdata_exec_t:s0 is not valid (left unmapped). [ 414.973905][ T30] audit: type=1400 audit(1746820633.275:723): avc: denied { getopt } for pid=10300 comm="syz.6.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 414.997034][ T30] audit: type=1400 audit(1746820633.295:724): avc: denied { relabelto } for pid=10300 comm="syz.6.1193" name="cgroup.procs" dev="cgroup" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tzdata_exec_t:s0" [ 415.024940][ T58] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 415.036970][ T30] audit: type=1400 audit(1746820633.295:725): avc: denied { associate } for pid=10300 comm="syz.6.1193" name="cgroup.procs" dev="cgroup" ino=526 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tzdata_exec_t:s0" [ 415.111147][ T5862] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 415.319570][T10289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.347885][T10289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.400477][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 415.426571][ T5862] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 415.482431][ T5862] usb 1-1: config 252 has no interface number 0 [ 415.520792][ T5862] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 415.859033][ T5862] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 24835, setting to 1024 [ 415.878559][ T5862] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 415.888119][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.899765][ T5862] usb 1-1: Product: syz [ 415.905360][ T5862] usb 1-1: Manufacturer: syz [ 415.910057][ T5862] usb 1-1: SerialNumber: syz [ 415.967047][ T5862] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 416.136870][ T5862] usb 1-1: USB disconnect, device number 43 [ 416.143321][ T3551] usb 1-1: Failed to submit usb control message: -71 [ 416.201599][ T3551] usb 1-1: unable to send the bmi data to the device: -71 [ 416.241090][ T3551] usb 1-1: unable to get target info from device [ 416.254879][ T3551] usb 1-1: could not get target info (-71) [ 416.262442][ T3551] usb 1-1: could not probe fw (-71) [ 416.725832][T10334] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 417.247303][ T58] usb 5-1: USB disconnect, device number 35 [ 419.029661][T10365] ubi: mtd0 is already attached to ubi31 [ 419.130345][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 419.485878][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1211'. [ 419.506242][ T10] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 419.514300][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1211'. [ 419.524145][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.533909][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.546676][T10371] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1211'. [ 419.558259][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 419.566644][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.582435][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.619405][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 419.652507][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.672602][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.683987][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 419.693372][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.710296][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.723693][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 419.743904][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.757272][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.789597][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 419.804783][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.818524][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.829983][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 419.838253][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 419.856310][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 419.929947][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 419.957359][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.375724][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.386914][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 420.396020][ T5862] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 420.457833][T10394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1217'. [ 420.469982][T10394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1217'. [ 420.561475][ T5862] usb 7-1: Using ep0 maxpacket: 32 [ 420.606996][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 420.607888][ T5862] usb 7-1: config 0 has an invalid interface number: 64 but max is 1 [ 420.628043][ T10] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 420.704247][ T5862] usb 7-1: config 0 has no interface number 1 [ 420.796603][ T5862] usb 7-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=1c.a5 [ 420.856965][ T10] usb 1-1: Product: syz [ 420.861243][ T10] usb 1-1: Manufacturer: syz [ 420.865883][ T10] usb 1-1: SerialNumber: syz [ 420.875959][ T10] usb 1-1: config 0 descriptor?? [ 420.893417][ T10] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 420.911834][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.925685][ T5862] usb 7-1: Product: syz [ 420.929875][ T5862] usb 7-1: Manufacturer: syz [ 420.947593][ T5862] usb 7-1: SerialNumber: syz [ 420.979844][ T5862] usb 7-1: config 0 descriptor?? [ 420.995859][ T5862] usb 7-1: bad CDC descriptors [ 421.201092][ T5862] usb 7-1: USB disconnect, device number 6 [ 421.204925][T10410] 9pnet_fd: Insufficient options for proto=fd [ 422.165707][ T10] usb 1-1: USB disconnect, device number 44 [ 422.291039][ T10] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 422.472905][ T5862] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 423.820354][ T5862] usb 6-1: Invalid ep0 maxpacket: 32 [ 423.960624][ T5862] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 424.156409][T10433] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 424.578565][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1233'. [ 424.600838][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1233'. [ 425.403299][ T10] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 426.279923][T10440] dummy0: entered promiscuous mode [ 426.327729][ T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 426.356763][T10440] macsec1: entered allmulticast mode [ 426.363211][ T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.400405][T10440] dummy0: entered allmulticast mode [ 426.439714][T10454] ALSA: mixer_oss: invalid OSS volume '”SYNTH' [ 426.446099][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 426.473812][ T10] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 426.504075][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.534268][ T10] usb 2-1: config 0 descriptor?? [ 426.648788][T10469] netlink: 'syz.4.1242': attribute type 1 has an invalid length. [ 426.703411][T10471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.762051][ T30] audit: type=1400 audit(1746820645.115:726): avc: denied { read } for pid=10442 comm="syz.1.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 426.768594][T10475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1244'. [ 427.071546][T10484] xt_NFQUEUE: number of total queues is 0 [ 427.459906][ T10] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 427.472449][ T10] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 427.482302][ T10] hid-steam 0003:28DE:1102.000B: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 427.617619][T10490] FAULT_INJECTION: forcing a failure. [ 427.617619][T10490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.631119][T10490] CPU: 0 UID: 0 PID: 10490 Comm: syz.4.1247 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 427.631144][T10490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 427.631155][T10490] Call Trace: [ 427.631161][T10490] [ 427.631168][T10490] dump_stack_lvl+0x16c/0x1f0 [ 427.631209][T10490] should_fail_ex+0x512/0x640 [ 427.631238][T10490] _copy_to_user+0x32/0xd0 [ 427.631264][T10490] simple_read_from_buffer+0xcb/0x170 [ 427.631294][T10490] proc_fail_nth_read+0x197/0x270 [ 427.631321][T10490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.631347][T10490] ? rw_verify_area+0xcf/0x680 [ 427.631369][T10490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.631393][T10490] vfs_read+0x1de/0xc70 [ 427.631422][T10490] ? __pfx_vfs_read+0x10/0x10 [ 427.631444][T10490] ? irqentry_exit+0x3b/0x90 [ 427.631465][T10490] ? lockdep_hardirqs_on+0x7c/0x110 [ 427.631501][T10490] ksys_read+0x12a/0x240 [ 427.631524][T10490] ? __pfx_ksys_read+0x10/0x10 [ 427.631555][T10490] do_syscall_64+0xcd/0x260 [ 427.631579][T10490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.631598][T10490] RIP: 0033:0x7fbe26f8d37c [ 427.631613][T10490] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 427.631629][T10490] RSP: 002b:00007fbe27e95030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 427.631646][T10490] RAX: ffffffffffffffda RBX: 00007fbe271b6080 RCX: 00007fbe26f8d37c [ 427.631657][T10490] RDX: 000000000000000f RSI: 00007fbe27e950a0 RDI: 0000000000000005 [ 427.631666][T10490] RBP: 00007fbe27e95090 R08: 0000000000000000 R09: 0000000000000000 [ 427.631676][T10490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.631685][T10490] R13: 0000000000000000 R14: 00007fbe271b6080 R15: 00007ffc371e2608 [ 427.631708][T10490] [ 428.026188][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1246'. [ 428.089018][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1246'. [ 428.099835][T10493] netlink: 'syz.6.1246': attribute type 3 has an invalid length. [ 428.107981][T10493] netlink: 'syz.6.1246': attribute type 1 has an invalid length. [ 428.326338][ T10] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' connected [ 428.612769][ T10] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.000B/input/input13 [ 428.705472][ T10] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 428.730906][ T10] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 428.753987][ T10] hid-steam 0003:28DE:1102.000C: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 428.808574][ T10] usb 2-1: USB disconnect, device number 31 [ 429.049358][ T54] Bluetooth: hci5: command 0x0405 tx timeout [ 429.351584][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 429.420006][ T10] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' disconnected [ 429.539169][ T5822] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 429.568921][T10507] xt_TPROXY: Can be used only with -p tcp or -p udp [ 429.712727][T10508] ubi: mtd0 is already attached to ubi31 [ 429.780582][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 429.804446][ T5822] usb 6-1: config 1 has an invalid interface number: 242 but max is 0 [ 429.921140][T10518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1255'. [ 429.930513][T10518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1255'. [ 430.050543][ T5822] usb 6-1: config 1 has no interface number 0 [ 430.158196][ T5822] usb 6-1: config 1 interface 242 has no altsetting 0 [ 430.181097][ T5822] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 430.201177][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.209352][ T5822] usb 6-1: Product: syz [ 430.244552][ T5822] usb 6-1: Manufacturer: syz [ 430.259416][ T5822] usb 6-1: SerialNumber: syz [ 430.267496][T10523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1258'. [ 431.630297][T10543] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1262'. [ 431.640043][T10543] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1262'. [ 431.963036][ T30] audit: type=1400 audit(1746820650.245:727): avc: denied { connect } for pid=10497 comm="syz.5.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 432.042859][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 432.049389][ T5822] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 432.052074][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 432.073354][ T5822] aqc111 6-1:1.242: probe with driver aqc111 failed with error -71 [ 432.090527][ T5822] usb 6-1: USB disconnect, device number 7 [ 433.570451][ T30] audit: type=1400 audit(1746820651.915:728): avc: denied { bind } for pid=10575 comm="syz.0.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 433.642286][T10573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1272'. [ 433.656626][T10578] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 433.862861][ T30] audit: type=1400 audit(1746820652.175:729): avc: denied { create } for pid=10575 comm="syz.0.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 434.580904][T10599] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 435.690611][ T5864] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 436.280425][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 436.293431][ T5864] usb 2-1: config index 0 descriptor too short (expected 26941, got 61) [ 436.313345][ T5864] usb 2-1: config 0 has an invalid interface number: 169 but max is 0 [ 436.344718][ T5864] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 436.361949][ T5864] usb 2-1: config 0 has no interface number 0 [ 436.376934][ T5864] usb 2-1: New USB device found, idVendor=2001, idProduct=330f, bcdDevice=d4.89 [ 436.390411][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.398663][ T5864] usb 2-1: Product: syz [ 436.403527][ T5864] usb 2-1: Manufacturer: syz [ 436.408141][ T5864] usb 2-1: SerialNumber: syz [ 436.415618][ T5864] usb 2-1: config 0 descriptor?? [ 436.460248][ T30] audit: type=1400 audit(1746820654.795:730): avc: denied { read } for pid=10609 comm="syz.4.1284" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 436.672921][ T30] audit: type=1400 audit(1746820654.805:731): avc: denied { open } for pid=10609 comm="syz.4.1284" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 436.696670][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.890069][ T30] audit: type=1326 audit(1746820655.025:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.1.1279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64e658e969 code=0x0 [ 437.320387][ T5862] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 437.480645][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 437.494620][ T5862] usb 5-1: config 0 has an invalid interface number: 167 but max is 0 [ 437.504940][ T5862] usb 5-1: config 0 has no interface number 0 [ 437.531235][ T5862] usb 5-1: New USB device found, idVendor=0c45, idProduct=62b0, bcdDevice=b8.ce [ 437.554213][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.580438][ T5862] usb 5-1: Product: syz [ 437.584767][ T5862] usb 5-1: Manufacturer: syz [ 437.590987][ T5862] usb 5-1: SerialNumber: syz [ 437.601019][ T5862] usb 5-1: config 0 descriptor?? [ 437.612529][ T5862] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b0 [ 438.139360][ T5862] gspca_sn9c20x: Write register 1000 failed -110 [ 438.150386][ T5862] gspca_sn9c20x: Device initialization failed [ 438.156614][ T5862] gspca_sn9c20x 5-1:0.167: probe with driver gspca_sn9c20x failed with error -110 [ 438.310642][T10622] mkiss: ax0: crc mode is auto. [ 438.467187][ T5864] usb 2-1: USB disconnect, device number 32 [ 438.883256][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 438.892336][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 439.700487][T10642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1289'. [ 439.709893][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1289'. [ 439.930459][ T58] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 439.992165][T10644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1292'. [ 440.112734][ T5864] usb 5-1: USB disconnect, device number 36 [ 440.130477][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 440.138567][ T58] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.153848][ T58] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.166515][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 440.180093][ T58] usb 7-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 440.194995][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.310120][ T58] usb 7-1: config 0 descriptor?? [ 440.488189][T10652] netlink: 'syz.1.1293': attribute type 4 has an invalid length. [ 440.822934][ T58] viewsonic 0003:2133:0018.000D: unknown main item tag 0x0 [ 440.830625][ T58] viewsonic 0003:2133:0018.000D: unknown main item tag 0x0 [ 440.850703][ T58] viewsonic 0003:2133:0018.000D: hidraw0: USB HID v0.03 Device [HID 2133:0018] on usb-dummy_hcd.6-1/input0 [ 441.045672][ T10] usb 7-1: USB disconnect, device number 7 [ 441.313123][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.319688][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.361708][T10662] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 444.217732][T10644] team0: entered promiscuous mode [ 444.224045][T10644] team_slave_0: entered promiscuous mode [ 444.229944][T10644] team_slave_1: entered promiscuous mode [ 444.238167][T10644] batadv_slave_1: entered promiscuous mode [ 444.379102][T10676] IPv6: NLM_F_CREATE should be specified when creating new route [ 444.610472][ T5866] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 444.764078][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 444.775337][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 444.787582][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 444.799598][ T5866] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 444.809192][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.817361][ T5866] usb 5-1: Product: syz [ 444.821761][ T5866] usb 5-1: Manufacturer: syz [ 444.826520][ T5866] usb 5-1: SerialNumber: syz [ 444.833003][ T5866] usb 5-1: config 0 descriptor?? [ 444.839521][T10678] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 444.847981][ T5866] usb 5-1: ucan: probing device on interface #0 [ 444.854485][ T5866] usb 5-1: ucan: invalid endpoint configuration [ 444.860973][ T5866] usb 5-1: ucan: probe failed; try to update the device firmware [ 445.062796][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.072179][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.158288][ T5862] usb 5-1: USB disconnect, device number 37 [ 445.263306][T10695] tmpfs: Unknown parameter 'usrquota·' [ 445.839104][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1307'. [ 446.707768][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 447.982989][T10734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1319'. [ 448.662562][ T30] audit: type=1400 audit(1746820666.275:733): avc: denied { ioctl } for pid=10729 comm="syz.0.1319" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x227f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 448.980560][ T54] Bluetooth: hci6: command 0xfc11 tx timeout [ 448.980584][ T5811] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 449.003804][T10724] sp0: Synchronizing with TNC [ 449.511374][T10751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1322'. [ 449.520575][T10751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1322'. [ 449.849715][T10757] veth0_macvtap: left promiscuous mode [ 450.084434][T10762] ubi: mtd0 is already attached to ubi31 [ 451.281173][ T30] audit: type=1400 audit(1746820669.635:734): avc: denied { bind } for pid=10778 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 451.307957][T10780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1332'. [ 451.325527][T10780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65381 sclass=netlink_route_socket pid=10780 comm=syz.1.1332 [ 451.715767][T10792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1333'. [ 451.725134][T10792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1333'. [ 451.810674][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 451.969497][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1331'. [ 452.025039][ T10] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 452.150611][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.168535][ T10] usb 6-1: config 0 descriptor?? [ 452.705852][ T10] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 452.720283][ T10] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 453.001838][T10805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1337'. [ 453.011612][T10805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1337'. [ 453.172566][ T10] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 453.179319][ T10] [drm] Initialized udl on minor 2 [ 453.199185][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 453.251262][ T10] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 453.417260][T10812] ubi: mtd0 is already attached to ubi31 [ 453.556326][ T10] usb 6-1: USB disconnect, device number 8 [ 453.568991][ T5822] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 453.629593][ T5822] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 453.710562][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 454.713329][ T30] audit: type=1400 audit(1746820673.045:735): avc: denied { read } for pid=10829 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 454.790418][ T5822] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 455.020761][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 455.038199][ T5822] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 455.064250][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 455.079320][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 455.100585][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 455.134522][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 455.167368][ T5822] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 455.192474][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.207823][ T5863] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 455.222110][ T5822] usb 6-1: Product: syz [ 455.230247][ T5822] usb 6-1: Manufacturer: syz [ 455.234877][ T5822] usb 6-1: SerialNumber: syz [ 455.528913][ T5822] usb 6-1: config 0 descriptor?? [ 455.738812][ T5863] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 455.760819][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.768891][ T5863] usb 5-1: Product: syz [ 455.788957][ T5863] usb 5-1: Manufacturer: syz [ 455.805269][ T5863] usb 5-1: SerialNumber: syz [ 455.845593][ T5863] usb 5-1: config 0 descriptor?? [ 455.864244][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 455.950889][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 455.959416][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1349'. [ 455.995059][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.004584][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.011718][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.018109][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.034054][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.055954][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.057331][ T5863] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 456.074309][ T5863] peak_usb 5-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 456.124029][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.133986][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1352'. [ 456.143641][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.153227][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.199492][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.289182][ T5863] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 456.305014][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.560571][ T5862] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 456.571663][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.592686][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.593267][ T5863] usb 5-1: USB disconnect, device number 38 [ 456.606129][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.632150][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.640625][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.661823][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.664298][ T58] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 456.669441][ T5822] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 456.692282][ T5862] usb 7-1: device descriptor read/64, error -71 [ 456.693709][ T5822] input input14: Timeout waiting for response from device. [ 456.859807][ T5822] usb 6-1: USB disconnect, device number 9 [ 457.736443][ T58] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 457.942120][T10869] veth0_macvtap: entered promiscuous mode [ 457.948406][T10869] macvtap1: entered allmulticast mode [ 457.954021][T10869] veth0_macvtap: entered allmulticast mode [ 458.004027][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.047722][ T5862] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 458.076991][ T30] audit: type=1400 audit(1746820676.425:736): avc: denied { watch } for pid=10872 comm="syz.0.1359" path="/266/file0" dev="tmpfs" ino=1388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 458.107101][ T30] audit: type=1400 audit(1746820676.455:737): avc: denied { watch_sb watch_reads } for pid=10872 comm="syz.0.1359" path="/266/file0" dev="tmpfs" ino=1388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 458.150124][T10874] IPVS: stopping master sync thread 10875 ... [ 458.153829][ T58] usb 2-1: config 0 descriptor?? [ 458.159023][T10875] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 458.230945][ T5862] usb 7-1: device descriptor read/64, error -71 [ 458.328393][T10877] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1358'. [ 458.520846][ T5862] usb usb7-port1: attempt power cycle [ 458.685856][ T58] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 458.695095][ T58] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 458.725590][ T58] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 458.753983][ T58] [drm] Initialized udl on minor 2 [ 459.014349][ T5862] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 459.044075][ T5862] usb 7-1: device descriptor read/8, error -71 [ 459.152025][ T58] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 459.402768][ T58] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 459.413224][ T5864] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 459.460815][ T58] usb 2-1: USB disconnect, device number 33 [ 459.468517][ T5864] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 459.600048][ T30] audit: type=1400 audit(1746820677.945:738): avc: denied { getopt } for pid=10894 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 460.498968][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1368'. [ 460.644426][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1367'. [ 460.960292][ T5862] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 461.218861][ T1323] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 461.311084][ T5862] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 461.312025][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.312069][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.312096][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.312909][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.312948][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.312975][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.313920][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.313975][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.314002][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.314823][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.314863][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.314891][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.315724][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.315764][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.315790][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.316602][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.316640][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.316667][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.317601][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.317638][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.317666][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.318447][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 461.318486][ T5862] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 461.318513][ T5862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.322467][ T5862] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 461.322498][ T5862] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 461.322521][ T5862] usb 5-1: Product: syz [ 461.322538][ T5862] usb 5-1: Manufacturer: syz [ 461.322555][ T5862] usb 5-1: SerialNumber: syz [ 461.351547][ T5862] usb 5-1: config 0 descriptor?? [ 461.359948][ T5862] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 464.264681][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'. [ 464.264780][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'. [ 465.062364][ T58] usb 5-1: USB disconnect, device number 39 [ 465.111021][ T58] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 465.802934][ T30] audit: type=1400 audit(1746820684.145:739): avc: denied { read } for pid=10957 comm="syz.5.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 466.051678][T10963] xt_NFQUEUE: number of total queues is 0 [ 466.118170][ T5822] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 466.453531][ T5822] usb 7-1: Using ep0 maxpacket: 32 [ 466.478947][ T5822] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 466.497318][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.510448][ T5822] usb 7-1: config 0 descriptor?? [ 466.621470][T10965] overlayfs: failed to resolve './file0': -2 [ 466.810966][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.025486][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.699648][ T30] audit: type=1400 audit(1746820686.015:740): avc: denied { mount } for pid=10957 comm="syz.5.1381" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 467.736111][ T5822] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 467.783850][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.802060][ T5822] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 467.809404][ T5822] usb 7-1: media controller created [ 467.819930][T10980] ALSA: mixer_oss: invalid OSS volume '”' [ 468.073071][T10986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1385'. [ 468.085707][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1385'. [ 468.201631][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.320058][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 468.349546][ T5822] az6027: usb out operation failed. (-71) [ 468.360456][ T5822] az6027: usb out operation failed. (-71) [ 468.388264][ T5822] stb0899_attach: Driver disabled by Kconfig [ 468.396178][ T5822] az6027: no front-end attached [ 468.396178][ T5822] [ 468.406142][ T5822] az6027: usb out operation failed. (-71) [ 468.423238][ T5822] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 468.444342][ T5822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input15 [ 468.529617][ T5822] dvb-usb: schedule remote query interval to 400 msecs. [ 468.598516][ T5822] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 468.633641][ T5822] usb 7-1: USB disconnect, device number 12 [ 468.837963][ T5822] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 468.850422][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 469.005547][ T5811] Bluetooth: hci5: command 0x0405 tx timeout [ 469.048002][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 469.070599][ T5865] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 469.507973][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 469.521724][ T30] audit: type=1400 audit(1746820687.875:741): avc: denied { unmount } for pid=9121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 469.541859][ T10] usb 1-1: config 1 has no interface number 1 [ 469.549415][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 469.586330][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.660356][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 469.671102][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.679625][ T10] usb 1-1: Product: syz [ 469.686052][ T5865] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 469.700238][ T5865] usb 5-1: config 0 has no interface number 0 [ 469.709249][ T10] usb 1-1: Manufacturer: syz [ 469.719209][ T10] usb 1-1: SerialNumber: syz [ 469.726584][ T5865] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 469.749565][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.798256][ T5865] usb 5-1: Product: syz [ 469.803956][ T5865] usb 5-1: Manufacturer: syz [ 469.808635][ T5865] usb 5-1: SerialNumber: syz [ 469.833497][ T5865] usb 5-1: config 0 descriptor?? [ 469.921454][T11005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1391'. [ 469.933768][T11005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1391'. [ 470.178890][ T10] usb 1-1: 2:1 : sample bitwidth 204 in over sample bytes 2 [ 470.287456][T11007] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1392'. [ 470.297202][T11007] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1392'. [ 470.502628][T10995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.511392][ T10] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 470.562621][T10995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.690498][ T5865] radio-si470x 5-1:0.35: this is not a si470x device. [ 470.711882][ T10] usb 1-1: USB disconnect, device number 45 [ 470.730847][ T5865] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 471.229581][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1396'. [ 471.248144][ T5864] usb 5-1: USB disconnect, device number 40 [ 471.253907][T11023] 9p: Unknown Cache mode or invalid value f [ 471.359520][ T30] audit: type=1400 audit(1746820689.705:742): avc: denied { create } for pid=11024 comm="syz.5.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 471.420967][ T5862] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 471.450344][ T5865] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 471.583827][ T5862] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 471.592425][ T5862] usb 7-1: config 8 has an invalid descriptor of length 48, skipping remainder of the config [ 471.612082][ T5865] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 471.620648][ T5865] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 471.628761][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 471.650339][ T5865] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 471.661717][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 471.672143][ T5862] usb 7-1: config 8 has no interface number 0 [ 471.685487][ T5865] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 471.698226][ T5862] usb 7-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 471.699539][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.719415][ T5865] usb 2-1: Product: syz [ 471.724366][ T5865] usb 2-1: Manufacturer: syz [ 471.728997][ T30] audit: type=1400 audit(1746820690.075:743): avc: denied { map } for pid=11036 comm="syz.5.1401" path="socket:[33963]" dev="sockfs" ino=33963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 471.778049][ T5865] usb 2-1: SerialNumber: syz [ 471.789602][ T5865] usb 2-1: config 0 descriptor?? [ 471.795393][ T30] audit: type=1400 audit(1746820690.075:744): avc: denied { read } for pid=11036 comm="syz.5.1401" path="socket:[33963]" dev="sockfs" ino=33963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 471.840891][T11019] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 471.877941][ T5862] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 471.889541][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.924353][ T5862] usb 7-1: Product: syz [ 471.928587][ T5862] usb 7-1: Manufacturer: syz [ 472.067168][ T5862] usb 7-1: SerialNumber: syz [ 472.183269][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'. [ 472.202241][ T30] audit: type=1400 audit(1746820690.525:745): avc: denied { mount } for pid=11038 comm="syz.4.1402" name="/" dev="configfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 472.257497][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.338795][ T5862] usb 7-1: USB disconnect, device number 13 [ 472.396123][T11047] sctp: [Deprecated]: syz.1.1395 (pid 11047) Use of int in maxseg socket option. [ 472.396123][T11047] Use struct sctp_assoc_value instead [ 472.523425][T11053] xt_TPROXY: Can be used only with -p tcp or -p udp [ 472.649898][ T5865] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 472.660899][ T5865] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 472.669708][ T5865] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 472.685642][ T5865] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 472.699519][ T5865] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 472.710640][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1406'. [ 472.719792][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1406'. [ 472.748818][ T5865] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 472.756950][ T5865] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 472.767369][ T5865] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 472.776371][ T5865] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 472.794898][ T5865] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 472.816764][ T5865] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 472.925321][T11060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.460242][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 474.148377][ T5865] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 474.156421][ T5865] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 474.220535][ T5865] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 474.320641][ T30] audit: type=1400 audit(1746820692.655:746): avc: denied { map } for pid=11062 comm="syz.4.1409" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 474.381253][ T5865] usb 2-1: USB disconnect, device number 34 [ 474.506273][ T5865] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 474.544248][ T5865] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 474.563263][ T5865] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 474.975920][ T5865] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 474.986173][ T5865] keyspan 2-1:0.0: device disconnected [ 475.421493][ T30] audit: type=1400 audit(1746820693.765:747): avc: denied { getopt } for pid=11069 comm="syz.6.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 476.798193][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1415'. [ 476.807575][T11086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1415'. [ 477.827011][ T31] INFO: task syz.3.871:9116 blocked for more than 144 seconds. [ 477.860940][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 [ 477.868650][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.881979][ T31] task:syz.3.871 state:D stack:26488 pid:9116 tgid:9115 ppid:5817 task_flags:0x400140 flags:0x00004004 [ 477.895228][ T31] Call Trace: [ 477.898612][ T31] [ 477.906565][ T31] __schedule+0x116f/0x5de0 [ 477.913885][ T31] ? queue_work_on+0x146/0x1f0 [ 477.919935][ T31] ? __pfx___schedule+0x10/0x10 [ 477.936527][ T31] ? find_held_lock+0x2b/0x80 [ 477.942081][ T31] ? schedule+0x2d7/0x3a0 [ 477.946878][ T31] schedule+0xe7/0x3a0 [ 478.190410][ T31] bit_wait+0x15/0xe0 [ 478.194447][ T31] __wait_on_bit+0x62/0x180 [ 478.198949][ T31] ? __pfx_bit_wait+0x10/0x10 [ 478.210362][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 478.215790][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 478.230523][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 478.236028][ T31] ? netfs_create_write_req+0x511/0x880 [ 478.250362][ T31] netfs_unbuffered_write_iter_locked+0xaa7/0xd40 [ 478.256882][ T31] netfs_unbuffered_write_iter+0x414/0x6d0 [ 478.270339][ T31] v9fs_file_write_iter+0xbf/0x100 [ 478.275537][ T31] vfs_write+0x5ba/0x1180 [ 478.279871][ T31] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 478.290610][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 478.295706][ T31] ? __pfx_vfs_write+0x10/0x10 [ 478.310376][ T31] ksys_write+0x12a/0x240 [ 478.314807][ T31] ? __pfx_ksys_write+0x10/0x10 [ 478.319667][ T31] ? rcu_is_watching+0x12/0xc0 [ 478.330414][ T31] do_syscall_64+0xcd/0x260 [ 478.335268][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.341742][ T31] RIP: 0033:0x7fbb7f78e969 [ 478.346314][ T31] RSP: 002b:00007fbb8066c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 478.355679][ T31] RAX: ffffffffffffffda RBX: 00007fbb7f9b5fa0 RCX: 00007fbb7f78e969 [ 478.364192][ T31] RDX: 0000000000007fec RSI: 0000200000000080 RDI: 0000000000000007 [ 478.372840][ T31] RBP: 00007fbb7f810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 478.381347][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.389605][ T31] R13: 0000000000000000 R14: 00007fbb7f9b5fa0 R15: 00007ffd903c01a8 [ 478.398324][ T31] [ 478.405207][ T31] [ 478.405207][ T31] Showing all locks held in the system: [ 478.416197][ T31] 1 lock held by khungtaskd/31: [ 478.435336][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 478.453437][ T31] 2 locks held by kworker/u8:2/36: [ 478.458884][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 478.475418][ T31] #1: ffffc90000ad7d18 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 478.488106][ T31] 2 locks held by getty/5577: [ 478.493401][ T31] #0: ffff88814d5ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 478.503701][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 478.514292][ T31] 3 locks held by syz.3.871/9116: [ 478.519354][ T31] #0: ffff88805a4f2478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 478.529465][ T31] #1: ffff8880785f4420 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 478.538725][ T31] #2: ffff888059e18e28 (&sb->s_type->i_mutex_key#21){++++}-{4:4}, at: netfs_start_io_direct+0x116/0x260 [ 478.550339][ T31] 2 locks held by syz.4.1415/11085: [ 478.555543][ T31] #0: ffffffff90124e28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 478.564654][ T31] #1: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 478.574892][ T31] 1 lock held by syz.6.1418/11099: [ 478.580000][ T31] #0: ffffffff90124e28 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 478.597759][ T31] [ 478.647652][ T31] ============================================= [ 478.647652][ T31] [ 478.663756][ T31] NMI backtrace for cpu 0 [ 478.663772][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 478.663792][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 478.663801][ T31] Call Trace: [ 478.663806][ T31] [ 478.663813][ T31] dump_stack_lvl+0x116/0x1f0 [ 478.663853][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 478.663869][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 478.663889][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 478.663908][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 478.663925][ T31] watchdog+0xf70/0x12c0 [ 478.663946][ T31] ? __pfx_watchdog+0x10/0x10 [ 478.663958][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 478.663979][ T31] ? __kthread_parkme+0x19e/0x250 [ 478.664001][ T31] ? __pfx_watchdog+0x10/0x10 [ 478.664015][ T31] kthread+0x3c2/0x780 [ 478.664029][ T31] ? __pfx_kthread+0x10/0x10 [ 478.664040][ T31] ? __pfx_kthread+0x10/0x10 [ 478.664052][ T31] ? __pfx_kthread+0x10/0x10 [ 478.664070][ T31] ? __pfx_kthread+0x10/0x10 [ 478.664082][ T31] ? rcu_is_watching+0x12/0xc0 [ 478.664101][ T31] ? __pfx_kthread+0x10/0x10 [ 478.664122][ T31] ret_from_fork+0x45/0x80 [ 478.664137][ T31] ? __pfx_kthread+0x10/0x10 [ 478.664151][ T31] ret_from_fork_asm+0x1a/0x30 [ 478.664182][ T31] [ 478.664187][ T31] Sending NMI from CPU 0 to CPUs 1: [ 478.806175][ C1] NMI backtrace for cpu 1 [ 478.806192][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 478.806210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 478.806218][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 478.806247][ C1] Code: 35 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 2a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 478.806260][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 478.806272][ C1] RAX: 0000000001a679fd RBX: 0000000000000001 RCX: ffffffff8b6cc419 [ 478.806281][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe181f RDI: ffffffff8bf48320 [ 478.806289][ C1] RBP: ffffed1003b5d488 R08: 0000000000000001 R09: ffffed10170a65bd [ 478.806297][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 478.806305][ C1] R13: ffff88801daea440 R14: ffffffff9084f110 R15: 0000000000000000 [ 478.806313][ C1] FS: 0000000000000000(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000 [ 478.806326][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.806334][ C1] CR2: 00007f2f9d180178 CR3: 0000000033d98000 CR4: 00000000003526f0 [ 478.806343][ C1] Call Trace: [ 478.806349][ C1] [ 478.806353][ C1] default_idle+0x13/0x20 [ 478.806372][ C1] default_idle_call+0x6d/0xb0 [ 478.806389][ C1] do_idle+0x391/0x510 [ 478.806411][ C1] ? __pfx_do_idle+0x10/0x10 [ 478.806426][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 478.806447][ C1] cpu_startup_entry+0x4f/0x60 [ 478.806462][ C1] start_secondary+0x21d/0x2b0 [ 478.806483][ C1] ? __pfx_start_secondary+0x10/0x10 [ 478.806503][ C1] common_startup_64+0x13e/0x148 [ 478.806523][ C1] [ 478.997401][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 479.004331][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 479.016157][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 479.026193][ T31] Call Trace: [ 479.029449][ T31] [ 479.032360][ T31] dump_stack_lvl+0x3d/0x1f0 [ 479.036938][ T31] panic+0x71c/0x800 [ 479.040842][ T31] ? __pfx_panic+0x10/0x10 [ 479.045243][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 479.050596][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 479.056552][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 479.061899][ T31] ? watchdog+0xdda/0x12c0 [ 479.066306][ T31] ? watchdog+0xdcd/0x12c0 [ 479.070711][ T31] watchdog+0xdeb/0x12c0 [ 479.074930][ T31] ? __pfx_watchdog+0x10/0x10 [ 479.079578][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 479.084766][ T31] ? __kthread_parkme+0x19e/0x250 [ 479.089773][ T31] ? __pfx_watchdog+0x10/0x10 [ 479.094425][ T31] kthread+0x3c2/0x780 [ 479.098468][ T31] ? __pfx_kthread+0x10/0x10 [ 479.103031][ T31] ? __pfx_kthread+0x10/0x10 [ 479.107596][ T31] ? __pfx_kthread+0x10/0x10 [ 479.112161][ T31] ? __pfx_kthread+0x10/0x10 [ 479.116723][ T31] ? rcu_is_watching+0x12/0xc0 [ 479.121466][ T31] ? __pfx_kthread+0x10/0x10 [ 479.126041][ T31] ret_from_fork+0x45/0x80 [ 479.130441][ T31] ? __pfx_kthread+0x10/0x10 [ 479.135038][ T31] ret_from_fork_asm+0x1a/0x30 [ 479.139814][ T31] [ 479.143054][ T31] Kernel Offset: disabled [ 479.147360][ T31] Rebooting in 86400 seconds..