last executing test programs: 6m16.161917113s ago: executing program 3 (id=12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x82000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') preadv(r3, &(0x7f0000000440)=[{&(0x7f00000041c0)=""/4096, 0x1000}], 0x1, 0x1e, 0x20704513) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000140), 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x1004) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) semop(0x0, 0x0, 0x0) sendto$netrom(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r0, &(0x7f0000001c00), 0x40000000000017a, 0x40840) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0xa9523a387e730bfe, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) 6m12.934251291s ago: executing program 3 (id=17): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000018000000000600000000000000000000d31c0000000100009500"/41], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) fstatfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd000001800fff80000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 6m11.76201693s ago: executing program 3 (id=20): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0xfffffff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x536}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f00007fe000/0x3000)=nil, 0x3000, 0x4, 0x20010, 0xffffffffffffffff, 0xd4609000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) select(0x2, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 6m8.601580624s ago: executing program 3 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x16a) r8 = io_uring_setup(0x2754, &(0x7f0000000000)={0x0, 0xf8f1, 0x0, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r10, &(0x7f0000000380)=ANY=[], 0x40000) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206010200000000000000000c0000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b0000ff03"], 0x58}}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 6m5.154560556s ago: executing program 3 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x8e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d266abfb74bce739b919bac0c87dce1bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df746fccb1b01fd85815abc4b2cd3d8a3e0ce5c932be454104e9a4e84d867c11d790012d548598251be2be276972b599b391b32ca8ecfecec3dc429112d207a2b02eaee36b66e383968b2b764d4d308414626504bd95f131d3c3fb146a1339588d49be4a5de97f35ec3d4385957603637ce90275b9088ff97ffaed13121b2bca31bf489b47a81d2f9bf01a593d2c031fa7674f1fa75d13bdc3b512a43d962cd3bb52e56db77dd19f55acd55170b872324d985982db8d3c39c70c9b99bd2671d4d7a58ea69754e8b69055c2f2a7f70dd0768d5b05a769904e393bf95afe35261fbd358719fd01e86aebfd96a770a7bcc0e611cf173c4f1c6b6a50731d872d9afa7eb32aa59dae737d86c1fdd25a9e022376a3921132c5560a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) waitid(0x2, r5, 0x0, 0x4, 0x0) sendmmsg$inet6(r4, &(0x7f0000001040)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x24000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, 0xfffffffffffffffe}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x37c, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x483c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7a68}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xc6, 0x3, "6cab11303f23956e146b055a5da64c7c5a233262b168cb19f2a8ab56ea84695ad15e6b07b812a191c1cce7fc6c3e77e6f7faedc3fc0cbaefa998daf95cad0b584daafbee2ff5dc5f85efe812be908916f40a3628e847f15c6c10548bb75c65cf5f56aba28a3f7e101a99c16068ed268764621580b1778accbd567962937ab95993c293f9e29b34e35129e17617c5773684907483bb8ff334bbceced498eb7c004659cf5a285b1fed1a0ad50dd3a55720e7b340aa6d071cf826513763f70da82f3a5a"}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa4, 0x3, "795f9e23b0fef381feab77cba8779db076ce213869e5ead6efa6ecd51fe68f8816bd2ef43623ec2b458fe1865d18e867aac936323775b6659e03223792c0e5d48263e66702569780f14216becb8d76762e83c09f9a3caae8cd63aa28bed79c1e18ff8bb893f566c6fffcf4c2f9c91adf7be7718fadbaef04a6f7570fd58e5c9c51ba3d6f990bdb985b0f98bd6d2ebe240fadf64295030b492026677e10dc3524"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fd1ed7526df18a7c8ead76c01b552e47ca3060beb042"}}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa35}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008800) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) r8 = gettid() ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r8, 0x0, 0x4004) r9 = io_uring_setup(0x3ead, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 6m3.457563026s ago: executing program 3 (id=44): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x6}, [@map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r6, 0x0, 0xeffd) 5m48.099384807s ago: executing program 32 (id=44): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x6}, [@map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r6, 0x0, 0xeffd) 2m36.433955403s ago: executing program 1 (id=826): syz_open_procfs$pagemap(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) r2 = socket(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x18}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 2m33.731370496s ago: executing program 1 (id=832): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x230080, 0x0) connect$nfc_raw(r0, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @empty}, &(0x7f0000000300)=0xc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)={0x50, 0x12, 0x335a7a0c1b413af7, 0x70bd24, 0x25dfdbfe, {0x11, 0x9, 0x81, 0xf, {0x4e22, 0x4e20, [0x5, 0x801c, 0x52], [0x8001, 0x1, 0xffff0bc4, 0x8], 0x0, [0x1, 0x2]}, 0x400, 0x3ff}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x40000c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x80) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='%\x00', &(0x7f00000004c0)="e09742c70a83", 0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x22, 0x1028}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x7) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000006c0)=""/254, 0xfe}], 0x2, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) 2m32.08787853s ago: executing program 1 (id=838): bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x5) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x64}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008040}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000540)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) shutdown(r4, 0x1) accept(0xffffffffffffffff, 0x0, 0x0) 2m31.53189098s ago: executing program 1 (id=843): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='syzkaller\x00', 0xa7, 0x0, 0x0, 0x100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x97) socket$inet6(0xa, 0x80002, 0x0) fanotify_init(0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800600) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x1000, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x1b, 0x15, "54c870a8d36b93b23733e6180aa639ec68114b5aba1c98911df5ba7a296d56740d00", "fc0177a6f3bb16d5d5560f93e0e50bbf206c9d8db97c00040000000000005f8a654e14dc7c4cc6020004003b3acc9f02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x1, 0x8]}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000009850000006d00000095c052e837146c5223ea080377bb0de673b160ccecea40ae7032c01255cebabb444b693d34b68f7f5a7f7439acafeecff4f6d18855e5b8db33d3653ba29666e9de00193b58b3f7b1ff40000000103b56ddbc4250f0b6f2c296828946f92f56a5b0760464837c44"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='afs_sent_data\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) r9 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a83, 0x2c2) write$cgroup_int(r9, &(0x7f0000000000)=0xfe8e, 0x12) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 2m29.566754495s ago: executing program 1 (id=845): memfd_create(&(0x7f00000000c0)='\xe9`\x90\x98[\x82?O3O\xc1\xddd%I\x82p]\t\x00\x00\x00\x00\x00\x00\x00H\x87\xbaJ0o \xfb\xb9\xd9\xfe %\xf6\xf6\x82H\xee\v\xd72\x9c\xef\xf5\xa5\x84Pf\x9f\x9fYU+\xf5\\\r\x00\x9d\xf1\xf7\xea\xd0\xffc4F|\x82U\x01/\x14\xfd\xa15/\xbd\x8a;\x9f!\x10\xfam~\n\xf3\xeb,x\xb8\x92\x81\n+|G\x93\xf9\xb7\x88\xa1\x19\xf1\x10$\xc8P\xec\"\xed\x1eyO}\xc3T\xf5@S\x88\xa4;a\xe6D\x8a\xeb\xdb\v\x1a\xb1x\xb54\xda\xaf\n\xb7$\xe7&D\xd5o\xbb\xa7\xa9\x96\xb9#\xf8\r|\x9c\xea', 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x8000}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x15}, 0x80) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) accept4(r0, &(0x7f0000000300)=@rc, &(0x7f0000000000)=0x80, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r4, &(0x7f0000000400), 0x0}, 0x20) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="00141b000000"], 0x0, 0x0, 0x0, 0x0}) 2m25.297958307s ago: executing program 1 (id=859): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) msgget(0x1, 0x2b0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0x4, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sync() setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team_slave_1\x00', 0x10) 2m9.891433947s ago: executing program 33 (id=859): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) msgget(0x1, 0x2b0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0x4, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sync() setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team_slave_1\x00', 0x10) 9.173908042s ago: executing program 6 (id=1308): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syslog(0x2, 0x0, 0x0) 8.0858442s ago: executing program 4 (id=1313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0xff0f, 0x0, @msi={0x8, 0x80, 0x6, 0x9}}]}) 7.782828381s ago: executing program 4 (id=1315): syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="038cc2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f000001ac1414aa00186371ae9b1c032dd5e026741c080b01c8fdc414a02cf8b02d265cc013f776a3f1a6b7f8c1bad2ab0581ce0e722e934f22961f0551186e1ee5020e8ad8e6cb61f4b5f7fa7e16e81681ab97890c69"], 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) sendfile(r0, r2, &(0x7f00000001c0)=0x2, 0x0) time(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000100)={0x7, 0x3}) r6 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x7fff) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x53, 0x0, &(0x7f0000000540)=[@free_buffer={0x40086303, r6}, @exit_looper, @enter_looper, @increfs={0x40046304, 0x1}, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000780)={@fda={0x66646185, 0x8, 0x1, 0x2a}, @fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/205, 0xcd, 0x5, 0x24}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x76a]}, 0x8) ppoll(&(0x7f0000000700)=[{r8, 0xa202}], 0x1, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) close$binfmt(r8) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)=0xbed0) fcntl$getflags(r8, 0xb) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) lseek(r9, 0x1000, 0x1) 7.299875671s ago: executing program 5 (id=1319): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x842, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0, 0x38}], 0x2) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000003c0)=0xc, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x1000}) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f00000001c0)={0x18, 0xfffffffffffffff5}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chmod(&(0x7f0000000140)='./bus\x00', 0xca) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x7, 0x80000}) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) 6.790523093s ago: executing program 0 (id=1320): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x28, 0x1, 0x0) r1 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x10, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 6.599380674s ago: executing program 0 (id=1321): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x230080, 0x0) connect$nfc_raw(r0, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @empty}, &(0x7f0000000300)=0xc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)={0x50, 0x12, 0x335a7a0c1b413af7, 0x70bd24, 0x25dfdbfe, {0x11, 0x9, 0x81, 0xf, {0x4e22, 0x4e20, [0x5, 0x801c, 0x52], [0x8001, 0x1, 0xffff0bc4, 0x8], 0x0, [0x1, 0x2]}, 0x400, 0x3ff}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x40000c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x80) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='%\x00', &(0x7f00000004c0)="e09742c70a83", 0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x2003}, 0x94) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x22, 0x1028}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x7) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000006c0)=""/254, 0xfe}], 0x2, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) 6.547013869s ago: executing program 6 (id=1322): syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="038cc2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f000001ac1414aa00186371ae9b1c032dd5e026741c080b01c8fdc414a02cf8b02d265cc013f776a3f1a6b7f8c1bad2ab0581ce0e722e934f22961f0551186e1ee5020e8ad8e6cb61f4b5f7fa7e16e81681ab97890c69"], 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) sendfile(r0, r2, &(0x7f00000001c0)=0x2, 0x0) time(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000100)={0x7, 0x3}) r6 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x7fff) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x53, 0x0, &(0x7f0000000540)=[@free_buffer={0x40086303, r6}, @exit_looper, @enter_looper, @increfs={0x40046304, 0x1}, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000780)={@fda={0x66646185, 0x8, 0x1, 0x2a}, @fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/205, 0xcd, 0x5, 0x24}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x76a]}, 0x8) ppoll(&(0x7f0000000700)=[{r8, 0xa202}], 0x1, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)=0xbed0) fcntl$getflags(r8, 0xb) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) lseek(r9, 0x1000, 0x1) 6.217355533s ago: executing program 4 (id=1324): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x8) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYBLOB="5142b9048ddcc5e6c573b3ad7e5aaa738c7cd29f12a9949d147f212035724ac0dc8029841f380088afc23e933333b775df17288103917271024d2291474229c5c492daef316002024e0800f770778086b9c5b28f6394b687996d88daef27d59b295beac29dfc0f7d7f06bef4273c34277a5def4321ddba88a844d451be44e211fd9f0f293c7fe7e5037dd9b2c794b3fdb63c4751934f830801053c2d331082b64e694605254cd2af10a54de9f84aebf0c166e736688413bc50b0f0dca43edf05b001f053c61a363d9536bc5f5b9916bd37edc0b9ce76c20314dfc45085473c5af79293f9", @ANYBLOB=',cache=readahead,euid<', @ANYRESDEC=0x0, @ANYRES16=r4]) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) epoll_create(0x400) 5.631125866s ago: executing program 5 (id=1325): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000500)={0x14, &(0x7f0000000340)={0x20, 0x23, 0xc0, {0xc0, 0x21, "0bad230f723eea4a4483780caf8dcc5003d1293d34b63ace3c5fdaef377018c98bd7ad80de4d868d17b97055d11d425366f21578b5fe179884297138895450e5b9562df222bab6d7ff57424628d75195fd61fffa51df7f827013746ee225df0b6dbe6c459e9a009c9cc8f295c36a12550cd9e911da00e422b7a18a70d7ffd130f68e29fbf87432a239883e5dfd7810e4252de8aeecf14e204190751d9078f1e6f6b2c69ebf6edeed8c492cb8792f7c657967f43f6af0a2e2dd6708507b19"}}, &(0x7f0000000440)={0x0, 0x3, 0x98, @string={0x98, 0x3, "65bc35b59982739d88b8b631eb62644abf6ffc6876033fe9ddf50f86b60e82c9b5d55f30dab69d7c3cd8ff68270f62dce69c60cb597137a6736aa6fe1a29a3797cdb77ea97ddd03063819e71caf43cdd342145946451beb67d25cf0eecf1d3085f536c8985e8cbeb89dc3b5f437f3b750bc583b69945bf30c7c120a31c78f1a0ed30dfae8c624d868d1e45bc82fe2d30570019dc4e1b"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000540)={0x20, 0x18, 0x7a, "ba07d6df4e03eced5d4212173a43949a01700232c1b429a76525134ed2718193b621771b843aa087b8e436e567a548273aef29514b14fd1254266b622b9892829a08a1119a9362a8067baad6cc599b066b60fca73f51c38556286242f2f8c9c163450b0c31b4ea28d5f93c0a13d4ae765bd2cb45dc6eca4b928e"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000006c0)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000740)={0xc0, 0xa2, 0x2f, "6d8af906f656f55f07b57f002a6458673a2ade2915bd976f469655c8e2868b73ae8563a4ca6156e114ccac541c0c99"}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b15, 0x0) syz_usb_disconnect(r0) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x3ff}, 0x0, 0x0, 0xd, 0x4, 0x2, 0x3, 0x7c, 0x5}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0x6927}}], 0x70, 0x8004}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) pipe(&(0x7f00000001c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0xffff0000, 0x98, 0x1, 'queue1\x00', 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.287032534s ago: executing program 0 (id=1326): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) stat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) read$snapshot(r4, 0x0, 0xffffffbf) read$watch_queue(r4, 0x0, 0x0) sendmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="a8", 0x1}], 0x1}}], 0x1, 0x0) 5.152091118s ago: executing program 2 (id=1328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005d00), 0x2a001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "36771f"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000100)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000eaffffff72000040"]) 4.715324746s ago: executing program 2 (id=1329): prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) 4.63503352s ago: executing program 2 (id=1330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0x2, 0x3, 0x6) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019540)=""/102392, 0x18ff8) rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x7]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x10, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 4.232401776s ago: executing program 0 (id=1331): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000380)="80", 0x1}], 0x1, 0x0, 0x0, 0x2c04e0c0}, 0x4081) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0xa}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x2000, 0x0, 0xb49, 0x9, 0xd918, 0x800, 0xffffffff}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd64fde9e200080000fc01000000000000000000003b0000ffffac1414aa3b00000300"], 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006240)={0x2020}, 0x2020) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x3ff, 0x8000) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) accept4(r7, 0x0, 0x0, 0x800) 4.199792275s ago: executing program 6 (id=1332): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x200000000005, 0x8000000000200003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3.93759076s ago: executing program 4 (id=1333): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) stat(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000080), 0x1, 0x0, 0xfffffffffffffd66, 0x2c04a001}, 0x4081) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000080)}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$watch_queue(r6, 0x0, 0x0) 3.936419676s ago: executing program 2 (id=1334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x200000000005, 0x8000000000200003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3.352886952s ago: executing program 5 (id=1335): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x842, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0, 0x38}], 0x2) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000003c0)=0xc, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x1000}) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f00000001c0)={0x18, 0xfffffffffffffff5}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chmod(&(0x7f0000000140)='./bus\x00', 0xca) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x7, 0x80000}) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) 2.925833015s ago: executing program 6 (id=1336): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x7, 0x9, 0x1, 0x0, 0x6}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000200), 0x408000, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty}}, 0x2, 0xfffc, 0x3, 0x0, 0xc0, 0x1, 0x5}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @remote}}, 0xa, 0x7, 0x7fff, 0xc33c, 0x7}, &(0x7f0000000240)=0x98) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) syz_io_uring_setup(0x1530, &(0x7f0000000140)={0x0, 0xfffffffe, 0x1, 0x5, 0x3fffffd, 0x0, r4}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x80, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x3c}}, 0x4000) syz_open_dev$video(0x0, 0x200, 0x28000) socket$inet(0x2, 0x3, 0x4) 1.930683803s ago: executing program 6 (id=1337): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x230080, 0x0) connect$nfc_raw(r0, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @empty}, &(0x7f0000000300)=0xc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)={0x50, 0x12, 0x335a7a0c1b413af7, 0x70bd24, 0x25dfdbfe, {0x11, 0x9, 0x81, 0xf, {0x4e22, 0x4e20, [0x5, 0x801c, 0x52], [0x8001, 0x1, 0xffff0bc4, 0x8], 0x0, [0x1, 0x2]}, 0x400, 0x3ff}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x40000c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x80) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='%\x00', &(0x7f00000004c0)="e09742c70a83", 0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x2003}, 0x94) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x22, 0x1028}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x7) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000006c0)=""/254, 0xfe}], 0x2, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) 1.903130227s ago: executing program 0 (id=1338): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000080), 0x1, 0x0, 0xfffffffffffffd66, 0x2c04a001}, 0x4081) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) read$watch_queue(r5, 0x0, 0x0) 1.787254908s ago: executing program 0 (id=1339): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) stat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) read$snapshot(r4, 0x0, 0xffffffbf) read$watch_queue(r4, 0x0, 0x0) sendmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="a8", 0x1}], 0x1}}], 0x1, 0x0) 1.760857853s ago: executing program 4 (id=1340): prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000400), 0x0) 1.518506586s ago: executing program 4 (id=1341): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000400)=0x200000000) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000004) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x41, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) writev(r5, &(0x7f0000000080), 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004940)=@delchain={0x1e88, 0x64, 0x100, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6}, {0xe, 0xffff}, {0x0, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1e5c, 0x2, [@TCA_BPF_NAME={0xa, 0x7, './bus\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_ACT={0x1de8, 0x1, [@m_police={0x56c, 0x15, 0x0, 0x0, {{0xb}, {0x470, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x6, 0x6, 0xefffffff, {0xf6, 0x1, 0x44ab, 0xb6, 0x400, 0x2}, {0x0, 0x2, 0x4a54, 0x800, 0x401, 0x8}, 0x1, 0x4, 0x1000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0xe1, 0x77c, 0xffffff00, 0x9, 0x7, 0xe1d, 0x8f, 0x7, 0x4d11, 0xc8, 0x7, 0xd, 0x5, 0x4, 0xad, 0xcd3, 0xfff, 0x24000000, 0x5, 0x656, 0x8, 0x9, 0xb, 0x8, 0x1, 0x400, 0xc11, 0x8, 0x3, 0x3, 0xfffffffe, 0xfffffff7, 0x7, 0x3, 0x7, 0x4, 0x4, 0xd8, 0x80000001, 0x74f6, 0x8, 0x0, 0x0, 0x5, 0x2, 0x2, 0x9, 0xffff824a, 0x1, 0xe, 0xffffffff, 0xfffffff9, 0x3, 0x8, 0x3, 0xfffffff9, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd5d8, 0x2df, 0xffffffff, 0x4, 0xfffffff8, 0x8, 0x8, 0x4, 0x3, 0x200, 0x1, 0x1, 0x80000000, 0x7ff, 0x3, 0x2, 0x0, 0x80000000, 0x7e, 0xfab6, 0x5, 0x6, 0xfebf, 0x3, 0x45400000, 0xf5, 0x3, 0x3, 0x40, 0x3, 0xd97, 0x4, 0x10001, 0x7ff, 0x0, 0xe, 0xffffffff, 0x8, 0x401, 0x1, 0xfffffffe, 0xfffffffe, 0x80000001, 0x1, 0xfffffff9, 0x80, 0xffffffff, 0x5, 0x8, 0x9, 0xffffff80, 0x5, 0xfffffffa, 0x7, 0xfffffee8, 0x8, 0x4, 0xc, 0x9, 0x6, 0x7, 0x7ff, 0x0, 0x2, 0x4, 0x6, 0x5, 0x7, 0xc9, 0x4, 0x7, 0x1, 0x2, 0xfffffff8, 0x4, 0x200, 0xb, 0xbc57, 0x1, 0x5, 0x3, 0x10000, 0x36dc, 0x2, 0x0, 0x3, 0xfffffc01, 0x4, 0x5, 0xfffffa33, 0x8, 0x4, 0x7fff, 0x3, 0x7, 0x9, 0x5, 0x10000, 0x4957, 0x6, 0x8, 0xffffffff, 0x2, 0xc886, 0x7, 0x8, 0x9, 0x0, 0x10001, 0x2, 0x6, 0x5, 0x3, 0x1, 0x2, 0x1, 0xc6f, 0x5, 0x1, 0x9e1820bf, 0x2, 0xffff, 0x1c191755, 0x6, 0x8, 0x4, 0x7ff, 0x5, 0x5, 0x0, 0x0, 0x46, 0x9, 0x10001, 0x7fffffff, 0x4, 0x0, 0x4, 0x1, 0x8, 0x1, 0x8000000, 0x2, 0x401, 0x2, 0x4, 0x7fffffff, 0x7, 0x7f4, 0x1, 0x4, 0x3, 0x2, 0x0, 0x3, 0xe89, 0x41c, 0xffff0000, 0x9bf, 0xffff, 0x401, 0x1, 0x9, 0x2, 0x6, 0x1, 0xfffffffd, 0x2, 0xd, 0x0, 0x3, 0x8, 0x0, 0x2, 0x9, 0x2, 0x3, 0x7, 0x6, 0x7, 0x9, 0x3, 0x200, 0x4, 0x8, 0x3, 0x2, 0x8, 0x2, 0x3, 0x7, 0x400, 0x0, 0x0, 0x9]}]]}, {0xd4, 0x6, "607c956f7cef93d7a3cd2a054d59954e545e9a99e95c6a73487c4f49ccc4eeaa0e27028241f60e933bc21318be70431b3ee08b907b2d0a224bff7c8cc5958443764529507c0547f2336f1ccd0f67fb33f2f730566ce745254a6cba7bf0b6eec68513cf94748f7f02f6f925b0b488e30405491cb38861d6da855cadb9f280042a8aaf31a0862a21fd2db1dd90f553983758c51bcd60cd0e31ae089b93f728f100da9f845c69a7f77de0bad6699b5467d09f2e27d1fa118cba9eae92ef390c0cecc4b42fd5bb1ee745439c156ce7b5fd2a"}, {0xc, 0x7, {0x6dfb7ae9731b9c9c, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x74, 0x1d, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}]}, {0x3f, 0x6, "1d1536a8642168d40b42742f86f130d91d891d818f6464c1e922bcfefaf2c6020a683fb365d291cddc1a8c38f7237d2ba676297ac22a9a25a9112e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x19c, 0x19, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x660}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffc00, 0x3, 0x2, 0x4, 0xf4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1bab, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe61, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7f, 0x8000, 0x7, 0x7, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x197f, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0xaf26a8821264bbd6, 0x0, 0x34d16929}}]}, {0xe9, 0x6, "0ebab4e07802ea50ade010b2574b76873b16707efabf6f5547ec4ce081d4ec6ce03c93033bf0f12a92fdec3475bf21f1e5ce175e95ba9f726e4b9ef5c40682e7df66928eb57bd53c2eaa9d6347640102902fc73018aee0661b80adcbd452023bbd852c806f084d82eeb02c9d8f27990dfdcd13f4adb590ecff4c6f56e322b7e059810df0abaf63a9a203bf967b913c79b3b16fd3bae31a8bac5c6e79fcefa581bb15ecc9160a05e3415f38b75ace42fb807322a53a2865e9c760e746b78f421f4707c62f1b268382caddbdaa95c33524f5d86e7012637d44eaf21ab6e46eb7df5fe24bc08d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x110, 0x12, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}]}, {0xdd, 0x6, "66c67a4cdffadeb75e59c99e607704ac97e8c843c20da6309b8bffb2d62bca9ca79228528af6c9560636eb6ad82ecef8607b77124d24047644ca5477d738d3362070a06eb0a4b56762c1950c333a185d3ffdd8724b7b7cfde720522a8137a1e77efb2a8ac6d9d053fbe63824a43447b352424bd47da8882492d8ef2bfd81a3d4beced44eb15d7d96d5a31b31df088ca53d6ead63793ce792fda469861dcbabee94f0e3c4a2358bcbfedbaee5aa236a65ebd3ed308880c8f945bb453c58e2411b16ec946b1ebff8ce438082f6298059b06cf6e4aab1a1eac823"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mirred={0x1fc, 0x1e, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7f, 0x20000000, 0x80000001, 0x4}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x7, 0x2, 0x401}, 0x0, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0xffffffffffffffff, 0x4fa2}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7, 0x0, 0x6, 0x2}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x4, 0x9, 0x8}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6f7, 0x0, 0x3, 0x9, 0xff}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x3, 0x5, 0x9, 0x80000000}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x8, 0x4, 0x7fff}, 0x3, r3}}]}, {0xd0, 0x6, "803419ed726441ba04e8f744909e336ee5487130fc05fae0750ec5d657c55421920f020ec95b54765bdacdba0b9865a3d570d0be1190c7dd051b506ef312ef032aa3640a2b7a8e7ce2b2e28d12a795a97488385745bc46e32f032e3f18172e97be4a75f9201634b8708d6c21f661637643d64313affb1883262e474e58471a6e9d5b6a24cb496c1036c55aa41e72e30fc2bb49620fe70099109890877a889e9cbd3e5dd1ce404a89821f99d9ba5cb3850a171834832e2c219ae32227b9b7b3a00ef455a2d90e266f6b396d06"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0xf8, 0x8, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x85f, 0x10000006}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb58}}, @TCA_GACT_PARMS={0x18, 0x2, {0x18, 0x100, 0x5, 0x34, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x8, 0xffffffffffffffff, 0x3, 0x401}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x1, 0x1, 0x9, 0x7}}]}, {0x69, 0x6, "2ae94bcb71d38c4d0a22596093aaae7367ccae200aa385d7b8904683c91ed67be21946afcc69788411defe35c074139f88dd28b363cb26cf40b0fcb50b4ff2c49ba9d7c493442038621fc868cdc4123a95ad5d58cc6aee5acc20c0018291ee51542a47181e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x1078, 0x14, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x10}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x86, 0x1, 0x3, 0x1}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x9, 0x20000000, 0x6, 0x40}}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfaddc}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xdc, 0x14, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "37182095ac78ba0291971cce435304f7"}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x40}}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x41}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010100}, @TCA_CT_LABELS_MASK={0x14, 0x8, "56ed4f114d4d1a61a5f50c440000c478"}]}, {0x2e, 0x6, "ba3bc965ba9d4d5ae4e543d7c987ab8033091d351fb3d1e5d5cdafb65a790be069b2fa0286ebdbd440af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x110, 0xe, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x100, 0x5, 0xc29c, 0x40}, 0x71e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x639, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcb, 0x3, 0x8, 0x1, 0xfffff7b5}, 0xff}}]}, {0x8a, 0x6, "7305b83c5173e7dc7aafe35f558c076d7a2d71b03bd16aa318291593ef8bd9f3f9b90c05f7e4860afdda44dd0359b58a458e6583fbdef95834c0ddb2ca64f335e0e9fa219196ea82a05470f41a6e6efe71eb6517531579c993ef1a67c95e34310097f113c8acdd38472aea5a939327e74c19c9be612008b0cdf6309793c9a5dc13f8064e247a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xdf54, 0x6, 0x9, 0x80000000}]}}, @TCA_BPF_NAME={0xa, 0x7, './bus\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xf4, 0x1, 0x6, 0x3}, {0x2, 0x7, 0x20, 0x7f}, {0x7fff, 0x7, 0xff, 0x2}, {0x95, 0xf, 0x7, 0x6}, {0xe9, 0x2b, 0x1, 0x9}]}}]}}]}, 0x1e88}}, 0x1000000) write$vhost_msg(r1, &(0x7f0000000340)={0x1, {&(0x7f0000003900)=""/4103, 0x1007, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000640)={0x2, 0x0, {&(0x7f00000007c0)=""/175, 0xaf, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 1.467639946s ago: executing program 5 (id=1342): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xd, '\x00', @p_u8=&(0x7f0000000040)}}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) read$usbfs(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x44, r6, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @multicast, 'ip6gre0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) 927.02277ms ago: executing program 5 (id=1343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4624, 0x9, @empty, 0xfffffe01}}}, 0x108) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r10, 0x45809000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@empty, @in=@local}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r11, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r15 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r11, &(0x7f0000002140)={0x1}) write$FUSE_ATTR(r11, &(0x7f0000005a00)={0x78, 0x0, r12, {0x8, 0x6, 0x0, {0x5, 0x6e, 0x5d0, 0x1, 0x401, 0x9e, 0x1, 0x3, 0x4, 0x1000, 0x59e, r13, r14, 0xdb1d, 0x6}}}, 0x78) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0)=0x5, 0x4) 925.914554ms ago: executing program 2 (id=1344): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x84843, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x683) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0x4c08, 0x0) (async) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0x4c08, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x27, 0x803, 0x0) (async) r6 = socket(0x27, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r8, 0x5457, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[], 0x0, 0x38, 0x0, 0xfffffffe, 0x2000, 0x10000}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000100008000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r10 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) copy_file_range(r10, &(0x7f0000000040)=0x2, r10, &(0x7f0000000080)=0x1e0, 0xff, 0x0) (async) copy_file_range(r10, &(0x7f0000000040)=0x2, r10, &(0x7f0000000080)=0x1e0, 0xff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r9, &(0x7f0000000080), &(0x7f00000003c0)=""/18, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000002f80)=ANY=[], 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002f80)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r9}, &(0x7f0000000440), &(0x7f0000000500)=r11}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r9}, &(0x7f0000000440), &(0x7f0000000500)=r11}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600000000fedbdf25000000004beb5f6d7e527875b1581917dbdf2cebfba42dc6625e2aa1388ee3adfdb49656e49c2283aada3a84b8b6b4c5028a7aa8e7c5ba5a15ba1e7d03ebacc29304fb84e320f4aed06d2ce8eef874641fff7a289b87d6b62d5a273c880a347bc470c57b0a86840eb1fe3700fe367cc10866c74ffffbf0c467567a9b55b13f14eadf259b5712a9495c6249c058ecd598f8bda2915b296401f00b4cec43e079eef7d124767903c87976aca793415c1a21e5dcc50db5187fa2190fe5cf17eb419ce1bfff68d91d6e55ddb5247d2c03f29c36c1c7f10cd243cf908d55ac5047e1", @ANYRES32=0x0, @ANYBLOB="a775aa88000000001c00128009000100766c616e000000000c000280000001000100000008000500", @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0) socket(0x10, 0x803, 0x8) (async) r12 = socket(0x10, 0x803, 0x8) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, &(0x7f0000000340)="98adf35837f08545a1db20f22578ac4ccd01202219242c5b8997cb25273ce9d7f6c49b20b0a4f18b2f46916c05cc124ccf", 0x31) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r13], 0x5c}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) 586.930178ms ago: executing program 2 (id=1345): socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) close(0x3) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 586.551425ms ago: executing program 5 (id=1346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x200000000005, 0x8000000000200003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 0s ago: executing program 6 (id=1347): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x1}, {0x5, 0x3}, {0x5, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x10, 0x3d0fad6d7b6fcb7a}, {0x4, 0x2, 0x1}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x4, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x9}, 0x3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='f2fs_filemap_fault\x00', r1, 0x0, 0x3e3f}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x6) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000180)="1000000000000000010000000c000000", 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r5, &(0x7f0000000000)=""/42, 0x2a) getdents64(r5, &(0x7f0000000080)=""/147, 0x93) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffa}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat2(0xffffffffffffffff, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x5) lseek(0xffffffffffffffff, 0x2004, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r5], 0x4c}}, 0xc050) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x20044810) kernel console output (not intermixed with test programs): oduct=0, SerialNumber=0 [ 306.148163][ T5912] usb 6-1: Using ep0 maxpacket: 8 [ 306.224758][ T5952] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 306.287903][ T5912] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 306.296205][ T5912] usb 6-1: config 179 has no interface number 0 [ 306.308253][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 306.313776][ T24] usbtmc 3-1:16.0: can't read capabilities [ 306.340307][ T5912] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 306.367550][ T5912] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 306.392798][ T5912] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 306.421349][ T5912] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 306.428005][ T5952] usb 5-1: device descriptor read/64, error -71 [ 306.454574][ T5912] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 306.503783][ T5912] usb 6-1: config 179 interface 65 has no altsetting 0 [ 306.523882][ T5912] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 306.533592][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.567879][ T5952] usb usb5-port1: attempt power cycle [ 306.574281][ T9150] usbtmc 3-1:16.0: INITIATE_CLEAR returned ba [ 306.592164][ T5912] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input28 [ 306.776135][ T24] usb 3-1: USB disconnect, device number 18 [ 306.901020][ T93] usb 6-1: USB disconnect, device number 20 [ 306.901200][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 306.920238][ T5952] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 306.965077][ T5952] usb 5-1: device descriptor read/8, error -71 [ 307.239727][ T5952] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 307.539387][ T5952] usb 5-1: device descriptor read/8, error -71 [ 307.658576][ T5952] usb usb5-port1: unable to enumerate USB device [ 307.963180][ T30] audit: type=1400 audit(1757063457.804:481): avc: denied { bind } for pid=9174 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 308.038340][ T30] audit: type=1400 audit(1757063457.804:482): avc: denied { name_bind } for pid=9174 comm="syz.0.880" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 308.341191][ T30] audit: type=1400 audit(1757063457.804:483): avc: denied { node_bind } for pid=9174 comm="syz.0.880" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 310.429412][ T9196] netlink: 104 bytes leftover after parsing attributes in process `syz.4.886'. [ 310.731224][ T9206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.889'. [ 310.760812][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 311.057935][ T9209] Illegal XDP return value 4294967282 on prog (id 176) dev N/A, expect packet loss! [ 311.321009][ T9216] binder: 9202:9216 ioctl c0306201 200000000080 returned -14 [ 311.417960][ T9220] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9220 comm=syz.4.893 [ 311.635281][ T30] audit: type=1400 audit(1757063461.474:484): avc: denied { execute } for pid=9224 comm="syz.4.896" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 311.693679][ T9227] fuse: Unknown parameter '§$ýïÿ' [ 311.758371][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 312.089467][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 312.124930][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.139888][ T9] usb 6-1: Product: syz [ 312.147589][ T9] usb 6-1: Manufacturer: syz [ 312.160348][ T9] usb 6-1: SerialNumber: syz [ 312.185708][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 312.205700][ T5912] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 312.905908][ T9237] netlink: 40 bytes leftover after parsing attributes in process `syz.5.895'. [ 313.151104][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 313.160253][ T30] audit: type=1400 audit(1757063462.994:485): avc: denied { getopt } for pid=9242 comm="syz.4.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.196041][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.205182][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.259019][ T5912] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 313.271969][ T5912] ath9k_htc: Failed to initialize the device [ 313.305918][ T5912] usb 6-1: ath9k_htc: USB layer deinitialized [ 313.563493][ T5912] usb 6-1: USB disconnect, device number 21 [ 313.701111][ T9260] veth1: left promiscuous mode [ 313.894128][ T9264] Mount JFS Failure: -22 [ 313.901131][ T9264] jfs_mount failed w/return code = -22 [ 314.036540][ T9264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.906'. [ 314.364055][ T9273] tipc: Enabling of bearer rejected, failed to enable media [ 314.600423][ T9279] ubi31: attaching mtd0 [ 314.616075][ T9279] ubi31: scanning is finished [ 314.621187][ T9279] ubi31: empty MTD device detected [ 315.279132][ T9279] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 315.286737][ T9279] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 315.294223][ T9279] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 315.301293][ T9279] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 315.308755][ T9279] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 315.315603][ T9279] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 315.323987][ T9279] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3729142489 [ 315.334075][ T9279] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 315.533625][ T9284] ubi31: background thread "ubi_bgt31d" started, PID 9284 [ 315.781365][ T9289] netlink: 28 bytes leftover after parsing attributes in process `syz.4.912'. [ 316.700848][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.714438][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.228767][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.271258][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.284174][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.292888][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.300536][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.391255][ T9304] lo speed is unknown, defaulting to 1000 [ 317.618329][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.918'. [ 319.347404][ T5171] Bluetooth: hci6: command tx timeout [ 319.357564][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 319.652746][ T9304] chnl_net:caif_netlink_parms(): no params data found [ 319.762977][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.796841][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.838503][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.847983][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.889512][ T9330] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.898072][ T5856] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 319.904572][ T5856] Bluetooth: hci2: command 0x0401 tx timeout [ 320.517690][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.871580][ T9304] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.894257][ T9304] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.934688][ T9304] bridge_slave_0: entered allmulticast mode [ 320.994366][ T9304] bridge_slave_0: entered promiscuous mode [ 321.032506][ T9304] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.048369][ T9] usb 3-1: USB disconnect, device number 19 [ 321.054453][ T9304] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.095578][ T9304] bridge_slave_1: entered allmulticast mode [ 321.129690][ T9304] bridge_slave_1: entered promiscuous mode [ 321.349785][ T93] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 321.417440][ T5856] Bluetooth: hci6: command tx timeout [ 321.558352][ T93] usb 5-1: device descriptor read/64, error -71 [ 321.579187][ T9304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.639945][ T9304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.768270][ T9304] team0: Port device team_slave_0 added [ 321.789357][ T9304] team0: Port device team_slave_1 added [ 321.827887][ T93] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 321.856524][ T9304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.866958][ T9304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.899231][ T9304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.964815][ T9304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.995087][ T9304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.017408][ T93] usb 5-1: device descriptor read/64, error -71 [ 322.074715][ T9304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.128066][ T93] usb usb5-port1: attempt power cycle [ 322.497368][ T93] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 322.566237][ T9304] hsr_slave_0: entered promiscuous mode [ 322.582612][ T93] usb 5-1: device descriptor read/8, error -71 [ 322.583281][ T9304] hsr_slave_1: entered promiscuous mode [ 322.743796][ T9304] debugfs: 'hsr0' already exists in 'hsr' [ 322.760517][ T9304] Cannot create hsr debugfs directory [ 323.229753][ T9363] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 323.260711][ T93] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 323.267760][ T9365] bridge0: port 3(batadv1) entered blocking state [ 323.284989][ T9365] bridge0: port 3(batadv1) entered disabled state [ 323.288338][ T93] usb 5-1: device descriptor read/8, error -71 [ 323.296010][ T9365] batadv1: entered allmulticast mode [ 323.320914][ T9365] batadv1: entered promiscuous mode [ 323.407840][ T93] usb usb5-port1: unable to enumerate USB device [ 323.497419][ T5856] Bluetooth: hci6: command tx timeout [ 323.769343][ T59] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 323.778971][ T59] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 324.197669][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 324.323347][ T9384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.934'. [ 324.628855][ T24] usb 3-1: config 0 has no interfaces? [ 324.634358][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 324.669130][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.697899][ T24] usb 3-1: config 0 descriptor?? [ 325.258119][ T5912] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 326.436794][ T9304] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 326.438384][ T5856] Bluetooth: hci6: command tx timeout [ 327.073687][ T5912] usb 6-1: config 0 has no interfaces? [ 327.079309][ T5912] usb 6-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 327.103781][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.114547][ T9304] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 327.883322][ T5912] usb 6-1: config 0 descriptor?? [ 328.025816][ T9304] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.080277][ T9304] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.239561][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 328.263358][ T9410] veth1: entered promiscuous mode [ 328.268954][ T9410] netlink: 'syz.0.939': attribute type 8 has an invalid length. [ 328.294953][ T9410] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 328.512599][ T9304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.549859][ T9304] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.600664][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.608864][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.621223][ T5912] usb 6-1: can't set config #0, error -71 [ 328.647610][ T5912] usb 6-1: USB disconnect, device number 22 [ 328.729528][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.736697][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.856245][ T9304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.870819][ T9304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.983924][ T880] usb 3-1: USB disconnect, device number 20 [ 329.908574][ T30] audit: type=1400 audit(1757063479.754:486): avc: denied { write } for pid=9427 comm="syz.5.945" name="file0" dev="tmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 329.981668][ T30] audit: type=1400 audit(1757063479.754:487): avc: denied { open } for pid=9427 comm="syz.5.945" path="/183/file0" dev="tmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 330.031567][ T30] audit: type=1400 audit(1757063479.784:488): avc: denied { ioctl } for pid=9427 comm="syz.5.945" path="/183/file0" dev="tmpfs" ino=978 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 330.071538][ T30] audit: type=1400 audit(1757063479.854:489): avc: denied { setopt } for pid=9427 comm="syz.5.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 330.135668][ T9304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.177537][ T9437] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64768 sclass=netlink_xfrm_socket pid=9437 comm=syz.2.947 [ 330.197996][ T30] audit: type=1400 audit(1757063480.014:490): avc: denied { mount } for pid=9436 comm="syz.2.947" name="/" dev="autofs" ino=25391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 330.344961][ T30] audit: type=1400 audit(1757063480.184:491): avc: denied { unmount } for pid=5859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 331.655674][ T9304] veth0_vlan: entered promiscuous mode [ 331.664887][ T9304] veth1_vlan: entered promiscuous mode [ 331.681435][ T9304] veth0_macvtap: entered promiscuous mode [ 331.694218][ T9304] veth1_macvtap: entered promiscuous mode [ 332.520217][ T9304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.604057][ T9304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.618645][ T5171] Bluetooth: hci2: command 0x0401 tx timeout [ 332.625558][ T5856] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 332.749699][ T6491] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.804474][ T6491] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.869985][ T6491] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.951508][ T6491] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.943647][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.965813][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.165206][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.186194][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.566352][ T30] audit: type=1400 audit(1757063484.374:492): avc: denied { mounton } for pid=9304 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 334.665298][ T30] audit: type=1400 audit(1757063484.404:493): avc: denied { getopt } for pid=9489 comm="syz.4.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.917767][ T5952] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 335.077403][ T5952] usb 3-1: Using ep0 maxpacket: 32 [ 335.238308][ T5952] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 335.265703][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.317419][ T5952] usb 3-1: config 0 descriptor?? [ 335.344146][ T5952] as10x_usb: device has been detected [ 335.371553][ T5952] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 335.424227][ T9506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.520585][ T5952] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 335.610538][ T5952] as10x_usb: error during firmware upload part1 [ 335.624870][ T5952] Registered device nBox DVB-T Dongle [ 335.674749][ T5952] usb 3-1: USB disconnect, device number 21 [ 335.840185][ T5952] Unregistered device nBox DVB-T Dongle [ 335.858125][ T5952] as10x_usb: device has been disconnected [ 336.447407][ T5983] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 336.627816][ T5983] usb 1-1: Using ep0 maxpacket: 32 [ 336.643344][ T9522] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 336.675012][ T9522] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 336.687774][ T9522] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 336.704662][ T9522] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 336.706589][ T30] audit: type=1400 audit(1757063486.544:494): avc: denied { read write } for pid=9526 comm="syz.6.970" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 336.741380][ T30] audit: type=1400 audit(1757063486.544:495): avc: denied { open } for pid=9526 comm="syz.6.970" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 336.764270][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.950065][ T9534] loop4: detected capacity change from 0 to 2560 [ 336.961735][ T9534] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 336.981203][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.989715][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.047435][ T5844] buffer_io_error: 9 callbacks suppressed [ 337.047450][ T5844] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.082218][ T9522] macsec1: entered promiscuous mode [ 337.087024][ T5844] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.106644][ T5844] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.123322][ T5844] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.132528][ T9522] bridge0: port 3(macsec1) entered blocking state [ 337.143329][ T5844] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.152090][ T9522] bridge0: port 3(macsec1) entered disabled state [ 337.165825][ T9522] macsec1: entered allmulticast mode [ 337.192332][ T5844] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.203582][ T5844] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.212893][ T9522] macsec1: left allmulticast mode [ 337.236739][ T5844] Buffer I/O error on dev loop4, logical block 0, async page read [ 337.956641][ T5844] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.009897][ T5844] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.405424][ T9547] netlink: 'syz.6.974': attribute type 1 has an invalid length. [ 338.428107][ T9547] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.974'. [ 338.642148][ T30] audit: type=1400 audit(1757063488.484:496): avc: denied { setattr } for pid=9552 comm="syz.5.976" name="RDS" dev="sockfs" ino=26992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 339.058931][ T5983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 339.078907][ T5983] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 339.105826][ T5983] usb 1-1: can't read configurations, error -71 [ 339.453270][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 339.477939][ T5983] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 339.617720][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 339.629207][ T9] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.648060][ T5983] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 339.663295][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 339.673378][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.684536][ T5983] usb 1-1: Product: syz [ 339.691654][ T5983] usb 1-1: Manufacturer: syz [ 339.696421][ T9] usb 7-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 339.707581][ T9] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 339.715646][ T5983] usb 1-1: SerialNumber: syz [ 339.724053][ T9] usb 7-1: Product: syz [ 339.775362][ T9] usb 7-1: config 0 descriptor?? [ 339.790001][ T5983] usb 1-1: config 0 descriptor?? [ 339.800341][ T30] audit: type=1400 audit(1757063489.634:497): avc: denied { getattr } for pid=9577 comm="syz.2.985" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=26512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 340.049172][ T5983] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 340.249727][ T5983] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 340.262582][ T9] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 340.272457][ T9] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 340.572368][ T9] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 340.614301][ T9] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 340.628671][ T9] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 340.640490][ T9] waterforce 0003:1044:7A4D.0005: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.6-1/input0 [ 340.708269][ T9] waterforce 0003:1044:7A4D.0005: fw version request failed with -38 [ 340.762999][ T9] usb 7-1: USB disconnect, device number 2 [ 341.470929][ T93] libceph: connect (1)[c::]:6789 error -101 [ 341.477522][ T9586] fido_id[9586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 341.548991][ T93] libceph: mon0 (1)[c::]:6789 connect error [ 341.656335][ T9591] ceph: No mds server is up or the cluster is laggy [ 341.946821][ T30] audit: type=1400 audit(1757063491.784:498): avc: denied { bind } for pid=9600 comm="syz.4.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 341.971781][ T9601] 9pnet_fd: Insufficient options for proto=fd [ 342.545886][ T880] usb 1-1: USB disconnect, device number 18 [ 343.363572][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 343.807570][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 343.969091][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.994880][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.067441][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.096252][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.116515][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.160650][ T9] usb 3-1: config 0 descriptor?? [ 344.641811][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 344.798363][ T880] usb 3-1: USB disconnect, device number 22 [ 344.946635][ T9639] fido_id[9639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 345.165476][ T9652] Mount JFS Failure: -22 [ 345.178201][ T9652] jfs_mount failed w/return code = -22 [ 345.197366][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1003'. [ 345.246091][ T9646] nfs: Unknown parameter ' 2T<¼B[WM*1…ÃØü5¶º»$ w»&´ý»f\"F¡µ¯ø®l”»?u{öÄÚÏçt:Ӱܧbd1eó#‡*G#”ä' [ 345.290508][ T9656] Mount JFS Failure: -22 [ 345.316019][ T9656] jfs_mount failed w/return code = -22 [ 345.411345][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1004'. [ 346.336593][ T30] audit: type=1400 audit(1757063496.174:499): avc: denied { setcurrent } for pid=9671 comm="syz.5.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 347.539890][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1010'. [ 347.570425][ T9684] netlink: 'syz.0.1012': attribute type 1 has an invalid length. [ 347.578683][ T9684] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1012'. [ 347.913756][ T5983] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 348.077527][ T5983] usb 3-1: Using ep0 maxpacket: 16 [ 348.712240][ T5983] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 348.727220][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.750128][ T5983] usb 3-1: Product: syz [ 348.759511][ T5983] usb 3-1: Manufacturer: syz [ 348.771981][ T5983] usb 3-1: SerialNumber: syz [ 348.799688][ T5983] usb 3-1: config 0 descriptor?? [ 348.991048][ T5983] usb 3-1: can't set config #0, error -71 [ 349.130709][ T5983] usb 3-1: USB disconnect, device number 23 [ 349.147840][ T9691] mkiss: ax0: crc mode is auto. [ 349.190094][ T30] audit: type=1400 audit(1757063499.024:500): avc: denied { listen } for pid=9687 comm="syz.6.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.209483][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.247507][ T30] audit: type=1400 audit(1757063499.024:501): avc: denied { accept } for pid=9687 comm="syz.6.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 349.387528][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 349.547701][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 349.563563][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 349.574365][ T9] usb 1-1: config 179 has no interface number 0 [ 349.594371][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 349.648937][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 349.683774][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 349.732099][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 349.771500][ T9] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 349.830876][ T9] usb 1-1: config 179 interface 65 has no altsetting 0 [ 349.861423][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 349.907168][ T5983] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 349.969208][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.083983][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input31 [ 350.178587][ T5983] usb 3-1: Using ep0 maxpacket: 16 [ 350.185021][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.225686][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.252098][ T5983] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 350.288285][ T5983] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 350.338465][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.371324][ T9] usb 1-1: USB disconnect, device number 19 [ 350.377302][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 350.405088][ T5983] usb 3-1: config 0 descriptor?? [ 350.770907][ T9710] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 350.810751][ T9715] Mount JFS Failure: -22 [ 350.825248][ T9715] jfs_mount failed w/return code = -22 [ 350.845930][ T9715] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1021'. [ 350.971433][ T9710] binder: 9709:9710 ioctl c0306201 200000000640 returned -22 [ 351.088730][ T5983] usbhid 3-1:0.0: can't add hid device: -71 [ 351.094884][ T5983] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 351.106993][ T5983] usb 3-1: USB disconnect, device number 24 [ 351.809061][ T9727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1024'. [ 351.862708][ T30] audit: type=1400 audit(1757063501.704:502): avc: denied { write } for pid=9726 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 352.345706][ T9739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.345730][ T9739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.529683][ T9739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.529701][ T9739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.532246][ T9739] batman_adv: batadv0: Interface deactivated: vxlan0 [ 352.532262][ T9739] batman_adv: batadv0: Removing interface: vxlan0 [ 352.676278][ T30] audit: type=1326 audit(1757063502.514:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc058ebe9 code=0x7ffc0000 [ 352.676332][ T30] audit: type=1326 audit(1757063502.514:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc058ebe9 code=0x7ffc0000 [ 352.690151][ T30] audit: type=1326 audit(1757063502.514:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fc058ebe9 code=0x7ffc0000 [ 352.697857][ T30] audit: type=1326 audit(1757063502.534:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc058ebe9 code=0x7ffc0000 [ 352.697903][ T30] audit: type=1326 audit(1757063502.534:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc058ebe9 code=0x7ffc0000 [ 352.698962][ T30] audit: type=1326 audit(1757063502.544:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3fc058ebe9 code=0x7ffc0000 [ 352.699014][ T30] audit: type=1326 audit(1757063502.544:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.0.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc058ebe9 code=0x7ffc0000 [ 353.237249][ T9747] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 353.237348][ T9747] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 353.237371][ T9747] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 353.266448][ T9747] syz.4.1026 (9747) used greatest stack depth: 19752 bytes left [ 353.295366][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.504199][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1028'. [ 353.848783][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.087395][ T93] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 354.252641][ T93] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 354.263742][ T93] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.272398][ T93] usb 1-1: Product: syz [ 354.276712][ T93] usb 1-1: Manufacturer: syz [ 354.288175][ T93] usb 1-1: SerialNumber: syz [ 354.312192][ T93] usb 1-1: config 0 descriptor?? [ 354.530915][ T93] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 354.667675][ T5952] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 354.741949][ T5983] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 354.827622][ T5952] usb 7-1: Using ep0 maxpacket: 32 [ 354.835315][ T5952] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.892526][ T5952] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 354.907508][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 354.920738][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.934654][ T5983] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 354.943382][ T5983] usb 6-1: config 179 has no interface number 0 [ 354.951451][ T5983] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 354.978296][ T5952] usb 7-1: config 0 descriptor?? [ 354.980683][ T5983] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 355.047479][ T5983] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 355.063622][ T5983] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 355.081602][ T5983] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 355.113020][ T5983] usb 6-1: config 179 interface 65 has no altsetting 0 [ 355.124708][ T5983] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 355.162705][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.223669][ T5983] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input32 [ 355.436023][ T5952] steelseries 0003:1038:1410.0007: missing HID_OUTPUT_REPORT 0 [ 355.481427][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 355.490201][ T9] usb 6-1: USB disconnect, device number 23 [ 355.980498][ T93] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 355.995002][ T93] usb 1-1: USB disconnect, device number 20 [ 356.367552][ T5983] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 356.667343][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 356.675793][ T5983] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 356.683361][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 356.685153][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.732725][ T5983] usb 6-1: Product: syz [ 356.744038][ T5983] usb 6-1: Manufacturer: syz [ 356.762853][ T5983] usb 6-1: SerialNumber: syz [ 356.861103][ T5983] usb 6-1: config 0 descriptor?? [ 357.120530][ T5983] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 357.255028][ T9797] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1040'. [ 357.375122][ T24] usb 7-1: USB disconnect, device number 3 [ 357.387789][ T880] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 357.415927][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 357.415944][ T30] audit: type=1400 audit(1757063507.254:512): avc: denied { create } for pid=9799 comm="syz.4.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 357.453631][ T30] audit: type=1400 audit(1757063507.284:513): avc: denied { listen } for pid=9799 comm="syz.4.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 357.474586][ T30] audit: type=1400 audit(1757063507.284:514): avc: denied { accept } for pid=9799 comm="syz.4.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 357.559907][ T880] usb 3-1: device descriptor read/64, error -71 [ 357.797589][ T880] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 357.859914][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 357.901621][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1042'. [ 358.097394][ T880] usb 3-1: device descriptor read/64, error -71 [ 358.110854][ T5925] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 358.208574][ T880] usb usb3-port1: attempt power cycle [ 358.211018][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 358.223843][ T24] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 358.234179][ T24] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 358.243415][ T24] usb 5-1: too many endpoints for config 2 interface 0 altsetting 153: 50, using maximum allowed: 30 [ 358.254920][ T5983] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 358.257320][ T24] usb 5-1: config 2 interface 0 altsetting 153 has 0 endpoint descriptors, different from the interface descriptor's value: 50 [ 358.277073][ T5983] usb 6-1: USB disconnect, device number 24 [ 358.291014][ T24] usb 5-1: config 2 interface 0 has no altsetting 0 [ 358.304913][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.315816][ T5925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 358.316079][ T24] usb 5-1: New USB device found, idVendor=0813, idProduct=0002, bcdDevice=ac.bf [ 358.334797][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 358.348057][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.363472][ T24] usb 5-1: Product: syz [ 358.367957][ T24] usb 5-1: Manufacturer: syz [ 358.373020][ T24] usb 5-1: SerialNumber: syz [ 358.380254][ T5925] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 358.391822][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.401854][ T5925] usb 1-1: Product: syz [ 358.406988][ T5925] usb 1-1: Manufacturer: syz [ 358.412365][ T5925] usb 1-1: SerialNumber: syz [ 358.420783][ T5925] usb 1-1: config 0 descriptor?? [ 358.548285][ T880] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 358.597428][ T30] audit: type=1400 audit(1757063508.404:515): avc: denied { connect } for pid=9817 comm="syz.6.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 358.870134][ T5925] usb 1-1: Found UVC 34.00 device syz (8086:0b5b) [ 358.901999][ T5925] usb 1-1: No valid video chain found. [ 358.911063][ T5925] usb 1-1: USB disconnect, device number 21 [ 358.913723][ T880] usb 3-1: device descriptor read/8, error -71 [ 359.187535][ T880] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 359.217546][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 359.228877][ T880] usb 3-1: device descriptor read/8, error -71 [ 359.338797][ T880] usb usb3-port1: unable to enumerate USB device [ 359.357437][ T9] usb 6-1: device descriptor read/64, error -71 [ 359.607426][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 359.747460][ T9] usb 6-1: device descriptor read/64, error -71 [ 359.756866][ T30] audit: type=1400 audit(1757063509.594:516): avc: denied { ioctl } for pid=9831 comm="syz.2.1049" path="socket:[28159]" dev="sockfs" ino=28159 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 359.781548][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.795008][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 359.858970][ T9] usb usb6-port1: attempt power cycle [ 360.546796][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 360.576652][ T9] usb 6-1: device descriptor read/8, error -71 [ 361.533678][ T24] gspca_main: ov519-2.14.0 probing 0813:0002 [ 361.558566][ T24] ov519 5-1:2.0: reg_w 50 failed -71 [ 361.617389][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 361.666431][ T9844] overlayfs: failed to resolve './file0': -2 [ 361.708706][ T9] usb 6-1: device descriptor read/8, error -71 [ 361.858568][ T9] usb usb6-port1: unable to enumerate USB device [ 362.331507][ T9853] sctp: [Deprecated]: syz.5.1056 (pid 9853) Use of int in max_burst socket option. [ 362.331507][ T9853] Use struct sctp_assoc_value instead [ 362.549688][ T9866] tipc: Enabling of bearer rejected, already enabled [ 362.622060][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 362.706402][ T5925] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 362.761664][ T9861] netlink: 'syz.0.1055': attribute type 10 has an invalid length. [ 362.897483][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 362.933517][ T5925] usb 7-1: unable to get BOS descriptor or descriptor too short [ 362.972979][ T5925] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 362.985434][ T9861] veth0_vlan: left promiscuous mode [ 363.012620][ T9861] veth0_vlan: entered promiscuous mode [ 363.018595][ T5925] usb 7-1: can't read configurations, error -71 [ 363.155544][ T9861] team0: Device veth0_vlan failed to register rx_handler [ 363.219206][ T9878] netlink: 'syz.4.1061': attribute type 63 has an invalid length. [ 363.222119][ T9881] fuse: Unknown parameter 'gro5pgòEZ00000000000000000000004' [ 363.967543][ T9899] fuse: Invalid rootmode [ 364.791793][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1069'. [ 364.829739][ T9908] tipc: Enabling of bearer rejected, failed to enable media [ 365.939632][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 366.117535][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 366.173186][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 366.192338][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.205932][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.220825][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.232527][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.259139][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.278856][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.453682][ T30] audit: type=1400 audit(1757063516.294:517): avc: denied { accept } for pid=9941 comm="syz.4.1079" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 366.546494][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 366.576849][ T9] usbtmc 3-1:16.0: can't read capabilities [ 367.338045][ T30] audit: type=1400 audit(1757063517.084:518): avc: denied { create } for pid=9947 comm="syz.6.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 367.558449][ T9929] usbtmc 3-1:16.0: INITIATE_CLEAR returned ba [ 367.643188][ T5983] usb 3-1: USB disconnect, device number 29 [ 367.893438][ T30] audit: type=1326 audit(1757063517.724:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e1f8ebe9 code=0x7ffc0000 [ 368.282174][ T30] audit: type=1326 audit(1757063517.724:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e1f8ebe9 code=0x7ffc0000 [ 368.323965][ T30] audit: type=1326 audit(1757063517.724:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd3e1f8ebe9 code=0x7ffc0000 [ 368.348455][ T30] audit: type=1326 audit(1757063517.724:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e1f8ebe9 code=0x7ffc0000 [ 368.360198][ T9968] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1087'. [ 368.373816][ T30] audit: type=1326 audit(1757063517.724:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e1f8ebe9 code=0x7ffc0000 [ 368.405345][ T30] audit: type=1326 audit(1757063517.724:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fd3e1f8ebe9 code=0x7ffc0000 [ 368.460704][ T30] audit: type=1326 audit(1757063517.724:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e1f8ebe9 code=0x7ffc0000 [ 368.485168][ T30] audit: type=1326 audit(1757063517.724:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9962 comm="syz.4.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e1f8ebe9 code=0x7ffc0000 [ 368.865477][ T9982] Mount JFS Failure: -22 [ 368.870106][ T9982] jfs_mount failed w/return code = -22 [ 368.906463][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1091'. [ 369.577412][ T24] ov519 5-1:2.0: Can't determine sensor slave IDs [ 369.584428][ T24] ov519 5-1:2.0: OV519 Config failed [ 369.711517][ T24] ov519 5-1:2.0: probe with driver ov519 failed with error -22 [ 369.802356][ T24] usb 5-1: USB disconnect, device number 38 [ 369.907454][ T5983] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 370.093613][ T5983] usb 6-1: Using ep0 maxpacket: 32 [ 370.118886][ T5983] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 370.136906][ T5983] usb 6-1: config 0 has no interface number 0 [ 370.174338][ T5983] usb 6-1: config 0 interface 89 has no altsetting 0 [ 370.221217][ T5983] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 370.242763][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.363665][ T5983] usb 6-1: Product: syz [ 370.403781][ T5983] usb 6-1: Manufacturer: syz [ 370.413648][ T5983] usb 6-1: SerialNumber: syz [ 370.675355][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 370.684671][T10006] veth1: entered promiscuous mode [ 370.693291][T10006] netlink: 'syz.4.1097': attribute type 8 has an invalid length. [ 370.730669][T10006] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 370.795954][ T5983] usb 6-1: config 0 descriptor?? [ 370.882170][ T5983] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 370.914716][ T5983] em28xx 6-1:0.89: Video interface 89 found: bulk [ 371.662709][ T5983] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 372.094859][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.105404][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.116759][T10022] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1103'. [ 372.125490][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.139945][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.151360][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.162628][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.171459][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.182570][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.198117][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.217735][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.226471][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.237848][ T93] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 372.259255][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.281219][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.306526][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.315557][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.325767][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.335739][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.344957][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.355170][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.428658][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.437709][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.448788][ T93] usb 7-1: Using ep0 maxpacket: 32 [ 372.456618][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.466930][ T93] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 372.480406][ T93] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 372.489397][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 372.501857][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.514700][ T5983] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 372.515016][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.527384][ T5983] em28xx 6-1:0.89: board has no eeprom [ 372.534808][ T93] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 372.546518][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.567879][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.577877][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.587768][ T93] usb 7-1: config 1 has no interface number 0 [ 372.598141][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.610487][ T93] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 118, changing to 10 [ 372.622422][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.624738][ T93] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 25348, setting to 1024 [ 372.630886][ T5983] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 372.630909][ T5983] em28xx 6-1:0.89: analog set to bulk mode. [ 372.631546][ T9] em28xx 6-1:0.89: Registering V4L2 extension [ 372.647196][ T93] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 372.678743][ T24] usb 3-1: config 0 has no interfaces? [ 372.686158][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 372.713662][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.757927][ T24] usb 3-1: config 0 descriptor?? [ 372.773149][ T5983] usb 6-1: USB disconnect, device number 29 [ 372.779738][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.823947][ T5983] em28xx 6-1:0.89: Disconnecting em28xx [ 372.846985][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.855185][ T93] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 372.866739][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.876786][T10021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 372.895028][ T9] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 372.902162][ T9] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 372.910625][ T9] em28xx 6-1:0.89: No AC97 audio processor [ 372.916579][ T93] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.922835][ T9] usb 6-1: Decoder not found [ 372.941954][ T9] em28xx 6-1:0.89: failed to create media graph [ 372.949526][ T9] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 372.962708][ T9] em28xx 6-1:0.89: Registering snapshot button... [ 373.083871][ T93] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 373.321662][ T93] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 374.400822][ T93] snd_usb_pod 7-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 375.053700][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input33 [ 375.066239][ T9] em28xx 6-1:0.89: Remote control support is not available for this card. [ 375.076909][ T5983] em28xx 6-1:0.89: Closing input extension [ 375.083844][ T5983] em28xx 6-1:0.89: Deregistering snapshot button [ 375.096428][T10038] netlink: 'syz.5.1107': attribute type 1 has an invalid length. [ 375.139088][ T5983] em28xx 6-1:0.89: Freeing device [ 375.648408][T10049] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45076 sclass=netlink_tcpdiag_socket pid=10049 comm=syz.0.1111 [ 375.702871][ T9] usb 7-1: USB disconnect, device number 6 [ 375.710398][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 375.857415][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 375.927385][ T5983] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 376.041792][ T24] usb 6-1: config 0 has no interfaces? [ 376.047680][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 376.056844][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.073888][ T24] usb 6-1: config 0 descriptor?? [ 376.079650][ T5983] usb 1-1: Using ep0 maxpacket: 32 [ 376.089099][ T5983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.127395][ T5983] usb 1-1: config 13 has an invalid interface number: 180 but max is 0 [ 376.136659][ T5983] usb 1-1: config 13 has no interface number 0 [ 376.147409][ T5983] usb 1-1: config 13 interface 180 has no altsetting 0 [ 376.161691][ T5983] usb 1-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=16.60 [ 376.175860][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.201660][ T5983] usb 1-1: Product: syz [ 376.225988][ T5983] usb 1-1: Manufacturer: syz [ 376.257784][ T5983] usb 1-1: SerialNumber: syz [ 377.365498][ T5912] usb 3-1: USB disconnect, device number 30 [ 377.376279][ T5983] usbtest 1-1:13.180: EZ-USB device [ 377.383742][ T5983] usbtest 1-1:13.180: high-speed {control bulk-in bulk-out} tests (+alt) [ 377.897914][T10067] Mount JFS Failure: -22 [ 377.902364][T10067] jfs_mount failed w/return code = -22 [ 377.924514][ T5983] usb 1-1: USB disconnect, device number 22 [ 377.934294][T10067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1114'. [ 378.238953][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.246512][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.144514][ T880] usb 6-1: USB disconnect, device number 30 [ 379.315599][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 379.315616][ T30] audit: type=1400 audit(1757063529.134:535): avc: denied { connect } for pid=10077 comm="syz.2.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 379.511196][T10086] vlan0: entered promiscuous mode [ 379.717511][ T880] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 379.847682][ T93] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 379.888622][ T880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.897898][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 379.901415][ T880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.919013][ T880] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.932532][ T880] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.942948][ T880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.968066][ T880] usb 7-1: config 0 descriptor?? [ 380.019355][ T93] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.031070][ T93] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.040881][ T93] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.054181][ T93] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.064643][ T93] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.074778][ T93] usb 1-1: config 0 descriptor?? [ 380.080103][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 380.089591][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.100487][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 380.112263][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 380.123472][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 380.135027][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.151090][ T24] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 380.160366][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.170047][ T24] usb 3-1: Product: syz [ 380.174237][ T24] usb 3-1: Manufacturer: syz [ 380.180892][ T24] usb 3-1: SerialNumber: syz [ 380.188968][ T24] usb 3-1: config 0 descriptor?? [ 380.197633][ T5983] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 380.227755][T10102] sit0: left promiscuous mode [ 380.233056][T10102] sit0: left allmulticast mode [ 380.279211][ T24] rc_core: IR keymap rc-imon-rsc not found [ 380.288285][ T24] Registered IR keymap rc-empty [ 380.295474][ T24] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 380.316200][ T24] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input34 [ 380.387404][ T5983] usb 5-1: Using ep0 maxpacket: 8 [ 380.411723][ T24] usb 3-1: USB disconnect, device number 31 [ 380.426565][ T880] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 380.465216][ T5983] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 380.485492][ T5983] usb 5-1: config 179 has no interface number 0 [ 380.494022][ T5983] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 380.513719][ T5983] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 380.535580][ T5983] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 380.543998][ T93] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 380.597482][ T5983] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 380.680816][ T5983] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 380.719964][ T5983] usb 5-1: config 179 interface 65 has no altsetting 0 [ 380.737467][ T5983] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 380.748265][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.800074][ T5983] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input35 [ 380.819598][T10106] FAULT_INJECTION: forcing a failure. [ 380.819598][T10106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.844305][T10106] CPU: 1 UID: 0 PID: 10106 Comm: syz.0.1120 Not tainted syzkaller #0 PREEMPT(full) [ 380.844329][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.844339][T10106] Call Trace: [ 380.844345][T10106] [ 380.844351][T10106] dump_stack_lvl+0x16c/0x1f0 [ 380.844376][T10106] should_fail_ex+0x512/0x640 [ 380.844400][T10106] _copy_to_user+0x32/0xd0 [ 380.844424][T10106] simple_read_from_buffer+0xcb/0x170 [ 380.844445][T10106] proc_fail_nth_read+0x197/0x240 [ 380.844467][T10106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.844490][T10106] ? rw_verify_area+0xcf/0x6c0 [ 380.844515][T10106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.844535][T10106] vfs_read+0x1e1/0xcf0 [ 380.844555][T10106] ? __pfx___mutex_lock+0x10/0x10 [ 380.844576][T10106] ? __pfx_vfs_read+0x10/0x10 [ 380.844600][T10106] ? __fget_files+0x20e/0x3c0 [ 380.844626][T10106] ksys_read+0x12a/0x250 [ 380.844642][T10106] ? __pfx_ksys_read+0x10/0x10 [ 380.844660][T10106] ? fdget+0x187/0x210 [ 380.844682][T10106] do_syscall_64+0xcd/0x4c0 [ 380.844704][T10106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.844722][T10106] RIP: 0033:0x7f3fc058d5fc [ 380.844737][T10106] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 380.844755][T10106] RSP: 002b:00007f3fc13d8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.844772][T10106] RAX: ffffffffffffffda RBX: 00007f3fc07c6090 RCX: 00007f3fc058d5fc [ 380.844783][T10106] RDX: 000000000000000f RSI: 00007f3fc13d80a0 RDI: 0000000000000005 [ 380.844794][T10106] RBP: 00007f3fc13d8090 R08: 0000000000000000 R09: 0000000000000000 [ 380.844803][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.844813][T10106] R13: 00007f3fc07c6128 R14: 00007f3fc07c6090 R15: 00007ffd16b55d08 [ 380.844837][T10106] [ 381.120792][ T24] usb 5-1: USB disconnect, device number 39 [ 381.120927][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 381.372372][T10110] netlink: 'syz.2.1125': attribute type 10 has an invalid length. [ 381.394162][T10110] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.409576][T10110] bond0: (slave team0): Enslaving as an active interface with an up link [ 381.711329][ T9] usb 1-1: USB disconnect, device number 23 [ 382.422667][T10120] netlink: 'syz.0.1129': attribute type 4 has an invalid length. [ 382.620578][ T5983] usb 7-1: USB disconnect, device number 7 [ 383.160144][T10134] netlink: 'syz.0.1129': attribute type 4 has an invalid length. [ 384.429694][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 384.597367][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 384.767500][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 384.795815][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 384.844306][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.887345][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 384.920585][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.978078][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.014003][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.123953][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.356503][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 385.372264][ T9] usbtmc 6-1:16.0: can't read capabilities [ 385.615285][T10144] usbtmc 6-1:16.0: INITIATE_CLEAR returned ba [ 385.928753][ T5961] usb 6-1: USB disconnect, device number 31 [ 386.199356][T10169] binder: 10166:10169 ioctl c0306201 200000000080 returned -14 [ 386.727365][ T5912] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 387.357502][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 387.375521][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 387.413888][ T5912] usb 3-1: config 115 has an invalid descriptor of length 0, skipping remainder of the config [ 387.467492][ T5912] usb 3-1: config 115 has no interfaces? [ 387.498289][ T5912] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=c6.3d [ 387.523719][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.550420][ T5912] usb 3-1: Product: syz [ 387.567407][ T5912] usb 3-1: Manufacturer: syz [ 387.583826][ T5912] usb 3-1: SerialNumber: syz [ 387.676103][ T5912] r8152-cfgselector 3-1: Unknown version 0x0000 [ 387.777671][ T5961] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 387.890803][T10172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.910768][T10172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.975626][ T5961] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 387.999493][ T5961] usb 1-1: config 0 has no interface number 0 [ 388.164219][ T5961] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.711911][ T5961] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 388.721639][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.104585][ T30] audit: type=1400 audit(1757063538.944:536): avc: denied { read } for pid=10196 comm="syz.6.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 389.111798][ T5961] usb 1-1: config 0 descriptor?? [ 389.141090][ T5961] ttusbir 1-1:0.83: cannot find expected altsetting [ 389.421941][ T5850] usb 1-1: USB disconnect, device number 24 [ 389.818236][ T5912] r8152-cfgselector 3-1: USB disconnect, device number 32 [ 390.267445][ T5912] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 390.963612][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 390.988733][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.039471][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.055582][ T5912] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 391.097387][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.181815][ T5912] usb 1-1: config 0 descriptor?? [ 392.675421][ T30] audit: type=1326 audit(1757063542.514:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.6.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 392.746483][ T30] audit: type=1326 audit(1757063542.514:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.6.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 392.794592][ T30] audit: type=1326 audit(1757063542.514:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.6.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 392.861161][ T30] audit: type=1326 audit(1757063542.514:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.6.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 393.332942][ T5912] usbhid 1-1:0.0: can't add hid device: -71 [ 393.352903][ T5912] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 393.515810][ T5912] usb 1-1: USB disconnect, device number 25 [ 393.546643][ T30] audit: type=1326 audit(1757063542.514:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.6.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 393.571273][T10248] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 393.791859][T10252] FAULT_INJECTION: forcing a failure. [ 393.791859][T10252] name failslab, interval 1, probability 0, space 0, times 0 [ 393.804891][T10252] CPU: 1 UID: 0 PID: 10252 Comm: syz.0.1166 Not tainted syzkaller #0 PREEMPT(full) [ 393.804933][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.804944][T10252] Call Trace: [ 393.804951][T10252] [ 393.804958][T10252] dump_stack_lvl+0x16c/0x1f0 [ 393.804984][T10252] should_fail_ex+0x512/0x640 [ 393.805009][T10252] should_failslab+0xc2/0x120 [ 393.805030][T10252] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 393.805051][T10252] ? sctp_chunkify+0x51/0x2d0 [ 393.805080][T10252] sctp_chunkify+0x51/0x2d0 [ 393.805105][T10252] _sctp_make_chunk+0x148/0x270 [ 393.805133][T10252] sctp_make_control+0x2f/0x2d0 [ 393.805159][T10252] sctp_make_init+0x6f0/0xdc0 [ 393.805193][T10252] ? __pfx_sctp_make_init+0x10/0x10 [ 393.805220][T10252] ? kernel_text_address+0x8d/0x100 [ 393.805243][T10252] ? unwind_get_return_address+0x59/0xa0 [ 393.805264][T10252] ? arch_stack_walk+0xa6/0x100 [ 393.805287][T10252] ? sctp_sm_lookup_event+0x15b/0x570 [ 393.805314][T10252] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 393.805343][T10252] sctp_sf_do_prm_asoc+0xbf/0x360 [ 393.805365][T10252] ? __pfx_sctp_pname+0x10/0x10 [ 393.805390][T10252] sctp_do_sm+0x17e/0x5c80 [ 393.805420][T10252] ? kasan_save_stack+0x42/0x60 [ 393.805435][T10252] ? kasan_save_stack+0x33/0x60 [ 393.805451][T10252] ? kasan_save_track+0x14/0x30 [ 393.805468][T10252] ? __pfx_sctp_do_sm+0x10/0x10 [ 393.805490][T10252] ? sctp_sendmsg+0xea2/0x1e10 [ 393.805510][T10252] ? __sys_sendto+0x43c/0x520 [ 393.805525][T10252] ? __x64_sys_sendto+0xe0/0x1c0 [ 393.805540][T10252] ? do_syscall_64+0xcd/0x4c0 [ 393.805558][T10252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.805604][T10252] ? sk_leave_memory_pressure+0xdd/0x130 [ 393.805629][T10252] ? __sk_mem_raise_allocated+0x94d/0x1670 [ 393.805655][T10252] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 393.805682][T10252] sctp_sendmsg_to_asoc+0xa45/0x1bf0 [ 393.805713][T10252] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 393.805730][T10252] ? lockdep_hardirqs_on+0x7c/0x110 [ 393.805757][T10252] ? sctp_sendmsg+0xe51/0x1e10 [ 393.805777][T10252] ? sctp_sendmsg+0xe5c/0x1e10 [ 393.805802][T10252] sctp_sendmsg+0xea2/0x1e10 [ 393.805833][T10252] ? __pfx_sctp_sendmsg+0x10/0x10 [ 393.805860][T10252] ? __pfx_sock_has_perm+0x10/0x10 [ 393.805880][T10252] ? rcu_is_watching+0x12/0xc0 [ 393.805917][T10252] ? security_socket_sendmsg+0x21c/0x240 [ 393.805941][T10252] ? __pfx_sctp_sendmsg+0x10/0x10 [ 393.805964][T10252] inet_sendmsg+0x119/0x140 [ 393.805991][T10252] __sys_sendto+0x43c/0x520 [ 393.806009][T10252] ? __pfx___sys_sendto+0x10/0x10 [ 393.806067][T10252] ? ksys_write+0x1ac/0x250 [ 393.806085][T10252] ? __pfx_ksys_write+0x10/0x10 [ 393.806107][T10252] __x64_sys_sendto+0xe0/0x1c0 [ 393.806123][T10252] ? do_syscall_64+0x91/0x4c0 [ 393.806143][T10252] ? lockdep_hardirqs_on+0x7c/0x110 [ 393.806161][T10252] do_syscall_64+0xcd/0x4c0 [ 393.806183][T10252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.806200][T10252] RIP: 0033:0x7f3fc058ebe9 [ 393.806215][T10252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.806232][T10252] RSP: 002b:00007f3fc13b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 393.806249][T10252] RAX: ffffffffffffffda RBX: 00007f3fc07c6180 RCX: 00007f3fc058ebe9 [ 393.806260][T10252] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000009 [ 393.806271][T10252] RBP: 00007f3fc13b7090 R08: 000020000005ffe4 R09: 000000000000001c [ 393.806282][T10252] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 393.806293][T10252] R13: 00007f3fc07c6218 R14: 00007f3fc07c6180 R15: 00007ffd16b55d08 [ 393.806318][T10252] [ 394.369578][ T30] audit: type=1326 audit(1757063542.514:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.6.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 394.394869][ T30] audit: type=1326 audit(1757063542.514:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.6.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 394.481495][ T30] audit: type=1326 audit(1757063542.514:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10223 comm="syz.6.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 394.859292][T10259] ceph: No mds server is up or the cluster is laggy [ 394.876845][ T24] libceph: connect (1)[c::]:6789 error -101 [ 394.889475][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 395.298670][T10268] Mount JFS Failure: -22 [ 395.386478][T10268] jfs_mount failed w/return code = -22 [ 395.717940][T10268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1172'. [ 395.795056][T10272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1171'. [ 396.159335][T10277] efs: device does not support 512 byte blocks [ 396.165699][T10277] device does not support 512 byte blocks [ 396.165699][T10277] [ 396.235499][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'. [ 396.244652][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'. [ 396.650357][ T30] audit: type=1400 audit(1757063546.044:545): avc: denied { ioctl } for pid=10274 comm="syz.0.1173" path="socket:[30420]" dev="sockfs" ino=30420 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 400.053265][T10316] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1185'. [ 401.296557][ T30] audit: type=1400 audit(1757063551.124:546): avc: denied { ioctl } for pid=10334 comm="syz.4.1193" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 402.840585][T10365] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1201'. [ 402.850461][T10365] unsupported nlmsg_type 40 [ 404.042775][T10380] syzkaller0: entered promiscuous mode [ 404.063725][T10380] syzkaller0: entered allmulticast mode [ 405.511212][ T30] audit: type=1326 audit(1757063554.974:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 405.537479][ T30] audit: type=1326 audit(1757063554.974:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 405.571822][ T30] audit: type=1326 audit(1757063554.974:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 405.762507][ T30] audit: type=1326 audit(1757063554.974:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 405.792460][ T30] audit: type=1326 audit(1757063554.984:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 405.875820][ T30] audit: type=1326 audit(1757063554.984:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 405.915193][T10392] Mount JFS Failure: -22 [ 405.919986][ T30] audit: type=1326 audit(1757063554.984:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 405.941156][T10392] jfs_mount failed w/return code = -22 [ 405.955277][T10396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1213'. [ 405.971192][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1211'. [ 406.165822][ T30] audit: type=1326 audit(1757063554.984:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 406.228619][ T30] audit: type=1326 audit(1757063554.984:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 406.329073][ T30] audit: type=1326 audit(1757063554.984:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 406.439052][ T30] audit: type=1326 audit(1757063554.984:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 406.541978][ T30] audit: type=1326 audit(1757063554.984:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 406.572876][ T30] audit: type=1326 audit(1757063554.984:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 406.901490][ T30] audit: type=1326 audit(1757063554.994:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 407.007336][ T30] audit: type=1326 audit(1757063554.994:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 407.053238][ T30] audit: type=1326 audit(1757063554.994:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 407.156342][ T30] audit: type=1326 audit(1757063554.994:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2618ebe9 code=0x7ffc0000 [ 407.999337][ T5850] IPVS: starting estimator thread 0... [ 408.011383][T10425] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 408.057979][T10425] FAULT_INJECTION: forcing a failure. [ 408.057979][T10425] name failslab, interval 1, probability 0, space 0, times 0 [ 408.070992][T10425] CPU: 1 UID: 0 PID: 10425 Comm: syz.6.1219 Not tainted syzkaller #0 PREEMPT(full) [ 408.071019][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.071029][T10425] Call Trace: [ 408.071035][T10425] [ 408.071042][T10425] dump_stack_lvl+0x16c/0x1f0 [ 408.071067][T10425] should_fail_ex+0x512/0x640 [ 408.071091][T10425] should_failslab+0xc2/0x120 [ 408.071113][T10425] __kmalloc_cache_noprof+0x6a/0x3e0 [ 408.071139][T10425] ? __pfx_ip_dst_mtu_maybe_forward.constprop.0+0x10/0x10 [ 408.071167][T10425] ? ip_setup_cork+0x63b/0xa30 [ 408.071191][T10425] ip_setup_cork+0x63b/0xa30 [ 408.071214][T10425] ip_append_data+0x163/0x1a0 [ 408.071237][T10425] ? __pfx_icmp_glue_bits+0x10/0x10 [ 408.071258][T10425] icmp_push_reply+0xa8/0x440 [ 408.071282][T10425] __icmp_send+0xcdf/0x1960 [ 408.071308][T10425] ? __pfx___icmp_send+0x10/0x10 [ 408.071325][T10425] ? rcu_is_watching+0x12/0xc0 [ 408.071348][T10425] ? kfree+0x201/0x4d0 [ 408.071373][T10425] ? ip_vs_ovf_schedule+0x19b/0x210 [ 408.071414][T10425] ? __pfx_ip_vs_sched_persist+0x10/0x10 [ 408.071444][T10425] ? __ip_vs_conn_in_get+0x69c/0xbf0 [ 408.071475][T10425] ip_vs_leave+0x4d5/0x1160 [ 408.071497][T10425] ? __pfx_ip_vs_leave+0x10/0x10 [ 408.071514][T10425] ? find_held_lock+0x2b/0x80 [ 408.071535][T10425] ? __pfx_ip_vs_schedule+0x10/0x10 [ 408.071552][T10425] ? ip_vs_conn_out_get+0x67f/0xb20 [ 408.071582][T10425] ? ip_vs_conn_in_get+0x85/0x1b0 [ 408.071607][T10425] ? ip_vs_service_find+0x19d/0x1020 [ 408.071628][T10425] ? list_set_create+0x72e/0x880 [ 408.071661][T10425] ? udp_conn_schedule+0x5b6/0x750 [ 408.071683][T10425] udp_conn_schedule+0x5b6/0x750 [ 408.071711][T10425] ? __pfx_udp_conn_schedule+0x10/0x10 [ 408.071733][T10425] ? __pfx_ip_vs_conn_in_get_proto+0x10/0x10 [ 408.071759][T10425] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 408.071799][T10425] ip_vs_in_hook+0xe01/0x27a0 [ 408.071824][T10425] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 408.071841][T10425] ? __pfx_ip_vs_out_hook+0x10/0x10 [ 408.071872][T10425] ? __lock_acquire+0x62e/0x1ce0 [ 408.071915][T10425] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 408.071934][T10425] nf_hook_slow+0xbe/0x200 [ 408.071957][T10425] nf_hook+0x370/0x680 [ 408.071976][T10425] ? __pfx_dst_output+0x10/0x10 [ 408.071998][T10425] ? __pfx_nf_hook+0x10/0x10 [ 408.072021][T10425] ? __pfx_dst_output+0x10/0x10 [ 408.072043][T10425] ? do_csum+0x26f/0x2d0 [ 408.072070][T10425] __ip_local_out+0x33a/0x7c0 [ 408.072092][T10425] ? __pfx_dst_output+0x10/0x10 [ 408.072115][T10425] ip_send_skb+0x4e/0x590 [ 408.072140][T10425] udp_send_skb+0x71d/0x15b0 [ 408.072170][T10425] udp_sendmsg+0x1813/0x2870 [ 408.072195][T10425] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 408.072220][T10425] ? __pfx_udp_sendmsg+0x10/0x10 [ 408.072250][T10425] ? __pfx_chacha_block_generic+0x10/0x10 [ 408.072287][T10425] ? look_up_lock_class+0x6b/0x150 [ 408.072304][T10425] ? _get_random_bytes+0xa9/0x1e0 [ 408.072341][T10425] udpv6_sendmsg+0x128f/0x2d20 [ 408.072376][T10425] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 408.072405][T10425] ? __lock_acquire+0xb97/0x1ce0 [ 408.072442][T10425] ? reacquire_held_locks+0xcd/0x1f0 [ 408.072481][T10425] ? rcu_is_watching+0x12/0xc0 [ 408.072502][T10425] ? __local_bh_enable_ip+0xa4/0x120 [ 408.072525][T10425] ? lockdep_hardirqs_on+0x7c/0x110 [ 408.072542][T10425] ? inet_autobind+0x145/0x1a0 [ 408.072563][T10425] ? __local_bh_enable_ip+0xa4/0x120 [ 408.072585][T10425] ? inet_autobind+0x14a/0x1a0 [ 408.072607][T10425] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 408.072630][T10425] ? inet6_sendmsg+0x105/0x140 [ 408.072652][T10425] inet6_sendmsg+0x105/0x140 [ 408.072676][T10425] ____sys_sendmsg+0x705/0xc70 [ 408.072703][T10425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.072740][T10425] ___sys_sendmsg+0x134/0x1d0 [ 408.072762][T10425] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.072814][T10425] __sys_sendmsg+0x16d/0x220 [ 408.072835][T10425] ? __pfx___sys_sendmsg+0x10/0x10 [ 408.072880][T10425] do_syscall_64+0xcd/0x4c0 [ 408.072903][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.072921][T10425] RIP: 0033:0x7f4c2618ebe9 [ 408.072937][T10425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.072955][T10425] RSP: 002b:00007f4c26f49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.072973][T10425] RAX: ffffffffffffffda RBX: 00007f4c263c6090 RCX: 00007f4c2618ebe9 [ 408.072984][T10425] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 408.072995][T10425] RBP: 00007f4c26f49090 R08: 0000000000000000 R09: 0000000000000000 [ 408.073005][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.073016][T10425] R13: 00007f4c263c6128 R14: 00007f4c263c6090 R15: 00007ffcc46dcab8 [ 408.073041][T10425] [ 408.747325][T10426] IPVS: using max 52 ests per chain, 124800 per kthread [ 410.149234][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 410.503364][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 410.509977][T10452] vlan0: entered promiscuous mode [ 410.528246][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 410.545096][ T9] usb 6-1: config 179 has no interface number 0 [ 410.563171][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 410.586964][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 410.635190][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 410.659811][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 410.739620][ T9] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 410.754247][ T9] usb 6-1: config 179 interface 65 has no altsetting 0 [ 410.772647][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 410.786293][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.811637][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input37 [ 411.308203][ T9] usb 6-1: USB disconnect, device number 32 [ 411.314196][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 411.909884][T10476] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1232'. [ 412.693790][T10483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1236'. [ 412.827408][ T5850] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 412.847507][ T5952] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 412.987566][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 413.001657][ T5850] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 413.022467][ T5850] usb 5-1: config 0 has no interface number 0 [ 413.036771][ T5850] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 413.050809][ T5952] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 413.069048][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 413.098137][ T5952] usb 6-1: Product: syz [ 413.106208][ T5952] usb 6-1: Manufacturer: syz [ 413.111734][ T5952] usb 6-1: SerialNumber: syz [ 413.120551][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.132137][ T5952] usb 6-1: config 0 descriptor?? [ 413.156549][ T5850] usb 5-1: Product: syz [ 413.169644][ T5850] usb 5-1: Manufacturer: syz [ 413.185687][ T5850] usb 5-1: SerialNumber: syz [ 413.224304][ T5850] usb 5-1: config 0 descriptor?? [ 413.252802][ T5850] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 413.511025][ T5850] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 413.517429][ T30] audit: type=1400 audit(1757063563.334:564): avc: denied { map } for pid=10480 comm="syz.5.1235" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 413.524335][ T5850] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 413.755434][ T30] audit: type=1400 audit(1757063563.334:565): avc: denied { execute } for pid=10480 comm="syz.5.1235" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 414.108602][ T30] audit: type=1400 audit(1757063563.944:566): avc: denied { mount } for pid=10474 comm="syz.4.1234" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 414.278474][T10501] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1241'. [ 414.607790][ T5983] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 414.802532][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 414.869906][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.966555][ T5983] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 415.020195][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.076308][ T5983] usb 3-1: Product: syz [ 415.112408][ T5983] usb 3-1: Manufacturer: syz [ 415.146962][ T5983] usb 3-1: SerialNumber: syz [ 415.248154][ T5983] usb 3-1: config 0 descriptor?? [ 415.300556][ T5983] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 415.352150][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 415.360334][ T5850] usb 5-1: USB disconnect, device number 40 [ 415.369137][ T5850] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 415.470336][ T5850] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 415.504278][ T5850] quatech2 5-1:0.51: device disconnected [ 415.550876][ T5983] usb 3-1: USB disconnect, device number 33 [ 415.813013][ T5983] usb 6-1: USB disconnect, device number 33 [ 416.329276][ T30] audit: type=1400 audit(1757063566.014:567): avc: denied { execmem } for pid=10516 comm="syz.4.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 416.523711][ T5850] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 416.531419][T10520] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 416.957743][ T5952] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 417.025023][ T5850] usb 1-1: config 0 has no interfaces? [ 417.137455][ T5850] usb 1-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 417.169076][ T5952] usb 7-1: Using ep0 maxpacket: 8 [ 417.193355][ T5952] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 417.213572][ T5952] usb 7-1: config 179 has no interface number 0 [ 417.221524][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.230168][ T5952] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 417.269579][ T5952] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 417.296304][ T5850] usb 1-1: config 0 descriptor?? [ 417.322740][ T5952] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 417.349645][ T5952] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 417.376333][ T5952] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 417.422477][T10538] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1252'. [ 417.447591][ T5952] usb 7-1: config 179 interface 65 has no altsetting 0 [ 417.464829][ T5952] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 417.484500][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.371221][ T5952] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input38 [ 418.497343][ T5983] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 419.673859][ T5952] usb 7-1: USB disconnect, device number 8 [ 419.673909][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 419.687388][ T30] audit: type=1400 audit(1757063569.514:568): avc: denied { shutdown } for pid=10547 comm="syz.5.1253" laddr=224.0.0.1 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 419.721826][ T5983] usb 3-1: config 0 has no interfaces? [ 419.748733][ T5983] usb 3-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 419.793120][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.845992][ T5983] usb 3-1: config 0 descriptor?? [ 420.096771][ T93] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 421.449393][ T93] usb 5-1: Using ep0 maxpacket: 16 [ 421.459855][ T93] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.473702][ T93] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 421.473885][T10556] FAULT_INJECTION: forcing a failure. [ 421.473885][T10556] name failslab, interval 1, probability 0, space 0, times 0 [ 421.495669][ T93] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.511239][T10556] CPU: 1 UID: 0 PID: 10556 Comm: syz.6.1256 Not tainted syzkaller #0 PREEMPT(full) [ 421.511265][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.511275][T10556] Call Trace: [ 421.511281][T10556] [ 421.511288][T10556] dump_stack_lvl+0x16c/0x1f0 [ 421.511313][T10556] should_fail_ex+0x512/0x640 [ 421.511332][T10556] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 421.511364][T10556] should_failslab+0xc2/0x120 [ 421.511384][T10556] __kmalloc_cache_node_noprof+0x6d/0x420 [ 421.511413][T10556] ? __get_vm_area_node+0x101/0x330 [ 421.511437][T10556] ? __lock_acquire+0x62e/0x1ce0 [ 421.511467][T10556] __get_vm_area_node+0x101/0x330 [ 421.511494][T10556] __vmalloc_node_range_noprof+0x271/0x14b0 [ 421.511519][T10556] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 421.511547][T10556] ? find_held_lock+0x2b/0x80 [ 421.511568][T10556] ? avc_has_perm_noaudit+0x117/0x3b0 [ 421.511588][T10556] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 421.511611][T10556] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 421.511637][T10556] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 421.511670][T10556] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 421.511687][T10556] __vmalloc_node_noprof+0xad/0xf0 [ 421.511712][T10556] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 421.511732][T10556] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 421.511748][T10556] ? security_capable+0x7e/0x260 [ 421.511769][T10556] bpf_prog_alloc+0x3b/0x230 [ 421.511784][T10556] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 421.511806][T10556] bpf_prog_load+0x1a04/0x2490 [ 421.511834][T10556] ? __pfx_bpf_prog_load+0x10/0x10 [ 421.511860][T10556] ? avc_has_perm+0x144/0x1f0 [ 421.511890][T10556] ? selinux_bpf+0xde/0x130 [ 421.511908][T10556] ? bpf_lsm_bpf+0x9/0x10 [ 421.511933][T10556] __sys_bpf+0x4a3f/0x4de0 [ 421.511959][T10556] ? __pfx___sys_bpf+0x10/0x10 [ 421.511982][T10556] ? ksys_write+0x190/0x250 [ 421.512004][T10556] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 421.512038][T10556] ? fput+0x9b/0xd0 [ 421.512061][T10556] ? ksys_write+0x1ac/0x250 [ 421.512077][T10556] ? __pfx_ksys_write+0x10/0x10 [ 421.512099][T10556] __x64_sys_bpf+0x78/0xc0 [ 421.512122][T10556] ? lockdep_hardirqs_on+0x7c/0x110 [ 421.512140][T10556] do_syscall_64+0xcd/0x4c0 [ 421.512161][T10556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.512179][T10556] RIP: 0033:0x7f4c2618ebe9 [ 421.512194][T10556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.512211][T10556] RSP: 002b:00007f4c26f6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.512228][T10556] RAX: ffffffffffffffda RBX: 00007f4c263c5fa0 RCX: 00007f4c2618ebe9 [ 421.512239][T10556] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 421.512249][T10556] RBP: 00007f4c26f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 421.512259][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.512269][T10556] R13: 00007f4c263c6038 R14: 00007f4c263c5fa0 R15: 00007ffcc46dcab8 [ 421.512292][T10556] [ 421.512305][T10556] syz.6.1256: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 421.543645][ T5850] usb 1-1: USB disconnect, device number 26 [ 421.697635][T10556] ,cpuset= [ 421.840790][ T93] usb 5-1: config 0 descriptor?? [ 421.864470][T10556] /,mems_allowed=0-1 [ 421.879461][T10556] CPU: 1 UID: 0 PID: 10556 Comm: syz.6.1256 Not tainted syzkaller #0 PREEMPT(full) [ 421.879485][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.879499][T10556] Call Trace: [ 421.879505][T10556] [ 421.879511][T10556] dump_stack_lvl+0x16c/0x1f0 [ 421.879542][T10556] warn_alloc+0x248/0x3a0 [ 421.879561][T10556] ? __pfx_warn_alloc+0x10/0x10 [ 421.879579][T10556] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 421.879607][T10556] ? __kasan_kmalloc+0x8a/0xb0 [ 421.879625][T10556] ? __get_vm_area_node+0x208/0x330 [ 421.879652][T10556] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 421.879678][T10556] ? find_held_lock+0x2b/0x80 [ 421.879698][T10556] ? avc_has_perm_noaudit+0x117/0x3b0 [ 421.879718][T10556] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 421.879744][T10556] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 421.879770][T10556] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 421.879801][T10556] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 421.879818][T10556] __vmalloc_node_noprof+0xad/0xf0 [ 421.879842][T10556] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 421.879862][T10556] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 421.879878][T10556] ? security_capable+0x7e/0x260 [ 421.879899][T10556] bpf_prog_alloc+0x3b/0x230 [ 421.879914][T10556] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 421.879935][T10556] bpf_prog_load+0x1a04/0x2490 [ 421.879962][T10556] ? __pfx_bpf_prog_load+0x10/0x10 [ 421.879987][T10556] ? avc_has_perm+0x144/0x1f0 [ 421.880017][T10556] ? selinux_bpf+0xde/0x130 [ 421.880034][T10556] ? bpf_lsm_bpf+0x9/0x10 [ 421.880060][T10556] __sys_bpf+0x4a3f/0x4de0 [ 421.880086][T10556] ? __pfx___sys_bpf+0x10/0x10 [ 421.880109][T10556] ? ksys_write+0x190/0x250 [ 421.880131][T10556] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 421.880166][T10556] ? fput+0x9b/0xd0 [ 421.880188][T10556] ? ksys_write+0x1ac/0x250 [ 421.880204][T10556] ? __pfx_ksys_write+0x10/0x10 [ 421.880226][T10556] __x64_sys_bpf+0x78/0xc0 [ 421.880247][T10556] ? lockdep_hardirqs_on+0x7c/0x110 [ 421.880265][T10556] do_syscall_64+0xcd/0x4c0 [ 421.880286][T10556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.880302][T10556] RIP: 0033:0x7f4c2618ebe9 [ 421.880316][T10556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.880333][T10556] RSP: 002b:00007f4c26f6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.880350][T10556] RAX: ffffffffffffffda RBX: 00007f4c263c5fa0 RCX: 00007f4c2618ebe9 [ 421.880362][T10556] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 421.880372][T10556] RBP: 00007f4c26f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 421.880382][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.880392][T10556] R13: 00007f4c263c6038 R14: 00007f4c263c5fa0 R15: 00007ffcc46dcab8 [ 421.880416][T10556] [ 421.880517][T10556] Mem-Info: [ 422.231356][T10556] active_anon:91363 inactive_anon:750 isolated_anon:0 [ 422.231356][T10556] active_file:18959 inactive_file:40765 isolated_file:0 [ 422.231356][T10556] unevictable:768 dirty:348 writeback:0 [ 422.231356][T10556] slab_reclaimable:12993 slab_unreclaimable:111664 [ 422.231356][T10556] mapped:48170 shmem:81152 pagetables:1696 [ 422.231356][T10556] sec_pagetables:0 bounce:0 [ 422.231356][T10556] kernel_misc_reclaimable:0 [ 422.231356][T10556] free:1178633 free_pcp:14066 free_cma:0 [ 422.283945][T10556] Node 0 active_anon:365428kB inactive_anon:3000kB active_file:75836kB inactive_file:162860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:196680kB dirty:1392kB writeback:0kB shmem:323072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13472kB pagetables:6604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 422.318550][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'. [ 422.406250][ T24] usb 3-1: USB disconnect, device number 34 [ 422.417835][T10556] Node 1 active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 422.424378][ T93] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 422.466412][T10556] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.521152][T10565] Mount JFS Failure: -22 [ 422.582065][T10556] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 422.595889][T10556] Node 0 DMA32 free:811708kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:363824kB inactive_anon:0kB active_file:75836kB inactive_file:161544kB unevictable:8536kB writepending:1412kB present:3129332kB managed:2539356kB mlocked:7200kB bounce:0kB free_pcp:35488kB local_pcp:23676kB free_cma:0kB [ 422.666003][ T5952] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 422.666418][T10565] jfs_mount failed w/return code = -22 [ 422.690101][T10556] lowmem_reserve[]: 0 0 1 1 1 [ 422.747443][T10556] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 422.795049][T10556] lowmem_reserve[]: 0 0 0 0 0 [ 422.802351][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1259'. [ 422.817330][T10556] Node 1 Normal free:3894508kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16572kB local_pcp:8256kB free_cma:0kB [ 422.850287][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 422.897322][ T5952] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 422.905826][ T5952] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.925940][T10556] lowmem_reserve[]: 0 0 0 0 0 [ 422.978201][T10556] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 423.001106][ T5952] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 423.031348][ T5952] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.041864][ T5952] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.065607][ T5952] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 423.074959][T10556] Node 0 DMA32: 1049*4kB (UME) 417*8kB (UME) 140*16kB (UME) 301*32kB (UM) 388*64kB (UME) 156*128kB (UME) 105*256kB (UM) 57*512kB (UM) 16*1024kB (UME) 5*2048kB (UME) 162*4096kB (UM) = 810444kB [ 423.095405][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.132486][ T93] usb 5-1: USB disconnect, device number 41 [ 423.193172][T10556] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 423.211059][T10556] Node 1 Normal: 177*4kB (UME) 45*8kB (UME) 46*16kB (UME) 157*32kB (UME) 53*64kB (UME) 10*128kB (UME) 4*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3894508kB [ 423.237127][T10556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.249076][T10556] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 423.290072][T10556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 423.311170][T10556] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 423.363042][T10556] 140876 total pagecache pages [ 423.369801][T10556] 0 pages in swap cache [ 423.374034][T10556] Free swap = 124996kB [ 423.383821][ T5952] usb 6-1: GET_CAPABILITIES returned 0 [ 423.391530][ T5952] usbtmc 6-1:16.0: can't read capabilities [ 423.410468][T10556] Total swap = 124996kB [ 423.427484][T10556] 2097051 pages RAM [ 423.431394][T10556] 0 pages HighMem/MovableOnly [ 423.440691][T10556] 430250 pages reserved [ 423.455453][T10556] 0 pages cma reserved [ 423.481555][ T30] audit: type=1400 audit(1757063565.331:569): avc: denied { setopt } for pid=10573 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 423.561465][T10579] syzkaller0: entered promiscuous mode [ 423.580522][T10579] syzkaller0: entered allmulticast mode [ 423.640440][T10563] usbtmc 6-1:16.0: INITIATE_CLEAR returned ba [ 423.668465][T10583] fuse: Unknown parameter 'zroup_id' [ 423.875488][ T5983] usb 6-1: USB disconnect, device number 34 [ 424.357370][ T880] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 424.522053][ T880] usb 7-1: config 0 has no interfaces? [ 424.530581][ T880] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.548801][ T880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.558759][ T880] usb 7-1: Product: syz [ 424.562968][ T880] usb 7-1: Manufacturer: syz [ 424.568994][ T880] usb 7-1: SerialNumber: syz [ 424.576274][ T880] usb 7-1: config 0 descriptor?? [ 424.820569][ T24] usb 7-1: USB disconnect, device number 9 [ 424.827479][ T5983] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 424.918283][ T30] audit: type=1400 audit(1757063566.771:570): avc: denied { watch } for pid=10605 comm="syz.2.1270" path="/255/file0" dev="tmpfs" ino=1370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 424.947402][ T30] audit: type=1400 audit(1757063566.771:571): avc: denied { watch_sb watch_reads } for pid=10605 comm="syz.2.1270" path="/255/file0" dev="tmpfs" ino=1370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 425.002837][ T5983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 425.022631][ T5983] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 425.044233][ T5983] usb 1-1: can't read configurations, error -71 [ 425.484375][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1274'. [ 426.061254][ T30] audit: type=1400 audit(1757063567.881:572): avc: denied { setopt } for pid=10625 comm="syz.5.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 426.117461][ T5983] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 426.319812][ T5983] usb 1-1: Using ep0 maxpacket: 8 [ 426.339400][ T5983] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 426.361824][ T5983] usb 1-1: config 179 has no interface number 0 [ 426.385710][ T5983] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 426.429221][ T5983] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 426.467361][ T5850] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 426.497706][ T5983] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 426.529321][ T5983] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 426.559920][ T5983] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 426.588742][ T5983] usb 1-1: config 179 interface 65 has no altsetting 0 [ 426.615918][ T5983] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 426.627335][ T5983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.673980][ T5983] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input39 [ 426.685222][ T5850] usb 7-1: Using ep0 maxpacket: 16 [ 426.713544][ T5850] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 426.723694][ T5850] usb 7-1: config 0 has no interface number 0 [ 426.752893][ T5850] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.784171][ T5850] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 426.819850][ T5850] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 426.839402][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 426.877540][ T5850] usb 7-1: Product: syz [ 426.892802][ T5850] usb 7-1: SerialNumber: syz [ 426.920103][ T5850] usb 7-1: config 0 descriptor?? [ 426.921581][T10650] Mount JFS Failure: -22 [ 426.933072][ T5850] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 426.950503][ T5850] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input40 [ 426.950830][T10650] jfs_mount failed w/return code = -22 [ 427.002291][T10650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1282'. [ 427.008656][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 427.052292][ T5850] usb 1-1: USB disconnect, device number 28 [ 427.278481][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 427.490259][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.499538][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.506741][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.514156][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.521294][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.528504][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.535617][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.545700][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.553685][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.560810][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 427.567808][ T5952] usb 7-1: USB disconnect, device number 10 [ 427.573968][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 427.637555][ T5952] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 427.737653][ T48] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 427.927840][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 427.956121][ T48] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 427.968580][ T48] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.982158][ T48] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 428.020761][ T48] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.036287][ T48] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.073293][ T48] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 428.117314][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.354407][T10663] syzkaller0: entered promiscuous mode [ 428.388070][T10663] syzkaller0: entered allmulticast mode [ 428.838973][ T48] usb 3-1: GET_CAPABILITIES returned 0 [ 428.854368][ T48] usbtmc 3-1:16.0: can't read capabilities [ 429.694162][T10680] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 429.730472][T10679] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 430.238349][T10686] Mount JFS Failure: -22 [ 430.242675][T10686] jfs_mount failed w/return code = -22 [ 430.316184][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1294'. [ 430.625784][ T5983] usb 3-1: USB disconnect, device number 35 [ 430.809971][ T5850] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 430.961505][T10695] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 430.997639][T10695] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 431.096085][ T5850] usb 7-1: config 0 has no interfaces? [ 431.134741][T10695] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 431.141058][T10695] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 431.151072][ T5850] usb 7-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 431.169557][T10695] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 431.187406][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.189704][T10695] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 431.218262][T10695] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 431.224468][T10695] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 431.233906][ T5850] usb 7-1: config 0 descriptor?? [ 431.250123][T10695] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 431.256252][T10695] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 431.289917][T10695] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 431.304642][T10695] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 431.846113][ T48] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 432.918928][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 432.925161][ T48] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 432.934493][ T48] usb 1-1: config 179 has no interface number 0 [ 432.946320][ T48] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 432.993192][ T48] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 433.013641][ T48] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 433.028358][ T48] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 433.040639][ T48] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 433.054803][ T48] usb 1-1: config 179 interface 65 has no altsetting 0 [ 433.063250][ T48] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 433.076273][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.115970][ T30] audit: type=1400 audit(1757063574.961:573): avc: denied { bind } for pid=10710 comm="syz.2.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.140401][ T48] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input41 [ 433.296626][T10714] block nbd2: Attempted send on invalid socket [ 433.305232][T10714] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 433.317671][T10714] block nbd2: Attempted send on invalid socket [ 433.323999][T10714] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 433.337463][T10714] Mount JFS Failure: -5 [ 433.991297][ T30] audit: type=1400 audit(1757063575.141:574): avc: denied { mounton } for pid=10710 comm="syz.2.1300" path="/syzcgroup/unified/syz2" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 434.081676][ T5850] usb 7-1: USB disconnect, device number 11 [ 434.151762][ T5983] usb 1-1: USB disconnect, device number 29 [ 434.151870][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 435.129845][T10728] Mount JFS Failure: -22 [ 435.134122][T10728] jfs_mount failed w/return code = -22 [ 435.160837][T10728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1304'. [ 435.649067][ T24] libceph: connect (1)[c::]:6789 error -101 [ 435.710059][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 435.961847][T10737] ceph: No mds server is up or the cluster is laggy [ 436.047037][ T30] audit: type=1400 audit(1757063577.891:575): avc: denied { wake_alarm } for pid=10743 comm="syz.2.1307" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 436.352430][T10752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.367719][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 436.426522][T10752] bond0: (slave bond1): Enslaving as an active interface with an up link [ 436.482559][ T30] audit: type=1400 audit(1757063578.331:576): avc: denied { map } for pid=10756 comm="syz.2.1310" path="socket:[32678]" dev="sockfs" ino=32678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 436.560140][T10760] tmpfs: Bad value for 'mpol' [ 436.717563][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 436.724595][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 436.775595][ T24] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 436.798524][ T24] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 436.809056][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.817748][ T24] usb 7-1: Product: syz [ 436.825028][ T24] usb 7-1: Manufacturer: syz [ 437.117011][ T24] usb 7-1: SerialNumber: syz [ 437.664327][ T24] usb 7-1: Cannot retrieve CPort count: -110 [ 437.789955][ T24] usb 7-1: Cannot retrieve CPort count: -110 [ 437.888138][ T5983] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 437.980471][ T24] es2_ap_driver 7-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 438.049244][ T5983] usb 5-1: Using ep0 maxpacket: 8 [ 438.062299][ T5983] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 438.071153][ T5983] usb 5-1: config 179 has no interface number 0 [ 438.074053][ T24] usb 7-1: USB disconnect, device number 12 [ 438.080978][ T5983] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 438.096575][ T5983] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 438.112952][ T5983] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 438.129497][ T5983] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 438.147128][ T5983] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 438.164870][ T5983] usb 5-1: config 179 interface 65 has no altsetting 0 [ 438.173374][ T5983] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 438.185396][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.210009][ T5983] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input42 [ 438.480663][ T5912] usb 5-1: USB disconnect, device number 42 [ 438.486652][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 439.110316][T10803] 9pnet_fd: Insufficient options for proto=fd [ 439.117495][ T48] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 439.264683][ T30] audit: type=1400 audit(1757063581.061:577): avc: denied { mount } for pid=10802 comm="syz.4.1324" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 439.297049][ T48] usb 7-1: Using ep0 maxpacket: 8 [ 439.314079][ T48] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 439.384214][ T48] usb 7-1: config 179 has no interface number 0 [ 439.450262][ T48] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 439.554972][ T48] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 439.585994][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.592975][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.664022][ T48] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 439.771566][ T48] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 439.864200][ T48] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 439.897479][ T5983] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 439.915264][ T48] usb 7-1: config 179 interface 65 has no altsetting 0 [ 439.930023][ T48] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 439.976497][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.052268][ T48] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input43 [ 440.124448][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 440.160473][ T5983] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 440.195607][ T5983] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 440.246763][ T5983] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 440.306121][ T5983] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.327043][ T5983] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.345845][ T5983] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 440.363412][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.404424][ T24] usb 7-1: USB disconnect, device number 13 [ 440.410725][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 440.611551][ T5983] usb 6-1: GET_CAPABILITIES returned 0 [ 440.617097][ T5983] usbtmc 6-1:16.0: can't read capabilities [ 440.866549][T10808] usbtmc 6-1:16.0: INITIATE_CLEAR returned ba [ 441.080338][ T5952] usb 6-1: USB disconnect, device number 35 [ 444.266102][T10869] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 444.466503][ T30] audit: type=1400 audit(1757063586.311:578): avc: denied { ioctl } for pid=10871 comm="syz.2.1344" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 444.492149][T10873] loop7: detected capacity change from 0 to 524255232 [ 444.597169][ T30] audit: type=1400 audit(1757063586.441:579): avc: denied { checkpoint_restore } for pid=10871 comm="syz.2.1344" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 444.619093][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.705913][ T30] audit: type=1400 audit(1757063586.441:580): avc: denied { create } for pid=10871 comm="syz.2.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 444.746063][ T30] audit: type=1400 audit(1757063586.441:581): avc: denied { write } for pid=10871 comm="syz.2.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 444.766257][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.341808][ T31] INFO: task syz.1.859:9093 blocked for more than 143 seconds. [ 445.481728][ T30] audit: type=1400 audit(1757063587.241:582): avc: denied { create } for pid=10884 comm="syz.6.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 445.503862][ T31] Not tainted syzkaller #0 [ 445.674367][ T30] audit: type=1400 audit(1757063587.521:583): avc: denied { write } for pid=10884 comm="syz.6.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 445.948096][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.957079][ T31] task:syz.1.859 state:D stack:27144 pid:9093 tgid:9086 ppid:5853 task_flags:0x400140 flags:0x00004004 [ 445.969496][ T31] Call Trace: [ 445.972781][ T31] [ 445.983849][ T31] __schedule+0x1190/0x5de0 [ 446.037413][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 446.042414][ T31] ? __pfx___schedule+0x10/0x10 [ 446.075433][ T31] ? find_held_lock+0x2b/0x80 [ 446.093314][ T31] ? schedule+0x2d7/0x3a0 [ 446.107339][ T31] schedule+0xe7/0x3a0 [ 446.111458][ T31] super_lock+0x2c0/0x3f0 [ 446.115801][ T31] ? __pfx_super_lock+0x10/0x10 [ 446.121092][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 446.126562][ T31] ? __iterate_supers+0x1b6/0x360 [ 446.131930][ T31] __iterate_supers+0x1e0/0x360 [ 446.136788][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 446.142819][ T31] ksys_sync+0x89/0x150 [ 446.146980][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 446.152077][ T31] ? rcu_is_watching+0x12/0xc0 [ 446.156921][ T31] ? do_syscall_64+0x91/0x4c0 [ 446.161889][ T31] __do_sys_sync+0xe/0x20 [ 446.166225][ T31] do_syscall_64+0xcd/0x4c0 [ 446.171136][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.177030][ T31] RIP: 0033:0x7f6ee938ebe9 [ 446.181782][ T31] RSP: 002b:00007f6eea1ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 446.190461][ T31] RAX: ffffffffffffffda RBX: 00007f6ee95c6270 RCX: 00007f6ee938ebe9 [ 446.199699][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 446.210025][ T31] RBP: 00007f6ee95c6270 R08: 0000000000000000 R09: 0000000000000000 [ 446.218693][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.226708][ T31] R13: 00007f6ee95c6308 R14: 00007f6ee95c6270 R15: 00007ffc654391f8 [ 446.238294][ T31] [ 446.241520][ T31] [ 446.241520][ T31] Showing all locks held in the system: [ 446.252196][ T31] 5 locks held by kworker/u8:1/13: [ 446.276474][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 446.293011][ T31] 1 lock held by khungtaskd/31: [ 446.303106][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 446.328722][ T31] 2 locks held by kworker/u8:6/3149: [ 446.334055][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 446.344171][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 446.352932][ T31] 1 lock held by udevd/5220: [ 446.357843][ T31] 2 locks held by getty/5602: [ 446.362513][ T31] #0: ffff88814d6130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 446.372349][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 446.382978][ T31] 1 lock held by syz.3.44/6123: [ 446.388134][ T31] #0: ffff88807b1100e0 (&type->s_umount_key#68/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0 [ 446.398309][ T31] 2 locks held by syz.5.1346/10882: [ 446.403518][ T31] [ 446.405835][ T31] ============================================= [ 446.405835][ T31] [ 446.414436][ T31] NMI backtrace for cpu 1 [ 446.414450][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 446.414468][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.414477][ T31] Call Trace: [ 446.414483][ T31] [ 446.414489][ T31] dump_stack_lvl+0x116/0x1f0 [ 446.414513][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 446.414537][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 446.414562][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 446.414586][ T31] watchdog+0xf0e/0x1260 [ 446.414607][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.414622][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.414640][ T31] ? __kthread_parkme+0x19e/0x250 [ 446.414662][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.414679][ T31] kthread+0x3c2/0x780 [ 446.414696][ T31] ? __pfx_kthread+0x10/0x10 [ 446.414714][ T31] ? rcu_is_watching+0x12/0xc0 [ 446.414734][ T31] ? __pfx_kthread+0x10/0x10 [ 446.414750][ T31] ret_from_fork+0x5d4/0x6f0 [ 446.414765][ T31] ? __pfx_kthread+0x10/0x10 [ 446.414782][ T31] ret_from_fork_asm+0x1a/0x30 [ 446.414812][ T31] [ 446.414818][ T31] Sending NMI from CPU 1 to CPUs 0: [ 446.531787][ C0] NMI backtrace for cpu 0 [ 446.531801][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 446.531817][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.531824][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 446.531843][ C0] Code: ec 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 e3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 446.531855][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 446.531871][ C0] RAX: 0000000002211add RBX: 0000000000000000 RCX: ffffffff8b942c29 [ 446.531880][ C0] RDX: 0000000000000000 RSI: ffffffff8de514d0 RDI: ffffffff8c162b00 [ 446.531888][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 446.531897][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 446.531905][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab6190 R15: 0000000000000000 [ 446.531913][ C0] FS: 0000000000000000(0000) GS:ffff8881246b6000(0000) knlGS:0000000000000000 [ 446.531927][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.531935][ C0] CR2: 00005555631795c8 CR3: 0000000025f32000 CR4: 00000000003526f0 [ 446.531944][ C0] Call Trace: [ 446.531948][ C0] [ 446.531952][ C0] default_idle+0x13/0x20 [ 446.531969][ C0] default_idle_call+0x6d/0xb0 [ 446.531984][ C0] do_idle+0x391/0x510 [ 446.532003][ C0] ? __pfx_do_idle+0x10/0x10 [ 446.532018][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 446.532035][ C0] cpu_startup_entry+0x4f/0x60 [ 446.532050][ C0] rest_init+0x16b/0x2b0 [ 446.532065][ C0] ? acpi_subsystem_init+0x133/0x180 [ 446.532078][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 446.532094][ C0] start_kernel+0x3ee/0x4d0 [ 446.532107][ C0] x86_64_start_reservations+0x18/0x30 [ 446.532119][ C0] x86_64_start_kernel+0x130/0x190 [ 446.532133][ C0] common_startup_64+0x13e/0x148 [ 446.532152][ C0] [ 446.532815][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 446.728834][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 446.737929][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.747961][ T31] Call Trace: [ 446.751232][ T31] [ 446.754157][ T31] dump_stack_lvl+0x3d/0x1f0 [ 446.758736][ T31] vpanic+0x6e8/0x7a0 [ 446.762713][ T31] ? __pfx_vpanic+0x10/0x10 [ 446.767228][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 446.773306][ T31] panic+0xca/0xd0 [ 446.777015][ T31] ? __pfx_panic+0x10/0x10 [ 446.781418][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 446.786778][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 446.792939][ T31] ? watchdog+0xd78/0x1260 [ 446.797341][ T31] ? watchdog+0xd6b/0x1260 [ 446.801755][ T31] watchdog+0xd89/0x1260 [ 446.805985][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.810640][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.815821][ T31] ? __kthread_parkme+0x19e/0x250 [ 446.820835][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.825492][ T31] kthread+0x3c2/0x780 [ 446.829553][ T31] ? __pfx_kthread+0x10/0x10 [ 446.834123][ T31] ? rcu_is_watching+0x12/0xc0 [ 446.838874][ T31] ? __pfx_kthread+0x10/0x10 [ 446.843441][ T31] ret_from_fork+0x5d4/0x6f0 [ 446.848009][ T31] ? __pfx_kthread+0x10/0x10 [ 446.852577][ T31] ret_from_fork_asm+0x1a/0x30 [ 446.857331][ T31] [ 446.860525][ T31] Kernel Offset: disabled [ 446.864821][ T31] Rebooting in 86400 seconds..