last executing test programs: 9m42.606857352s ago: executing program 4 (id=291): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x6, 0x7ff00003}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000c4000007008209", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r9) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) syz_pidfd_open(0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) 9m41.703574128s ago: executing program 4 (id=296): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0xfc, r2, 0x202, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x400}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xa540}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x3ff}, {0x8, 0xb, 0xb9}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r3 = gettid() r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r4, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x4002) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) ptrace$ARCH_MAP_VDSO_32(0x1e, r3, 0x60a, 0x2002) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r7, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) 9m40.937159186s ago: executing program 4 (id=300): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000480)={'wlan1\x00', {0x2, 0x4e22, @loopback}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r4 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000023000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r6 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) write$binfmt_aout(r6, 0x0, 0xc8) 9m39.886482044s ago: executing program 4 (id=306): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000002140)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000074000904340102d469e70009058acf", @ANYRESHEX=r3], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x2000040) 9m35.039873541s ago: executing program 4 (id=317): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xd, 0x40010, r0, 0x100000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r2, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca208004b7c2ef6835a813f4674e7c6de832d1b95293122", 0x22, 0x0, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x95, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) close(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 9m34.828528866s ago: executing program 4 (id=318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r1, 0x4140aecd, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) r3 = syz_clone3(&(0x7f00000002c0)={0x2000000, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0, {0x26}, &(0x7f0000000880)=""/4096, 0x1000, &(0x7f0000000240)=""/18, &(0x7f0000000280)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x6, 0x8, {r4}, {0xee00}, 0x1, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x1d38, 0xe, {r5}, {r6}, 0xfffffffffffffff8, 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x200004, r7, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{0x0}], 0x1) r9 = syz_io_uring_setup(0x128d, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x1039d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) sched_setattr(r3, &(0x7f0000000400)={0x38, 0x5, 0x8000000, 0x8, 0x6, 0x4, 0xc3, 0x5, 0x3, 0x4}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 9m31.847562157s ago: executing program 2 (id=329): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="480000001000012100000000000000000000000a20000000090a01040000000000000000070000000900010073797a3000000000140000001000010000000000000000000084000a"], 0x48}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) syz_open_dev$vim2m(0x0, 0xd, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010007", 0x7) 9m31.675671673s ago: executing program 2 (id=331): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x4000, 0xdc0, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 9m31.605223386s ago: executing program 2 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x69, 0x0, 0x2, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)={0x10, 0x13, 0x1, 0x2, 0x25dfdbf6}, 0x10}], 0x1, 0x0, 0x0, 0x80c0}, 0x4080) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000140)="b882008ee8f3cf66b80500000066b9f1000000a00f01c1c1c7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x39}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd24, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 9m30.230909824s ago: executing program 2 (id=335): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000db00009500000000000000c077fa9c06d9e9676f8a1561ed17fcc1d0478d28e9fa90657d350885f0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x100) mount$afs(&(0x7f0000000280)=@cell={0x23, 'syz0:', 'syz1', '.backup'}, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x80, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000c40)={0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20018804}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900", 0x4}], 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 9m29.00978736s ago: executing program 2 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1ff, 0xd5, 0x5, 0x5, 0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x6, 0x9, 0x80000000, 0xfffffffd]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000885}, 0x4000000) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r6, &(0x7f0000000380)=""/144, 0x90) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x7fff, @any, 0x6, 0x2}, 0xe) close_range(r7, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) 9m26.519246597s ago: executing program 2 (id=351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3314) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, 0x0, 0x0, 0x10000, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001900)=ANY=[@ANYBLOB="1201000000000010ec13060000000000000109022400010000a00009040000010300000009210000000122050009058103000000000165513e1889f9ce3ae94a44f207f463f2cd3d18b9d270da7ac98312a5a54e04377e0993839f43f656a7e8f94e78cbbd04c71a5ccb7ad942410a2b74546b795174684735a15b44bad2cd7e207bd22ec57bcab4985b82880b063d9b4e7abc519a0d9b8d89c8c16164"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000000)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="201170"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r5}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000002b40)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f00000007c0)={{r2}, 0x0, 0x2, @unused=[0x4, 0x892, 0x9, 0xb0a3], @devid=r10}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001b40)={{r1}, 0x0, 0x0, @unused=[0x6, 0x802, 0x2, 0x80000000], @devid=r10}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r12 = dup3(r11, r1, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314, 0x700}], 0x0, 0x0, 0x0}) recvmsg(r12, &(0x7f00000000c0)={&(0x7f00000017c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001a40)=""/230, 0xe6}], 0x1, &(0x7f0000001840)=""/138, 0x8a}, 0x10000) 9m19.479760569s ago: executing program 32 (id=318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r1, 0x4140aecd, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) r3 = syz_clone3(&(0x7f00000002c0)={0x2000000, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0, {0x26}, &(0x7f0000000880)=""/4096, 0x1000, &(0x7f0000000240)=""/18, &(0x7f0000000280)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x6, 0x8, {r4}, {0xee00}, 0x1, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x1d38, 0xe, {r5}, {r6}, 0xfffffffffffffff8, 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x200004, r7, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{0x0}], 0x1) r9 = syz_io_uring_setup(0x128d, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x1039d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) sched_setattr(r3, &(0x7f0000000400)={0x38, 0x5, 0x8000000, 0x8, 0x6, 0x4, 0xc3, 0x5, 0x3, 0x4}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 9m10.972504875s ago: executing program 33 (id=351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3314) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, 0x0, 0x0, 0x10000, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001900)=ANY=[@ANYBLOB="1201000000000010ec13060000000000000109022400010000a00009040000010300000009210000000122050009058103000000000165513e1889f9ce3ae94a44f207f463f2cd3d18b9d270da7ac98312a5a54e04377e0993839f43f656a7e8f94e78cbbd04c71a5ccb7ad942410a2b74546b795174684735a15b44bad2cd7e207bd22ec57bcab4985b82880b063d9b4e7abc519a0d9b8d89c8c16164"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000000)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="201170"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r5}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000002b40)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f00000007c0)={{r2}, 0x0, 0x2, @unused=[0x4, 0x892, 0x9, 0xb0a3], @devid=r10}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001b40)={{r1}, 0x0, 0x0, @unused=[0x6, 0x802, 0x2, 0x80000000], @devid=r10}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r12 = dup3(r11, r1, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314, 0x700}], 0x0, 0x0, 0x0}) recvmsg(r12, &(0x7f00000000c0)={&(0x7f00000017c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001a40)=""/230, 0xe6}], 0x1, &(0x7f0000001840)=""/138, 0x8a}, 0x10000) 2m42.680943357s ago: executing program 0 (id=1431): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x10000) sigaltstack(0x0, &(0x7f0000001280)={0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000640)={@remote, @dev={0xfe, 0x80, '\x00', 0x10}, @empty, 0x9, 0x40, 0x8000, 0x100, 0x0, 0x110227}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r0, &(0x7f0000000780)="7057dacba2", 0x5, 0x24000011, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba1e9bb7ec30de54e3d82d4e023f9a336ec7e55fefd0d3c8f30eea40e40a6e32d6873837bb90f2fafc91", 0xffffffffffffff29, 0x80, 0x0, 0x0) 2m40.935855574s ago: executing program 0 (id=1437): r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x6, 0xd5}}}}]}, 0x44}}, 0x44884) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0x5, 0xa, 0x3, 0xc, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x1000, &(0x7f00000014c0)=""/4096, 0xa1980, 0x8, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r2, r2, r2], &(0x7f0000000480)=[{0x3, 0x2, 0x8}, {0x2, 0x5, 0x10, 0x1}, {0x5, 0x5, 0xc, 0xa}], 0x10, 0xc}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map=r1, r3, 0x2b, 0x1, r5, @void, @value=r3, @void, @void, r6}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff2}}]}}]}, 0x40}}, 0x2000c800) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m40.17925554s ago: executing program 0 (id=1441): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) (fail_nth: 15) r2 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, 0x0, &(0x7f00000001c0)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_emit_vhci(&(0x7f0000009c40)=ANY=[], 0x17) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) r6 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mq_notify(r6, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2, @thr={0x0, 0x0}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48050}, 0x40) 2m36.172720439s ago: executing program 0 (id=1445): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7f, 0x9, 0x1, 0x8, 0x8, 0x40da, 0xfff, 0x6a06, 0x0}, &(0x7f0000000040)=0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x74}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$llc_int(r0, 0x10c, 0x1, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e24, 0x8f23, @mcast2, 0x4}}}, 0x84) pwrite64(r0, 0xfffffffffffffffc, 0x0, 0x1000) 2m32.461477451s ago: executing program 0 (id=1460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f", 0x2e}, {&(0x7f0000001400)="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", 0x79b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket(0x10, 0x803, 0x0) 2m31.367956637s ago: executing program 0 (id=1463): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000f00)=@urb_type_interrupt={0x1, {0xe, 0x1}, 0x9, 0x4, &(0x7f0000000e80)="c5456f8c06a561ee", 0x8, 0x10, 0x6, 0x0, 0x2, 0x7, &(0x7f0000000ec0)="697b59116e4e5361201f4186cff3af2acd706cca7ebdcfc3771ef6443530b2cb4b49433f4c9ee63c00856e5c2be4a7ae"}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file5\x00', 0x3) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000300)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000fc0)={'veth0_virt_wifi\x00', &(0x7f0000000f40)=@ethtool_test={0x1a, 0xf, 0x1, 0x9, [0x2, 0x26, 0x3, 0x3, 0x399, 0x7, 0x4f89, 0x400, 0x7]}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x3}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r1, &(0x7f0000000d40)=[{{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000680)=[{&(0x7f0000000040)=""/33, 0x21}, {&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000580)=""/74, 0x4a}, {&(0x7f0000000600)=""/120, 0x78}], 0x5}, 0xe}, {{&(0x7f0000000700)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/8, 0x8}], 0x1, &(0x7f00000007c0)=""/112, 0x70}, 0x8e}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/163, 0xa3}, {&(0x7f00000009c0)=""/81, 0x51}, {&(0x7f0000000a40)=""/184, 0xb8}], 0x3, &(0x7f0000000b40)=""/42, 0x2a}, 0x1}, {{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c00)=""/91, 0x5b}], 0x1, &(0x7f0000000cc0)=""/96, 0x60}, 0x7}], 0x4, 0x0, &(0x7f0000000e40)={0x77359400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) preadv(r0, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) 2m16.33146561s ago: executing program 34 (id=1463): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000f00)=@urb_type_interrupt={0x1, {0xe, 0x1}, 0x9, 0x4, &(0x7f0000000e80)="c5456f8c06a561ee", 0x8, 0x10, 0x6, 0x0, 0x2, 0x7, &(0x7f0000000ec0)="697b59116e4e5361201f4186cff3af2acd706cca7ebdcfc3771ef6443530b2cb4b49433f4c9ee63c00856e5c2be4a7ae"}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file5\x00', 0x3) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000300)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000fc0)={'veth0_virt_wifi\x00', &(0x7f0000000f40)=@ethtool_test={0x1a, 0xf, 0x1, 0x9, [0x2, 0x26, 0x3, 0x3, 0x399, 0x7, 0x4f89, 0x400, 0x7]}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x3}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r1, &(0x7f0000000d40)=[{{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000680)=[{&(0x7f0000000040)=""/33, 0x21}, {&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000580)=""/74, 0x4a}, {&(0x7f0000000600)=""/120, 0x78}], 0x5}, 0xe}, {{&(0x7f0000000700)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/8, 0x8}], 0x1, &(0x7f00000007c0)=""/112, 0x70}, 0x8e}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/163, 0xa3}, {&(0x7f00000009c0)=""/81, 0x51}, {&(0x7f0000000a40)=""/184, 0xb8}], 0x3, &(0x7f0000000b40)=""/42, 0x2a}, 0x1}, {{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c00)=""/91, 0x5b}], 0x1, &(0x7f0000000cc0)=""/96, 0x60}, 0x7}], 0x4, 0x0, &(0x7f0000000e40)={0x77359400}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) preadv(r0, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) 51.669729947s ago: executing program 7 (id=1771): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x540, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd8', 0x31d043, 0x43) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004f000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) r4 = fsopen(&(0x7f0000000040)='anon_inodefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x20) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) 50.075061183s ago: executing program 7 (id=1774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)='\x01') r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000001463432f0b3a4afe5ddf98f"], 0x0, 0x1a}, 0x28) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0xff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 47.660081113s ago: executing program 7 (id=1783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x130c17, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008800}, 0x40d0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) close(r1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fremovexattr(r4, &(0x7f0000000480)=ANY=[]) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 46.213412596s ago: executing program 7 (id=1786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="210f2dbd02000000df2502"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x10) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x40) syz_fuse_handle_req(r8, 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r9, 0xc0305302, &(0x7f0000000000)={0xf, 0x8, 0x0, 0x6, 0x3ff, 0x8}) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc) 44.872342715s ago: executing program 7 (id=1790): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000004000)={0xf, {"a2e3ad21ed0d09f91b50090987f70906d038e7ff7fc6e5539b0d3d0e8b089b33396d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe59}}, 0xfa) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000d00)=ANY=[@ANYBLOB="7472616e733d756e69782c00af0b08c0e8bf5d5ec64a50fc43fd9b18a407300e850bde285c1f36ccf9c64deeec699fb91b904a9f9511377cf9a14fb59aff62177f975eba6b9d48300bb208d10a867a32d8934d6e79495b3cf882d196d3ecc70f2ab1b4ca775907b3f637d1779b1b63715f27e6c8ab7e9576ba037d8c39be5ce73a0b3724cdcaad8d8bf22562200200000032c11cb12550524094fda4598e97520f7741ec12599eece6b710fab8202a6f926ace78ec77da1bc1b64f"]) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) 39.046267171s ago: executing program 7 (id=1808): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0xfffb, 0x3, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3f, 0x4, @mcast1}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000780)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000440)=0xf19e953, 0x4) connect$caif(r3, &(0x7f0000000780), 0x18) 38.618922021s ago: executing program 35 (id=1808): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0xfffb, 0x3, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3f, 0x4, @mcast1}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000780)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000440)=0xf19e953, 0x4) connect$caif(r3, &(0x7f0000000780), 0x18) 13.672203004s ago: executing program 5 (id=1878): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x540, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd8', 0x31d043, 0x43) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004f000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) r4 = fsopen(&(0x7f0000000040)='anon_inodefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) 13.139434736s ago: executing program 5 (id=1879): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc8, 0x54, 0x9b, 0x40, 0x2c7c, 0x30e, 0x8128, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x18, 0xd4, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000200)={@empty, @broadcast, @void, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x21, 0x3, 0x0, 0x0, "9e3877a817b4a0469231c43d59e08540cf617695ec38ba72dcd443f0fa088a2580b62e40e9ca597635ac44d6288b2009bd94a6f7facd8c69aa41e42a9b5a06c7"}}}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004a00030000000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000080)) syz_open_dev$I2C(&(0x7f00000001c0), 0xfffffffffffffff7, 0x40) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/schedstat\x00', 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.52172659s ago: executing program 8 (id=1882): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1000, 0x10, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x24, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)='\x00\r\x00\x00\x00\x00', 0x6) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) process_vm_readv(r3, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4091, 0xffb}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x40045702, 0x0) ptrace(0x10, r4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0x8b09e, 0x2, 0x0, 0x1000256}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x3, 0xfa) 10.811460648s ago: executing program 5 (id=1886): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, &(0x7f00000001c0)={0x20, 0x23, 0x55, {0x55, 0x21, "cc69784bd794d277ca52fa131449f531b60e015e0e639ddb31811c060a6aef18c2bdc76453a73accbb321772187bdceb6e9fa83ec362ddfb20cf1077d768a27e2aa46b7b52228c6efa87cf95818f3f5f4decaf"}}, &(0x7f0000000340)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "c8aad6d250d24c6a9ae8ed30f3f3c5a641ebd0d4c06d936f2a2cf1a71970f5a4abc0009f2db03d76f30989b27512004833126ba37140408c5f70647ea10606fd27894f44da5040495c7bda1f684213e332656c7a9f689d55ecaaedf8544dff3a4e03420532453c237de2b3ad015cb37c91ab118eb53b1fe622f31f136331d1e4bcd3102dcaaa35a1f24eee43b4a282502409f2a625a3cf6883104be52dbedce58d92a95db7f47617015ce5657006d514686250"}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000240)={0x0, 0x3, 0x16, "23cefdbb2e4b746daf4c955528b05fba471bb323f758"}, &(0x7f0000000780)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000440)={0x21, 0x0, 0x3, "75ddf8"}}) 10.117008694s ago: executing program 3 (id=1887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 9.925936264s ago: executing program 3 (id=1889): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000780)={0x0, &(0x7f0000000040)=[@code={0x1, 0x6f, {"66470f64dfc4a3255f1d040000000266baf80cb8ecdcf388ef66bafc0cb86b420000ef0fc76cf3b30f01f8c4619e5a72f8b9800000c00f3235010000000f30420f01c448b85a000000000000000f23c00f21f835020007000f23f843cd05"}}, @code={0x1, 0x63, {"d060b93e660f382a0f0f20c035010000000f22c048b808000000000000000f23c80f21f8350000c0000f23f866ba410066ed430f0fa4da81966fb7a6c46255453ca60f005da4f2410f2b833e4b285a430f30"}}], 0xd2}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8.987301328s ago: executing program 8 (id=1892): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x1, 0xee}, 0x2) 8.785099717s ago: executing program 6 (id=1893): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4040080) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x86a242, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0']) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r5, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000000)=0x1) r6 = memfd_create(&(0x7f0000000380)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97bla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0\x00\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r9, @ANYBLOB="f00014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r6, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) 7.879041257s ago: executing program 8 (id=1894): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, &(0x7f00000001c0)={0x20, 0x23, 0x55, {0x55, 0x21, "cc69784bd794d277ca52fa131449f531b60e015e0e639ddb31811c060a6aef18c2bdc76453a73accbb321772187bdceb6e9fa83ec362ddfb20cf1077d768a27e2aa46b7b52228c6efa87cf95818f3f5f4decaf"}}, &(0x7f0000000340)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "c8aad6d250d24c6a9ae8ed30f3f3c5a641ebd0d4c06d936f2a2cf1a71970f5a4abc0009f2db03d76f30989b27512004833126ba37140408c5f70647ea10606fd27894f44da5040495c7bda1f684213e332656c7a9f689d55ecaaedf8544dff3a4e03420532453c237de2b3ad015cb37c91ab118eb53b1fe622f31f136331d1e4bcd3102dcaaa35a1f24eee43b4a282502409f2a625a3cf6883104be52dbedce58d92a95db7f47617015ce5657006d514686250"}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000240)={0x0, 0x3, 0x16, "23cefdbb2e4b746daf4c955528b05fba471bb323f758"}, &(0x7f0000000780)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000440)={0x21, 0x0, 0x3, "75ddf8"}}) close(0xffffffffffffffff) 7.793766346s ago: executing program 6 (id=1895): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x200000000248}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0xa0363159, 0x3, 0x0, [{0x8, 0xf}, {0xb, 0x7fffffff}, {0xd, 0x8}, {0x5, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x710002, 0x81) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket(0x2, 0x80805, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) 7.768856901s ago: executing program 1 (id=1896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sessionid\x00') exit(0xfffffffffffffffd) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/239, 0xef}], 0x1, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xc, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x79a}, 0x1c) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x3ffd, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="66b92c0a000066b806ed573166ba000000000f30660f5fdb66b9910b00000f32660f388263f9f3a56766c7442400020000006766c7442402fcffffff6766c744240600000000670f011c2466b80500000066b9020000000f01d90f12e0af67e1b0", 0x61}], 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000280), 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 7.652009761s ago: executing program 5 (id=1897): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0xfffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_other_inode_update_time\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0xfffffffffffffef7) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x800000000, 0x82080) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000200000018260000a9e5c1dbc26995b48ed8c33ec73ef0f1d9d3e7fe8f6f669cb8ac380298473bc7d4997717f9ff966fa7bc703a7b78069f641df0cbe331442b80c6bbb7e1a26c967d8823c47f23dea09497963667f9b730c59917a8e78451247bb3fabc5ac62333f0299302f02cdb1d904b4ba82e15687dc61d21085c0346f48552ec72801a654753cb6719ac5af5236d0f62787c91589eb9", @ANYRES32, @ANYBLOB="00000000010000001865000005000000000000000e00000018310000040000000000000000000000185000000900"/56], &(0x7f0000000400)='GPL\x00', 0x9, 0xb5, &(0x7f0000000440)=""/181, 0x41000, 0x27, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0x3, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000940)=[0xffffffffffffffff, r3, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000980)=[{0x2, 0x2, 0xd}], 0x10, 0x9000}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2008010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='rpcgss_svc_seqno_bad\x00'}, 0x18) syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r7, 0x2}}, 0x18) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 6.909161466s ago: executing program 3 (id=1898): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) clock_nanosleep(0x9, 0xfcfdffff, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 6.741778422s ago: executing program 6 (id=1899): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x3, &(0x7f00000000c0)="94b6f34d0db9eb7ca91467c0e0b8f76b58757b1b6f0bbe00dbca4114e838c9a1472fa4258fe5094dc0592c803bc7c90503b67884f10d470693d3921886c3b7505e456839a29215d2a41385d1a4abc1269b607d2e8ba37067db66529fe7cd22435367d8fa192e43a95ab3e659403af2d09f3b90b5510bd86226cb6734d27178f872fa5c04fc24cae2c92ef1851e2fac3e4c4f3c9e83d4bce7555360e3ec31716f263799725a1d7527088f6614d722ece0e632795436467afda6e4c6557f2ba5ddd72fdef6178393ed65c3f27b43fac6a6") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x54583}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) setsockopt$packet_tx_ring(r2, 0x107, 0x5, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) socket$inet_sctp(0x2, 0x4, 0x84) ptrace$poke(0x420e, r7, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r8, 0x0, 0x4000891) shutdown(r8, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r10, 0xc018aec0, &(0x7f0000000100)={0x3f8, 0xc0, 0x40, 0x0}) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 6.741279015s ago: executing program 3 (id=1900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) socket(0xa, 0x3, 0x3a) r3 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r8 = dup(r7) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r9, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40081) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x44, 0xd, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x20000810) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000001d40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d00)={&(0x7f0000000740)={0x15ac, r1, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x50}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1590, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x124, 0x12, 0x0, 0x1, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0x20, 0x0, @random="5e29a83d26ec54170acbcaa09e82f85f5db6a7b33175c162648120e3"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x733}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x89}]}, @NL80211_ATTR_SCAN_SSIDS={0xa4, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="108d02bbfa3825e269f1acc22466e8606f9d35e7c1c24ef2b2e4a4653b32b1"}, {0xa, 0x0, @default_ibss_ssid}, {0x1b, 0x0, @random="89f4547fdd214d16d4f93cfc456bb4e1b5424afd03b043"}, {0xa, 0x0, @default_ibss_ssid}, {0x12, 0x0, @random="f02cdc4161addab1dc625e17a377"}, {0x9, 0x0, @random="a8ae729b1f"}, {0x1b, 0x0, @random="40f137f2dee6de7fe6aeb2578ad2e2e23cf567f84186c7"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x11f0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x1004, 0xa, "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"}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xfd, 0xa, "07c9b10d8ef1dd8006eeec4979e845d10cf79138d56c0005ca282870495ff8bb533a4c22663fb04a535fcf34dc874cc7e72e44180e82b8b0d1130187c6f4fc55a0d6711a1d48cd3874b28ea39f506b540ffd9712d7b3d2e52d0afb19637dbaac1eade286025f202156453c7b199ee66bad7e5fdd1affad17fd3588541ba178364cbfd27dd150644d315b978cc3b20ce8722237f70aaa9e4bc2cec0df4f03c69cd620c2f3aa39c24c1f2ef1cb1dd596f0d657d83deb0447bed9a81198f7dc9f9edfbf0f285b572a05f17de05702721b54e4f3b0fbcfaaa8a2e62f5826fc89d89500bd13f60ac1f88b04c63bb19d32c345203d6ab1e7a901432f"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x8}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x65, 0x8, {0x96, 0xfffffffe, "2e998457acfe64b79efae1b728156299d18c76bdec6ca13212572d76538d345fea74d9a396ac1e13f4b6634c656be3de92134bf467f852e7a4a62185968cbb5c68fb67255c3efba11725e0d45892a888d2f0d22f522a5de00a"}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x60, 0x8, {0x2, 0x3, "8864e66bad359fd842b56b6e24a99d62126d16b80d8d9934a74241fd0bc50308e77e2868f59047d4a6e3b36f8959e3a7a7c509dac9972f8b8eded7dab8fe74e6c81f9c2321cdfffd85e5bf729db68b2b8dacf879"}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @rand_addr=0x64010101}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x26c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x5}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x3}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x5}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xcd, 0x6, "d65666cdb3c607b63eb37f7f09fa6507a9d61951563d2934c05be191e2a64cf75ef48fb4dadb8e47ea5a4b297fc7afd4667965dfbc72915a8b0abd393d606c237dfc4bb1f8d2803f520d2ab185c606cec57e9d566c6af6ec44a6622de7ea910d26a665893ac0a75cd2341d528651543f7316ffabaaa9ee10cdf899b7835e1c662845c17c149c2c81212240edbedd1b7d613b0b84a6baf58a83a4e2d637400262d96ac80a24ac0c5b15272a15c11c6c6538d586a272cdd70503d4c5ce965ec146ab758848f70da68d8c"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xd3, 0x6, "d6490da4f84d18ef40b8e0ebe42fcd16c3f31c2666893f59a8c7a1abaac5cc3910f54ed3ccaa2e176cb9d8beef33475b861027e4505134f6dc68743625dcdc225ee043a5fd5f61fcd723feba0d01520dd3dc634211ea08a2d5d0f4f44dc8d0e6503f755f11653065e198ab9aa2496e5a3a5bce39210c2a2dd32d97ebe98967a6db05ee9c4f0e365118c30c8ef78406ee4d99430a1acbe2cc49363c08ff5ac63764493fd55064de7eca92014b5e961e8392a77a16acab3ac169cc9429a00e27e821e91975279265fea013eef668eca2"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0xf8, 0x6, 0x200}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xffff}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x8c, 0xb, "ef0e753b3f21f9440d66f67519fc67ac2d420f2ee8d545080fb9e2323b446eb6425b608505f8c56d8519d71057c0ffe2296f71be8110bc31f37f6cafec7f7ea8b77451f320478270ee7bc1263260c9265936195492008a42362362c1e2d17df93028ed0df450e6f690191aa7de37742ba21b8f09a7ab59f6cddc9f04e804de2dc20bfb534dc92f06"}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x15ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4048844) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r11 = syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r12, 0x0) tkill(r11, 0x18) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) syz_emit_ethernet(0x1a, &(0x7f00000003c0)={@empty, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc={0x4, {@snap={0xaa, 0x0, "af", '50xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ptrace$poke(0x5, 0x0, 0x0, 0x16ac) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4, 0x9, 0x1, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000002, 0x0, 0x74e2, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf, 0x4]}, 0x45c) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r3 = getpid() (rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) 6.43185929s ago: executing program 1 (id=1902): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000480)={'wlan1\x00', {0x2, 0x4e22, @loopback}}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r4 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r5 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000023000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r6 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) write$binfmt_aout(r6, 0x0, 0xc8) 6.034123899s ago: executing program 5 (id=1903): shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2a, 0x40000234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xd2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) set_mempolicy_home_node(&(0x7f00001ab000/0x2000)=nil, 0x2000, 0x3, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000002c0)={&(0x7f0000000180)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x7, 0x0, 0x0, 0x0}, {0x1, 0x201, 0x0, 0x0}], 0x3}) r7 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x80281, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000004000030000000300000000200000000000000010000b4000000000000000003000000000000020000000000000002000000000000000000000004000088bf709dddbe62"], 0x0, 0x4a}, 0x28) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x10) r9 = socket$inet6(0xa, 0x1, 0x0) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f0000000100)={0x3, 0x1, 0x7fffffff, 0x80000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) 5.27750168s ago: executing program 1 (id=1904): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', &(0x7f0000000480)=""/4096, 0x1000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x38100, 0x0) write$sequencer(r5, &(0x7f0000000180)=[@e={0xff, 0x0, 0x9, 0xfa, @SEQ_NOTEON=@note=0x63, 0x5, 0x7, 0xf8}, @l={0x92, 0x3, 0xb0, 0x6, 0x2, 0xc}, @generic={0x82}, @l={0x92, 0xf, 0xe0, 0x15, 0xf8, 0x2, 0x5}, @v={0x93, 0xe, 0x80, 0xe, @MIDI_NOTEON=@special, 0x4, 0x5}], 0x21) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0) 4.287922465s ago: executing program 8 (id=1905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x24000005) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000140)={0x6, 0xc, 0x9, 0x0, 0x1, "100056f200"}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}, {0xa, 0x0, 0x0, @loopback, 0xf}}}, 0x48) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 4.233049101s ago: executing program 1 (id=1906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x24000005) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r3, 0x5418, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}, {0xa, 0x0, 0x0, @loopback, 0xf}}}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 4.001233209s ago: executing program 3 (id=1907): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000240)={0x0, 0x3, 0x16, "23cefdbb2e4b746daf4c955528b05fba471bb323f758"}, &(0x7f0000000780)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000440)={0x21, 0x0, 0x3, "75ddf8"}}) 3.008456436s ago: executing program 6 (id=1908): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x540, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd8', 0x31d043, 0x43) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004f000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) r4 = fsopen(&(0x7f0000000040)='anon_inodefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x20) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.331130208s ago: executing program 8 (id=1909): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socket$inet(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x101) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100000000002000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) write$P9_RCREATE(r3, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r5, 0x40044145, 0x0) r6 = syz_io_uring_setup(0x23a, &(0x7f0000000740)={0x0, 0x1c2a, 0x2000, 0x0, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 2.291395902s ago: executing program 6 (id=1910): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xa, 0x4) socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e21, 0x25c5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x26}, 0x1c, &(0x7f00000000c0), 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x60, 0x29, 0x4, {0x87, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x1, 0x7f, [0x256d1b5d, 0x60e, 0xc4, 0x8, 0x3a214f62, 0x6, 0x0]}}, @jumbo={0xc2, 0x4, 0x5}]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x3a, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x30, {0x3, 0xa, 0x4, 0xf769, [0x7, 0x9, 0x9, 0x100000000, 0x80]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1c}}, @ra={0x5, 0x2, 0x3ff}]}}}, @hopopts_2292={{0x238, 0x29, 0x36, {0x33, 0x43, '\x00', [@jumbo={0xc2, 0x4, 0xa14f}, @pad1, @hao={0xc9, 0x10, @local}, @generic={0x8, 0xe9, "5ab6fbe3edb994fd32b9775aaf5afb19925173d7d7dda0ca0990084925cb212589904795c466b890d7f5edd4b1c703b701b5a6690087c166707765ad9fdc4b9d157ea2827c5711791a9909dee4b504a7874a0f983c13524a3055c26f3d022074e81e8f8c0c535843ff3f5d7a10f486439f4cae064b239c23d0f520110219491a4a5cbb0ffc3c7c6fe257ec853756a3b0625bd349aff87ff5ff6a3601d7f6cb0750eb9d0a18d1fddfb689bab4bb03944c289f8e181adfb22ea7724028b92801485d9005ec7ce74c183e726c4d915775b25da9c83f1302346b534445d87ac474037222e2b6865abdad78"}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x10, {0x2, 0x2, 0x3, 0xfe00, [0xe6c]}}, @generic={0x8, 0xfc, "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"}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x3c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x200}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x0, 0x4, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x2e, 0x5, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0x3, [0x0, 0x200, 0x3]}}, @jumbo={0xc2, 0x4, 0x3b0c}, @enc_lim={0x4, 0x1, 0xf3}, @pad1]}}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x32, 0x9, '\x00', [@generic={0xae, 0x24, "a0fdd9d8bba8ddf2735cdee755ea2afbc421906da8a6734b7927b7c07f949738ac2001c2"}, @jumbo={0xc2, 0x4, 0xfffffbff}, @ra={0x5, 0x2, 0x7ff}, @calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x1, [0x7fff]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x8}]}}}], 0x458}, 0x4000000) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x90}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r2, @ANYBLOB="4f80b32557ec6e2ec39070417d76603844c22e84cec9f71936bb5031d22505ea7a4ac09f88c06c9463c713aa99167058e07c67cd6e2d18343e47f83dfc26598a77697965727633104d17d92675b3e6d4c3d89fda40dd8f9519cc4d9481822c6307bb13494f3db9b170464bbd88c631b147641b95a108b9ed68b8b78659688ee8635e6368916576e86728614cdf156b0fcb004fa0f0504216cdd6bfc2a99c9032ffd5238d170e0273a0515f80e1777a0f864af1c0e76016940a", @ANYRES64=r2, @ANYBLOB="e761d61521e438998f343625a0b4b3cb0ac1c4570c9460a55462478f14e25adfff4c3474ed7439f858dba19a284d3e77f3938dc490373896bca8cfdcd9a8a8f175fc6401f5f73ec4569501c31367aaf74df363d67427e78f3ff0f35c5ada1a9304", @ANYRESOCT, @ANYRESHEX=r2], 0x120}, 0x1, 0x0, 0x0, 0x24000000}, 0x8804) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, 0x0) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) r6 = syz_io_uring_setup(0xce, &(0x7f0000000200)={0x0, 0x1b69, 0x800, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x3, 0x0}) io_uring_enter(r6, 0x47ba, 0x98f1, 0x20, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x10, 0xffffffffffffffff, 0x6899d000) 1.774757005s ago: executing program 1 (id=1911): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x540, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd8', 0x31d043, 0x43) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004f000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) r4 = fsopen(&(0x7f0000000040)='anon_inodefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x20) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 993.34033ms ago: executing program 8 (id=1912): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000189001, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0xb43c0d56167e0cc7) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000300)=@ctrl_frame=@ack={{}, {0xd6}}, 0xa) r6 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r5}, &(0x7f0000000500), &(0x7f00000001c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x800000000d2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x54, 0x0, 0x917, 0xa7, 0x1000080, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) setuid(0xee00) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 962.817663ms ago: executing program 1 (id=1913): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x24000005) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000140)={0x6, 0xc, 0x9, 0x0, 0x1, "100056f200"}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}, {0xa, 0x0, 0x0, @loopback, 0xf}}}, 0x48) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 504.993ms ago: executing program 6 (id=1914): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x540, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd8', 0x31d043, 0x43) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004f000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) r4 = fsopen(&(0x7f0000000040)='anon_inodefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) 0s ago: executing program 5 (id=1915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x130c17, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008800}, 0x40d0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) close(r1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, 0x0, 0x0) fremovexattr(r4, &(0x7f0000000480)=ANY=[]) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): team_slave_0 added [ 605.848524][T12069] team0: Port device team_slave_1 added [ 605.854837][ T1536] usb 7-1: Using ep0 maxpacket: 32 [ 605.860632][ T1536] usb 7-1: no configurations [ 605.865412][ T1536] usb 7-1: can't read configurations, error -22 [ 605.872325][ T1536] usb usb7-port1: unable to enumerate USB device [ 605.900638][T12069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.979453][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.020146][T12069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.120826][T12069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.325348][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.366213][T12069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.428105][ T5822] Bluetooth: hci0: command tx timeout [ 608.456091][T12102] netlink: 'syz.5.1508': attribute type 53 has an invalid length. [ 608.954433][ T889] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0 [ 608.984198][ T889] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0 [ 609.400204][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 609.400221][ T30] audit: type=1400 audit(2000000362.360:2727): avc: denied { read } for pid=12104 comm="syz.6.1509" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 609.437877][ T889] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0 [ 609.460574][ T889] hid-u2fzero 0003:20A0:4287.0025: unknown main item tag 0x0 [ 609.472230][ T889] hid-u2fzero 0003:20A0:4287.0025: item fetching failed at offset 4/5 [ 609.583503][ T889] hid-u2fzero 0003:20A0:4287.0025: probe with driver hid-u2fzero failed with error -22 [ 609.618389][ T30] audit: type=1400 audit(2000000362.360:2728): avc: denied { open } for pid=12104 comm="syz.6.1509" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 609.659187][ T30] audit: type=1326 audit(2000000362.940:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12116 comm="syz.3.1514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc20a38eec9 code=0x0 [ 609.684664][ T30] audit: type=1326 audit(2000000362.940:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12116 comm="syz.3.1514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc20a38eec9 code=0x0 [ 609.823154][T12069] hsr_slave_0: entered promiscuous mode [ 609.839427][T12069] hsr_slave_1: entered promiscuous mode [ 610.097959][T12127] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 610.108188][T12127] netlink: 'syz.5.1513': attribute type 1 has an invalid length. [ 610.116070][T12127] nbd: couldn't find a device at index 20 [ 610.449903][ T5822] Bluetooth: hci0: command tx timeout [ 610.669877][ T5890] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 610.825715][T12069] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 610.840894][ T5890] usb 4-1: device descriptor read/64, error -71 [ 610.858275][T12069] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 610.882924][T12069] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 610.900409][T12069] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 611.090401][ T5890] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 611.166121][ T889] usb 2-1: USB disconnect, device number 42 [ 611.210382][T12069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.243896][T12069] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.249869][ T5890] usb 4-1: device descriptor read/64, error -71 [ 611.259058][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.266198][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.281233][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.288387][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.339880][ T5930] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 611.360122][ T5890] usb usb4-port1: attempt power cycle [ 611.450114][ T30] audit: type=1400 audit(2000000364.680:2731): avc: denied { mount } for pid=12140 comm="syz.1.1519" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 611.609859][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 611.799478][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.810344][T12069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.871421][ T5930] usb 6-1: config 0 has no interfaces? [ 611.876929][ T5930] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 611.878316][ T30] audit: type=1400 audit(2000000365.160:2732): avc: denied { read } for pid=5476 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 611.886105][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.940787][ T5930] usb 6-1: config 0 descriptor?? [ 611.972873][ T30] audit: type=1400 audit(2000000365.230:2733): avc: denied { search } for pid=5476 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.000946][ T30] audit: type=1400 audit(2000000365.230:2734): avc: denied { search } for pid=5476 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.032867][ T30] audit: type=1400 audit(2000000365.230:2735): avc: denied { search } for pid=5476 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.159964][ T5890] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 612.200653][ T5890] usb 4-1: device descriptor read/8, error -71 [ 612.200967][ T30] audit: type=1400 audit(2000000365.230:2736): avc: denied { read } for pid=5476 comm="dhcpcd" name="n132" dev="tmpfs" ino=8981 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 612.257561][T12069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.457159][ T5890] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 612.490400][ T5890] usb 4-1: device descriptor read/8, error -71 [ 612.519904][ T5822] Bluetooth: hci0: command tx timeout [ 612.571291][T12069] veth0_vlan: entered promiscuous mode [ 612.591918][T12069] veth1_vlan: entered promiscuous mode [ 612.603581][ T5890] usb usb4-port1: unable to enumerate USB device [ 612.742595][T12069] veth0_macvtap: entered promiscuous mode [ 612.769920][T12163] vivid-007: ================= START STATUS ================= [ 612.771589][T12069] veth1_macvtap: entered promiscuous mode [ 612.891835][T12163] vivid-007: Enable Output Cropping: true [ 612.899760][T12163] vivid-007: Enable Output Composing: true [ 612.907774][T12163] vivid-007: Enable Output Scaler: true [ 612.913744][T12163] vivid-007: Tx RGB Quantization Range: Automatic [ 612.935780][T12163] vivid-007: Transmit Mode: HDMI [ 612.941810][T12163] vivid-007: Hotplug Present: 0x00000000 [ 612.957507][T12163] vivid-007: RxSense Present: 0x00000000 [ 612.976100][T12163] vivid-007: EDID Present: 0x00000000 [ 612.982929][T12163] vivid-007: ================== END STATUS ================== [ 613.021450][T12069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.069701][T12069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.088346][T10617] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.106577][T10617] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.156384][T10617] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.165950][T10617] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.184818][T10617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.192744][T10617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.230460][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.239746][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.732367][T12175] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 613.742192][T12175] netlink: 'syz.3.1522': attribute type 1 has an invalid length. [ 613.749975][T12175] nbd: couldn't find a device at index 20 [ 614.112921][ T9] usb 6-1: USB disconnect, device number 41 [ 614.471920][T12183] ubi31: attaching mtd0 [ 614.619172][ T5822] Bluetooth: hci0: command tx timeout [ 615.244596][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 615.244612][ T30] audit: type=1400 audit(2000000368.520:2752): avc: denied { read write } for pid=12174 comm="syz.7.1500" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 615.276173][ T889] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 615.329924][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 615.599888][ T30] audit: type=1400 audit(2000000368.520:2753): avc: denied { open } for pid=12174 comm="syz.7.1500" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 615.625085][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.689840][ T30] audit: type=1400 audit(2000000368.830:2754): avc: denied { create } for pid=12190 comm="syz.6.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 615.719947][ T30] audit: type=1400 audit(2000000368.990:2755): avc: denied { ioctl } for pid=12190 comm="syz.6.1527" path="socket:[40806]" dev="sockfs" ino=40806 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 615.730270][ T889] usb 4-1: Using ep0 maxpacket: 8 [ 615.744737][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.800986][T12191] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.1527'. [ 615.818424][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 615.860418][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 615.870489][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 615.882516][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.899904][ T889] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 615.910195][ T889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.922635][T12189] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 615.964481][ T889] pvrusb2: Hardware description: Terratec Grabster AV400 [ 615.974360][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 615.983269][ T889] pvrusb2: ********** [ 615.996880][ T889] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 616.060275][ T889] pvrusb2: Important functionality might not be entirely working. [ 616.236521][T12187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.245081][T12187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.348910][ T30] audit: type=1400 audit(2000000369.630:2756): avc: denied { create } for pid=12186 comm="syz.3.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 616.485734][ T889] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 616.667868][ T9] usb 2-1: USB disconnect, device number 43 [ 616.719533][ T889] pvrusb2: ********** [ 616.835416][ T2335] pvrusb2: Invalid write control endpoint [ 616.843306][ T889] usb 4-1: USB disconnect, device number 53 [ 617.126204][ T30] audit: type=1400 audit(2000000370.410:2757): avc: denied { execute } for pid=12207 comm="syz.5.1530" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 617.258541][ T30] audit: type=1400 audit(2000000370.410:2758): avc: denied { execute_no_trans } for pid=12207 comm="syz.5.1530" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 617.289252][ T2335] pvrusb2: Invalid write control endpoint [ 617.296119][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.450096][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 617.464447][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 617.541840][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 617.559543][ T30] audit: type=1400 audit(2000000370.840:2759): avc: denied { write } for pid=12214 comm="syz.5.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 617.579327][ T2335] pvrusb2: Device being rendered inoperable [ 617.579381][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 617.579420][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 617.595104][ T2335] pvrusb2: Attached sub-driver cx25840 [ 617.595142][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 617.595153][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 617.668290][ T30] audit: type=1400 audit(2000000370.900:2760): avc: denied { read open } for pid=12216 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.693886][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.736869][ T30] audit: type=1400 audit(2000000370.900:2761): avc: denied { getattr } for pid=12216 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.762221][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.189845][ T5930] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 618.815860][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.835409][ T5930] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 618.853726][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.897114][ T5930] usb 2-1: config 0 descriptor?? [ 618.949694][T12240] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 619.142223][ T5930] usbhid 2-1:0.0: can't add hid device: -71 [ 619.159873][ T5930] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 619.197775][ T5930] usb 2-1: USB disconnect, device number 44 [ 620.342407][ T5930] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 620.510484][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 620.524003][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.535177][ T5930] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 620.544786][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.584886][ T5930] usb 2-1: config 0 descriptor?? [ 620.607570][ T5930] usbhid 2-1:0.0: can't add hid device: -22 [ 620.795562][T12280] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 620.805618][T12280] netlink: 'syz.3.1542': attribute type 1 has an invalid length. [ 620.813451][T12280] nbd: couldn't find a device at index 20 [ 621.128578][T12281] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 621.141524][T12279] netlink: 'syz.5.1543': attribute type 1 has an invalid length. [ 621.149491][T12279] nbd: couldn't find a device at index 20 [ 621.168561][ T5930] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 621.212563][ T5930] usb 2-1: USB disconnect, device number 45 [ 622.055108][T12297] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1546'. [ 623.074464][T12309] QAT: Invalid ioctl -2146921447 [ 623.535801][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 623.535815][ T30] audit: type=1400 audit(2000000376.820:2772): avc: denied { ioctl } for pid=12315 comm="syz.3.1554" path="socket:[41016]" dev="sockfs" ino=41016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 623.646998][ T30] audit: type=1400 audit(2000000376.920:2773): avc: denied { write } for pid=12316 comm="syz.7.1555" path="socket:[39852]" dev="sockfs" ino=39852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 623.930268][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.936613][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.211170][ T30] audit: type=1400 audit(2000000377.480:2774): avc: denied { create } for pid=12330 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 624.241297][ T30] audit: type=1400 audit(2000000377.480:2775): avc: denied { write } for pid=12330 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 624.314068][ T30] audit: type=1400 audit(2000000377.480:2776): avc: denied { nlmsg_write } for pid=12330 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 624.347171][ T30] audit: type=1400 audit(2000000377.630:2777): avc: denied { shutdown } for pid=12316 comm="syz.7.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 624.509921][ T889] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 624.687602][ T889] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 624.709553][ T889] usb 4-1: config 0 has no interface number 0 [ 624.764732][ T889] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 624.886857][ T889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.894999][ T889] usb 4-1: Product: syz [ 624.915862][ T889] usb 4-1: Manufacturer: syz [ 624.921321][ T889] usb 4-1: SerialNumber: syz [ 624.943028][ T889] usb 4-1: config 0 descriptor?? [ 625.096404][T12345] netlink: 'syz.1.1561': attribute type 53 has an invalid length. [ 625.346745][ T889] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 625.357961][ T889] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 625.814887][ T889] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 625.823009][ T889] usb 4-1: media controller created [ 625.839501][ T889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 625.868742][ T30] audit: type=1400 audit(2000000379.140:2778): avc: denied { map } for pid=12330 comm="syz.3.1557" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 626.624254][ T889] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 626.733531][ T889] usb 4-1: USB disconnect, device number 54 [ 627.242092][ T30] audit: type=1400 audit(2000000380.520:2779): avc: denied { create } for pid=12365 comm="syz.5.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 627.322441][ T30] audit: type=1400 audit(2000000380.610:2780): avc: denied { mount } for pid=12367 comm="syz.6.1568" name="/" dev="pstore" ino=3410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 627.361317][T12368] syzkaller0: entered promiscuous mode [ 627.366843][T12368] syzkaller0: entered allmulticast mode [ 627.697627][ T5930] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 627.908983][T12378] tmpfs: Bad value for 'huge' [ 627.924158][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 627.932800][ T5930] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 627.967632][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.112718][ T5930] usb 7-1: config 0 descriptor?? [ 628.124480][ T5930] gspca_main: sq930x-2.14.0 probing 041e:403c [ 628.249891][ T30] audit: type=1400 audit(2000000381.450:2781): avc: denied { bind } for pid=12381 comm="syz.7.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 628.606595][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 628.606610][ T30] audit: type=1400 audit(2000000381.890:2783): avc: denied { getopt } for pid=12389 comm="syz.5.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 628.647927][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1574'. [ 629.199838][ T889] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 629.306689][ T30] audit: type=1400 audit(2000000382.550:2784): avc: denied { write } for pid=12367 comm="syz.6.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 629.333139][ T5930] gspca_sq930x: ucbus_write failed -71 [ 629.338663][ T5930] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 629.376431][ T889] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.394607][ T889] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.418685][ T889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 629.433337][ T889] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 629.454161][ T889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.502441][ T5930] usb 7-1: USB disconnect, device number 40 [ 629.513954][ T889] usb 6-1: config 0 descriptor?? [ 630.229294][ T889] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0 [ 630.343959][ T889] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0 [ 630.474694][ T889] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0 [ 630.568896][ T889] hid-u2fzero 0003:20A0:4287.0026: unknown main item tag 0x0 [ 630.635299][ T30] audit: type=1400 audit(2000000383.900:2785): avc: denied { create } for pid=12427 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 630.689719][ T889] hid-u2fzero 0003:20A0:4287.0026: item fetching failed at offset 4/5 [ 630.731477][ T10] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 630.756519][ T889] hid-u2fzero 0003:20A0:4287.0026: probe with driver hid-u2fzero failed with error -22 [ 630.946058][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 631.023620][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 631.126184][ T10] usb 7-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 631.189613][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.267053][ T10] usb 7-1: Product: syz [ 631.310916][ T10] usb 7-1: Manufacturer: syz [ 631.347020][ T30] audit: type=1400 audit(2000000384.630:2786): avc: denied { getopt } for pid=12427 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 631.368488][ T10] usb 7-1: SerialNumber: syz [ 631.452220][ T10] usb 7-1: config 0 descriptor?? [ 631.533759][T12426] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 631.577082][T12426] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 631.642976][ T10] option 7-1:0.0: GSM modem (1-port) converter detected [ 631.723524][ T10] usb 7-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 632.012520][ T5930] usb 6-1: USB disconnect, device number 42 [ 632.248891][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.410077][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.418319][T12442] ceph: No mds server is up or the cluster is laggy [ 632.425241][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 632.464793][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 632.699032][T12458] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 632.712446][ T5930] usb 7-1: USB disconnect, device number 41 [ 632.765292][ T5930] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 632.872763][ T5930] option 7-1:0.0: device disconnected [ 632.934324][ T30] audit: type=1400 audit(2000000386.210:2787): avc: denied { shutdown } for pid=12461 comm="syz.1.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 633.936043][ T30] audit: type=1326 audit(2000000387.220:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.1.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6a58eec9 code=0x7fc00000 [ 635.626693][ T9] libceph: connect (1)[c::]:6789 error -101 [ 635.632915][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 635.652818][ T30] audit: type=1400 audit(2000000388.940:2789): avc: denied { read } for pid=12494 comm="syz.5.1597" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 635.693267][ T30] audit: type=1400 audit(2000000388.940:2790): avc: denied { open } for pid=12494 comm="syz.5.1597" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 635.717945][ T889] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 635.743509][ T30] audit: type=1400 audit(2000000388.970:2791): avc: denied { append } for pid=12494 comm="syz.5.1597" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 635.768291][T12498] selinux_netlink_send: 44 callbacks suppressed [ 635.768301][T12498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=12498 comm=syz.5.1597 [ 635.788505][T12493] ceph: No mds server is up or the cluster is laggy [ 635.879915][ T5890] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 635.883022][ T889] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.903261][ T889] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.920279][ T889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 635.930108][ T889] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 635.939185][ T889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.950994][ T889] usb 4-1: config 0 descriptor?? [ 636.049841][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 636.055605][ T5890] usb 2-1: no configurations [ 636.060471][ T5890] usb 2-1: can't read configurations, error -22 [ 636.189962][ T5890] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 636.339840][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 636.345641][ T5890] usb 2-1: no configurations [ 636.351396][ T5890] usb 2-1: can't read configurations, error -22 [ 636.357878][ T5890] usb usb2-port1: attempt power cycle [ 636.998929][T12510] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 637.242027][ T5890] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 637.778719][ T889] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0 [ 637.812638][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 637.848962][ T889] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0 [ 639.164353][ T889] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0 [ 639.190021][ T5890] usb 2-1: device descriptor read/all, error -71 [ 639.217441][ T889] hid-u2fzero 0003:20A0:4287.0027: unknown main item tag 0x0 [ 639.231846][ T889] hid-u2fzero 0003:20A0:4287.0027: item fetching failed at offset 4/5 [ 639.245668][ T889] hid-u2fzero 0003:20A0:4287.0027: probe with driver hid-u2fzero failed with error -22 [ 639.261951][ T30] audit: type=1400 audit(2000000392.550:2792): avc: denied { create } for pid=12513 comm="syz.6.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 640.014407][ T30] audit: type=1400 audit(2000000392.580:2793): avc: denied { setopt } for pid=12513 comm="syz.6.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 640.119067][ T30] audit: type=1400 audit(2000000393.400:2794): avc: denied { append } for pid=12522 comm="syz.7.1606" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 640.299699][ T30] audit: type=1400 audit(2000000393.580:2795): avc: denied { map } for pid=12522 comm="syz.7.1606" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 642.030030][ T1536] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 642.391353][ T1536] usb 2-1: Using ep0 maxpacket: 32 [ 642.424446][ T1536] usb 2-1: no configurations [ 642.453649][ T1536] usb 2-1: can't read configurations, error -22 [ 642.478644][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 642.513188][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 642.581355][T12556] ceph: No mds server is up or the cluster is laggy [ 642.753712][ T1536] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 642.920869][ T1536] usb 2-1: Using ep0 maxpacket: 32 [ 642.927198][ T1536] usb 2-1: no configurations [ 642.933896][ T1536] usb 2-1: can't read configurations, error -22 [ 642.983438][ T1536] usb usb2-port1: attempt power cycle [ 643.150687][ T5930] usb 4-1: USB disconnect, device number 55 [ 643.496979][ T1536] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 643.530367][ T1536] usb 2-1: Using ep0 maxpacket: 32 [ 643.536056][ T1536] usb 2-1: no configurations [ 643.541205][ T1536] usb 2-1: can't read configurations, error -22 [ 644.434255][ T30] audit: type=1400 audit(2000000397.460:2796): avc: denied { create } for pid=12579 comm="syz.5.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 644.456786][ T30] audit: type=1400 audit(2000000397.460:2797): avc: denied { sys_admin } for pid=12579 comm="syz.5.1625" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 644.570030][ T1536] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 644.605522][ T1536] usb 2-1: Using ep0 maxpacket: 32 [ 645.335627][ T9] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 645.498785][ T1536] usb 2-1: device descriptor read/all, error -71 [ 645.515222][ T1536] usb usb2-port1: unable to enumerate USB device [ 645.600605][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 645.616724][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 645.641148][ T9] usb 4-1: config 7 has an invalid descriptor of length 102, skipping remainder of the config [ 645.671271][ T9] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26232, setting to 64 [ 645.687902][ T9] usb 4-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 645.710674][ T9] usb 4-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 645.729740][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.774374][ T9] usb 4-1: Product: syz [ 645.836948][ T9] usb 4-1: Manufacturer: syz [ 645.841892][ T9] usb 4-1: SerialNumber: syz [ 645.884703][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1628'. [ 646.156721][ T9] usb 4-1: USB disconnect, device number 56 [ 646.515879][T12600] ceph: No mds server is up or the cluster is laggy [ 646.551823][ T30] audit: type=1400 audit(2000000399.840:2798): avc: denied { create } for pid=12611 comm="syz.7.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 646.582049][T12604] ceph: No mds server is up or the cluster is laggy [ 646.772626][ T1536] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 647.482907][ T5899] libceph: mon0 (1)[b::]:6789 socket closed (con state V1_BANNER) [ 647.714777][ T30] audit: type=1400 audit(2000000400.100:2799): avc: denied { bind } for pid=12611 comm="syz.7.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 648.063043][ T30] audit: type=1400 audit(2000000400.100:2800): avc: denied { name_bind } for pid=12611 comm="syz.7.1632" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 648.124193][ T30] audit: type=1400 audit(2000000400.100:2801): avc: denied { node_bind } for pid=12611 comm="syz.7.1632" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 648.128782][ T1536] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.390730][ T30] audit: type=1400 audit(2000000401.660:2802): avc: denied { watch } for pid=12620 comm="syz.3.1634" path="/338" dev="tmpfs" ino=1768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 648.448812][ T1536] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.526516][ T1536] usb 2-1: config 0 interface 0 has no altsetting 0 [ 648.538118][ T1536] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 648.558231][ T1536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.591784][ T1536] usb 2-1: config 0 descriptor?? [ 648.679989][ T889] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 648.725482][ T30] audit: type=1400 audit(2000000402.010:2803): avc: denied { read } for pid=12633 comm="syz.6.1639" path="socket:[42334]" dev="sockfs" ino=42334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 648.779850][ T5930] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 648.841551][ T889] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 648.853342][ T889] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 648.864654][ T889] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 648.875943][ T889] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 648.885087][ T889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.896629][T12626] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 648.929822][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 648.937472][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.947825][ T5930] usb 6-1: config 0 has no interfaces? [ 648.953350][ T5930] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 648.962403][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.972427][ T5930] usb 6-1: config 0 descriptor?? [ 649.440507][ T889] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 649.502276][ T889] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input43 [ 649.827517][ T889] usb 4-1: USB disconnect, device number 57 [ 649.827569][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 650.423625][ T1536] hid-u2fzero 0003:20A0:4287.0028: unknown main item tag 0x0 [ 651.970552][ T1536] hid-u2fzero 0003:20A0:4287.0028: unknown main item tag 0x0 [ 651.978056][ T1536] hid-u2fzero 0003:20A0:4287.0028: unknown main item tag 0x0 [ 651.985566][ T1536] hid-u2fzero 0003:20A0:4287.0028: unknown main item tag 0x0 [ 651.993054][ T1536] hid-u2fzero 0003:20A0:4287.0028: item fetching failed at offset 4/5 [ 652.007412][ T1536] hid-u2fzero 0003:20A0:4287.0028: probe with driver hid-u2fzero failed with error -22 [ 652.028903][T11527] usb 6-1: USB disconnect, device number 43 [ 652.225522][ T30] audit: type=1400 audit(2000000405.470:2804): avc: denied { connect } for pid=12649 comm="syz.3.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 652.495521][ T30] audit: type=1400 audit(2000000405.780:2805): avc: denied { map_create } for pid=12653 comm="syz.7.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 652.544795][ T30] audit: type=1400 audit(2000000405.780:2806): avc: denied { create } for pid=12656 comm="syz.5.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 652.633233][ T30] audit: type=1400 audit(2000000405.810:2807): avc: denied { write } for pid=12656 comm="syz.5.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 653.012566][ T30] audit: type=1400 audit(2000000405.810:2808): avc: denied { read } for pid=12656 comm="syz.5.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 653.348181][ T30] audit: type=1400 audit(2000000405.810:2809): avc: denied { create } for pid=12656 comm="syz.5.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 653.376033][ T30] audit: type=1400 audit(2000000405.830:2810): avc: denied { read } for pid=12653 comm="syz.7.1643" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 653.404751][ T30] audit: type=1400 audit(2000000405.870:2811): avc: denied { open } for pid=12653 comm="syz.7.1643" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 653.465809][ T30] audit: type=1400 audit(2000000405.880:2812): avc: denied { allowed } for pid=12653 comm="syz.7.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 654.241797][ T30] audit: type=1400 audit(2000000405.880:2813): avc: denied { create } for pid=12653 comm="syz.7.1643" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 656.226722][T12702] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 656.237751][T12702] netlink: 'syz.6.1654': attribute type 1 has an invalid length. [ 656.269904][T12702] nbd: couldn't find a device at index 20 [ 657.167855][T12720] FAULT_INJECTION: forcing a failure. [ 657.167855][T12720] name failslab, interval 1, probability 0, space 0, times 0 [ 657.182627][T12720] CPU: 0 UID: 0 PID: 12720 Comm: syz.6.1662 Not tainted syzkaller #0 PREEMPT(full) [ 657.182650][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 657.182660][T12720] Call Trace: [ 657.182667][T12720] [ 657.182673][T12720] dump_stack_lvl+0x16c/0x1f0 [ 657.182698][T12720] should_fail_ex+0x512/0x640 [ 657.182718][T12720] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 657.182745][T12720] should_failslab+0xc2/0x120 [ 657.182771][T12720] __kvmalloc_node_noprof+0x141/0x9c0 [ 657.182794][T12720] ? __do_sys_add_key+0x1fc/0x470 [ 657.182817][T12720] ? __do_sys_add_key+0x1fc/0x470 [ 657.182833][T12720] __do_sys_add_key+0x1fc/0x470 [ 657.182852][T12720] ? __pfx___do_sys_add_key+0x10/0x10 [ 657.182869][T12720] ? ksys_write+0x1ac/0x250 [ 657.182900][T12720] do_syscall_64+0xcd/0xfa0 [ 657.182924][T12720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.182942][T12720] RIP: 0033:0x7fdb0cf8eec9 [ 657.182956][T12720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.182972][T12720] RSP: 002b:00007fdb0ddea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 657.182990][T12720] RAX: ffffffffffffffda RBX: 00007fdb0d1e5fa0 RCX: 00007fdb0cf8eec9 [ 657.183001][T12720] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000200000000080 [ 657.183012][T12720] RBP: 00007fdb0ddea090 R08: fffffffffffffffe R09: 0000000000000000 [ 657.183024][T12720] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 657.183034][T12720] R13: 00007fdb0d1e6038 R14: 00007fdb0d1e5fa0 R15: 00007ffe8f0fc048 [ 657.183060][T12720] [ 657.540216][ T1536] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 657.695212][ T10] usb 2-1: USB disconnect, device number 54 [ 657.726697][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 657.726712][ T30] audit: type=1400 audit(2000000411.010:2898): avc: denied { create } for pid=12723 comm="syz.6.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 657.741097][ T1536] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.070996][ T30] audit: type=1400 audit(2000000411.070:2899): avc: denied { create } for pid=12724 comm="syz.5.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 658.087401][ T1536] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 658.090480][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.117153][ T1536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.144290][ T1536] usb 4-1: config 0 descriptor?? [ 658.248757][ T30] audit: type=1400 audit(2000000411.070:2900): avc: denied { bind } for pid=12723 comm="syz.6.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 658.269466][ T30] audit: type=1400 audit(2000000411.070:2901): avc: denied { name_bind } for pid=12723 comm="syz.6.1664" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 658.291299][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.312975][ T30] audit: type=1400 audit(2000000411.070:2902): avc: denied { node_bind } for pid=12723 comm="syz.6.1664" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 658.345829][ T1536] pwc: Askey VC010 type 2 USB webcam detected. [ 658.348054][ T30] audit: type=1400 audit(2000000411.140:2903): avc: denied { read } for pid=12724 comm="syz.5.1665" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 658.374932][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.820665][ T30] audit: type=1400 audit(2000000411.140:2904): avc: denied { open } for pid=12724 comm="syz.5.1665" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 658.843786][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.850148][ T30] audit: type=1400 audit(2000000411.140:2905): avc: denied { ioctl } for pid=12724 comm="syz.5.1665" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 658.874735][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.899661][T12734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.908248][ T30] audit: type=1400 audit(2000000411.450:2906): avc: denied { create } for pid=12729 comm="syz.1.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 658.908385][ T1536] pwc: recv_control_msg error -32 req 02 val 2b00 [ 658.940421][T12734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.948045][ T30] audit: type=1400 audit(2000000411.580:2907): avc: denied { write } for pid=12724 comm="syz.5.1665" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 658.992419][ T1536] pwc: recv_control_msg error -32 req 02 val 2700 [ 658.999384][ T1536] pwc: recv_control_msg error -32 req 02 val 2c00 [ 659.007809][ T1536] pwc: recv_control_msg error -32 req 04 val 1000 [ 659.135004][ T1536] pwc: recv_control_msg error -32 req 04 val 1300 [ 659.144484][ T1536] pwc: recv_control_msg error -32 req 04 val 1400 [ 659.157029][ T1536] pwc: recv_control_msg error -32 req 02 val 2000 [ 659.862895][ T1536] pwc: recv_control_msg error -32 req 02 val 2100 [ 659.871162][ T1536] pwc: recv_control_msg error -32 req 04 val 1500 [ 659.878775][ T1536] pwc: recv_control_msg error -32 req 02 val 2500 [ 660.095431][ T1536] pwc: recv_control_msg error -71 req 02 val 2600 [ 660.129861][ T1536] pwc: recv_control_msg error -71 req 02 val 2900 [ 660.150951][ T1536] pwc: recv_control_msg error -71 req 02 val 2800 [ 660.448871][ T1536] pwc: recv_control_msg error -71 req 04 val 1100 [ 660.459837][ T1536] pwc: recv_control_msg error -71 req 04 val 1200 [ 660.469388][ T1536] pwc: Registered as video103. [ 660.479953][ T1536] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 660.591700][ T1536] usb 4-1: USB disconnect, device number 58 [ 661.051399][T12762] QAT: Invalid ioctl -2146921447 [ 661.669929][ T1536] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 661.859920][ T1536] usb 7-1: Using ep0 maxpacket: 8 [ 661.901912][ T1536] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 661.930062][ T1536] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.955617][ T1536] usb 7-1: Product: syz [ 661.960045][ T1536] usb 7-1: Manufacturer: syz [ 661.964715][ T1536] usb 7-1: SerialNumber: syz [ 662.023159][ T1536] usb 7-1: config 0 descriptor?? [ 662.631843][ T1536] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 662.830269][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 662.830288][ T30] audit: type=1400 audit(2000000416.020:2975): avc: denied { prog_load } for pid=12783 comm="syz.1.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 662.882880][ T30] audit: type=1400 audit(2000000416.020:2976): avc: denied { bpf } for pid=12783 comm="syz.1.1681" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 662.904027][ T30] audit: type=1400 audit(2000000416.020:2977): avc: denied { listen } for pid=12783 comm="syz.1.1681" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 662.925491][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.970176][ T30] audit: type=1400 audit(2000000416.020:2978): avc: denied { setopt } for pid=12783 comm="syz.1.1681" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 662.991668][ C0] vkms_vblank_simulate: vblank timer overrun [ 663.029957][ T30] audit: type=1400 audit(2000000416.020:2979): avc: denied { write } for pid=12783 comm="syz.1.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 663.072319][ T30] audit: type=1400 audit(2000000416.020:2980): avc: denied { connect } for pid=12783 comm="syz.1.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 663.092014][ C0] vkms_vblank_simulate: vblank timer overrun [ 663.118102][ T30] audit: type=1400 audit(2000000416.020:2981): avc: denied { name_connect } for pid=12783 comm="syz.1.1681" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 663.140518][ C0] vkms_vblank_simulate: vblank timer overrun [ 663.501247][ T30] audit: type=1400 audit(2000000416.350:2982): avc: denied { create } for pid=12797 comm="syz.5.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 663.524285][ T30] audit: type=1400 audit(2000000416.350:2983): avc: denied { ioctl } for pid=12797 comm="syz.5.1685" path="socket:[43112]" dev="sockfs" ino=43112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 663.550461][ T30] audit: type=1400 audit(2000000416.360:2984): avc: denied { read } for pid=12797 comm="syz.5.1685" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 663.573122][ C0] vkms_vblank_simulate: vblank timer overrun [ 663.784048][T12813] : renamed from bridge_slave_0 (while UP) [ 664.184585][T12818] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1690'. [ 664.314477][ T1536] gspca_sunplus: reg_w_riv err -110 [ 666.968338][ T1536] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 667.294812][ T889] usb 7-1: USB disconnect, device number 42 [ 667.322447][T12823] QAT: Invalid ioctl -2146921447 [ 667.692890][T12830] QAT: Invalid ioctl -2146921447 [ 667.898862][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 667.898879][ T30] audit: type=1400 audit(2000000421.180:3021): avc: denied { read write } for pid=12834 comm="syz.3.1694" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 667.961378][T12838] fuse: Bad value for 'fd' [ 668.117730][ T30] audit: type=1400 audit(2000000421.220:3022): avc: denied { read } for pid=12832 comm="syz.6.1693" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 668.370320][ T30] audit: type=1400 audit(2000000421.220:3023): avc: denied { open } for pid=12832 comm="syz.6.1693" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 668.587157][ T30] audit: type=1400 audit(2000000421.220:3024): avc: denied { ioctl } for pid=12832 comm="syz.6.1693" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 668.652173][ T30] audit: type=1400 audit(2000000421.220:3025): avc: denied { read write } for pid=12832 comm="syz.6.1693" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 668.798456][ T30] audit: type=1400 audit(2000000421.220:3026): avc: denied { open } for pid=12832 comm="syz.6.1693" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 668.822256][ T30] audit: type=1400 audit(2000000421.250:3027): avc: denied { open } for pid=12834 comm="syz.3.1694" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 668.845530][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.862092][ T30] audit: type=1400 audit(2000000421.250:3028): avc: denied { mounton } for pid=12834 comm="syz.3.1694" path="/354/file0" dev="tmpfs" ino=1857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 669.000736][ T30] audit: type=1400 audit(2000000421.540:3029): avc: denied { create } for pid=12840 comm="syz.5.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 669.273442][ T30] audit: type=1400 audit(2000000421.550:3030): avc: denied { ioctl } for pid=12840 comm="syz.5.1696" path="socket:[43167]" dev="sockfs" ino=43167 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 669.298111][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.426434][T12852] QAT: Invalid ioctl -2146921447 [ 669.792248][ T1536] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 670.024269][ T1536] usb 2-1: Using ep0 maxpacket: 32 [ 670.033154][ T1536] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 670.041387][ T1536] usb 2-1: config 0 has no interface number 0 [ 670.047820][ T1536] usb 2-1: config 0 interface 184 has no altsetting 0 [ 670.060011][ T1536] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 670.069644][ T1536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.079215][ T1536] usb 2-1: Product: syz [ 670.085845][ T1536] usb 2-1: Manufacturer: syz [ 670.093462][ T1536] usb 2-1: SerialNumber: syz [ 670.147281][ T1536] usb 2-1: config 0 descriptor?? [ 670.172253][ T1536] smsc75xx v1.0.0 [ 670.542994][T12870] loop5: detected capacity change from 0 to 16384 [ 670.621482][T12870] loop5: detected capacity change from 16384 to 16383 [ 671.117414][ T1536] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 671.217986][ T1536] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 671.417431][ T1536] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 671.644860][ T1536] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 671.711538][T12876] QAT: Invalid ioctl -2146921447 [ 671.756206][ T1536] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 671.903580][ T1536] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 671.980042][ T1536] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 672.086032][ T1536] usb 2-1: USB disconnect, device number 55 [ 672.327024][T12894] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1710'. [ 672.367605][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1710'. [ 673.088946][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 673.088962][ T30] audit: type=1400 audit(2000000426.370:3117): avc: denied { create } for pid=12906 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 673.470578][ T30] audit: type=1400 audit(2000000426.380:3118): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 673.579807][ T30] audit: type=1400 audit(2000000426.420:3119): avc: denied { read } for pid=12906 comm="syz.3.1714" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 673.765345][ T30] audit: type=1400 audit(2000000426.420:3120): avc: denied { open } for pid=12906 comm="syz.3.1714" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 674.210515][ T30] audit: type=1400 audit(2000000426.500:3121): avc: denied { create } for pid=12906 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 674.232789][ T30] audit: type=1400 audit(2000000426.510:3122): avc: denied { bind } for pid=12906 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 674.252399][ T30] audit: type=1400 audit(2000000426.510:3123): avc: denied { setopt } for pid=12906 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 674.273145][ T30] audit: type=1400 audit(2000000426.510:3124): avc: denied { accept } for pid=12906 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 674.679422][ T30] audit: type=1400 audit(2000000426.510:3125): avc: denied { write } for pid=12906 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 674.845589][ T30] audit: type=1400 audit(2000000426.510:3126): avc: denied { read } for pid=12906 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 675.350138][ T889] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 675.487794][T12954] tmpfs: Unknown parameter 'n' [ 675.586691][T12956] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 675.595415][T12956] netlink: 'syz.5.1724': attribute type 1 has an invalid length. [ 675.603519][T12956] nbd: couldn't find a device at index 20 [ 675.931526][ T889] usb 2-1: Using ep0 maxpacket: 32 [ 676.144664][ T889] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 676.488052][ T5930] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 676.496388][ T889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 676.518451][ T889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 676.529810][ T5890] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 676.547657][ T889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 676.579513][ T889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 676.662763][ T889] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 676.694042][ T5890] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 676.699776][ T889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.704168][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 676.739796][ T5890] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 676.762439][ T889] usb 2-1: Product: syz [ 676.768712][ T889] usb 2-1: Manufacturer: syz [ 676.777329][ T5930] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 676.787517][ T5930] usb 4-1: config 0 has no interface number 0 [ 676.799984][ T5890] usb 7-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 676.805266][ T889] usb 2-1: SerialNumber: syz [ 676.809422][ T5930] usb 4-1: config 0 interface 184 has no altsetting 0 [ 676.834193][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.851252][ T889] usb 2-1: config 0 descriptor?? [ 676.864722][ T5890] usb 7-1: Product: syz [ 676.868898][ T5890] usb 7-1: Manufacturer: syz [ 676.881982][ T5930] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 676.906972][ T5890] usb 7-1: SerialNumber: syz [ 676.911686][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.919669][ T5930] usb 4-1: Product: syz [ 676.940776][ T5890] usb 7-1: config 0 descriptor?? [ 676.950097][T12961] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 676.957323][T12961] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 676.969813][ T5930] usb 4-1: Manufacturer: syz [ 676.974792][ T5930] usb 4-1: SerialNumber: syz [ 676.994037][ T5890] option 7-1:0.0: GSM modem (1-port) converter detected [ 677.010488][ T5930] usb 4-1: config 0 descriptor?? [ 677.036592][ T5930] smsc75xx v1.0.0 [ 677.046995][ T5890] usb 7-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 677.265811][T12961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.280344][T12961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.401451][T11527] usb 7-1: USB disconnect, device number 43 [ 677.427957][ T5930] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 677.439533][T11527] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 677.469627][T11527] option 7-1:0.0: device disconnected [ 677.469782][ T5930] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 677.504996][ T5930] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 677.526723][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 677.547675][ T5930] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 677.556403][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 677.578291][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 677.609902][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 677.755474][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 677.902300][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 677.930160][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 677.960093][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 677.986179][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 678.030127][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 678.047467][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 678.061376][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 678.085427][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 678.105747][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 678.140831][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 678.140845][ T30] audit: type=1400 audit(2000000431.430:3202): avc: denied { read } for pid=12981 comm="syz.5.1734" dev="nsfs" ino=4026533950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 678.203470][T12983] tmpfs: Unknown parameter 'nr_blo' [ 678.264023][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 678.270899][ T30] audit: type=1400 audit(2000000431.470:3203): avc: denied { open } for pid=12981 comm="syz.5.1734" path="net:[4026533950]" dev="nsfs" ino=4026533950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 678.294220][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 678.294607][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 678.330878][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 678.348531][ T889] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 678.377091][ T30] audit: type=1400 audit(2000000431.480:3204): avc: denied { create } for pid=12981 comm="syz.5.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 678.378881][ T889] input input45: Timeout waiting for response from device. [ 678.611236][ T889] usb 2-1: USB disconnect, device number 56 [ 678.647755][T12989] netlink: 512 bytes leftover after parsing attributes in process `syz.5.1735'. [ 678.970813][ T30] audit: type=1400 audit(2000000432.250:3205): avc: denied { ioctl } for pid=12990 comm="syz.1.1736" path="socket:[43566]" dev="sockfs" ino=43566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 679.132083][ T1536] usb 4-1: USB disconnect, device number 59 [ 679.360713][ T30] audit: type=1400 audit(2000000432.250:3206): avc: denied { connect } for pid=12990 comm="syz.1.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 679.478775][ T30] audit: type=1400 audit(2000000432.510:3207): avc: denied { allowed } for pid=12990 comm="syz.1.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 679.582355][ T30] audit: type=1400 audit(2000000432.790:3208): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.609128][ T30] audit: type=1400 audit(2000000432.790:3209): avc: denied { open } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.634769][ T30] audit: type=1400 audit(2000000432.790:3210): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.680547][ T30] audit: type=1400 audit(2000000432.870:3211): avc: denied { create } for pid=12995 comm="syz.3.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 682.339805][T11527] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 682.392341][ T889] libceph: connect (1)[c::]:6789 error -101 [ 682.401368][ T889] libceph: mon0 (1)[c::]:6789 connect error [ 682.407609][ T889] libceph: connect (1)[b::]:6789 error -101 [ 682.420420][ T889] libceph: mon0 (1)[b::]:6789 connect error [ 682.502658][T11527] usb 7-1: Using ep0 maxpacket: 8 [ 682.533356][T11527] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 682.564985][T13013] ceph: No mds server is up or the cluster is laggy [ 682.579855][T13015] ceph: No mds server is up or the cluster is laggy [ 682.613767][T11527] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.673733][T13032] FAULT_INJECTION: forcing a failure. [ 682.673733][T13032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.687162][T13032] CPU: 0 UID: 0 PID: 13032 Comm: syz.3.1746 Not tainted syzkaller #0 PREEMPT(full) [ 682.687186][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 682.687196][T13032] Call Trace: [ 682.687203][T13032] [ 682.687211][T13032] dump_stack_lvl+0x16c/0x1f0 [ 682.687237][T13032] should_fail_ex+0x512/0x640 [ 682.687263][T13032] _copy_from_user+0x2e/0xd0 [ 682.687288][T13032] core_sys_select+0x2c8/0xc20 [ 682.687318][T13032] ? __pfx_core_sys_select+0x10/0x10 [ 682.687367][T13032] ? set_user_sigmask+0x21b/0x2b0 [ 682.687393][T13032] ? __pfx_set_user_sigmask+0x10/0x10 [ 682.687425][T13032] do_pselect.constprop.0+0x19f/0x1e0 [ 682.687450][T13032] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 682.687484][T13032] __x64_sys_pselect6+0x182/0x240 [ 682.687508][T13032] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 682.687540][T13032] do_syscall_64+0xcd/0xfa0 [ 682.687564][T13032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.687582][T13032] RIP: 0033:0x7fc20a38eec9 [ 682.687597][T13032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.687615][T13032] RSP: 002b:00007fc20b1d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 682.687632][T13032] RAX: ffffffffffffffda RBX: 00007fc20a5e6090 RCX: 00007fc20a38eec9 [ 682.687644][T13032] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000040 [ 682.687655][T13032] RBP: 00007fc20b1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 682.687667][T13032] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 682.687678][T13032] R13: 00007fc20a5e6128 R14: 00007fc20a5e6090 R15: 00007fffc673b488 [ 682.687704][T13032] [ 682.688663][ T889] libceph: connect (1)[c::]:6789 error -101 [ 682.881962][ T9] libceph: connect (1)[b::]:6789 error -101 [ 683.617823][ T9] libceph: mon0 (1)[b::]:6789 connect error [ 683.655188][T11527] usb 7-1: config 0 has no interface number 0 [ 683.680155][T11527] usb 7-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 683.691923][T11527] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 683.702053][T11527] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.715937][T11527] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 683.725178][T11527] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 683.734966][T11527] usb 7-1: SerialNumber: syz [ 683.740036][ T889] libceph: mon0 (1)[c::]:6789 connect error [ 683.752304][T11527] usb 7-1: config 0 descriptor?? [ 683.762356][T11527] hso 7-1:0.1: Failed to find BULK IN ep [ 683.945585][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 683.945629][ T30] audit: type=1400 audit(2000000437.230:3246): avc: denied { create } for pid=13038 comm="syz.3.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 684.020996][ T30] audit: type=1400 audit(2000000437.230:3247): avc: denied { ioctl } for pid=13038 comm="syz.3.1749" path="socket:[43750]" dev="sockfs" ino=43750 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 684.052820][ T30] audit: type=1400 audit(2000000437.230:3248): avc: denied { connect } for pid=13038 comm="syz.3.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 684.062781][ T5890] usb 7-1: USB disconnect, device number 44 [ 684.075172][ T30] audit: type=1400 audit(2000000437.230:3249): avc: denied { write } for pid=13038 comm="syz.3.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 684.218007][ T30] audit: type=1400 audit(2000000437.490:3250): avc: denied { ioctl } for pid=13036 comm="syz.1.1748" path="/dev/virtual_nci" dev="devtmpfs" ino=698 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 684.319309][ T30] audit: type=1400 audit(2000000437.490:3251): avc: denied { read } for pid=13036 comm="syz.1.1748" dev="nsfs" ino=4026532981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 684.324369][T13037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 684.371862][ T30] audit: type=1400 audit(2000000437.490:3252): avc: denied { open } for pid=13036 comm="syz.1.1748" path="net:[4026532981]" dev="nsfs" ino=4026532981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 684.398768][ T30] audit: type=1400 audit(2000000437.490:3253): avc: denied { create } for pid=13036 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 684.488353][ T30] audit: type=1400 audit(2000000437.500:3254): avc: denied { write } for pid=13036 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 684.549818][ T30] audit: type=1400 audit(2000000437.500:3255): avc: denied { read } for pid=13036 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 684.570161][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.625786][T13057] netlink: zone id is out of range [ 684.633093][T13057] netlink: zone id is out of range [ 684.638752][T13057] netlink: zone id is out of range [ 684.644244][T13057] netlink: zone id is out of range [ 684.666830][T13057] netlink: zone id is out of range [ 684.989803][T13057] netlink: zone id is out of range [ 685.149794][T13057] netlink: zone id is out of range [ 685.209815][T13057] netlink: zone id is out of range [ 685.214944][T13057] netlink: zone id is out of range [ 685.263870][T13057] netlink: zone id is out of range [ 685.323590][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.329974][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.411642][ T889] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 686.443708][T13099] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1760'. [ 686.579933][ T1536] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 686.752159][ T889] usb 6-1: no configurations [ 686.887731][ T1536] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 686.889807][ T889] usb 6-1: can't read configurations, error -22 [ 686.955000][ T1536] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 687.066128][ T1536] usb 7-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 687.093863][ T1536] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.119592][ T1536] usb 7-1: Product: syz [ 687.134176][ T1536] usb 7-1: Manufacturer: syz [ 687.138786][ T1536] usb 7-1: SerialNumber: syz [ 687.207936][ T1536] usb 7-1: config 0 descriptor?? [ 687.219817][ T889] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 687.346858][T13112] FAULT_INJECTION: forcing a failure. [ 687.346858][T13112] name failslab, interval 1, probability 0, space 0, times 0 [ 687.367540][T13112] CPU: 0 UID: 0 PID: 13112 Comm: syz.1.1766 Not tainted syzkaller #0 PREEMPT(full) [ 687.367565][T13112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 687.367576][T13112] Call Trace: [ 687.367582][T13112] [ 687.367589][T13112] dump_stack_lvl+0x16c/0x1f0 [ 687.367616][T13112] should_fail_ex+0x512/0x640 [ 687.367637][T13112] ? __kmalloc_noprof+0xca/0x880 [ 687.367660][T13112] should_failslab+0xc2/0x120 [ 687.367687][T13112] __kmalloc_noprof+0xdd/0x880 [ 687.367706][T13112] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 687.367742][T13112] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 687.367769][T13112] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 687.367798][T13112] ? cred_has_capability.isra.0+0x190/0x310 [ 687.367826][T13112] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 687.367854][T13112] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 687.367891][T13112] ? bpf_lsm_capable+0x9/0x10 [ 687.367916][T13112] ? security_capable+0x7e/0x260 [ 687.367942][T13112] genl_rcv_msg+0x55c/0x800 [ 687.367972][T13112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 687.367998][T13112] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 687.368021][T13112] ? __lock_acquire+0x622/0x1c90 [ 687.368048][T13112] netlink_rcv_skb+0x158/0x420 [ 687.368071][T13112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 687.368105][T13112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 687.368140][T13112] ? netlink_deliver_tap+0x1ae/0xd30 [ 687.368167][T13112] genl_rcv+0x28/0x40 [ 687.368190][T13112] netlink_unicast+0x5aa/0x870 [ 687.368217][T13112] ? __pfx_netlink_unicast+0x10/0x10 [ 687.368251][T13112] netlink_sendmsg+0x8c8/0xdd0 [ 687.368279][T13112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.368313][T13112] ____sys_sendmsg+0xa98/0xc70 [ 687.368340][T13112] ? copy_msghdr_from_user+0x10a/0x160 [ 687.368360][T13112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.368400][T13112] ___sys_sendmsg+0x134/0x1d0 [ 687.368423][T13112] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.368442][T13112] ? __lock_acquire+0x622/0x1c90 [ 687.368498][T13112] __sys_sendmsg+0x16d/0x220 [ 687.368521][T13112] ? __pfx___sys_sendmsg+0x10/0x10 [ 687.368560][T13112] do_syscall_64+0xcd/0xfa0 [ 687.368585][T13112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.368603][T13112] RIP: 0033:0x7f3b6a58eec9 [ 687.368619][T13112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.368635][T13112] RSP: 002b:00007f3b6b4c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.368652][T13112] RAX: ffffffffffffffda RBX: 00007f3b6a7e5fa0 RCX: 00007f3b6a58eec9 [ 687.368664][T13112] RDX: 0000000020008800 RSI: 0000200000001100 RDI: 0000000000000003 [ 687.368676][T13112] RBP: 00007f3b6b4c8090 R08: 0000000000000000 R09: 0000000000000000 [ 687.368686][T13112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.368696][T13112] R13: 00007f3b6a7e6038 R14: 00007f3b6a7e5fa0 R15: 00007ffe9fc89f08 [ 687.368723][T13112] [ 687.390321][T13097] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 687.680326][ T889] usb 6-1: no configurations [ 687.684953][ T889] usb 6-1: can't read configurations, error -22 [ 687.685667][T13114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.691629][T13097] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 687.698756][T13114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.727318][ T889] usb usb6-port1: attempt power cycle [ 687.934536][T13114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.942605][T13114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.148800][ T1536] option 7-1:0.0: GSM modem (1-port) converter detected [ 688.160414][ T1536] usb 7-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 688.190802][ T889] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 688.263373][ T889] usb 6-1: no configurations [ 688.268020][ T889] usb 6-1: can't read configurations, error -22 [ 688.287124][T13097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.406949][T13097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.550284][ T889] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 688.807667][ T889] usb 6-1: no configurations [ 688.837024][ T9] usb 7-1: USB disconnect, device number 45 [ 688.966981][ T889] usb 6-1: can't read configurations, error -22 [ 688.983591][ T9] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 689.016543][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 689.017365][ T30] audit: type=1400 audit(2000000442.290:3354): avc: denied { read } for pid=13134 comm="syz.7.1771" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 689.048433][ T30] audit: type=1400 audit(2000000442.290:3355): avc: denied { open } for pid=13134 comm="syz.7.1771" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 689.073083][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.205080][ T889] usb usb6-port1: unable to enumerate USB device [ 689.243327][ T9] option 7-1:0.0: device disconnected [ 689.319105][ T30] audit: type=1400 audit(2000000442.600:3356): avc: denied { add_name } for pid=13105 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.497392][ T30] audit: type=1400 audit(2000000442.600:3357): avc: denied { create } for pid=13105 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 689.519736][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.527043][ T30] audit: type=1400 audit(2000000442.600:3358): avc: denied { write } for pid=13105 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=10136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 689.553202][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.628491][T13133] tmpfs: Bad value for 'nr_blocks' [ 690.084916][ T1536] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 690.168157][ T30] audit: type=1400 audit(2000000442.600:3359): avc: denied { append } for pid=13105 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=10136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 690.264435][ T30] audit: type=1400 audit(2000000442.810:3360): avc: denied { module_request } for pid=13134 comm="syz.7.1771" kmod="fs-anon_inodefs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 690.286601][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.290128][ T1536] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.308190][ T30] audit: type=1400 audit(2000000442.910:3361): avc: denied { mounton } for pid=13127 comm="syz.3.1770" path="/365/file0" dev="tmpfs" ino=1915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 690.308308][ T1536] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 690.546845][ T1536] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 690.576155][ T30] audit: type=1400 audit(2000000442.940:3362): avc: denied { remove_name } for pid=13148 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=10136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.639791][ T1536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.716347][ T1536] usb 2-1: config 0 descriptor?? [ 690.963506][ T30] audit: type=1400 audit(2000000442.940:3363): avc: denied { unlink } for pid=13148 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=10136 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 691.246085][ T5822] Bluetooth: hci5: unexpected event for opcode 0x040d [ 691.871919][ T889] libceph: connect (1)[c::]:6789 error -101 [ 691.877984][ T889] libceph: mon0 (1)[c::]:6789 connect error [ 692.058122][ T1536] libceph: connect (1)[b::]:6789 error -101 [ 692.470615][ T889] libceph: connect (1)[c::]:6789 error -101 [ 692.476694][ T889] libceph: mon0 (1)[c::]:6789 connect error [ 692.511349][ T1536] libceph: mon0 (1)[b::]:6789 connect error [ 692.633574][T13192] ceph: No mds server is up or the cluster is laggy [ 692.633720][T13193] ceph: No mds server is up or the cluster is laggy [ 693.150412][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 693.156401][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 693.325512][ T1536] libceph: connect (1)[b::]:6789 error -101 [ 693.350199][ T1536] libceph: mon0 (1)[b::]:6789 connect error [ 693.366330][T13208] ceph: No mds server is up or the cluster is laggy [ 693.390239][T13211] ceph: No mds server is up or the cluster is laggy [ 693.453366][ T1536] libceph: connect (1)[c::]:6789 error -101 [ 693.460817][ T1536] libceph: mon0 (1)[c::]:6789 connect error [ 693.727986][ T1536] libceph: connect (1)[b::]:6789 error -101 [ 693.756746][ T1536] libceph: mon0 (1)[b::]:6789 connect error [ 693.989864][ T5890] usb 2-1: USB disconnect, device number 57 [ 694.199314][T13223] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 694.636966][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 694.636983][ T30] audit: type=1400 audit(2000000447.920:3399): avc: denied { watch } for pid=13215 comm="syz.3.1784" path="/368/file0" dev="tmpfs" ino=1932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 695.224599][ T30] audit: type=1400 audit(2000000447.920:3400): avc: denied { watch_sb watch_reads } for pid=13215 comm="syz.3.1784" path="/368/file0" dev="tmpfs" ino=1932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 695.359945][ T30] audit: type=1400 audit(2000000448.060:3401): avc: denied { ioctl } for pid=13225 comm="syz.7.1786" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45143 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 695.386451][ T30] audit: type=1400 audit(2000000448.090:3402): avc: denied { mount } for pid=13225 comm="syz.7.1786" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 695.439766][ T30] audit: type=1400 audit(2000000448.120:3403): avc: denied { mounton } for pid=13225 comm="syz.7.1786" path="/58/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 695.536566][ T30] audit: type=1400 audit(2000000448.130:3404): avc: denied { unmount } for pid=13225 comm="syz.7.1786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 695.581812][ T30] audit: type=1400 audit(2000000448.630:3405): avc: denied { unmount } for pid=12069 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 695.802308][ T30] audit: type=1400 audit(2000000449.080:3406): avc: denied { write } for pid=13236 comm="syz.3.1791" name="unix" dev="proc" ino=4026532996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 696.486005][ T30] audit: type=1400 audit(2000000449.090:3407): avc: denied { read write } for pid=13236 comm="syz.3.1791" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 696.661338][ T30] audit: type=1400 audit(2000000449.090:3408): avc: denied { open } for pid=13236 comm="syz.3.1791" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 698.385680][ T5965] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 698.475730][ T5930] libceph: mon0 (1)[b::]:6789 socket closed (con state V1_BANNER) [ 698.540642][T13249] ceph: No mds server is up or the cluster is laggy [ 698.541055][T13252] ceph: No mds server is up or the cluster is laggy [ 698.834767][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1800'. [ 699.954841][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 699.954857][ T30] audit: type=1400 audit(2000000453.240:3413): avc: denied { create } for pid=13291 comm="syz.6.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 699.981214][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.065695][T13294] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 700.076403][T13294] netlink: 'syz.5.1803': attribute type 1 has an invalid length. [ 700.084252][T13294] nbd: couldn't find a device at index 20 [ 700.303566][ T30] audit: type=1400 audit(2000000453.330:3414): avc: denied { create } for pid=13287 comm="syz.5.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 700.334802][ T30] audit: type=1400 audit(2000000453.330:3415): avc: denied { write } for pid=13287 comm="syz.5.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 700.421900][T13296] RDS: rds_bind could not find a transport for fe80::1f, load rds_tcp or rds_rdma? [ 700.446869][ T30] audit: type=1400 audit(2000000453.340:3416): avc: denied { mac_admin } for pid=13287 comm="syz.5.1803" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 700.670304][ T30] audit: type=1400 audit(2000000453.340:3417): avc: denied { relabelto } for pid=13287 comm="syz.5.1803" name=E91F7189591E9233614B dev="tmpfs" ino=1568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 700.721456][T13296] md: could not open device unknown-block(128,0). [ 700.736471][T13296] md: md_import_device returned -6 [ 700.780682][ T30] audit: type=1400 audit(2000000453.350:3418): avc: denied { associate } for pid=13287 comm="syz.5.1803" name=E91F7189591E9233614B dev="tmpfs" ino=1568 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:memory_device_t:s0" [ 700.811581][ T30] audit: type=1400 audit(2000000453.350:3419): avc: denied { mounton } for pid=13287 comm="syz.5.1803" path=2F3239352FE91F7189591E9233614B dev="tmpfs" ino=1568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 700.894764][ T30] audit: type=1400 audit(2000000453.620:3420): avc: denied { map } for pid=13291 comm="syz.6.1804" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 701.169856][ T30] audit: type=1400 audit(2000000453.620:3421): avc: denied { read write } for pid=13291 comm="syz.6.1804" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 701.346822][ T30] audit: type=1400 audit(2000000453.710:3422): avc: denied { create } for pid=13295 comm="syz.3.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 701.890435][ T1536] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 702.059812][ T1536] usb 4-1: Using ep0 maxpacket: 32 [ 702.376156][ T1536] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 702.386427][ T1536] usb 4-1: config 0 has no interface number 0 [ 702.399932][ T1536] usb 4-1: config 0 interface 184 has no altsetting 0 [ 702.410559][ T1536] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 702.420213][ T1536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.428669][ T1536] usb 4-1: Product: syz [ 702.432993][ T1536] usb 4-1: Manufacturer: syz [ 702.439974][ T1536] usb 4-1: SerialNumber: syz [ 702.458685][ T1536] usb 4-1: config 0 descriptor?? [ 702.474308][ T1536] smsc75xx v1.0.0 [ 702.760793][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 702.795818][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 702.844023][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 702.861102][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 702.878506][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 702.886918][ T1536] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 702.929062][ T1536] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 702.969769][ T1536] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 702.980546][ T1536] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 703.514766][T13338] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 703.523501][T13338] netlink: 'syz.5.1818': attribute type 1 has an invalid length. [ 703.531720][T13338] nbd: couldn't find a device at index 20 [ 703.963537][T13322] chnl_net:caif_netlink_parms(): no params data found [ 704.015936][T13341] tmpfs: Bad value for 'nr_blocks' [ 704.422876][T13322] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.440699][T13322] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.447821][T13322] bridge_slave_0: entered allmulticast mode [ 704.864085][T13322] bridge_slave_0: entered promiscuous mode [ 704.926838][ T5132] Bluetooth: hci0: command tx timeout [ 704.936251][T13322] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.978073][ T9] usb 4-1: USB disconnect, device number 60 [ 704.989355][T13322] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.001270][T13322] bridge_slave_1: entered allmulticast mode [ 705.199637][T13322] bridge_slave_1: entered promiscuous mode [ 705.484035][T13322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.839562][T13322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.022450][T13322] team0: Port device team_slave_0 added [ 706.029267][T13322] team0: Port device team_slave_1 added [ 706.395122][T13322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.432989][T13322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.464565][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 706.464576][ T30] audit: type=1400 audit(2000000459.750:3441): avc: denied { name_bind } for pid=13370 comm="syz.1.1825" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 706.534635][ T30] audit: type=1400 audit(2000000459.780:3442): avc: denied { connect } for pid=13370 comm="syz.1.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 706.554734][T13322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.567306][T13322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.575167][T13322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.603515][T13322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.672037][ T1536] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 706.691689][T13322] hsr_slave_0: entered promiscuous mode [ 706.700686][T13322] hsr_slave_1: entered promiscuous mode [ 706.724303][T13322] debugfs: 'hsr0' already exists in 'hsr' [ 706.750507][T13322] Cannot create hsr debugfs directory [ 706.839816][ T1536] usb 6-1: Using ep0 maxpacket: 32 [ 706.850779][ T1536] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 706.870399][ T1536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.933434][ T1536] usb 6-1: config 0 descriptor?? [ 706.982348][ T1536] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 707.000165][ T5132] Bluetooth: hci0: command tx timeout [ 707.149848][ T5899] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 707.364744][ T30] audit: type=1400 audit(2000000460.650:3443): avc: denied { sys_module } for pid=13376 comm="syz.6.1827" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 708.041865][ T1536] gspca_nw80x: reg_r err -32 [ 708.320603][T13322] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 708.377067][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 708.382588][ T1536] nw80x 6-1:0.0: probe with driver nw80x failed with error -32 [ 708.398377][T13322] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 708.398834][ T5899] usb 2-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.422984][T13322] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 708.452154][ T5899] usb 2-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.464027][T13322] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 708.475082][ T5899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 708.498611][ T5899] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 708.566326][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.591541][ T5899] usb 2-1: config 0 descriptor?? [ 708.621280][ T30] audit: type=1400 audit(2000000461.910:3444): avc: denied { read write } for pid=13399 comm="syz.3.1831" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 708.689835][ T30] audit: type=1400 audit(2000000461.910:3445): avc: denied { open } for pid=13399 comm="syz.3.1831" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 708.726778][T13322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.744685][ T30] audit: type=1400 audit(2000000461.930:3446): avc: denied { ioctl } for pid=13399 comm="syz.3.1831" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 708.911583][T13322] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.039271][T11369] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.046418][T11369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.064160][T13379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.074101][T13379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.082298][ T5132] Bluetooth: hci0: command tx timeout [ 709.095240][ T5899] chicony 0003:04F2:1236.0029: unknown main item tag 0x0 [ 709.109807][ T5899] chicony 0003:04F2:1236.0029: unknown main item tag 0x0 [ 709.116850][ T5899] chicony 0003:04F2:1236.0029: unknown main item tag 0x0 [ 709.139785][ T5899] chicony 0003:04F2:1236.0029: unknown main item tag 0x0 [ 709.147200][ T5899] chicony 0003:04F2:1236.0029: unknown main item tag 0x0 [ 709.160673][ T5899] chicony 0003:04F2:1236.0029: unknown main item tag 0x0 [ 709.165040][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.167739][ T5899] chicony 0003:04F2:1236.0029: unknown main item tag 0x0 [ 709.174806][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.255465][ T5899] chicony 0003:04F2:1236.0029: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.1-1/input0 [ 709.317240][ T5899] usb 2-1: USB disconnect, device number 58 [ 709.331017][T13322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 709.395859][T13412] fido_id[13412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 709.450279][ T889] usb 6-1: USB disconnect, device number 48 [ 710.238100][T13322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.006863][ T30] audit: type=1326 audit(2000000464.280:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.6.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0cf8eec9 code=0x7ffc0000 [ 711.061422][ T30] audit: type=1326 audit(2000000464.280:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.6.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0cf8eec9 code=0x7ffc0000 [ 711.090620][ T30] audit: type=1326 audit(2000000464.280:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.6.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0cf8eec9 code=0x7ffc0000 [ 711.263562][ T5132] Bluetooth: hci0: command tx timeout [ 711.385506][ T30] audit: type=1326 audit(2000000464.280:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.6.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0cf8eec9 code=0x7ffc0000 [ 711.450950][T13453] comedi comedi1: s526: I/O port conflict (0x5065f1dc,64) [ 711.484959][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 711.484974][ T30] audit: type=1326 audit(2000000464.770:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.6.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0cf8eec9 code=0x7ffc0000 [ 711.633060][ T30] audit: type=1326 audit(2000000464.770:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.6.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0cf8eec9 code=0x7ffc0000 [ 711.664681][T13322] veth0_vlan: entered promiscuous mode [ 711.728361][T13322] veth1_vlan: entered promiscuous mode [ 711.759669][ T30] audit: type=1326 audit(2000000464.770:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.6.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdb0cf8eec9 code=0x7ffc0000 [ 711.858447][T13322] veth0_macvtap: entered promiscuous mode [ 711.864426][ T30] audit: type=1326 audit(2000000464.820:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.6.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0cf8eec9 code=0x7ffc0000 [ 711.923038][T13322] veth1_macvtap: entered promiscuous mode [ 711.966786][T13322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.989864][ T30] audit: type=1326 audit(2000000464.870:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.6.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdb0cf8eec9 code=0x7ffc0000 [ 712.037045][T13322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.074800][T11369] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.097202][T11369] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.130127][ T30] audit: type=1400 audit(2000000465.270:3537): avc: denied { ioctl } for pid=13462 comm="syz.6.1837" path="socket:[46043]" dev="sockfs" ino=46043 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 712.240813][T11369] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.249587][T11369] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.269552][ T30] audit: type=1400 audit(2000000465.270:3538): avc: denied { write } for pid=13462 comm="syz.6.1837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 712.598773][ T30] audit: type=1400 audit(2000000465.880:3539): avc: denied { name_bind } for pid=13483 comm="syz.3.1842" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 713.245252][ T30] audit: type=1400 audit(2000000465.880:3540): avc: denied { node_bind } for pid=13483 comm="syz.3.1842" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 713.962111][ T30] audit: type=1400 audit(2000000467.250:3541): avc: denied { read } for pid=13507 comm="syz.1.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 715.851780][ T5911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.873701][ T5911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.908161][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.974692][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.978537][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 717.417963][ T30] audit: type=1400 audit(2000000470.260:3551): avc: denied { ioctl } for pid=13535 comm="syz.5.1850" path="socket:[47333]" dev="sockfs" ino=47333 ioctlcmd=0x500a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 717.544156][ T30] audit: type=1400 audit(2000000470.770:3552): avc: denied { append } for pid=13536 comm="syz.1.1849" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 717.784594][ T5930] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 717.790247][T13553] fuse: Bad value for 'fd' [ 717.814248][ T30] audit: type=1400 audit(2000000471.080:3553): avc: denied { mounton } for pid=13552 comm="syz.5.1852" path="/310/file0" dev="tmpfs" ino=1649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 717.977767][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 718.049212][ T5930] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 718.066896][ T5930] usb 7-1: config 0 has no interface number 0 [ 718.087104][ T5930] usb 7-1: config 0 interface 184 has no altsetting 0 [ 718.120049][ T5930] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 718.154166][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.267798][ T5930] usb 7-1: Product: syz [ 718.279281][ T5930] usb 7-1: Manufacturer: syz [ 718.294344][ T5930] usb 7-1: SerialNumber: syz [ 718.547382][ T5930] usb 7-1: config 0 descriptor?? [ 718.675936][ T5930] smsc75xx v1.0.0 [ 719.236611][ T5930] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 719.264795][ T5930] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 719.304805][ T5930] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 719.342898][ T5930] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 721.076300][ T5965] usb 7-1: USB disconnect, device number 46 [ 721.861146][ T30] audit: type=1400 audit(2000000474.970:3554): avc: denied { map } for pid=13610 comm="syz.6.1861" path="socket:[46582]" dev="sockfs" ino=46582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 722.007695][ T30] audit: type=1400 audit(2000000475.220:3555): avc: denied { create } for pid=13609 comm="syz.5.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 722.169977][ T30] audit: type=1400 audit(2000000475.440:3556): avc: denied { create } for pid=13619 comm="syz.3.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 722.388067][ T30] audit: type=1400 audit(2000000475.500:3557): avc: denied { sqpoll } for pid=13622 comm="syz.1.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 722.745440][ T30] audit: type=1400 audit(2000000476.020:3558): avc: denied { ioctl } for pid=13635 comm="syz.6.1866" path="socket:[47415]" dev="sockfs" ino=47415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 722.786445][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.245838][ T30] audit: type=1400 audit(2000000476.030:3559): avc: denied { connect } for pid=13635 comm="syz.6.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 723.275002][ T30] audit: type=1400 audit(2000000476.340:3560): avc: denied { unmount } for pid=7462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 723.600148][ T30] audit: type=1400 audit(2000000476.360:3561): avc: denied { read write } for pid=7462 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.702942][ T30] audit: type=1400 audit(2000000476.380:3562): avc: denied { open } for pid=7462 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.730870][ T30] audit: type=1400 audit(2000000476.380:3563): avc: denied { ioctl } for pid=7462 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 724.030400][ T30] audit: type=1400 audit(2000000476.450:3564): avc: denied { allowed } for pid=13635 comm="syz.6.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 724.140518][ T5965] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 724.320024][ T5965] usb 4-1: Using ep0 maxpacket: 8 [ 724.333267][ T5965] usb 4-1: unable to get BOS descriptor or descriptor too short [ 724.344538][ T5965] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 724.359450][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 724.613256][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 724.832031][ T5965] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 724.970045][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 724.990279][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 725.036197][ T5965] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 725.046645][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.112067][ T5965] usb 4-1: Product: syz [ 725.116259][ T5965] usb 4-1: Manufacturer: syz [ 725.296287][ T5965] usb 4-1: SerialNumber: syz [ 725.348076][ T5965] usb 4-1: config 0 descriptor?? [ 725.510914][T13655] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 725.529439][ T5965] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 725.609982][ T1536] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 725.751842][T13655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.764760][T13655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.771615][T13689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.785699][T13689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.884762][T13690] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 725.895144][T13690] netlink: 'syz.5.1876': attribute type 1 has an invalid length. [ 725.903022][T13690] nbd: couldn't find a device at index 20 [ 726.222718][ T1536] usb 9-1: Using ep0 maxpacket: 32 [ 726.250200][T13655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.260468][T13655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.286018][ T1536] usb 9-1: unable to get BOS descriptor or descriptor too short [ 726.325200][ T1536] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 726.334410][T11207] udevd[11207]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.347538][ T1536] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 726.363486][ T1536] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.381884][ T1536] usb 9-1: Product: syz [ 726.404074][ T1536] usb 9-1: Manufacturer: syz [ 726.420225][ T1536] usb 9-1: SerialNumber: syz [ 726.538231][T13689] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 726.689635][ T1536] usb 9-1: Cannot retrieve CPort count: -71 [ 726.731931][ T1536] usb 9-1: Cannot retrieve CPort count: -71 [ 726.764570][ T1536] es2_ap_driver 9-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 726.918766][ T1536] usb 9-1: USB disconnect, device number 2 [ 727.003484][ T5930] usb 4-1: USB disconnect, device number 61 [ 727.249954][ T5899] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 727.339872][T11527] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 727.409765][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 727.416577][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.426736][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 727.470443][ T5899] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 727.486122][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.686612][T11527] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 727.714510][T11527] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 727.736505][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 727.736518][ T30] audit: type=1400 audit(2000000481.020:3621): avc: denied { create } for pid=13706 comm="syz.3.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 727.745715][T11527] usb 6-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 727.772915][T11527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.789280][T11527] usb 6-1: Product: syz [ 728.084171][ T5899] usb 2-1: config 0 descriptor?? [ 728.100027][T11527] usb 6-1: Manufacturer: syz [ 728.106102][T11527] usb 6-1: SerialNumber: syz [ 728.118314][ T5899] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 728.145146][ T30] audit: type=1400 audit(2000000481.240:3622): avc: denied { create } for pid=13706 comm="syz.3.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 728.225007][ T30] audit: type=1400 audit(2000000481.240:3623): avc: denied { bind } for pid=13706 comm="syz.3.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 728.235800][T11527] usb 6-1: config 0 descriptor?? [ 728.269288][ T30] audit: type=1400 audit(2000000481.240:3624): avc: denied { setopt } for pid=13706 comm="syz.3.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 728.306819][T13701] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 728.327255][T13701] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 728.355731][ T30] audit: type=1400 audit(2000000481.240:3625): avc: denied { accept } for pid=13706 comm="syz.3.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 728.360934][T11527] option 6-1:0.0: GSM modem (1-port) converter detected [ 728.512465][ T30] audit: type=1400 audit(2000000481.240:3626): avc: denied { write } for pid=13706 comm="syz.3.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 728.532090][ T30] audit: type=1400 audit(2000000481.250:3627): avc: denied { read } for pid=13706 comm="syz.3.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 728.535409][T11527] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 728.553593][ T30] audit: type=1400 audit(2000000481.640:3628): avc: denied { write } for pid=13706 comm="syz.3.1881" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 728.575580][T13701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.635151][T13701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.648860][ T30] audit: type=1400 audit(2000000481.690:3629): avc: denied { create } for pid=13696 comm="syz.1.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 728.668721][ T30] audit: type=1400 audit(2000000481.690:3630): avc: denied { create } for pid=13696 comm="syz.1.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 728.732555][ T5899] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 728.810556][ T1536] usb 6-1: USB disconnect, device number 49 [ 728.933760][ T1536] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 728.943636][ T1536] option 6-1:0.0: device disconnected [ 729.019895][ T5899] usb 9-1: Using ep0 maxpacket: 8 [ 729.092798][ T5899] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 729.102307][ T5899] usb 9-1: config 179 has no interface number 0 [ 729.108868][ T5899] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 729.140192][ T5899] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 729.155083][ T5899] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 729.179994][ T5899] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 729.190674][ T5899] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 729.304824][ T5899] usb 9-1: config 179 interface 65 has no altsetting 0 [ 729.389795][ T5899] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 729.399008][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.538796][ T5899] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input47 [ 729.674951][T13727] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 729.683955][T13727] netlink: 'syz.6.1885': attribute type 1 has an invalid length. [ 729.691877][T13727] nbd: couldn't find a device at index 20 [ 729.850057][ T1536] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 730.107551][ T5965] usb 2-1: USB disconnect, device number 59 [ 730.124933][ T1536] usb 6-1: Using ep0 maxpacket: 32 [ 730.139147][ T1536] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 730.149857][ T1536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.159410][ T1536] usb 6-1: config 0 descriptor?? [ 730.172963][ T1536] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 730.576152][ T1536] gspca_nw80x: reg_r err -32 [ 730.617857][ T1536] nw80x 6-1:0.0: probe with driver nw80x failed with error -32 [ 730.649782][ T5965] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 731.215656][ T5899] usb 9-1: USB disconnect, device number 3 [ 731.221524][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 731.269926][ T5965] usb 4-1: Using ep0 maxpacket: 16 [ 731.281681][ T5965] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.292959][ T5965] usb 4-1: config 0 interface 0 has no altsetting 0 [ 731.452436][ T5965] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 731.472729][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.484485][ T5965] usb 4-1: config 0 descriptor?? [ 731.495550][T13773] netlink: 'syz.6.1893': attribute type 1 has an invalid length. [ 732.393025][ T5965] nzxt-smart2 0003:1E71:2009.002A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 732.559149][ T5965] usb 6-1: USB disconnect, device number 50 [ 732.629795][ T5883] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 732.695830][T11527] usb 4-1: USB disconnect, device number 62 [ 732.792959][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 732.792975][ T30] audit: type=1400 audit(2000000486.080:3667): avc: denied { write } for pid=13786 comm="syz.5.1897" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 733.220235][ T5883] usb 9-1: Using ep0 maxpacket: 32 [ 733.242556][ T5883] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 733.251731][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.282011][ T5883] usb 9-1: config 0 descriptor?? [ 733.300203][ T5883] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 733.514178][ T30] audit: type=1400 audit(2000000486.790:3668): avc: denied { cmd } for pid=13794 comm="syz.3.1900" path="socket:[47982]" dev="sockfs" ino=47982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 733.737552][ T30] audit: type=1400 audit(2000000487.020:3669): avc: denied { read write } for pid=13786 comm="syz.5.1897" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 733.807571][ T30] audit: type=1400 audit(2000000487.020:3670): avc: denied { open } for pid=13786 comm="syz.5.1897" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 733.834144][ T5899] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 734.021081][ T5899] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 734.030990][ T5899] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 734.125154][ T5899] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 734.147145][ T5899] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 734.169833][ T5899] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 734.201220][ T5883] gspca_nw80x: reg_r err -32 [ 734.205897][ T5883] nw80x 9-1:0.0: probe with driver nw80x failed with error -32 [ 734.232701][ T5899] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 734.241865][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 734.317339][ T5899] usb 7-1: Product: syz [ 734.323921][ T5899] usb 7-1: Manufacturer: syz [ 734.351061][ T5899] cdc_wdm 7-1:1.0: skipping garbage [ 734.356278][ T5899] cdc_wdm 7-1:1.0: skipping garbage [ 734.371298][ T5899] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 734.377450][ T5899] cdc_wdm 7-1:1.0: Unknown control protocol [ 734.974441][T13815] ipip0: entered promiscuous mode [ 735.209073][ T30] audit: type=1400 audit(2000000488.460:3671): avc: denied { map } for pid=13797 comm="syz.6.1899" path="socket:[46859]" dev="sockfs" ino=46859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 735.823486][ T30] audit: type=1400 audit(2000000488.460:3672): avc: denied { read } for pid=13797 comm="syz.6.1899" path="socket:[46859]" dev="sockfs" ino=46859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 735.872153][ T30] audit: type=1400 audit(2000000488.520:3673): avc: denied { shutdown } for pid=13797 comm="syz.6.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 735.915412][ T1536] usb 9-1: USB disconnect, device number 4 [ 735.988385][T11527] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 735.997704][ T30] audit: type=1400 audit(2000000488.520:3674): avc: denied { getopt } for pid=13797 comm="syz.6.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 736.019469][ T30] audit: type=1400 audit(2000000488.520:3675): avc: denied { read write } for pid=13797 comm="syz.6.1899" name="cdc-wdm0" dev="devtmpfs" ino=3594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 736.222697][T11527] usb 6-1: Using ep0 maxpacket: 16 [ 736.296888][T11527] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 736.306487][T11527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.317916][ T30] audit: type=1400 audit(2000000488.520:3676): avc: denied { open } for pid=13797 comm="syz.6.1899" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 736.649759][T11527] usb 6-1: Product: syz [ 736.653922][T11527] usb 6-1: Manufacturer: syz [ 736.838019][T11527] usb 6-1: SerialNumber: syz [ 736.989834][ T5899] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 736.998151][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 737.137990][T11527] usb 6-1: config 0 descriptor?? [ 737.191903][ T5883] usb 7-1: USB disconnect, device number 47 [ 737.359994][ T5899] usb 4-1: device descriptor read/64, error -32 [ 737.669910][T11527] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 737.769079][ T5899] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 737.977161][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 738.001333][ T5899] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 738.239850][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.328399][ T5899] usb 4-1: config 0 descriptor?? [ 738.486792][ T5899] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 738.499843][ T30] audit: type=1400 audit(2000000491.780:3677): avc: denied { ioctl } for pid=13840 comm="syz.8.1909" path="socket:[46963]" dev="sockfs" ino=46963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 739.040488][ T30] audit: type=1400 audit(2000000491.810:3678): avc: denied { connect } for pid=13840 comm="syz.8.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 739.148715][ T30] audit: type=1400 audit(2000000491.870:3679): avc: denied { read } for pid=13849 comm="syz.1.1911" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 739.171433][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.261648][ T30] audit: type=1400 audit(2000000491.870:3680): avc: denied { open } for pid=13849 comm="syz.1.1911" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 739.369997][ T30] audit: type=1400 audit(2000000491.970:3681): avc: denied { prog_load } for pid=13849 comm="syz.1.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 739.389194][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.416931][T11527] usb 6-1: USB disconnect, device number 51 [ 739.623755][T13864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.694465][ T30] audit: type=1400 audit(2000000491.970:3682): avc: denied { bpf } for pid=13849 comm="syz.1.1911" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 739.850829][ T5899] gspca_nw80x: reg_w err -71 [ 739.863094][ T5899] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 739.888805][ T5899] usb 4-1: USB disconnect, device number 64 [ 739.899782][ T30] audit: type=1400 audit(2000000491.980:3683): avc: denied { module_request } for pid=13849 comm="syz.1.1911" kmod="fs-anon_inodefs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 739.921945][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.399913][ T31] INFO: task kworker/u8:11:6067 blocked for more than 143 seconds. [ 740.402574][ T30] audit: type=1400 audit(2000000492.110:3684): avc: denied { ioctl } for pid=13834 comm="syz.3.1907" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 740.407928][ T31] Not tainted syzkaller #0 [ 740.443454][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 740.800691][ T31] task:kworker/u8:11 state:D stack:23544 pid:6067 tgid:6067 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 740.834417][ T31] Workqueue: netns cleanup_net [ 740.871018][ T30] audit: type=1400 audit(2000000492.350:3685): avc: denied { allowed } for pid=13840 comm="syz.8.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 740.888563][ T31] Call Trace: [ 740.891802][ T30] audit: type=1400 audit(2000000492.510:3686): avc: denied { read write } for pid=13322 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 740.918301][ T31] [ 740.933871][ T31] __schedule+0x1190/0x5de0 [ 740.948694][ T31] ? check_path.constprop.0+0x24/0x50 [ 741.038511][ T31] ? __lock_acquire+0x622/0x1c90 [ 741.048357][ T31] ? __pfx___schedule+0x10/0x10 [ 741.053746][ T31] ? find_held_lock+0x2b/0x80 [ 741.058492][ T31] ? schedule+0x2d7/0x3a0 [ 741.113085][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 741.118509][ T31] schedule+0xe7/0x3a0 [ 741.122680][ T31] schedule_preempt_disabled+0x13/0x30 [ 741.128186][ T31] __mutex_lock+0x818/0x1060 [ 741.132918][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 741.140791][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 741.146696][ T31] ? kasan_quarantine_put+0x10a/0x240 [ 741.152804][ T31] ? kfree+0x2b8/0x6d0 [ 741.157629][ T31] ? kfree_const+0x55/0x60 [ 741.162364][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 741.167787][ T31] rdma_dev_change_netns+0x30/0x320 [ 741.173271][ T31] rdma_dev_exit_net+0x2dd/0x590 [ 741.178260][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 741.184844][ T31] ? __pfx___might_resched+0x10/0x10 [ 741.191368][ T31] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 741.198350][ T31] ? mutex_is_locked+0x17/0x60 [ 741.207924][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 741.219004][T13871] ceph: No mds server is up or the cluster is laggy [ 741.226016][T13872] ceph: No mds server is up or the cluster is laggy [ 741.238011][ T31] ops_undo_list+0x2ee/0xab0 [ 741.254689][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 741.262346][ T31] ? cleanup_net+0x347/0x8b0 [ 741.267002][ T31] ? idr_destroy+0x62/0x2e0 [ 741.274405][ T31] cleanup_net+0x41b/0x8b0 [ 741.278899][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 741.284849][ T31] ? rcu_is_watching+0x12/0xc0 [ 741.290756][ T31] process_one_work+0x9cf/0x1b70 [ 741.296358][ T31] ? __pfx_process_one_work+0x10/0x10 [ 741.303967][ T31] ? assign_work+0x1a0/0x250 [ 741.313037][ T31] worker_thread+0x6c8/0xf10 [ 741.317670][ T31] ? __pfx_worker_thread+0x10/0x10 [ 741.323723][ T31] kthread+0x3c5/0x780 [ 741.330215][ T31] ? __pfx_kthread+0x10/0x10 [ 741.334864][ T31] ? rcu_is_watching+0x12/0xc0 [ 741.343905][ T31] ? __pfx_kthread+0x10/0x10 [ 741.353995][ T31] ret_from_fork+0x675/0x7d0 [ 741.359903][ T31] ? __pfx_kthread+0x10/0x10 [ 741.364766][ T31] ret_from_fork_asm+0x1a/0x30 [ 741.371460][ T31] [ 741.374572][ T31] INFO: task syz.0.1463:11933 blocked for more than 144 seconds. [ 741.382862][ T31] Not tainted syzkaller #0 [ 741.387881][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 741.399234][ T31] task:syz.0.1463 state:D stack:23256 pid:11933 tgid:11928 ppid:5818 task_flags:0x400140 flags:0x00080003 [ 741.412027][ T31] Call Trace: [ 741.415358][ T31] [ 741.418335][ T31] __schedule+0x1190/0x5de0 [ 741.425278][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 741.431435][ T31] ? __pfx___schedule+0x10/0x10 [ 741.436359][ T31] ? find_held_lock+0x2b/0x80 [ 741.441316][ T31] ? schedule+0x2d7/0x3a0 [ 741.445693][ T31] schedule+0xe7/0x3a0 [ 741.450629][ T31] schedule_timeout+0x257/0x290 [ 741.455911][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 741.466451][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 741.472035][ T31] __wait_for_common+0x2fc/0x4e0 [ 741.477032][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 741.483802][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 741.489345][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 741.494772][ T31] disable_device+0x16f/0x280 [ 741.499506][ T31] ? __pfx_disable_device+0x10/0x10 [ 741.505260][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 741.511013][ T31] __ib_unregister_device+0x2b4/0x480 [ 741.516449][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 741.522699][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 741.528473][ T31] nldev_dellink+0x21f/0x320 [ 741.533334][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 741.538576][ T31] ? cap_capable+0xb3/0x250 [ 741.543664][ T31] ? bpf_lsm_capable+0x9/0x10 [ 741.548363][ T31] ? security_capable+0x7e/0x260 [ 741.553499][ T31] ? ns_capable+0xd7/0x110 [ 741.557933][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 741.563173][ T31] rdma_nl_rcv_msg+0x38a/0x6e0 [ 741.567955][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 741.573296][ T31] ? __lock_acquire+0x622/0x1c90 [ 741.578233][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 741.584805][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 741.592634][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 741.597919][ T31] netlink_unicast+0x5aa/0x870 [ 741.602698][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 741.608154][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 741.613085][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.618382][ T31] ____sys_sendmsg+0xa98/0xc70 [ 741.623227][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 741.628685][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.634116][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 741.639409][ T31] ___sys_sendmsg+0x134/0x1d0 [ 741.644965][ T31] ? futex_private_hash_put+0x176/0x300 [ 741.650593][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.655908][ T31] ? __lock_acquire+0x622/0x1c90 [ 741.660947][ T31] __sys_sendmsg+0x16d/0x220 [ 741.665536][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 741.670669][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 741.675612][ T31] do_syscall_64+0xcd/0xfa0 [ 741.680177][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.686064][ T31] RIP: 0033:0x7fd43a78eec9 [ 741.690504][ T31] RSP: 002b:00007fd43b64d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.698920][ T31] RAX: ffffffffffffffda RBX: 00007fd43a9e6270 RCX: 00007fd43a78eec9 [ 741.707553][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 741.715545][ T31] RBP: 00007fd43a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 741.723572][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.731590][ T31] R13: 00007fd43a9e6308 R14: 00007fd43a9e6270 R15: 00007ffd94115028 [ 741.739563][ T31] [ 741.742829][ T31] [ 741.742829][ T31] Showing all locks held in the system: [ 741.757386][ T31] 1 lock held by pool_workqueue_/3: [ 741.775031][ T31] 5 locks held by kworker/u8:0/12: [ 741.780640][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 741.792372][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 741.801274][ T31] #2: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 741.811812][ T31] #3: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 741.821424][ T31] #4: ffff8880b84392d8 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x26b/0x1160 [ 741.831094][ T31] 1 lock held by khungtaskd/31: [ 741.835935][ T31] #0: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 741.846014][ T31] 1 lock held by syslogd/5163: [ 741.851326][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 741.861327][ T31] 2 locks held by getty/5568: [ 741.865999][ T31] #0: ffff888031f2b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 741.876027][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 741.886187][ T31] 4 locks held by kworker/u8:11/6067: [ 741.891583][ T31] #0: ffff88801bad4948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 741.902311][ T31] #1: ffffc900055c7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 741.912477][ T31] #2: ffffffff900e4fb0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 741.921877][ T31] #3: ffff888053be4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 741.933336][ T31] 2 locks held by kworker/u8:13/6073: [ 741.938709][ T31] #0: ffff888020f01148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 741.949386][ T31] #1: ffffc900056efd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 741.961514][ T31] 2 locks held by syz.0.1463/11933: [ 741.966706][ T31] #0: ffffffff9ae94578 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 741.977113][ T31] #1: ffff888053be4700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 741.988563][ T31] [ 741.991524][ T31] ============================================= [ 741.991524][ T31] [ 742.001117][ T31] NMI backtrace for cpu 0 [ 742.001132][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 742.001152][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 742.001162][ T31] Call Trace: [ 742.001168][ T31] [ 742.001176][ T31] dump_stack_lvl+0x116/0x1f0 [ 742.001201][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 742.001225][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 742.001245][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 742.001267][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 742.001295][ T31] watchdog+0xf3f/0x1170 [ 742.001316][ T31] ? rcu_is_watching+0x12/0xc0 [ 742.001334][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.001348][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 742.001370][ T31] ? __kthread_parkme+0x19e/0x250 [ 742.001391][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.001407][ T31] kthread+0x3c5/0x780 [ 742.001430][ T31] ? __pfx_kthread+0x10/0x10 [ 742.001454][ T31] ? rcu_is_watching+0x12/0xc0 [ 742.001470][ T31] ? __pfx_kthread+0x10/0x10 [ 742.001492][ T31] ret_from_fork+0x675/0x7d0 [ 742.001513][ T31] ? __pfx_kthread+0x10/0x10 [ 742.001534][ T31] ret_from_fork_asm+0x1a/0x30 [ 742.001565][ T31] [ 742.001572][ T31] Sending NMI from CPU 0 to CPUs 1: [ 742.131291][ C1] NMI backtrace for cpu 1 [ 742.131304][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 742.131320][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 742.131328][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 742.131349][ C1] Code: f7 74 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 05 24 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 742.131362][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 742.131374][ C1] RAX: 000000000359c8fd RBX: 0000000000000001 RCX: ffffffff8b6622a9 [ 742.131383][ C1] RDX: 0000000000000000 RSI: ffffffff8db032ec RDI: ffffffff8bf1e3c0 [ 742.131392][ C1] RBP: ffffed1003adb490 R08: 0000000000000001 R09: ffffed10170a6655 [ 742.131400][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 742.131408][ C1] R13: ffff88801d6da480 R14: ffffffff90832dd0 R15: 0000000000000000 [ 742.131417][ C1] FS: 0000000000000000(0000) GS:ffff888124ad9000(0000) knlGS:0000000000000000 [ 742.131431][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.131440][ C1] CR2: 00007f8431db4198 CR3: 000000007de80000 CR4: 00000000003526f0 [ 742.131449][ C1] Call Trace: [ 742.131453][ C1] [ 742.131458][ C1] default_idle+0x13/0x20 [ 742.131475][ C1] default_idle_call+0x6c/0xb0 [ 742.131491][ C1] do_idle+0x38d/0x500 [ 742.131506][ C1] ? __pfx_do_idle+0x10/0x10 [ 742.131518][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 742.131545][ C1] cpu_startup_entry+0x4f/0x60 [ 742.131557][ C1] start_secondary+0x21d/0x2b0 [ 742.131572][ C1] ? __pfx_start_secondary+0x10/0x10 [ 742.131589][ C1] common_startup_64+0x13e/0x148 [ 742.131612][ C1] [ 742.136407][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 742.312253][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 742.321347][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 742.331392][ T31] Call Trace: [ 742.334660][ T31] [ 742.337576][ T31] dump_stack_lvl+0x3d/0x1f0 [ 742.342166][ T31] vpanic+0x640/0x6f0 [ 742.346143][ T31] panic+0xca/0xd0 [ 742.349853][ T31] ? __pfx_panic+0x10/0x10 [ 742.354252][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 742.359610][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 742.365752][ T31] ? watchdog+0xe48/0x1170 [ 742.370147][ T31] ? watchdog+0xe3b/0x1170 [ 742.374550][ T31] watchdog+0xe59/0x1170 [ 742.378775][ T31] ? rcu_is_watching+0x12/0xc0 [ 742.383531][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.388184][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 742.393367][ T31] ? __kthread_parkme+0x19e/0x250 [ 742.398372][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.403027][ T31] kthread+0x3c5/0x780 [ 742.407082][ T31] ? __pfx_kthread+0x10/0x10 [ 742.411658][ T31] ? rcu_is_watching+0x12/0xc0 [ 742.416401][ T31] ? __pfx_kthread+0x10/0x10 [ 742.420976][ T31] ret_from_fork+0x675/0x7d0 [ 742.425552][ T31] ? __pfx_kthread+0x10/0x10 [ 742.430126][ T31] ret_from_fork_asm+0x1a/0x30 [ 742.434882][ T31] [ 742.438071][ T31] Kernel Offset: disabled [ 742.442369][ T31] Rebooting in 86400 seconds..