last executing test programs: 9m34.09712689s ago: executing program 4 (id=421): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x12}, 0x0) 9m33.908062158s ago: executing program 4 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000240)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) 9m33.686883515s ago: executing program 4 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x200000000000036d, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x71}, 0x94) 9m33.517910179s ago: executing program 4 (id=434): openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000140)={{0x32, @loopback, 0x4e22, 0x0, 'dh\x00', 0x0, 0xd8ed, 0x28}, {@empty, 0x4e24, 0x3, 0x9, 0x5, 0x1}}, 0x44) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDCTL_TMR_METRONOME(r5, 0x40045407) (async) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000, 0x4, &(0x7f0000d3e000/0x4000)=nil) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="050027bd700000a668bc25ef288195c062ae860000000600000008000300", @ANYRES32=r9, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022abd7000fbdbdf258e00001d886d89a88f52000800aa00", @ANYRES32=r9, @ANYBLOB="0c009900ff030000740000000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40025}, 0x0) 9m32.886408222s ago: executing program 4 (id=436): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00008b2000/0x3000)=nil, 0x3000, 0x2, 0x80010, r2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4007ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="c19ef10e978886fed26fc53c288eec9e0e9f5da5c85d3eb0e894828b96b57d16a61bcb36d67fd7466100d9769013554c641d70f3e82b555fcccc4ab2b6ac952139fcc652230fd8d7a78b1cd36329e8d464550549a7ea3e56182d946c09c9004ab8f2e53d", @ANYRESHEX=r4, @ANYBLOB=',dfltuid=', @ANYRES8=r0, @ANYBLOB=',\x00']) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x7c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r5, @ANYBLOB="00082abd7000fbdbdf250d00000006000000000000000000000000000000486565bee70baf42fde5a22d4d02d06b651b2fa114301000f6fb9c2cb95bfba35793d5252f9546aebe62969796b7be8d068debfa8dc0f6c0ff9944d138ef8758c7af0a6076beb70c875633b371f191bc108e3e601c2881ba6ba68670aa7bca0aa2c5b747b3ba8f30a6ae44a2112bb5e0581c09db165b169e26faa3191b14a68316fb6edd2b59914b3c5be76f7c0c057e4d284d69d6b243"], 0x1c}, 0x1, 0x0, 0x0, 0x800c094}, 0x4080) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="8b3dfc32eecb6b46d4b41ee4fca844a2d41ee17105f83a147fc8ca647157ee77573525c596a95832be22e8ae250b71a093385c06dc0aef3855f8a070116e5c9873f0d50554304eb0d8dbbac63e61a1b5aeff5e67655fbf7c7ba08850e644d2f1d18a524459dcfaf7259d3abf2e4d019e1ba4111782bbc602f79e1cd8dd0c7e4571db0eb9e7e531410cc257a430c0fc8273995376a739ef09113764860a5765bec0dc47d431577bc78864dde30d606f5c298720e54144c369f2984a5f04a5809a60070fa7c82b"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) 9m29.691025357s ago: executing program 4 (id=445): openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0xae) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x4000040) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000500)=""/183, 0xb7}, {0x0}, {0x0}], 0x4}, 0x2}], 0x1, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) 9m13.88727014s ago: executing program 32 (id=445): openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0xae) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x4000040) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000500)=""/183, 0xb7}, {0x0}, {0x0}], 0x4}, 0x2}], 0x1, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) 2m50.662408474s ago: executing program 2 (id=1369): r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @bcast, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x80800) clock_gettime(0x0, &(0x7f0000004900)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/204, 0xcc}], 0x3}, 0x800}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/52, 0x34}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/114, 0x72}, {&(0x7f0000001400)=""/21, 0x15}, {&(0x7f0000001440)=""/75, 0x4b}], 0x5, &(0x7f0000001540)=""/220, 0xdc}, 0x7}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001640)}, {&(0x7f0000001680)}, {&(0x7f00000016c0)=""/236, 0xec}, {&(0x7f00000017c0)=""/196, 0xc4}, {&(0x7f00000018c0)=""/216, 0xd8}], 0x5, &(0x7f0000001a40)=""/50, 0x32}, 0xe}, {{&(0x7f0000001a80)=@alg, 0x80, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=""/75, 0x4b}, 0x8}, {{&(0x7f0000001bc0)=@nfc_llcp, 0x80, &(0x7f0000002100)=[{&(0x7f0000001c40)=""/114, 0x72}, {&(0x7f0000001cc0)=""/221, 0xdd}, {&(0x7f0000001dc0)=""/248, 0xf8}, {&(0x7f0000001ec0)=""/209, 0xd1}, {&(0x7f0000001fc0)=""/165, 0xa5}, {&(0x7f0000002080)=""/59, 0x3b}, {&(0x7f00000020c0)}], 0x7, &(0x7f0000002180)=""/244, 0xf4}, 0x401}, {{&(0x7f0000002280)=@caif=@util, 0x80, &(0x7f0000003500)=[{&(0x7f0000002300)=""/100, 0x64}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/121, 0x79}, {&(0x7f0000003400)=""/81, 0x51}, {&(0x7f0000003480)=""/108, 0x6c}], 0x5, &(0x7f0000003580)=""/231, 0xe7}, 0xffff}, {{&(0x7f0000003680)=@alg, 0x80, &(0x7f0000003700), 0x0, &(0x7f0000003740)=""/4096, 0x1000}, 0x2}], 0x7, 0x2000, &(0x7f0000004940)={r1, r2+60000000}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000004980), 0x216000, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000004a80)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004a40)={&(0x7f0000004a00)={0x20, 0x1412, 0x20, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048044}, 0x4040001) r4 = syz_clone(0x84000, &(0x7f0000004ac0)="ce9d4b2679d89edb6414ef", 0xb, &(0x7f0000004b00), &(0x7f0000004b40), &(0x7f0000004b80)="07bb730e864cdf0596a6665371714f42f0cb242300f7aa6149d1d4841ca2aae52bca957a6e5456") sched_rr_get_interval(r4, &(0x7f0000004bc0)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$hiddev(&(0x7f0000004c00), 0x5, 0x101000) recvmsg$unix(r3, &(0x7f0000005140)={&(0x7f0000004c40)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000004cc0)=""/85, 0x55}, {&(0x7f0000004d40)=""/160, 0xa0}, {&(0x7f0000004e00)=""/237, 0xed}, {&(0x7f0000004f00)=""/93, 0x5d}, {&(0x7f0000004f80)=""/175, 0xaf}], 0x5, &(0x7f00000050c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x10000) accept$inet6(0xffffffffffffffff, &(0x7f0000005180)={0xa, 0x0, 0x0, @private2}, &(0x7f00000051c0)=0x1c) r8 = mq_open(&(0x7f0000005200)='/dev/usb/hiddev#\x00', 0x80, 0xc, &(0x7f0000005240)={0x99, 0x4, 0x4, 0x6}) mq_timedsend(r8, &(0x7f0000005280)="637556728e388e9ca9d7a53d0f4c332fabca70e7461f914a9063effa4b8c95b2928c7f2805a636579390fed602ca4c82e61ed703", 0x34, 0x4, &(0x7f00000052c0)={0x77359400}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005340), r6) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000005400)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000053c0)={&(0x7f0000005380)={0x38, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="a4e70a668849"}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) recvmmsg$unix(r5, &(0x7f0000008440)=[{{&(0x7f0000005440)=@abs, 0x6e, &(0x7f0000006740)=[{&(0x7f00000054c0)=""/225, 0xe1}, {&(0x7f00000055c0)=""/225, 0xe1}, {&(0x7f00000056c0)=""/4096, 0x1000}, {&(0x7f00000066c0)}, {&(0x7f0000006700)=""/30, 0x1e}], 0x5, &(0x7f00000067c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f00000068c0)=@abs, 0x6e, &(0x7f0000006b80)=[{&(0x7f0000006940)=""/62, 0x3e}, {&(0x7f0000006980)=""/123, 0x7b}, {&(0x7f0000006a00)=""/15, 0xf}, {&(0x7f0000006a40)=""/216, 0xd8}, {&(0x7f0000006b40)=""/11, 0xb}], 0x5}}, {{&(0x7f0000006c00)=@abs, 0x6e, &(0x7f0000006d00)=[{&(0x7f0000006c80)=""/101, 0x65}], 0x1, &(0x7f0000006d40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000006dc0)=@abs, 0x6e, &(0x7f0000008140)=[{&(0x7f0000006e40)=""/4096, 0x1000}, {&(0x7f0000007e40)=""/188, 0xbc}, {&(0x7f0000007f00)=""/212, 0xd4}, {&(0x7f0000008000)=""/21, 0x15}, {&(0x7f0000008040)=""/247, 0xf7}], 0x5, &(0x7f00000081c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000008200)=@abs, 0x6e, &(0x7f0000008300)=[{&(0x7f0000008280)=""/26, 0x1a}, {&(0x7f00000082c0)=""/57, 0x39}], 0x2, &(0x7f0000008340)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}], 0x5, 0x0, &(0x7f0000008580)={0x0, 0x3938700}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000008600), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r13, &(0x7f00000086c0)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000008680)={&(0x7f0000008640)={0x2c, r14, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c010}, 0x4000085) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000008740)={&(0x7f0000008700)='ext4_fc_commit_start\x00', r10, 0x0, 0xe000000000000}, 0x18) r15 = syz_usb_connect$cdc_ncm(0x0, 0x8e, &(0x7f0000008780)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0x5, 0xd0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "e30e"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x5, 0xe}, {0x6, 0x24, 0x1a, 0x6, 0xc}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x4, 0x6d, 0x0, 0x7, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x7, 0x969c}, @obex={0x5, 0x24, 0x15, 0xbd7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0xfb, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x8, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4e, 0x8f, 0x9}}}}}}}]}}, &(0x7f0000008c40)={0xa, &(0x7f0000008840)={0xa, 0x6, 0x201, 0x81, 0x7, 0xc, 0x8, 0x4}, 0x55, &(0x7f0000008880)={0x5, 0xf, 0x55, 0x3, [@ptm_cap={0x3}, @generic={0xc, 0x10, 0x2, "77595a384fec11671a"}, @generic={0x41, 0x10, 0x2, "afaf0d13bdb31cfb1bf702bc8987215de5588990faaffb003227d541f3c00f325402120ac868c1b2d0aa06fc1e61c89b8ce751ba6a7b7a98c6a65b09602b"}]}, 0xa, [{0x4, &(0x7f0000008900)=@lang_id={0x4, 0x3, 0x413}}, {0x36, &(0x7f0000008940)=@string={0x36, 0x3, "3d4c95155461731197a9f8a799e3998956c2d0f2e5261df34481c34b37d41f9e783d1fbfa3e552951d654701ea3be2891fedff45"}}, {0x51, &(0x7f0000008980)=@string={0x51, 0x3, "5ae3337be05ffba3e751f2a84d1dc4172bf03837966e50b6bea38add4b727a5469ed19851a08056a0b3dbf630a516590ed2553cab9bceaf88428f21a88c4798d5a7a6cd77c2b9dce39173356dfe829"}}, {0x4, &(0x7f0000008a00)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000008a40)=@lang_id={0x4, 0x3, 0x804}}, {0x2b, &(0x7f0000008a80)=@string={0x2b, 0x3, "f91487ab3eeff9f50b0ce2ac17c2c1029c0450d1ef305297d57d09b4fda214df78dcb0e8320890dae2"}}, {0x4, &(0x7f0000008ac0)=@lang_id={0x4, 0x3, 0x804}}, {0x81, &(0x7f0000008b00)=@string={0x81, 0x3, "4f56d6e7268877190b62dfde6eadeb62a305bcd72f48e907a427b334a205146260f6ca4af2c0a1bc1ca8a20796ff364d3237c80638331418c29d2fd914e49b04d214288f7f254573d965f21c957a488adeed54483ea2f712a637b6bf841ef767160c13c5dc4b7a2ec7cbefac3447df743cc767d2a55c3aaee710490536a7b6"}}, {0x2, &(0x7f0000008bc0)=@string={0x2}}, {0x4, &(0x7f0000008c00)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_control_io$cdc_ncm(r15, &(0x7f0000008e00)={0x14, &(0x7f0000008d00)={0x0, 0x5, 0xa9, {0xa9, 0x5, "cb95fb5af062ecc692cc9942ddaec70aa45ac5d1b484d30829f47e1b12234dfaf602b7e6db21c7b47e3c1acb07732475e80ef0ab44b07f2cc587e861d90a0c59f6c45c84b70e26eac019385c96812065db653e7433d60e7297e773c7552f720af0e4ddacb2fd1889cb86a8f4027799e977b10f374e358637eed6f088182d52acad80708b03847829a25a98a7811aa3ed33be45467c6ebc9946b75c59dba891f26c656f2cc8e6fd"}}, &(0x7f0000008dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000009100)={0x44, &(0x7f0000008e40)={0x40, 0x31, 0xca, "815d5ca4233e7a25779aaea6e6dda4ad9c8df0f81cb1ff54c8bcad33d4204dba834e68c67e4157e340d422d54fd8538b739efa3f2355fec7818d09d9d651576c184da63ceada19cccefb1bc184b7bda5ffa541b2326e56b0c9216155bd7a2277e4a66d89de046d627b26042963fdaa234aa139502bdfbafd9b423afa3c7c58086d7baae7f91d79c7aa5b7567905c0d705bdc6f64fc1d57b290c8b0e3d30fcffe0b77140345334162018d5e243f6f90d9c4c434c561a12fb14eb39afd0a6da226405892f5a302d492d0b0"}, &(0x7f0000008f40)={0x0, 0xa, 0x1, 0x7b}, &(0x7f0000008f80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000008fc0)={0x20, 0x80, 0x1c, {0x7, 0xaf, 0x1, 0x5, 0x1, 0x1bd8, 0x8, 0x8, 0xd, 0x5, 0x2, 0x3}}, &(0x7f0000009000)={0x20, 0x85, 0x4, 0x6ef6}, &(0x7f0000009040)={0x20, 0x83, 0x2}, &(0x7f0000009080)={0x20, 0x87, 0x2}, &(0x7f00000090c0)={0x20, 0x89, 0x2, 0x1}}) sendto$inet6(r11, &(0x7f0000009180)="6a17891ebce3eebbed5b3e2d7635bb0f1f8ca633ed3756ffff4883ecfa8af1d465685601d820dadc728a8ef0ba3366297e9b2a4715b15eabdd1f5f11090cf6871968e5ab8c4030e3327e57e3103373004b3796d6c9d8c4", 0x57, 0x4800, &(0x7f0000009200)={0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0xcae}, 0x1c) r16 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r16, &(0x7f0000009240)={0x2, 0x4e23, @loopback}, 0x10) accept$unix(r3, 0x0, &(0x7f0000009280)) write$P9_RCLUNK(r7, &(0x7f00000092c0)={0x7, 0x79, 0x2}, 0x7) ioctl$sock_inet6_tcp_SIOCINQ(r12, 0x541b, &(0x7f0000009300)) lsetxattr(&(0x7f0000009340)='./file0\x00', &(0x7f0000009380)=@known='trusted.overlay.metacopy\x00', &(0x7f00000093c0)='\x00', 0x1, 0x2) clock_getres(0x5, &(0x7f0000009400)) 2m46.858834073s ago: executing program 2 (id=1381): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="d212662320d68d482adc999d8a933b0690aff5dab933bc7f602e7587e3cc8f499b2a72a844b7d924656064b77e7635e3c880bbe9501a428d078bc8b5e9dbccf3af26e2c53285df2d2193446d1acd4fdc70f80fc254ab092b05a42b76f680a8db8ca01d43b91e1ae2cf0b8ef39598da2598ce0a5abf1e5f182bb28755ee22885b4628354a13baf8d2b1e7ca2398b58c38744ab611aa6d4a9f17928499ac4b", 0x9e, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x9, @remote, 0x2}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000400)="845e806832f8aeae7ae4fc1421da56df00886f39921f4436ec423588d62b00aebb3c22e0aaf97a578062805d0eb41e47cb385eb794c1a5450307928925480570db7516c54200838af0b51a29a7088ca627f3110dee9fb3fac7366e3a33febcd42917e8baf642baabdbdc706d1cc8692c292eceaff9b3580a6b7fd19bec646ff749474ba5ee720695b3174d7e61a63651088fc9337028a86f998824d5ba0f3a8312d8e09383045dacb00388729bf5b1d74ff3402735dbcbf9f0fef0eb2e5fc225e19a579547058b8b9dd42af042ac273655d742c048cb7909d09f89bcbd86", 0xde}, {&(0x7f00000002c0)="4c52a53170db104498594050c3c195f8dcd002f3a328a1a59b88a1f8d3c52575d68622e813a439885da3559d30d1a13b8455876b3bc9dcbb6fa89587ec61fb90601372ba99168dc1fb126ab29ba09bbcaa1081213a848870cb27c9391868526a98b44990e3141f707c99b20ac632d30e30d19eea91b6ca2b53180af08c5515cec7631cac81941cdb88b6369b8ecd35f41bb37f1df03755f9813fb5928c94bf1657", 0xa1}, {&(0x7f0000000500)="53206718d94cb115dd69fba5aa0eb2afcf468fde646b3d55fbe0bd56b725c942b15defe6cbab2e00e5c4ba70a8f8de223d0aa79d2c5a7d1a43c21ffa4e49016aa1bcc8a6bc952f26abd36fc2041056521d67ad5d667ee10d571a99bf5f7aaf6e0a8fb36112764a15b9e2effedbe1aa6dfbc721102987758df6a6843c18a1537e175992cb523d989fe00503b2bbbc41a5656053f88d73d0490005d7d7467f81921f85c699", 0xa4}], 0x3) r1 = socket(0x1, 0xa, 0x2000000c) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x2, 0x2, 0x0, 0x7}, 0x10) open(0x0, 0x60840, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = dup(0xffffffffffffffff) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r4, &(0x7f0000000600)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0x3, 0x4502400, 0xf800, 0xfff9, 0xa, 0x800, 0x0, 0x0, 0x8, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6359431c95c18bf938d14f39302bcdd3da0d5402eda895d53e616368653d667343616368652c00"]) 2m45.770109616s ago: executing program 2 (id=1385): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r3, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) (async, rerun: 64) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{}, {}]}) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xdc, 0x1, 0x3, 0xb00, 0x0, 0x0, {0x359eca7058a75a08, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1b56}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x19}]}, @NFQA_EXP={0x2c, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}}}]}]}, @NFQA_CT={0x50, 0xb, 0x0, 0x1, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x8]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x1082, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000500)) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r6, r5, 0x23, 0x0, 0x0, @void, @value=r5}, 0x20) (async) read$FUSE(r5, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) sendmsg$inet_sctp(r5, &(0x7f0000003a80)={&(0x7f0000002600)=@in6={0xa, 0x4e24, 0x800, @local, 0x4123}, 0x1c, &(0x7f00000039c0)=[{&(0x7f0000002640)="cc45ed40241559f466d8d224ab03643d601205579c987dcdc7b10f8e3f5c069ba3031daee481189db23b2e399c399f325daeb592ad019e427e2047a9680b19d6034e3e295238106a6ca594e6ec1a548c1dbdbf539fb3c253d9415402c4e5e8576f13bc9953bf5618f5518353233d219ccf9236da99bc5c0c90d246db85e1f419ebb329db402526a4d9bd6dba1e6c4553235fbd13475cad83308126a3c5a412fa4b06c619f6f187430cbe2655a87f27b47c949e6e31c37c5405553a57943d9cc6bf4b8d7e9c7904fbd7bb4650a4fcd2c8726899f7eeb3259e3793e10eb069b659b9cf327946d38a1243c41abf9ee00e875d37dede4a619b57ab85822689ee90", 0xff}, {&(0x7f0000002740)="067dbb46837a824fc2df8446f26afaeee34a0dcd848857607478254e0021b79f52c911ffab0d35ace32278d78bbd2692060c5bf3f763129ec8d4854839916abfb9c905823d131c1469c40ac4c5ac0a9fc728ffbd888c1e8aa73b13122e81ae5ef2b0e7e1521fd91212cf5e1aa005723179f5e5328f90315d223a363bcd188f075911f115e3b472ef355366a55c17a7f4ef04fd9bf37929052ba8f0a43906402f6a1d5b00932fb2859d412dbdb0ae16dd90891c39cf63edf270ec", 0xba}, {&(0x7f0000002800)="db18b597ed99", 0x6}, {&(0x7f0000002840)="a27b1a52e65a6e6e9f9fbfe90b587e747fea21c58aa154d136eeb0eee780115e6aa79e4cc5666b3701ea3605ddc9db4c60240e58fea4c6c05cbe8ed6d3d9223e0a651198b45b788f6b57a7dc5653bbfaf62d19e9dff868fe93b617e2d54d542d6c2dfcf96cd8fab4110eaaf959bf276bb334", 0x72}, {&(0x7f00000028c0)="fd3ce2cba8f758c40af0a78264524b10819e95e9cad51f3534bb49902eb4e3f03dc491f2f7dfec3e59b1ee65f1ae533e78508e93b4b68f4865af19d1e9a0522c64b5430890df5e77fdcf41cc6096bf73d66d2bc644990613905862d4ba999d5f807c6066e61e413c0e055f1fbdeb18c3453157c300830ad11e546c7106876127151520c1d377e4497352c5b470469429e845d66d4e9030aaf51f7e44e957a034db745922c97aff0f32fd5831eda53f32d0f57730f302f74b940342df904b63f1d761b63ec7042df7640ce80a877ab7d825594255fb2cbf994f2d289345bda5d5502238dbf8d643565b4e92b63d7dbee5b1c0db672cad0596fbeb8cc14e3bad622332b3834488f1cce3d26a2fcef313255b859a19aa8742ba5f629b2d058adb39a089ff4fef489065b8af3e98530e392ae2a7bf7fd542edb9c2e1094ed969d3a13f99072ee67ec88ef472e5c6b40c1929b722dcd60f9c3a516e61e1df94351b08ac67d8ea800e9f8851a374763e7ea462252d86ff2e0e1dffc49a23e9c6f8ff2af1c6e0b5b5b06aec233d2d7f83d5e57bc71b88513bc85c16d8038422d7aa7dcff601d4ddc66081468daa926e7a3dbd4591f21b4e11cd789b02ac265d5d9595e46bd635a69b115df8dec4b5c77cd27821a1867894ce512167c6c7f9da7b734160df0071f8ece9c5d388c2d0a4ae98a30044bfc2d79ae1e19cd5cfce7dd803085f3982f7ca171b9486a75956335f9a0013cd5b339eba4a65baa830328f3e27f1b8eb1be258a7805a1bdd9e6c003e9d3f36b22ff457f6cb9fe321b3a66cb23ded3192e13b7596b8173a0ef04e364ad2d6ac9bf3ab16d8dfd788b65f26193bf85817669aee84cd6761454216e44632df459da64250a2bfa043d3449a33a32a226ee127b61f7edf1a4d77b1b2ff14981937777a805a946c45f8d09b3d0f1720d6014a310b241830993f5ae61ad0e4b8961e533c21c71977cd74129eef7e4c08189c3ec2f159026c520986a062cbe3497658da15c2993629a5e27c4c4b35bc4edef98e36c2484b0cb29b94b98b7c6a210f9c2aa5b56ec0881d93bbf30707b9fb4ecc7f749ee18b529af1149a2d01bb231835d854b1b3eacc0f672989e939e67ec38cd8748499fba3e741c9c7903bba09f5ff17112d71de85671aaa490532b1bde4739058ea0aec2d3a21fa32b46ae3ea70229ff26e4968229c4e12259ab19c72f735f9de4f77ef9ecaabbb5a208ff50c4e1db49c00b3980c1021c0a7dd43e9d00d19e527a69140eb5006fc82833387b2644c5189e636f4c0ccd40f58ba01d97e6cbb761082af411334d3ed428003c32439ffb96c0de133b56bebadbcc7fa6419d49ecbba140c47281756c5b51366bdcbac7ac26b49f188118a52cd21c44c92db48a04aa1f5784fe6949106b97acab991335ac0a9be13841369c974983dae53149edf932b7a9335210a632065857681f6b9945d7290ecf258ca35f3c0c08a5f50b8fca0ae8a584efc2a0845ee3fb0b6b8f6e42d5fed19684cc44e0891c16bb72d4b55de1783265ec74b3aa36c19aae04961e4b74f1bc2a5ce0fd7f6ca003243e6f2d05c22e9386084b722f66c7bcd1037730b025411ed3139038453ec8cafcd1cfd0709d07f595a19662cfe5f13dd82871044cc151cfe880b8a3327af29efe6c4a095de33c55bcdadd807e300a7f14cab5418576abb998720eabc894c699a3fbb7d5065535a92af9a16b02dc4a00d2c445e72450d0bb7cce86bea9b5fe9b691df3a8ea2798ac7d1a25e02038021d9e4ac13bf1bcbfc8ae494df652d44c892ea8f937e8bcccdd7441d53c4af8e682166e933f11cb5f3940b02951c0210e4d27e9993f7574fcb9359456151d6568ca4d3d5a993126347c082f4dea6549023fbff94b2841aefa838261be75908940d2b8cc7ca76fb938543af7b5a062dab73d3a62f16e0595530a6153fbf237124ccbb555b1bca240dd5d40470ebe1ace0a5624cd4c34c8087ee0c90197bcd4be42846b9c21b151836415ddec23311750491c59b66faa09db720082bc22d8566db1a0cd957e73f884c7c2d7e6afbeb2d7db1446343e04ef6a6e2ab3751cca616aadb5ea68dd931ed6607f39ebfbbd7570a078ade3a5e449aeb9f4ba31dee676d1e937068f52b8c1789af7f889d776e5bbe81fa57516789d09e7a3d9d1868cca7ae488cb6248f4dea99ad008daf0901807789cd3b3b88feac31c23bbc22595ad21577a19d2a145663a04153a4e4972f729aa21e801c76f43508db96a61685e560cf5bdd8d33ee722ed9032c4c8fe45bf14542603f2aa65ea27526bb65b9df7a6cb321f5ca60c47452ea4222fedf75b3e431ae2c0c0e58bc79ae6624d02e7830cfeb915b1b42b8f1ab6da156595568835e0c4fdf740418f92c9b5d9f2429fdd77e8faf720efd4bb2f0b879c5d73b9a244f660d5df3cc2743617285ddb1368df257a94bc27cd74fe3a2089414e43bd62093a35aa97aa494e2016dbf610c05ebba366be88a11ef7e2a5ab6e927572e501517960e7935088b0abfdce57d2c61a45a6e02afcea6ac69bef48c37015d88d4f219114887483375f4a0452b5d9ba46036c52185b5129aaecd0bb7e98f23280cf4babbcb0881d8b9b7cfed6812f603e69bb0937487ca93dc92bf3192bf2b867bb3292962466c21b17a3ffcb0474a9f5494ea5967a94a731bc214950a32bdfad6e18b51859f8e5e581bc31e7d9c685f314b0970d58201b6a26a1fc06fe819afd4cdc1f3e790f0cdc7d3e153a6c77141ae70176c38dba63f7a138db2df0c1b7f302b82f26356a224dea508215e8e05965f0b481c2263b90f974b513747894d9d1739d2fc0b97963f23cf6b9015242d5f082204bbea146c95b9ad1942ca9d24401661bec83084f10c901ce27abe15ea85b3b7f132a3e8d01c4813573c0a63e7284cd2d82047131186fa6065d6376f532a2feb9cf46fef152264635aa738ca1c577bb741cdab64f070df48b9aa038cac118f7a124d2c34fdac64d1407f6cf1af6e714159328ecbd8311cac31396e30d89352236171b5186afc6e9c13edfd3ef753a1d50c7327a2e5d371c7f3d7d1c7541755a8f702f323caa3b4bbbc04722281ff8fa3e5ac8e569f78aad772fa5715ff9f94349c1dd074c3df40f6ace580f357569da0b55acc78054d9d1c89b46d44c5fbfa9cdea4e72db6669931904b445c6e7a4a433df7482f7111cb10fab75c18b8c5cee625635827da4f31cf3d0ce76f7995e3672e539a5e18848fe64877e2efc6211795f06e3a3f823dbe80d45b40955184aa031dff9097b4f760aa86dc19bc9a741aa37b24e2c3eb616a9d69f9ea1cab2a4ac28ef79ee993aa0465d01a0945cf0811b2232a57bd546e9b39fea2d25bbafd27a71020c7623d89b623ad25fc985254c9df440900347842f01138693bccb9ad856b35aaf8fd4cdff10fe13f4a98e2578a66f79229393d93a07c7fdd66f5ef600b0f64c30a74fb835a84a825166925689a3f37593359e97b0a690905ba829b7b52bd5dfe633d96745980f25d2cca92aceb87f91d0317eb2110b1b294e62b3e9bdd85ee6444768c0e825c500ee8acbc9fc553b4137a4ae6137cead0699f75c78c928fd90cf448f5a2221322e3d458b02806fad3672e419d93981d992783fe6ff74c9a8753c4dc6460e3c7a133ea452cb090f31f406249a64b43b1e1cd656659b1aeeda086bc79030e30d52d7e1e177cb44c4f7e790b0a7f4c571ea89bb72e85e669d07a53ae49c9e48b7db3bdb8bce16eb418d9b409977e869d0e5fb889e4c09e26a1008b1c12bb73a256e76fd88ff7e9982260a4990e1fb0424bb71a0967ef5e0fcc33a2f719aa1cdb5a27836913067edb1e5d91f7082160549a031516c6d796aaf371c5250c8b06283ca378369216ee9eb42f1317ce3904116d6def9b241d3381f8fb21bfe8ea5ce90388845b3a429444d488e1870e1941ca3f60c23069ab4c43ab00426919c290eaeee5287f9e145cc12fadaa81b7283698cef8a2d62baf4ec8bc54a0df348e3bb022d1076c49f969942a3e6e817a42fd917312e59058c076f4ceeb676fd35b725b3d693de51e2c2798d350f8ae97c834dd6de214ed98ad5f1b7ba318d7248f0f33a0968b8a7e4f9c7b5a3eb5933186886560d9f45309418b71d217694bbd8fde3023ea79742358db41a2c6e24e077325100b4fd18b84b942ab271afe8e2cb824161266c15fd870011132f68b5f4b884555dafdf9df24102e25ec3f24f33592d88402c000ae691ba076eefc71fa9e4f7b1760a5de45f0409c5ad35e281063ae2a13f2acb7887d7ba79a788a245afd7b8bd968e1ef794a9b4ea4a8979356839274c57364772b56d2468b7a05349b5294cdfaf4f4a0ab1b19661a1f2e11e7172c82b68b2b256c69d79bd6c2d958b7ca559eed62b6b832aae5d6ef828f82e40d89c559e282fb914df886caa8e165b255e6d75d2ca709b3adaabfb772e04441a339ea480051b66d9ec0b45aefe2d25a75b7272cccc81989fa759c3702ae0391f791694f0693c33a7fbad27f90127ab3f109d29011f050e0cdd506c8e128825c5116a3fb3e8a6de90738059129a025090e790f43bfad1defe4bfd9d28b86a5d4282f13c30998b5b6c092c546ffa048bc71bb2fe6e4bb49e46e074242767a1984b511f1d1fed07e6e3cd9d9bfba78f8363014f076cb0db61f77db8a73ce1b813e041957e500ec4a027fc9766c01398e9b77e4e70fc9887b3e03ed7c3afd402b412758bc099d6c2b33c109b81b493245df211c3def237ac6498a9d5993d1e39840a2263ea276e611f2753f29aa77641791fe4f5404baa4b3653d993b32cbeb4a7e74e6d1c6425426a7c7096cee641d62fc69d9d2b940a327e11dec8970af8fc106e9b16749fed3346382630ac775712f7ed4f423dd62ec241cfaf6aea06af8824d0e636410f94fd66e0cf56eda19dad71a2586f311dd537805976754803542784a981dacafd94a389c3e813b34104019d65bb194739dfdebbff84c03985e69eb054b50eb52d05d2f6d3d4a49e40859c821f7da22fd21d05c02277e8501d9b90625ee552b03dc8c6d8e8f79ecbd6a597bcdc64a6e32e3facb6e13adef62ab262cc42d5068e9cfc936e559a4636b366f3ac990a2701daf7cb11b735e648c7a7143a88d4b30309cdb0243c43238d21ef63e95bc2effa783655f5b8ec3e3d2410abb9a237214c76932d009378325b637ff879d1342e0c5bbe2ff41c12e238b1c75047a29eb905de4651091b9b8c24b4907478b5c889ecaffb606de4859528c56f8563d07994e055f5d7e711581c15781d0aad834e6c090b702028319cbace1ba5e1b7b5310cef46293c116c54bc14363079cee01c04a7977f3d33212dbb93ee213d21168c4009b0761376b79cacc94aad81cdd0e1de0fd43203dfd4243122b0d8bb61a379ad560888eb9643b2d10afa1ffc2159efd98eab1fa7b514e694b78440f2ea4fcd90e77ca98b08c01d9f4ee03f4e39e805d364ca518aea5ed9be6dae550f3f0db81746eee2deaedf44c1d1e0572a874bd7ec2fb3e52fa7a1f4fa606eda03442af14140094ce68df240530e50cd0a6337f0a81de50e570d4f6b4bd22f66240aef6d04b7e32e616c14b7a496dbe6155259667dbb3d8abaf9a2f124b942fe248eab19a2b14b111a97c1d7204caf16d89548c5c9e09aa12c2bc0a50b38c42cc4f1fbe06ac03e5ddaaca8c85ba11fe1d5a855526c90e978a74de034fbb70d3240d869f6909494cab5656961ca22eaf1192a6068ba162882b7e3262286b368d2c262a40732dda4d19", 0x1000}, {&(0x7f00000038c0)="b01e2b06e4a5dba02babb3b4009451cb8fad45f11a495b334bad7234ea96bad3899d5cb95ee68955914dab74b557a9d905715357eef92eef6caf06a9d485ebf03680ef34ae71eacbfd7f963f4b2f116c7a4df6d80c9796c9e8829e87abe189f40c0d105f696dfa8d1d46f7fa5f3d7c8d1468dc0b3895d483e7f451a786cac9785a20f492312bd05166eefafbe301891faf07c3df010ae371c797788fdbef74cc67e4698a6d770418b142af7a116d3840014446d4ac08adc7a123083b7b1cfa403006ea8bc96962619fcc68e6e51f6cf8b011d78702978371e583ae74a71b2e96c69a04781baf690e3e330900538a9eb0e9a9", 0xf2}], 0x6, &(0x7f0000003a40)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x4014}, 0x40) (async) r10 = creat(&(0x7f0000003ac0)='./file0\x00', 0x60) setsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000003b00)={r9, 0xee01, r8}, 0xc) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004) (async, rerun: 32) r11 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) (async, rerun: 32) r12 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000003f80), 0x2, 0x0) (async) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000003fc0), 0x208000, 0x0) sendmsg$netlink(r5, &(0x7f00000040c0)={&(0x7f0000003b40)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc, &(0x7f0000003f40)=[{&(0x7f0000003b80)={0x2cc, 0x1, 0x4, 0x70bd27, 0x25dfdbfb, "", [@generic="d5dc28e5d1f6d63cce0c368775c76233c2d6ca89550ec4736dd209beb027192db1d67de2f0923d70e650177be087b8497f73edac4f13aefe52fd4dcc786033ad1efe4efca66be6421dcf39dc282eeb4d995b5924424b40e25acae6c00561043952e51ba9cfa811b4b39a65b05bdcf6de5e3b1483c3a7e366afc1b95557c361be05eac3881a2a2ed1b090f6e4a7b41fb57eb698bb531ba958fea6355a15a8b425c711d1bc5eb4c537bb7791023176daefb8b5808bde83f9dfdc2748529e0c7c7aaab70cb632", @nested={0x1f2, 0xf7, 0x0, 0x1, [@generic="7bfaecc31b0a3ff6548242d4071f2fbed0b9909b3eaf061762fc22470ac6e754c543c7d55a5aca1dc682e0bfdd6eef401ceee54f69b4b770ec04d15b142758f73d702433a718ce1e3faf", @generic="81ac134a1bd183cd3b77b93d445f24ac36ba5e7ea6a64cf189ac4f636eac9a27fab875c86dcef2e52e789cc9c621a819e15086c61bee06fcd143c09af583c5283748980fb2254be4385e", @nested={0x4, 0x87}, @generic="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", @generic="821ff855a3e885de4bc51d65afe61b207f90a6110327f5166bfd8dd54606432c022ae79e070383ec66812b75e8764ddb56f810e115bbbb536633ffbd17a0ff2acc3b0e4337c747c85c39cd4a7133046cc351099594d8bc925129a705"]}]}, 0x2cc}, {&(0x7f0000003e80)={0x10, 0x1b, 0x400, 0x70bd26, 0x25dfdbfd}, 0x10}, {&(0x7f0000003ec0)={0x60, 0x32, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@generic="546c334fe441a3e09ef70530bd4dbae4ec1ae73527e174e2395853bd237eb41d69398e87f47589389b0c4f", @generic="dfd1aa72abddb020e4369cace83d7bd6026ce6fd284460dc80b5f3bd445ec1760c89efdb"]}, 0x60}], 0x3, &(0x7f0000004000)=[@cred={{0x1c, 0x1, 0x2, {r9, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x2c, 0x1, 0x1, [r0, r2, r0, r12, r10, 0xffffffffffffffff, r3]}}, @rights={{0x18, 0x1, 0x1, [r3, r13]}}, @cred={{0x1c, 0x1, 0x2, {r9, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8, 0x20050810}, 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000004200)={@sco={0x1f, @none}, {&(0x7f0000004100)=""/169, 0xa9}, &(0x7f00000041c0), 0x2}, 0xa0) (async) getxattr(&(0x7f00000042c0)='./file0\x00', &(0x7f0000004300)=@known='trusted.overlay.upper\x00', &(0x7f0000004340)=""/191, 0xbf) (async, rerun: 32) ioctl$SNDCTL_DSP_CHANNELS(r11, 0xc0045006, &(0x7f0000004400)=0xf08a) (async, rerun: 32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000004440)={"7b6596935be60cde99bf0ccb4052c399", 0x0, 0x0, {0x47, 0x158}, {0x6, 0x6}, 0x3, [0x1, 0x80, 0x9, 0x5, 0x9, 0x80000001, 0x4, 0x9, 0x5, 0x0, 0xc9, 0x42c, 0x6, 0x9d8, 0x4, 0xadb]}) ioctl$BTRFS_IOC_RM_DEV_V2(r13, 0x5000943a, &(0x7f00000045c0)={{r2}, r14, 0x4, @inherit={0x58, &(0x7f0000004540)={0x0, 0x2, 0x1ff, 0x4, {0x12, 0x6, 0xfffffffffffffb9a, 0x7, 0x8}, [0x10001, 0x9]}}, @devid}) (async) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000055c0)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x3, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xa, 0x0, 0xe, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x88, 0x8}}}}}]}}]}}, &(0x7f0000005ac0)={0xa, &(0x7f0000005600)={0xa, 0x6, 0x200, 0x5, 0x7e, 0x11, 0x40, 0x6}, 0xcf, &(0x7f0000005640)={0x5, 0xf, 0xcf, 0x2, [@generic={0xb6, 0x10, 0x1, "0583e3b8852733487ffdb96855824b79e8f74ea08160a275ef68fa2ba3558bfe4d1e55766bde050d5a1bcd05a9a7c35d1f0161dfca109b5b0a1be2366e26008f5bea5ce429f683f51fa8c288cae813e6c973c0823255579b3192c684032e5907d98fca809e607d6518cdb7afce3447adaf6027557ff257ad3472b765e3be583c65a54d60ce1cbd55c609b69c1355918e92c296250316eab2739d153ed688c878f66749ccb5a88c580c8caec15f6c296c00eeb2"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b723b371d82a1fd2bb63119dfbe38be2"}]}, 0x8, [{0xcd, &(0x7f0000005740)=@string={0xcd, 0x3, "c9c659f6e688761a1377242b0e02ac64d577fd73985f297e71a9515196d1f25df8c22935db212d0e6d8317e9f92f657e5e9abcd6ec1e8b0c02163e86a89015db312e9a63739bf687e8cd96e14f8bb3b122055905fa06283cc45093f4cf3361f3b5283d26bebe93b539be2fef0e0075b0fb8ac28954792cb51afa9834cf1d3f6b509c30d4c3b4c3d436fa53d80924d3700bbfa69f0b577703968c299f8e3ee45d15f5a44ffdedd6e5efcd5a270b767cc4859ef92cbefcd71035c7b083cff1dc378c3af366352eaa1bd851f4"}}, {0x4, &(0x7f0000005840)=@string={0x4, 0x3, "78e0"}}, {0x4, &(0x7f0000005880)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000058c0)=@lang_id={0x4, 0x3, 0x403}}, {0x65, &(0x7f0000005900)=@string={0x65, 0x3, "0ab185770976a5db3c4df222185b6b586e829b10841c92a2c4fe4aba76f17879180bc00081d6ae37bf2473a67620ae87ce553ec7b387574684e4d33531ec95755c67f5b896dfcac6a9f3b02439f42cc9bae5a06da4f24427349ae62e2be969928e71bc"}}, {0x4, &(0x7f0000005980)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f00000059c0)=@lang_id={0x4, 0x3, 0x423}}, {0x8e, &(0x7f0000005a00)=@string={0x8e, 0x3, "8449825bc6e5ad57200de5a0213824a7a513af4fd18b461f45822bf794137b687d53f987672f242f535f0e19d3e39033d62f707b4c198a22c34f092257080c34c08e9e50d624820ccbbfac4106418046dffdc12f7f2a8c8c03b28b6183550b48f2b2f47601ea68957d2565680ac81907f2f36b36d7845e4cc7947164e9ea2a4e53dd601bdc557f4e3123fa13"}}]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000005b40)=@assoc_value, &(0x7f0000005b80)=0x8) 2m45.52648517s ago: executing program 2 (id=1388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r2], 0x24}}, 0x4000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x8, 0x80801, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x102) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r11, r8, 0x25, 0x8, @val=@perf_event={0xfffffffffffffffe}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) 2m42.981476222s ago: executing program 2 (id=1395): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffdfffd, 0x4000, 0x0, 0x355}, &(0x7f0000000140), &(0x7f0000000300)) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)=[{}, {}], 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_procfs(r2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40000021) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600), &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYRES16=r5, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r7, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2m39.709384005s ago: executing program 2 (id=1398): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='timer_start\x00', 0xffffffffffffffff, 0x0, 0x80000001}, 0x18) sync() sync() ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd3f, 0x70bd2b, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x1, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3c000000}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) write$cgroup_int(r1, &(0x7f0000000000)=0x4078c5d8, 0x12) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 2m24.42274599s ago: executing program 33 (id=1398): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='timer_start\x00', 0xffffffffffffffff, 0x0, 0x80000001}, 0x18) sync() sync() ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd3f, 0x70bd2b, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x1, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3c000000}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) write$cgroup_int(r1, &(0x7f0000000000)=0x4078c5d8, 0x12) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 9.272627962s ago: executing program 0 (id=1716): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000500), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x44, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x4000000) close(r4) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="080026006c090000080027000000f94b"], 0x34}}, 0x884) 9.099631913s ago: executing program 6 (id=1717): r0 = socket(0x1d, 0x2, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x121100, 0x2, 0x20}, 0x18) fchmodat(r3, &(0x7f0000000180)='./file0\x00', 0x5e) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) close(r5) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0xa) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={0x0, 0x2, 0xffffffffffffffff, 0x9}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) 8.570779924s ago: executing program 5 (id=1718): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8) 8.098871595s ago: executing program 5 (id=1719): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mlockall(0x5) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x88980, 0x3c) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x408) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200630140000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlockall(0x2) r2 = memfd_secret(0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4010, r2, 0x3000) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0xfffe, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x101, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30822ec509eeefef5700", [0x0, 0x4]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 7.841262337s ago: executing program 5 (id=1720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x400400, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.646975379s ago: executing program 6 (id=1721): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) arch_prctl$ARCH_GET_CPUID(0x1011) 6.851611417s ago: executing program 1 (id=1723): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x6, &(0x7f0000000100)=0x5125) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x41) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 6.771423909s ago: executing program 6 (id=1724): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ca007d05008686dd60ff38f5001c0600fe80000000000000000000000000000bfe8000000000000000000000000000aa73000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000000000000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001b00)=ANY=[@ANYBLOB="021070091c00000028bd7000fddbdf2502001000000004d6000004d4005700000005001a00ac1414aa000000000000000000000000e00000010000000000000000000000001800101002001000000004d2000004d4000000001100180010ac7d00f0a98eaac80517f1a57f72b1240b82a10d875aa2195b90abd17fa1cdfe1f588b99fff796db7b227151389b328015862bb9dae18cf15e4c8afd3067df0ab12338ae0f3f4ee324289876e8f63fccf459281d80df4d6594dfc799962003c31a71a13caad2c7ee34bfbd2481149797e5fdbfea41ff11f96a86038092b1ede9000000"], 0xe0}}, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040), 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000400)={0x8, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0xfffd, 0x6}, {0x80, 0x1}, {0xc2, 0x9}, {0x2, 0x100}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x315, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x4000094) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r9, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000001a80)=[0x0, r9, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) recvmsg$can_raw(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000000500)=""/222, 0xde}], 0x2, &(0x7f0000000340)=""/53, 0x35}, 0x60) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.770096522s ago: executing program 5 (id=1725): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x2, 0x3}, 0x18, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000000000000000700", [0x0, 0x2000000000001]}}) 6.606838027s ago: executing program 3 (id=1726): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x2, 0x6, {0x1000000c, 0x2c1, 0xffffffff, 0xf46}}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x1e9982, 0x0) r2 = dup(r1) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000300)={{0x0, 0x3938700}}, &(0x7f0000000440)) r5 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r5, &(0x7f0000000240)="ac", 0x1) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000040)=0x401) 5.580820494s ago: executing program 0 (id=1727): r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.321210524s ago: executing program 1 (id=1728): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0x80900, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x1f, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf14}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x2db1, 0x6c, &(0x7f0000000540)=""/108, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000a00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0xd, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x88e46d092475e75b, 0x0, 0x5f]}}, 0x0, 0x1d}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc2600000000001fbf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 5.320828393s ago: executing program 5 (id=1729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0xfffffffffffffe3e, &(0x7f0000000400)={0x0}}, 0x4000050) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044855}, 0x4048804) r8 = socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d", 0xf) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r9) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x24, r11, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r11, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000840) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0xe5, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d01090050001180490067004df4fc8de71626db37a39716bc6a1d9cbb21e0a06208c366fbcb7bdf381a45efcace9782aab31f4423aa8b1fa6f26bc762d6030000004ff3c640b8656c018bebe844d61d0b0000004d0012803b", @ANYRESOCT, @ANYRES64=r11, @ANYRES8=r1], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4048010) 5.130635192s ago: executing program 3 (id=1730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x7f7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e210000000800034000000008060001400001000009000100"], 0x9c}}, 0x0) close(r7) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r8, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 5.010160237s ago: executing program 6 (id=1731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) times(&(0x7f0000002280)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001900000000000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 4.422563953s ago: executing program 0 (id=1732): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2420bfd40000000301010400000000000000000200edff0f1c01800c00038005000100000000009a40f62db30143fcd2998b0372e4901d1cc35a69727714539b73721891eea1d259439212bd2bdeba9b88d6221c8c6e7f2408e7"], 0x24}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket$inet6(0xa, 0x2, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r7, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 4.338425659s ago: executing program 1 (id=1733): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x62}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4a19, 0x8, 0x2}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x67}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c000480480001"], 0x122}}, 0x4008090) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) userfaultfd(0x801) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0xc4500, 0x40, 0x20}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 64) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6, 0x2}) (async) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 4.182944112s ago: executing program 5 (id=1734): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f000001aa40)=ANY=[@ANYBLOB="f99b9366643d", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x140) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f000001ab00)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=0x0, @ANYBLOB="6dd9a7ce1eaaa6c12c2bee62cd0099e530624cfd006ce12765ee4dbaa8fb1f0288167e10adc77104657ad2"], 0x3c}}, 0x0) 3.629930361s ago: executing program 0 (id=1735): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) arch_prctl$ARCH_GET_CPUID(0x1011) 3.586609227s ago: executing program 3 (id=1736): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80b00, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000300)=[{&(0x7f0000000400)=@in6={0xa, 0x4e22, 0xe, @private1, 0x101}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x4000000) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00000000000000000000000000000000000000000000007e9339a0a9fc6d041953ea16b85a173c1750a0adc83174915bf497d418", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r4 = dup(r0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000050000060900010073797a3100000000580004805400018009000100261a54f75d7753086d6574610000000044000280080001400000000c080003400000000d08000240000003ff100001400000000008000240000000010800034000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x20060814) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x312, 0x0, r4}, &(0x7f0000000500), &(0x7f00000001c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000ac0)) r9 = dup(r8) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x1, r9}) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f00000001c0)=0x304008000) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40080382}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000005500000000000000000000010000060c00064000000000000000d20c0002400000000000008000"/56], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) 3.382930327s ago: executing program 1 (id=1737): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a"], 0x20}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f0000000080)={0x18, 0x0, 0x1, 0x0, 0x0, 0x15ab}) 3.296021448s ago: executing program 6 (id=1738): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffdfffd, 0x4000, 0x0, 0x355}, &(0x7f0000000140), &(0x7f0000000300)) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)=[{}, {}], 0x0, 0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_procfs(r2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40000021) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600), &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r7, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 3.21077141s ago: executing program 0 (id=1739): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x2, 0x3}, 0x18, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x80800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000000000000000900", [0x0, 0x2000000000001]}}) 2.313076684s ago: executing program 0 (id=1740): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x80, 0xe0, 0x18, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x7f, 0xd9, 0x5}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x81, 0x6, 0x5e, 0x40, 0xfd}, 0x5d, &(0x7f0000000100)={0x5, 0xf, 0x5d, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x4b, 0x10, 0x1, "aeb6fdce8d73d3284265a6c15f76cd839b96baf28c7a0465e31c1a6f9f400b5555d184d13b7a7630d9dbb1218c0b0b93a7cbda439805c6c72b8a6cd925626be78828b28b91c9d4cd"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x3, 0x1}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44a}}, {0x87, &(0x7f00000003c0)=@string={0x87, 0x3, "b6722c0e595cd66255de5711488bcc587167c3ffb7c805739a5a75762a8ab51315497166f7821ee4433779b24fbca348786ce00f4059ebbe76192bdaac350195b77a83645df0a9380b2c45a0f4571a35f64836c6f4980b893f5c316ef3b9d3e3926d2bec0e495ab39fab2a4670f0f57cc1bd8262f43ace2e386c5eeb2f7a8e6793a3854ef7"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x810}}, {0xc0, &(0x7f0000000240)=@string={0xc0, 0x3, "1cd4a85f47d32a65daaa356d304be490ecf9dee7ee5d7338c88006520be8b22059bd73ac6e893bf604c0ffabe71595e1b6bdaa868eee47f69243b10c98978c888dfe7b4f3b92da647a2614e2e679bbfbdc1068345d73f7be979be25338aa40529a756ff1b1e0d49cc245c681c2eadecdd46ba2745d30ce2dde90fee89a8b4b21b271ef888fe11afe0241920629ec2b40b6d7c72f0cfc30139c26413804d41100470b9575ca9126b7922b788bc8013df18a844c62849f914ba71644f8fec7"}}, {0x3d, &(0x7f0000000300)=@string={0x3d, 0x3, "ebe459f6fc6e136382a94b891920a8b134071b6572425d5164727d1f4c91c59bd7ff247f39429b07f14d19a792acbd28fba68fbb3f58adf904e3db"}}]}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) r1 = eventfd2(0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7, 0x1}}, './file0\x00'}) 2.264962586s ago: executing program 6 (id=1741): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) stat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x164, 0x12, 0x301, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x800, 0x0, 0x1], [0x0, 0x0, 0xfffffffc, 0x3]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x115, 0x3, "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"}]}, 0x164}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) shutdown(r2, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x3e, 0x1000071, 0x200000009}) r6 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x560e, &(0x7f0000000000)) r8 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @rand_addr=0x64010103}, {0x306, @local}, 0x6f631b4376e74f1c, {0x2, 0x0, @rand_addr=0x440100f9}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r8, 0x8953, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x143b) sched_setscheduler(0x0, 0x1, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) 1.068978305s ago: executing program 3 (id=1743): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0x80900, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x1f, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf14}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x2db1, 0x6c, &(0x7f0000000540)=""/108, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000a00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0xd, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x88e46d092475e75b, 0x0, 0x5f]}}, 0x0, 0x1d}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 969.984612ms ago: executing program 1 (id=1744): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x860b, 0x1}) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 254.977524ms ago: executing program 3 (id=1745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) (async) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) (async) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f0000000100)) (async) accept4$llc(r1, 0x0, &(0x7f0000000040), 0x0) 0s ago: executing program 3 (id=1746): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x80007, 0x8000c60) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) writev(r4, 0x0, 0x0) ptrace$peek(0x1, r1, &(0x7f0000000180)) prlimit64(0x0, 0x2, &(0x7f0000000080)={0x268c, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) prlimit64(0x0, 0x2, 0x0, &(0x7f0000000000)) setrlimit(0xf, &(0x7f00000000c0)={0x4, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000020101040000311a5f9b86a8dd43000aaf4d198008000100080e001d"], 0x20}, 0x1, 0x0, 0x0, 0x24000084}, 0x20044804) kernel console output (not intermixed with test programs): omm="syz.3.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 608.398294][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 608.443650][ T5923] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 608.844586][ T5923] usb 6-1: device descriptor read/64, error -71 [ 609.116644][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.127852][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 609.133215][ T5923] usb usb6-port1: attempt power cycle [ 609.134579][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 609.153360][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.169623][ T10] usb 4-1: config 0 descriptor?? [ 609.240597][T11173] usb 2-1: USB disconnect, device number 39 [ 609.272881][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 609.293098][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 609.323748][ T24] usb 3-1: USB disconnect, device number 52 [ 609.558579][T10896] udevd[10896]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.603066][ T5923] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 609.804217][ T10] nzxt-smart2 0003:1E71:2009.000D: item fetching failed at offset 4/5 [ 609.862955][ T10] nzxt-smart2 0003:1E71:2009.000D: probe with driver nzxt-smart2 failed with error -22 [ 610.053265][ T5923] usb 6-1: device not accepting address 20, error -71 [ 610.261480][ T24] usb 4-1: USB disconnect, device number 44 [ 610.280947][ T30] audit: type=1400 audit(610.140:1030): avc: denied { unlink } for pid=11241 comm="syz.1.1265" name="#11" dev="tmpfs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 610.588280][ T30] audit: type=1400 audit(610.210:1031): avc: denied { mount } for pid=11241 comm="syz.1.1265" name="/" dev="overlay" ino=1392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 610.774969][ T30] audit: type=1400 audit(610.730:1032): avc: denied { name_bind } for pid=11248 comm="syz.5.1266" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 610.889722][ T30] audit: type=1400 audit(610.780:1033): avc: denied { write } for pid=11250 comm="syz.0.1267" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 611.113075][ T30] audit: type=1400 audit(610.790:1034): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 611.133557][ T30] audit: type=1400 audit(610.810:1035): avc: denied { setopt } for pid=11250 comm="syz.0.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 611.683292][T11263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1270'. [ 611.980484][T11265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1270'. [ 611.995313][ T5923] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 612.036626][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 612.054220][ T5923] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 612.079101][ T5923] usb 6-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice=43.21 [ 612.095195][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.111036][ T5923] usb 6-1: Product: syz [ 612.117755][ T5923] usb 6-1: Manufacturer: syz [ 612.122473][ T5923] usb 6-1: SerialNumber: syz [ 612.192512][ T10] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 612.200135][T11173] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 612.451300][ T5923] gspca_main: jeilinj-2.14.0 probing 0979:0280 [ 612.458312][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 612.467683][T11173] usb 1-1: not running at top speed; connect to a high speed hub [ 612.473354][ T5923] usb 6-1: USB disconnect, device number 21 [ 612.500599][ T10] usb 4-1: config 0 has no interface number 0 [ 612.508809][T11173] usb 1-1: config 204 has an invalid interface number: 43 but max is 1 [ 612.519468][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'. [ 612.530069][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 612.543639][T11173] usb 1-1: config 204 contains an unexpected descriptor of type 0x2, skipping [ 612.554033][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 612.565105][T11173] usb 1-1: config 204 has an invalid interface number: 174 but max is 1 [ 612.574123][T11173] usb 1-1: config 204 has no interface number 0 [ 612.581336][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 612.590976][T11173] usb 1-1: config 204 has no interface number 1 [ 612.599430][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.608074][T11173] usb 1-1: config 204 interface 43 altsetting 64 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 612.622338][T11173] usb 1-1: config 204 interface 43 altsetting 64 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 612.635007][ T10] usb 4-1: config 0 descriptor?? [ 612.643055][T11173] usb 1-1: config 204 interface 43 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 612.655496][T11254] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 612.663308][T11173] usb 1-1: config 204 interface 43 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 612.679485][T11173] usb 1-1: config 204 interface 43 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 612.691249][ T10] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 612.701754][T11173] usb 1-1: config 204 interface 43 altsetting 64 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 612.718882][T11173] usb 1-1: config 204 interface 43 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 612.730652][T11173] usb 1-1: config 204 interface 43 altsetting 64 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 612.743235][ T9870] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 612.752638][T11173] usb 1-1: config 204 interface 43 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 612.764597][T11173] usb 1-1: config 204 interface 43 has no altsetting 0 [ 612.771905][T11173] usb 1-1: config 204 interface 174 has no altsetting 0 [ 612.781453][T11173] usb 1-1: New USB device found, idVendor=0eb1, idProduct=6666, bcdDevice=84.16 [ 612.791025][T11173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.799638][T11173] usb 1-1: Product: Э [ 612.803913][T11173] usb 1-1: Manufacturer: á  [ 612.808586][T11173] usb 1-1: SerialNumber: Ж [ 612.881323][ T5923] usb 4-1: USB disconnect, device number 45 [ 612.897690][ T9870] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 612.909367][ T9870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.917504][ T9870] usb 3-1: Product: syz [ 612.921713][ T9870] usb 3-1: Manufacturer: syz [ 612.929049][ T9870] usb 3-1: SerialNumber: syz [ 612.936959][ T9870] usb 3-1: config 0 descriptor?? [ 612.951898][ T9870] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 053 [ 613.023904][ T30] audit: type=1400 audit(612.990:1036): avc: denied { read write } for pid=11273 comm="syz.5.1273" name="vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 613.059622][T11173] go7007-loader 1-1:204.43: loading firmware go7007/lr192.fw [ 613.062550][ T30] audit: type=1400 audit(612.990:1037): avc: denied { open } for pid=11273 comm="syz.5.1273" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 613.101821][T11173] usb 1-1: Direct firmware load for go7007/lr192.fw failed with error -2 [ 613.116455][T11173] usb 1-1: Falling back to sysfs fallback for: go7007/lr192.fw [ 613.132612][ T30] audit: type=1400 audit(612.990:1038): avc: denied { ioctl } for pid=11250 comm="syz.0.1267" path="socket:[28323]" dev="sockfs" ino=28323 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 613.169347][ T30] audit: type=1400 audit(613.080:1039): avc: denied { firmware_load } for pid=11173 comm="kworker/0:6" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 613.414303][ T9870] (null): failure reading functionality [ 613.652319][T11287] netlink: 'syz.3.1276': attribute type 2 has an invalid length. [ 613.660219][T11287] netlink: 'syz.3.1276': attribute type 1 has an invalid length. [ 615.041845][T11271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.101975][T11271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.164764][T11290] tipc: Can't bind to reserved service type 0 [ 615.229321][ T9870] i2c i2c-1: connected i2c-tiny-usb device [ 615.303065][ T5923] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 615.395061][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 615.395073][ T30] audit: type=1400 audit(615.360:1045): avc: denied { mount } for pid=11270 comm="syz.2.1272" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 615.435663][ T5845] usb 3-1: USB disconnect, device number 53 [ 615.483095][ T5923] usb 4-1: device descriptor read/64, error -71 [ 615.687621][ T30] audit: type=1400 audit(615.640:1046): avc: denied { unmount } for pid=7969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 615.783093][ T5923] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 615.923105][ T5923] usb 4-1: device descriptor read/64, error -71 [ 616.090753][ T5923] usb usb4-port1: attempt power cycle [ 616.274896][ T30] audit: type=1400 audit(616.220:1047): avc: denied { ioctl } for pid=11300 comm="syz.2.1281" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 616.718069][T11299] vxlan0: entered promiscuous mode [ 616.723270][T11299] vxlan0: entered allmulticast mode [ 616.752295][ T1152] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.803401][ T5923] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 616.868383][ T1152] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.946062][ T1152] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.027910][ T6281] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.147741][ T5923] usb 4-1: device not accepting address 48, error -71 [ 618.289287][ T30] audit: type=1400 audit(618.240:1048): avc: denied { append } for pid=11318 comm="syz.0.1285" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 618.741721][ T30] audit: type=1326 audit(618.490:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7fc00000 [ 618.862010][ T30] audit: type=1400 audit(618.740:1050): avc: denied { read } for pid=11320 comm="syz.1.1286" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 618.986311][T11345] veth0_vlan: left promiscuous mode [ 619.115768][ T30] audit: type=1400 audit(618.740:1051): avc: denied { open } for pid=11320 comm="syz.1.1286" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 619.344399][T11349] FAULT_INJECTION: forcing a failure. [ 619.344399][T11349] name failslab, interval 1, probability 0, space 0, times 0 [ 619.357209][T11349] CPU: 0 UID: 0 PID: 11349 Comm: syz.0.1290 Not tainted syzkaller #0 PREEMPT(full) [ 619.357242][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.357255][T11349] Call Trace: [ 619.357262][T11349] [ 619.357269][T11349] dump_stack_lvl+0x16c/0x1f0 [ 619.357297][T11349] should_fail_ex+0x512/0x640 [ 619.357319][T11349] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 619.357353][T11349] should_failslab+0xc2/0x120 [ 619.357376][T11349] __kmalloc_cache_node_noprof+0x6d/0x420 [ 619.357408][T11349] ? __get_vm_area_node+0x101/0x330 [ 619.357435][T11349] ? __lock_acquire+0x62e/0x1ce0 [ 619.357465][T11349] __get_vm_area_node+0x101/0x330 [ 619.357496][T11349] __vmalloc_node_range_noprof+0x271/0x14b0 [ 619.357525][T11349] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 619.357548][T11349] ? find_held_lock+0x2b/0x80 [ 619.357573][T11349] ? avc_has_perm_noaudit+0x117/0x3b0 [ 619.357595][T11349] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 619.357623][T11349] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 619.357652][T11349] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 619.357689][T11349] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 619.357708][T11349] __vmalloc_node_noprof+0xad/0xf0 [ 619.357735][T11349] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 619.357759][T11349] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 619.357778][T11349] ? security_capable+0x7e/0x260 [ 619.357803][T11349] bpf_prog_alloc+0x3b/0x230 [ 619.357821][T11349] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 619.357846][T11349] bpf_prog_load+0x1a04/0x2490 [ 619.357878][T11349] ? __pfx_bpf_prog_load+0x10/0x10 [ 619.357906][T11349] ? avc_has_perm+0x144/0x1f0 [ 619.357942][T11349] ? selinux_bpf+0xde/0x130 [ 619.357962][T11349] ? bpf_lsm_bpf+0x9/0x10 [ 619.357990][T11349] __sys_bpf+0x4a3f/0x4de0 [ 619.358019][T11349] ? __pfx___sys_bpf+0x10/0x10 [ 619.358045][T11349] ? ksys_write+0x190/0x250 [ 619.358070][T11349] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 619.358111][T11349] ? fput+0x9b/0xd0 [ 619.358136][T11349] ? ksys_write+0x1ac/0x250 [ 619.358156][T11349] ? __pfx_ksys_write+0x10/0x10 [ 619.358181][T11349] __x64_sys_bpf+0x78/0xc0 [ 619.358206][T11349] ? lockdep_hardirqs_on+0x7c/0x110 [ 619.358230][T11349] do_syscall_64+0xcd/0x4c0 [ 619.358253][T11349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.358274][T11349] RIP: 0033:0x7f38a498ebe9 [ 619.358291][T11349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.358311][T11349] RSP: 002b:00007f38a2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 619.358330][T11349] RAX: ffffffffffffffda RBX: 00007f38a4bc6180 RCX: 00007f38a498ebe9 [ 619.358343][T11349] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 619.358356][T11349] RBP: 00007f38a2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 619.358368][T11349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.358380][T11349] R13: 00007f38a4bc6218 R14: 00007f38a4bc6180 R15: 00007ffddeb4c478 [ 619.358409][T11349] [ 619.358441][T11349] syz.0.1290: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 619.671905][T11349] CPU: 1 UID: 0 PID: 11349 Comm: syz.0.1290 Not tainted syzkaller #0 PREEMPT(full) [ 619.671932][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.671943][T11349] Call Trace: [ 619.671951][T11349] [ 619.671959][T11349] dump_stack_lvl+0x16c/0x1f0 [ 619.671980][T11349] warn_alloc+0x248/0x3a0 [ 619.671993][T11349] ? __pfx_warn_alloc+0x10/0x10 [ 619.672006][T11349] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 619.672027][T11349] ? __kasan_kmalloc+0x8a/0xb0 [ 619.672038][T11349] ? __get_vm_area_node+0x208/0x330 [ 619.672058][T11349] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 619.672076][T11349] ? find_held_lock+0x2b/0x80 [ 619.672090][T11349] ? avc_has_perm_noaudit+0x117/0x3b0 [ 619.672104][T11349] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 619.672120][T11349] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 619.672140][T11349] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 619.672161][T11349] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 619.672172][T11349] __vmalloc_node_noprof+0xad/0xf0 [ 619.672188][T11349] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 619.672201][T11349] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 619.672212][T11349] ? security_capable+0x7e/0x260 [ 619.672227][T11349] bpf_prog_alloc+0x3b/0x230 [ 619.672237][T11349] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 619.672251][T11349] bpf_prog_load+0x1a04/0x2490 [ 619.672270][T11349] ? __pfx_bpf_prog_load+0x10/0x10 [ 619.672286][T11349] ? avc_has_perm+0x144/0x1f0 [ 619.672305][T11349] ? selinux_bpf+0xde/0x130 [ 619.672317][T11349] ? bpf_lsm_bpf+0x9/0x10 [ 619.672334][T11349] __sys_bpf+0x4a3f/0x4de0 [ 619.672350][T11349] ? __pfx___sys_bpf+0x10/0x10 [ 619.672365][T11349] ? ksys_write+0x190/0x250 [ 619.672386][T11349] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 619.672409][T11349] ? fput+0x9b/0xd0 [ 619.672424][T11349] ? ksys_write+0x1ac/0x250 [ 619.672435][T11349] ? __pfx_ksys_write+0x10/0x10 [ 619.672449][T11349] __x64_sys_bpf+0x78/0xc0 [ 619.672464][T11349] ? lockdep_hardirqs_on+0x7c/0x110 [ 619.672477][T11349] do_syscall_64+0xcd/0x4c0 [ 619.672491][T11349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.672504][T11349] RIP: 0033:0x7f38a498ebe9 [ 619.672514][T11349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.672526][T11349] RSP: 002b:00007f38a2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 619.672537][T11349] RAX: ffffffffffffffda RBX: 00007f38a4bc6180 RCX: 00007f38a498ebe9 [ 619.672545][T11349] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 619.672552][T11349] RBP: 00007f38a2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 619.672558][T11349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.672565][T11349] R13: 00007f38a4bc6218 R14: 00007f38a4bc6180 R15: 00007ffddeb4c478 [ 619.672580][T11349] [ 619.672584][T11349] Mem-Info: [ 619.955896][T11349] active_anon:27372 inactive_anon:0 isolated_anon:0 [ 619.955896][T11349] active_file:21097 inactive_file:40813 isolated_file:0 [ 619.955896][T11349] unevictable:768 dirty:489 writeback:0 [ 619.955896][T11349] slab_reclaimable:12295 slab_unreclaimable:109305 [ 619.955896][T11349] mapped:51944 shmem:16837 pagetables:1455 [ 619.955896][T11349] sec_pagetables:0 bounce:0 [ 619.955896][T11349] kernel_misc_reclaimable:0 [ 619.955896][T11349] free:1252799 free_pcp:13475 free_cma:0 [ 620.001418][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.007738][T11349] Node 0 active_anon:109488kB inactive_anon:0kB active_file:84388kB inactive_file:163052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:207776kB dirty:1952kB writeback:0kB shmem:65812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:12764kB pagetables:5668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 620.040720][T11349] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 620.070933][T11349] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 620.099820][T11349] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 620.105578][T11349] Node 0 DMA32 free:1110164kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109532kB inactive_anon:0kB active_file:84388kB inactive_file:161732kB unevictable:1536kB writepending:1968kB present:3129332kB managed:2539364kB mlocked:0kB bounce:0kB free_pcp:29336kB local_pcp:16828kB free_cma:0kB [ 620.138409][T11349] lowmem_reserve[]: 0 0 1 1 1 [ 620.143145][T11349] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 620.172398][T11349] lowmem_reserve[]: 0 0 0 0 0 [ 620.177180][T11349] Node 1 Normal free:3885524kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24720kB local_pcp:9440kB free_cma:0kB [ 620.208355][T11349] lowmem_reserve[]: 0 0 0 0 0 [ 620.213075][T11349] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 620.225684][T11349] Node 0 DMA32: 311*4kB (UE) 328*8kB (UE) 181*16kB (UME) 66*32kB (UME) 387*64kB (UME) 201*128kB (UME) 122*256kB (UME) 43*512kB (UM) 20*1024kB (M) 5*2048kB (UME) 236*4096kB (M) = 1109996kB [ 620.244761][T11349] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 620.256601][T11349] Node 1 Normal: 125*4kB (UE) 48*8kB (UME) 44*16kB (UME) 181*32kB (UE) 54*64kB (UE) 17*128kB (UE) 3*256kB (U) 2*512kB (UE) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3885524kB [ 620.274444][T11349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 620.284051][T11349] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 620.293713][T11349] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 620.303354][T11349] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 620.312645][T11349] 78755 total pagecache pages [ 620.317485][T11349] 0 pages in swap cache [ 620.321632][T11349] Free swap = 124996kB [ 620.325832][T11349] Total swap = 124996kB [ 620.330082][T11349] 2097051 pages RAM [ 620.333934][T11349] 0 pages HighMem/MovableOnly [ 620.338919][T11349] 430248 pages reserved [ 620.343100][T11349] 0 pages cma reserved [ 621.417122][ T30] audit: type=1400 audit(621.370:1052): avc: denied { listen } for pid=11351 comm="syz.0.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 621.879360][T11361] netlink: 'syz.2.1294': attribute type 2 has an invalid length. [ 621.887184][T11361] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 622.969241][ T30] audit: type=1400 audit(622.930:1053): avc: denied { bind } for pid=11362 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 623.063305][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 623.153077][ T30] audit: type=1400 audit(623.040:1054): avc: denied { read } for pid=11356 comm="syz.3.1293" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 623.176082][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.273100][ T24] usb 3-1: device descriptor read/64, error -71 [ 623.444998][ T30] audit: type=1400 audit(623.040:1055): avc: denied { open } for pid=11356 comm="syz.3.1293" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 623.632781][ T30] audit: type=1400 audit(623.060:1056): avc: denied { ioctl } for pid=11356 comm="syz.3.1293" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 623.826357][T11380] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1296'. [ 624.193054][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 624.246948][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.254720][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.310320][T11363] syz.1.1292 (11363): drop_caches: 2 [ 624.397018][ T24] usb 3-1: device descriptor read/64, error -71 [ 624.533341][ T24] usb usb3-port1: attempt power cycle [ 625.303287][T11384] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1298'. [ 625.803059][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 626.062532][ T30] audit: type=1400 audit(626.020:1057): avc: denied { bind } for pid=11398 comm="syz.5.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 626.113171][ T24] usb 3-1: device not accepting address 56, error -71 [ 627.179417][T11405] 9pnet_virtio: no channels available for device syz [ 627.488997][T11410] tmpfs: Unknown parameter 'quotaš' [ 627.575918][T11410] sp0: Synchronizing with TNC [ 628.120137][ T30] audit: type=1400 audit(628.080:1058): avc: denied { setopt } for pid=11416 comm="syz.3.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 628.303131][ T30] audit: type=1400 audit(628.230:1059): avc: denied { write } for pid=11411 comm="syz.1.1306" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 628.403096][ T5845] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 628.675456][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.065681][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.076193][ T5845] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 629.085551][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.099983][ T5845] usb 3-1: config 0 descriptor?? [ 629.417385][ T30] audit: type=1400 audit(629.380:1060): avc: denied { bind } for pid=11430 comm="syz.1.1311" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 629.464147][ T30] audit: type=1400 audit(629.380:1061): avc: denied { name_bind } for pid=11430 comm="syz.1.1311" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 629.486384][ T30] audit: type=1400 audit(629.380:1062): avc: denied { node_bind } for pid=11430 comm="syz.1.1311" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 629.510661][ T30] audit: type=1400 audit(629.410:1063): avc: denied { write } for pid=11430 comm="syz.1.1311" laddr=172.20.20.170 lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 630.112845][T11420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.178024][T11420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.242642][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 630.253704][T11420] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 630.265339][T11420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.399787][T11447] 9pnet_fd: Insufficient options for proto=fd [ 631.683187][ T5845] uclogic 0003:256C:006D.000E: interface is invalid, ignoring [ 631.751477][ T30] audit: type=1400 audit(631.710:1064): avc: denied { write } for pid=11418 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 631.751509][T11449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1308'. [ 632.946809][ T5961] usb 3-1: USB disconnect, device number 58 [ 633.009055][T11463] loop2: detected capacity change from 0 to 7 [ 633.023983][T11463] Dev loop2: unable to read RDB block 7 [ 633.045192][T11463] loop2: unable to read partition table [ 633.051083][T11463] loop2: partition table beyond EOD, truncated [ 633.173296][ T5854] Bluetooth: hci5: unexpected event for opcode 0x2040 [ 633.180217][T11463] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 633.256501][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1316'. [ 634.175316][ T5961] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 634.359892][ T5961] usb 2-1: Using ep0 maxpacket: 8 [ 634.754964][T11478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.803713][T11478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.862030][ T5961] usb 2-1: unable to get BOS descriptor or descriptor too short [ 634.913097][ T5961] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 634.943215][ T5961] usb 2-1: can't read configurations, error -71 [ 635.061180][ T30] audit: type=1400 audit(635.020:1065): avc: denied { create } for pid=11497 comm="syz.5.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 635.280361][T11503] serio: Serial port ptm0 [ 636.405023][T11498] gretap1: entered promiscuous mode [ 636.636892][ T30] audit: type=1400 audit(636.590:1066): avc: denied { ioctl } for pid=11497 comm="syz.5.1325" path="socket:[29019]" dev="sockfs" ino=29019 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 636.761947][T11512] tmpfs: Unknown parameter 'quotaš' [ 637.991312][T11533] tmpfs: Unknown parameter 'quotaš' [ 638.070876][T11533] sp0: Synchronizing with TNC [ 638.419224][ T30] audit: type=1400 audit(638.370:1067): avc: denied { setopt } for pid=11525 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 638.885775][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1332'. [ 638.897326][T11539] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1332'. [ 640.048335][T11551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 643.553053][ T30] audit: type=1400 audit(643.480:1068): avc: denied { connect } for pid=11573 comm="syz.1.1341" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 643.836471][ T5854] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 645.153195][ T9870] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 645.303271][ T9870] usb 6-1: Using ep0 maxpacket: 32 [ 645.321232][ T9870] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 645.370011][ T9870] usb 6-1: config 0 has no interface number 0 [ 645.390372][ T9870] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.426112][ T9870] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.474555][ T9870] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 645.514263][ T9870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.894672][ T9870] usb 6-1: config 0 descriptor?? [ 646.092352][T11609] 9pnet_fd: Insufficient options for proto=fd [ 646.201467][ T5909] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 647.328518][ T9870] input: HID 28bd:0094 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0094.000F/input/input23 [ 647.345806][ T30] audit: type=1400 audit(647.310:1069): avc: denied { read } for pid=5204 comm="acpid" name="mouse1" dev="devtmpfs" ino=3584 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 647.367717][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.376878][ T30] audit: type=1400 audit(647.310:1070): avc: denied { open } for pid=5204 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3584 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 647.399777][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.409253][ T9870] uclogic 0003:28BD:0094.000F: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.5-1/input1 [ 647.425014][ T30] audit: type=1400 audit(647.380:1071): avc: denied { ioctl } for pid=5204 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3584 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 647.548929][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 647.695929][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.718321][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.731221][ T5909] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 647.748774][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.762650][ T5909] usb 2-1: config 0 descriptor?? [ 648.022326][ T5854] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 648.032889][ T5854] Bluetooth: hci5: Injecting HCI hardware error event [ 648.045532][ T5850] Bluetooth: hci5: hardware error 0x00 [ 648.240499][ T977] usb 6-1: USB disconnect, device number 22 [ 648.290048][T11611] fido_id[11611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 648.586503][T11622] netlink: 'syz.3.1352': attribute type 3 has an invalid length. [ 648.710703][T11623] tmpfs: Unknown parameter 'quotaš' [ 649.031553][ T30] audit: type=1400 audit(648.990:1072): avc: denied { write } for pid=11621 comm="syz.3.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 649.046664][T11624] IPv6: NLM_F_REPLACE set, but no existing node found! [ 649.051121][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.064259][ T9870] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 649.256030][T11627] serio: Serial port ptm1 [ 649.307508][ T9870] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 650.283588][ T5850] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 651.013719][ T9870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.034744][ T9870] usb 3-1: Product: syz [ 651.038972][ T9870] usb 3-1: Manufacturer: syz [ 651.043633][ T9870] usb 3-1: SerialNumber: syz [ 651.065124][ T9870] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 651.076651][ T30] audit: type=1400 audit(651.040:1073): avc: denied { firmware_load } for pid=5961 comm="kworker/1:6" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 651.109971][ T5961] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 651.147946][ T5909] usbhid 2-1:0.0: can't add hid device: -71 [ 651.162197][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 651.225848][ T5909] usb 2-1: USB disconnect, device number 42 [ 651.428531][ T5923] usb 3-1: USB disconnect, device number 59 [ 651.889871][T11639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1358'. [ 652.175142][ T5961] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 652.358702][ T5961] ath9k_htc: Failed to initialize the device [ 652.453199][ T5923] usb 3-1: ath9k_htc: USB layer deinitialized [ 652.944817][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'. [ 653.126749][T11622] syz.3.1352 (11622): drop_caches: 2 [ 653.517921][ T30] audit: type=1326 audit(653.410:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 653.604180][ T30] audit: type=1326 audit(653.410:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 653.639698][ T30] audit: type=1326 audit(653.410:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 653.663988][ T30] audit: type=1326 audit(653.410:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 653.687094][ T30] audit: type=1326 audit(653.410:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 653.711784][ T30] audit: type=1326 audit(653.410:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 653.740916][ T30] audit: type=1326 audit(653.410:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 653.813132][ T30] audit: type=1326 audit(653.420:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 653.869101][T11663] loop2: detected capacity change from 0 to 7 [ 653.900003][T11663] Dev loop2: unable to read RDB block 7 [ 653.929784][T11663] loop2: unable to read partition table [ 653.936223][T11663] loop2: partition table beyond EOD, truncated [ 653.962863][T11663] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 654.733383][ T5909] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 654.946544][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 654.950897][ T30] audit: type=1400 audit(654.890:1107): avc: denied { relabelfrom } for pid=11676 comm="syz.5.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 654.979608][ T5909] usb 4-1: config 0 has no interfaces? [ 654.986124][ T5909] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 654.993467][ T30] audit: type=1400 audit(654.890:1108): avc: denied { relabelto } for pid=11676 comm="syz.5.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 654.996472][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.014275][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.052583][ T5909] usb 4-1: config 0 descriptor?? [ 655.182892][ T30] audit: type=1400 audit(655.140:1109): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 655.344979][ T30] audit: type=1400 audit(655.310:1110): avc: denied { setopt } for pid=11665 comm="syz.3.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 655.379078][ T5923] usb 4-1: USB disconnect, device number 50 [ 656.252432][ T30] audit: type=1400 audit(656.210:1111): avc: denied { read } for pid=11689 comm="syz.1.1370" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 656.332405][T11690] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1370'. [ 656.343322][ T977] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 656.346224][T11690] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1370'. [ 656.376869][T11690] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1370'. [ 656.501654][ T977] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 656.525264][ T977] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 656.535424][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.544608][ T977] usb 3-1: Product: îšç¬³å¿ ê»å‡§ê£²áµáŸ„㜸準ë™êŽ¾ç‰‹å‘ºîµ©è”™à šæ¨…㴋掿儊é¥â—­ì©“벹⢄᫲쒈赹穚í¬â­¼ìºáœ¹å˜³î£Ÿ [ 656.562198][ T977] usb 3-1: Manufacturer: 䰽ᖕ慔ᅳꦗꟸ覙쉖ï‹â›¥ïŒè…„䯃í·é¸Ÿãµ¸ë¼Ÿî–£é•’æ”Ň㯪觢䗿 [ 656.574110][ T977] usb 3-1: SerialNumber: з [ 656.638543][T11690] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1370'. [ 656.680617][T11690] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1370'. [ 657.660799][ T977] cdc_ncm 3-1:1.0: bind() failure [ 657.695394][ T977] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 657.857058][T11710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1372'. [ 658.319153][ T977] cdc_ncm 3-1:1.1: bind() failure [ 658.338956][ T977] usb 3-1: USB disconnect, device number 60 [ 658.483297][T11712] loop2: detected capacity change from 0 to 7 [ 658.503633][T11712] Dev loop2: unable to read RDB block 7 [ 658.512909][T11712] loop2: unable to read partition table [ 658.535932][T11712] loop2: partition table beyond EOD, truncated [ 658.542310][T11712] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 659.288658][T11730] tmpfs: Unknown parameter 'quotaš' [ 660.008445][T11735] serio: Serial port ptm0 [ 660.028918][ T30] audit: type=1400 audit(659.990:1112): avc: denied { setopt } for pid=11736 comm="syz.5.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 660.346846][ T30] audit: type=1400 audit(660.310:1113): avc: denied { ioctl } for pid=11742 comm="syz.2.1385" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 660.768839][T11757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'. [ 661.214734][T11758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1387'. [ 661.268480][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1389'. [ 661.380273][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1389'. [ 661.408640][T11761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11761 comm=syz.5.1389 [ 662.673148][ T5845] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 662.843501][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 662.918530][ T5845] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 662.968795][ T5845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.987543][ T5845] usb 4-1: config 0 has no interface number 0 [ 662.999992][ T5845] usb 4-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 663.010365][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.022102][T11781] openvswitch: netlink: Tunnel attr 2 has unexpected len 3 expected 4 [ 663.032919][ T5845] usb 4-1: config 0 descriptor?? [ 663.046387][ T5845] usb 4-1: Found UVC 0.00 device (0bd3:05f4) [ 663.054123][ T5845] usb 4-1: No valid video chain found. [ 663.064003][T11779] openvswitch: netlink: Tunnel attr 2 has unexpected len 3 expected 4 [ 663.205839][T11780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1395'. [ 666.071636][ T5962] usb 4-1: USB disconnect, device number 51 [ 667.203104][ T30] audit: type=1400 audit(667.150:1114): avc: denied { getopt } for pid=11801 comm="syz.5.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 667.228995][T11802] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20004 [ 667.741132][T11815] tmpfs: Unknown parameter 'quotaš' [ 668.258083][T11821] fuse: Bad value for 'rootmode' [ 670.081301][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1409'. [ 671.538392][ T30] audit: type=1400 audit(671.500:1115): avc: denied { ioctl } for pid=11836 comm="syz.5.1411" path="socket:[30558]" dev="sockfs" ino=30558 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 672.267447][ T30] audit: type=1400 audit(672.230:1116): avc: denied { read } for pid=11840 comm="syz.1.1413" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 672.291270][ C0] vkms_vblank_simulate: vblank timer overrun [ 672.546960][T11847] deleting an unspecified loop device is not supported. [ 672.957175][ T30] audit: type=1400 audit(672.230:1117): avc: denied { open } for pid=11840 comm="syz.1.1413" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 672.998840][ T30] audit: type=1400 audit(672.510:1118): avc: denied { ioctl } for pid=11840 comm="syz.1.1413" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 673.027362][ T30] audit: type=1400 audit(672.530:1119): avc: denied { connect } for pid=11840 comm="syz.1.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 673.047887][ T30] audit: type=1400 audit(672.530:1120): avc: denied { name_connect } for pid=11840 comm="syz.1.1413" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 673.068730][ T30] audit: type=1400 audit(672.550:1121): avc: denied { listen } for pid=11840 comm="syz.1.1413" lport=56971 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 673.318224][ T30] audit: type=1400 audit(672.550:1122): avc: denied { accept } for pid=11840 comm="syz.1.1413" lport=56971 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 673.543112][ T30] audit: type=1400 audit(672.560:1123): avc: denied { setopt } for pid=11840 comm="syz.1.1413" lport=56971 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 673.800569][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1415'. [ 674.323647][T11859] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1416'. [ 674.337174][T11859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1416'. [ 674.353570][T11859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1416'. [ 674.371273][T11859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.621307][ T30] audit: type=1400 audit(674.530:1124): avc: denied { audit_read } for pid=11861 comm="syz.1.1418" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 675.007626][ T30] audit: type=1400 audit(674.660:1125): avc: denied { create } for pid=11861 comm="syz.1.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 675.468536][T11173] go7007-loader 1-1:204.43: unable to load firmware from file "go7007/lr192.fw" [ 675.502687][T11173] go7007-loader 1-1:204.43: probe failed [ 675.608756][T11173] go7007-loader 1-1:204.174: loading firmware go7007/lr192.fw [ 675.637481][T11173] usb 1-1: Direct firmware load for go7007/lr192.fw failed with error -2 [ 675.666746][T11173] usb 1-1: Falling back to sysfs fallback for: go7007/lr192.fw [ 677.403408][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 677.403424][ T30] audit: type=1400 audit(677.350:1128): avc: denied { ioctl } for pid=11892 comm="syz.3.1426" path="socket:[31024]" dev="sockfs" ino=31024 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 678.070077][ T30] audit: type=1326 audit(678.030:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 678.319027][ T30] audit: type=1326 audit(678.060:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 678.356953][ T30] audit: type=1326 audit(678.060:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 678.448778][ T30] audit: type=1326 audit(678.060:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 678.566705][ T30] audit: type=1326 audit(678.060:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 678.835684][ T30] audit: type=1326 audit(678.060:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 679.040753][ T30] audit: type=1326 audit(678.060:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 679.140437][ T30] audit: type=1326 audit(678.070:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 679.191481][ T30] audit: type=1326 audit(678.090:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11905 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 680.381984][T11937] lo speed is unknown, defaulting to 1000 [ 681.623233][ T5909] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 681.817383][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 681.845171][ T5909] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 681.857853][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.878826][ T5909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 681.937799][ T5909] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 681.980498][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.007573][ T5909] usb 4-1: Product: syz [ 682.018447][ T5909] usb 4-1: Manufacturer: syz [ 682.035379][ T5909] usb 4-1: SerialNumber: syz [ 682.332547][T11956] mkiss: ax0: crc mode is auto. [ 682.480714][ T5909] usb 4-1: 0:2 : does not exist [ 682.610737][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 682.622724][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 682.632348][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 682.641571][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 682.650188][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 682.678202][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 682.678219][ T30] audit: type=1400 audit(682.630:1143): avc: denied { mounton } for pid=11959 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 682.705189][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.207280][T11959] lo speed is unknown, defaulting to 1000 [ 683.252190][T11965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1442'. [ 683.344330][ T30] audit: type=1400 audit(683.300:1144): avc: denied { nlmsg_write } for pid=11946 comm="syz.3.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 683.426276][ T5962] usb 4-1: USB disconnect, device number 52 [ 683.647811][T11959] chnl_net:caif_netlink_parms(): no params data found [ 683.812918][T11959] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.822852][T11959] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.830405][T11959] bridge_slave_0: entered allmulticast mode [ 683.838759][T11959] bridge_slave_0: entered promiscuous mode [ 683.852294][T11959] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.862035][T11959] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.875448][T11959] bridge_slave_1: entered allmulticast mode [ 683.884294][T11959] bridge_slave_1: entered promiscuous mode [ 684.019768][T11959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.052707][T11959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.628558][ T5909] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 684.737752][ T5850] Bluetooth: hci6: command tx timeout [ 684.763234][ T5909] usb 6-1: device descriptor read/64, error -71 [ 684.991946][T11959] team0: Port device team_slave_0 added [ 685.027096][T11959] team0: Port device team_slave_1 added [ 685.044237][ T5909] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 685.083106][ T30] audit: type=1400 audit(685.040:1145): avc: denied { sqpoll } for pid=11986 comm="syz.0.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 685.128882][ T30] audit: type=1400 audit(685.090:1146): avc: denied { setopt } for pid=11987 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 685.184499][T11992] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1445'. [ 685.193688][T11992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1445'. [ 685.202677][T11992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1445'. [ 685.301892][T11959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.333625][T11959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.343579][ T5909] usb 6-1: device descriptor read/64, error -71 [ 685.359538][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.394526][T11992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.450285][T11997] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 685.523452][ T5909] usb usb6-port1: attempt power cycle [ 685.593266][T11959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.606274][T11959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.613261][T11959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.639128][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.141457][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.149662][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.183085][ T5909] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 686.240315][T11999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1448'. [ 686.744391][ T5909] usb 6-1: device descriptor read/8, error -71 [ 687.407066][ T5850] Bluetooth: hci6: command tx timeout [ 688.113326][T11959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.226471][ T30] audit: type=1400 audit(687.260:1147): avc: denied { write } for pid=11973 comm="syz.5.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 688.344282][ T5909] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 689.013818][ T5909] usb 6-1: device not accepting address 26, error -71 [ 689.026126][ T5909] usb usb6-port1: unable to enumerate USB device [ 689.316593][T12023] 9pnet_fd: Insufficient options for proto=fd [ 689.433132][ T5854] Bluetooth: hci6: command tx timeout [ 690.535117][T11959] hsr_slave_0: entered promiscuous mode [ 690.581314][T11959] hsr_slave_1: entered promiscuous mode [ 690.736986][T11959] debugfs: 'hsr0' already exists in 'hsr' [ 690.742757][T11959] Cannot create hsr debugfs directory [ 690.898588][T12008] lo speed is unknown, defaulting to 1000 [ 691.513764][ T5854] Bluetooth: hci6: command tx timeout [ 692.176003][T12044] netlink: 'syz.3.1456': attribute type 21 has an invalid length. [ 692.183995][T12044] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1456'. [ 692.221901][T12044] netlink: 'syz.3.1456': attribute type 4 has an invalid length. [ 692.297753][T12044] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1456'. [ 692.475061][T12044] batadv3: entered promiscuous mode [ 692.481501][T12044] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 692.952941][ T30] audit: type=1326 audit(692.910:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.5.1457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc72858ebe9 code=0x0 [ 693.074800][ T30] audit: type=1400 audit(693.030:1149): avc: denied { bind } for pid=12049 comm="syz.5.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 693.129836][ T30] audit: type=1400 audit(693.030:1150): avc: denied { read } for pid=12049 comm="syz.5.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 693.178763][T11959] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 693.259210][T11959] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 693.296751][T11959] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 693.401929][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 693.970271][T12057] serio: Serial port ptm0 [ 694.028615][ T10] usb 6-1: device descriptor read/64, error -71 [ 695.153760][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 695.164997][T11959] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 695.375950][ T10] usb 6-1: device descriptor read/64, error -71 [ 695.742049][ T10] usb usb6-port1: attempt power cycle [ 695.799767][T11959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.436629][T11959] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.554937][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.562101][ T7209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.702342][T12086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1461'. [ 697.647232][ T30] audit: type=1400 audit(697.480:1151): avc: denied { mounton } for pid=12083 comm="syz.1.1465" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 698.589570][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.596808][ T7209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.655377][T12092] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1463'. [ 698.664561][T12092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1463'. [ 698.673799][T12092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1463'. [ 698.716005][T12092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.748679][ T30] audit: type=1400 audit(698.710:1152): avc: denied { write } for pid=12082 comm="syz.5.1464" laddr=::ffff:172.20.20.34 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 698.863542][T12085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 698.998236][ T30] audit: type=1400 audit(698.710:1153): avc: denied { name_connect } for pid=12082 comm="syz.5.1464" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 699.060028][T11959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 699.167000][T11959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 699.671434][T12103] lo speed is unknown, defaulting to 1000 [ 701.128676][T12124] netlink: 'syz.0.1471': attribute type 21 has an invalid length. [ 701.136725][T12124] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1471'. [ 701.181676][T12124] netlink: 'syz.0.1471': attribute type 4 has an invalid length. [ 701.318510][T12124] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1471'. [ 701.370849][T11959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.021246][T12124] batadv6: entered promiscuous mode [ 702.065367][T12124] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 702.879002][ T30] audit: type=1326 audit(702.830:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72858ebe9 code=0x7ffc0000 [ 702.962381][ T30] audit: type=1326 audit(702.830:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc72858ebe9 code=0x7ffc0000 [ 703.307443][ T30] audit: type=1326 audit(702.830:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72858ebe9 code=0x7ffc0000 [ 703.498114][ T30] audit: type=1326 audit(702.830:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc72858ebe9 code=0x7ffc0000 [ 704.001918][ T30] audit: type=1326 audit(702.840:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72858ebe9 code=0x7ffc0000 [ 704.025346][ T30] audit: type=1326 audit(702.840:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72858ebe9 code=0x7ffc0000 [ 704.048269][ T30] audit: type=1326 audit(702.840:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc72858ebe9 code=0x7ffc0000 [ 704.071186][ T30] audit: type=1326 audit(702.840:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72858ebe9 code=0x7ffc0000 [ 704.094262][ T30] audit: type=1326 audit(702.840:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc72858ebe9 code=0x7ffc0000 [ 704.126762][ T30] audit: type=1326 audit(702.840:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12131 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72858ebe9 code=0x7ffc0000 [ 705.013906][T11959] veth0_vlan: entered promiscuous mode [ 705.074186][T11959] veth1_vlan: entered promiscuous mode [ 705.222247][T12155] evm: overlay not supported [ 705.227963][T11959] veth0_macvtap: entered promiscuous mode [ 705.255503][T11959] veth1_macvtap: entered promiscuous mode [ 705.402462][T11959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.436962][T11959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.502803][ T1073] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.548715][ T7209] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.604827][ T6001] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.619460][ T6001] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.655788][T12172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.742560][T12172] /dev/nullb0: Can't open blockdev [ 705.873404][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.903140][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.119377][ T7211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.149062][ T7211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.199553][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1483'. [ 708.602454][ T5961] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 708.635287][ T5961] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 708.830485][T12205] netlink: 'syz.1.1487': attribute type 21 has an invalid length. [ 708.842722][T12205] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1487'. [ 708.872507][T12205] netlink: 'syz.1.1487': attribute type 4 has an invalid length. [ 709.042784][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 709.042802][ T30] audit: type=1326 audit(708.990:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12201 comm="syz.6.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c38ebe9 code=0x7ffc0000 [ 709.083091][ T30] audit: type=1326 audit(708.990:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12201 comm="syz.6.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c38ebe9 code=0x7ffc0000 [ 709.124546][ T30] audit: type=1326 audit(708.990:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12201 comm="syz.6.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fa86c38ebe9 code=0x7ffc0000 [ 709.173128][T12205] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1487'. [ 709.200346][ T30] audit: type=1326 audit(708.990:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12201 comm="syz.6.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c38ebe9 code=0x7ffc0000 [ 709.317596][T12208] pim6reg: entered allmulticast mode [ 709.366248][T12205] batadv2: entered promiscuous mode [ 709.398475][T12205] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 709.612747][ T30] audit: type=1326 audit(708.990:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12201 comm="syz.6.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa86c38ebe9 code=0x7ffc0000 [ 709.612796][ T30] audit: type=1326 audit(709.000:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12201 comm="syz.6.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c38ebe9 code=0x7ffc0000 [ 709.612830][ T30] audit: type=1326 audit(709.000:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12201 comm="syz.6.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c38ebe9 code=0x7ffc0000 [ 709.612867][ T30] audit: type=1326 audit(709.000:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12201 comm="syz.6.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa86c38ebe9 code=0x7ffc0000 [ 709.612905][ T30] audit: type=1326 audit(709.000:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12201 comm="syz.6.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c38ebe9 code=0x7ffc0000 [ 709.612943][ T30] audit: type=1326 audit(709.000:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12201 comm="syz.6.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c38ebe9 code=0x7ffc0000 [ 712.442133][T12241] 9pnet_fd: Insufficient options for proto=fd [ 712.493513][ T5909] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 712.683435][ T5909] usb 6-1: Using ep0 maxpacket: 16 [ 712.763305][T12245] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1497'. [ 712.815822][ T5909] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 712.853587][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.862513][T12245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1497'. [ 712.888398][ T5909] usb 6-1: Product: syz [ 712.929163][ T5909] usb 6-1: Manufacturer: syz [ 712.943191][T12245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1497'. [ 713.006177][T12241] syz.6.1496 (12241) used greatest stack depth: 18792 bytes left [ 713.065889][ T5909] usb 6-1: SerialNumber: syz [ 713.110279][ T5909] usb 6-1: config 0 descriptor?? [ 713.127572][ T5909] ums-jumpshot 6-1:0.0: USB Mass Storage device detected [ 713.146504][ T5909] ums-jumpshot 6-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 713.434534][T12245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.523748][ T5909] usb 6-1: USB disconnect, device number 30 [ 714.145000][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 714.145071][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 714.229896][T12266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1501'. [ 714.823084][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 714.823102][ T30] audit: type=1400 audit(714.780:1216): avc: denied { watch watch_reads } for pid=12263 comm="syz.5.1500" path="/198" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 716.903168][ T5962] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 717.063566][ T5962] usb 6-1: Using ep0 maxpacket: 32 [ 717.079390][ T5962] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 717.991596][ T5962] usb 6-1: config 0 has no interface number 0 [ 718.045161][ T5962] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 718.045182][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.045195][ T5962] usb 6-1: Product: syz [ 718.045205][ T5962] usb 6-1: Manufacturer: syz [ 718.045215][ T5962] usb 6-1: SerialNumber: syz [ 718.046768][ T5962] usb 6-1: config 0 descriptor?? [ 718.048523][ T5962] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 718.172700][T12293] tty tty2: ldisc open failed (-12), clearing slot 1 [ 718.252885][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.263600][ T5962] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 718.292058][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.320968][ T5962] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 719.416683][T12298] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 719.694389][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 719.716274][ T5961] usb 6-1: USB disconnect, device number 31 [ 719.731277][ T5961] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 719.771782][ T5961] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 720.036884][ T5961] quatech2 6-1:0.51: device disconnected [ 720.131933][T12320] futex_wake_op: syz.6.1513 tries to shift op by 36; fix this program [ 720.147463][T12320] overlayfs: conflicting lowerdir path [ 720.639271][ T5909] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 720.833234][ T5909] usb 7-1: Invalid ep0 maxpacket: 16 [ 720.983372][ T5909] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 721.033505][T12333] 9pnet_fd: Insufficient options for proto=fd [ 721.573275][ T5909] usb 7-1: Invalid ep0 maxpacket: 16 [ 721.647932][ T5909] usb usb7-port1: attempt power cycle [ 722.693084][ T5909] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 722.731770][ T5909] usb 7-1: Invalid ep0 maxpacket: 16 [ 722.993106][ T5909] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 724.091684][ T5909] usb 7-1: device descriptor read/8, error -71 [ 724.213770][ T5909] usb usb7-port1: unable to enumerate USB device [ 724.441264][T12360] fuse: Bad value for 'fd' [ 726.014363][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1524'. [ 726.369025][T12373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.693290][ T5961] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 726.920646][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 726.983282][T12373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.266195][T12386] netlink: 'syz.3.1530': attribute type 2 has an invalid length. [ 727.274675][T12386] netlink: 'syz.3.1530': attribute type 1 has an invalid length. [ 727.390985][T12387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.982152][ T5961] usb 4-1: device descriptor read/64, error -32 [ 730.486806][ T5854] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 730.487945][ T5854] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 732.653066][ T5961] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 733.244481][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1534'. [ 733.844816][T12403] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1534'. [ 734.754143][ T30] audit: type=1400 audit(734.720:1217): avc: denied { map } for pid=12413 comm="syz.5.1537" path="socket:[33925]" dev="sockfs" ino=33925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 735.094166][T12419] program syz.5.1537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 735.176443][T12419] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 735.711737][T12431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1540'. [ 736.826957][T12443] netlink: 'syz.0.1543': attribute type 2 has an invalid length. [ 736.834941][T12443] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 737.791696][T11173] go7007-loader 1-1:204.174: unable to load firmware from file "go7007/lr192.fw" [ 738.663088][T11173] go7007-loader 1-1:204.174: probe failed [ 738.673918][T11173] usb 1-1: USB disconnect, device number 48 [ 739.137314][T12451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1546'. [ 740.548804][T12461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.853431][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1550'. [ 741.493727][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1548'. [ 744.198579][ T30] audit: type=1400 audit(744.130:1218): avc: denied { getopt } for pid=12460 comm="syz.6.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 744.539262][T12481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1553'. [ 744.549340][T12481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1553'. [ 745.016228][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1551'. [ 745.043094][ T5962] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 745.133875][T12482] lo speed is unknown, defaulting to 1000 [ 745.701277][T12493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1554'. [ 746.127133][T12495] fuse: Unknown parameter '0x000000000000000a' [ 747.845826][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.852818][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.211654][T12505] netlink: 'syz.5.1558': attribute type 2 has an invalid length. [ 748.219557][T12505] netlink: 'syz.5.1558': attribute type 1 has an invalid length. [ 749.383188][ T5909] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 749.533227][ T5845] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 749.573972][ T5962] usb 7-1: device descriptor read/all, error -71 [ 749.669484][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 749.688690][ T5909] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 749.718946][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.735097][ T5845] usb 6-1: device descriptor read/64, error -71 [ 749.744086][ T5909] usb 2-1: config 0 descriptor?? [ 750.493193][ T5845] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 750.642925][ T5909] logitech 0003:046D:C295.0011: unbalanced delimiter at end of report description [ 750.694238][ T5845] usb 6-1: device descriptor read/64, error -71 [ 750.719772][ T5909] logitech 0003:046D:C295.0011: parse failed [ 750.743143][ T5909] logitech 0003:046D:C295.0011: probe with driver logitech failed with error -22 [ 751.302363][ T5845] usb usb6-port1: attempt power cycle [ 751.535841][ T5909] usb 2-1: USB disconnect, device number 43 [ 754.114334][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1562'. [ 754.203531][T12543] serio: Serial port ptm0 [ 755.745878][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1567'. [ 757.286256][T12572] netlink: 'syz.3.1573': attribute type 2 has an invalid length. [ 757.294171][T12572] netlink: 'syz.3.1573': attribute type 1 has an invalid length. [ 757.373298][ T5845] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 758.472183][ T5845] usb 1-1: Using ep0 maxpacket: 32 [ 758.668503][ T5845] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 758.697610][ T5845] usb 1-1: config 0 has no interface number 0 [ 758.748237][ T5845] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 758.812284][T12577] lo speed is unknown, defaulting to 1000 [ 758.823062][ T5845] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 758.903342][ T5845] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 758.934408][ T5845] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 758.983114][ T3089] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 759.018648][ T5845] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 759.073056][ T5845] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 759.123385][ T5845] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 759.153071][ T5845] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 111, changing to 7 [ 759.174215][ T3089] usb 4-1: device descriptor read/64, error -71 [ 759.193071][ T5845] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25717, setting to 1024 [ 759.214678][ T5845] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.271962][ T5845] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 760.212015][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.233024][ T3089] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 760.235227][ T5845] usb 1-1: Product: syz [ 760.255195][ T5845] usb 1-1: Manufacturer: syz [ 760.264234][ T5845] usb 1-1: SerialNumber: syz [ 760.332162][ T5845] usb 1-1: config 0 descriptor?? [ 760.340110][T12566] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 760.384856][ T5845] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 760.491892][ T5845] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 761.514313][ T5845] usb 1-1: USB disconnect, device number 50 [ 762.647217][ T30] audit: type=1326 audit(762.530:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 762.723583][ T30] audit: type=1326 audit(762.530:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 762.758659][ T30] audit: type=1326 audit(762.530:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 762.918492][T12596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1579'. [ 762.933084][ T30] audit: type=1326 audit(762.530:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 762.956058][ C0] vkms_vblank_simulate: vblank timer overrun [ 763.108973][ T30] audit: type=1326 audit(762.530:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 763.283933][ T30] audit: type=1326 audit(762.530:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 763.306834][ C0] vkms_vblank_simulate: vblank timer overrun [ 763.606717][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1586'. [ 764.014223][ T30] audit: type=1326 audit(762.540:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 764.077089][ T30] audit: type=1326 audit(762.540:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 764.424143][ T30] audit: type=1326 audit(762.540:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 765.013312][ T3089] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 765.423115][ T30] audit: type=1326 audit(762.540:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.1.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 765.587369][T12637] binder: 12636:12637 ioctl c0306201 200000000080 returned -14 [ 765.627920][ T3089] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 765.640758][ T5845] IPVS: starting estimator thread 0... [ 765.640909][ T3089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.693998][ T3089] usb 4-1: Product: syz [ 765.698236][ T3089] usb 4-1: Manufacturer: syz [ 765.722161][ T3089] usb 4-1: SerialNumber: syz [ 765.733636][ T3089] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 765.777055][T12645] IPVS: using max 41 ests per chain, 98400 per kthread [ 765.813786][ T9870] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 767.046273][ T9870] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 767.837944][T12675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1598'. [ 768.232193][ T5845] usb 4-1: USB disconnect, device number 57 [ 768.462284][ T9870] ath9k_htc: Failed to initialize the device [ 768.480436][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 768.480449][ T30] audit: type=1400 audit(768.440:1252): avc: denied { ioctl } for pid=12678 comm="syz.3.1600" path="socket:[34498]" dev="sockfs" ino=34498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 768.568320][ T5845] usb 4-1: ath9k_htc: USB layer deinitialized [ 768.636776][T12681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.611308][ T30] audit: type=1400 audit(769.570:1253): avc: denied { ioctl } for pid=12682 comm="syz.1.1602" path="socket:[35239]" dev="sockfs" ino=35239 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 769.693202][T12683] comedi comedi2: reset error (fatal) [ 769.995077][ T30] audit: type=1400 audit(769.910:1254): avc: denied { ioctl } for pid=12691 comm="syz.6.1603" path="socket:[35260]" dev="sockfs" ino=35260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 770.656394][T12702] lo speed is unknown, defaulting to 1000 [ 774.841665][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1615'. [ 775.556081][T12746] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1616'. [ 775.576986][T12746] geneve0: entered allmulticast mode [ 776.184137][T12757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1620'. [ 777.081355][ T30] audit: type=1326 audit(776.940:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 777.104261][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.258581][ T30] audit: type=1326 audit(776.940:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 777.331348][ T30] audit: type=1326 audit(776.940:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 777.354320][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.627399][ T30] audit: type=1326 audit(776.950:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 777.714667][ T30] audit: type=1326 audit(776.950:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 777.737456][ C0] vkms_vblank_simulate: vblank timer overrun [ 777.821074][ T30] audit: type=1326 audit(776.950:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 777.912844][ T30] audit: type=1326 audit(776.950:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 777.935758][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.740318][ T30] audit: type=1326 audit(776.960:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 778.766414][ T30] audit: type=1326 audit(776.960:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 778.973175][ T30] audit: type=1326 audit(776.960:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12759 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58dc78ebe9 code=0x7ffc0000 [ 779.278959][T12776] lo speed is unknown, defaulting to 1000 [ 779.343152][ T3089] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 779.556265][ T3089] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 780.010819][ T3089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.023078][ T3089] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 780.049357][T12785] batman_adv: batadv0: Adding interface: dummy0 [ 780.063331][T12785] batman_adv: batadv0: Interface activated: dummy0 [ 780.073082][ T3089] usb 2-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 780.181382][ T3089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.212764][ T3089] usb 2-1: config 0 descriptor?? [ 781.196913][T12798] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1629'. [ 781.206567][T12798] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1629'. [ 782.004929][T12815] block nbd0: Attempted send on invalid socket [ 782.011414][T12815] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 782.657928][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 782.657945][ T30] audit: type=1400 audit(782.600:1291): avc: denied { ioctl } for pid=12794 comm="syz.3.1630" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 783.662705][ T3089] usbhid 2-1:0.0: can't add hid device: -71 [ 783.680986][ T3089] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 784.366305][ T3089] usb 2-1: USB disconnect, device number 44 [ 784.466945][ T30] audit: type=1400 audit(784.420:1292): avc: denied { map } for pid=12829 comm="syz.0.1636" path="socket:[34786]" dev="sockfs" ino=34786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 784.611146][ T30] audit: type=1400 audit(784.420:1293): avc: denied { accept } for pid=12829 comm="syz.0.1636" path="socket:[34786]" dev="sockfs" ino=34786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 785.811337][T12848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.044007][T12848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.124696][T11173] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 786.703145][T11173] usb 6-1: Using ep0 maxpacket: 32 [ 786.726569][T11173] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.911749][ T30] audit: type=1400 audit(786.860:1294): avc: denied { map } for pid=12847 comm="syz.0.1640" path="socket:[35624]" dev="sockfs" ino=35624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 786.934653][T11173] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 786.934689][T11173] usb 6-1: config 0 interface 0 has no altsetting 0 [ 787.006279][T11173] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 787.039971][T11173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.344114][T11173] usb 6-1: config 0 descriptor?? [ 787.352858][ T30] audit: type=1400 audit(786.860:1295): avc: denied { read } for pid=12847 comm="syz.0.1640" path="socket:[35624]" dev="sockfs" ino=35624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 787.609138][T11173] usbhid 6-1:0.0: can't add hid device: -71 [ 787.668498][T11173] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 787.996102][T11173] usb 6-1: USB disconnect, device number 35 [ 788.442130][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1648'. [ 789.799809][T12901] bridge0: port 1(team0) entered blocking state [ 789.807186][T12901] bridge0: port 1(team0) entered disabled state [ 789.838523][T12901] team0: entered allmulticast mode [ 789.958575][T12901] team0: entered promiscuous mode [ 792.653422][ T30] audit: type=1326 audit(792.490:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 793.276909][ T30] audit: type=1326 audit(792.490:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 793.301429][ T30] audit: type=1326 audit(792.490:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 793.775413][ T5854] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 793.786663][ T30] audit: type=1326 audit(792.490:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 794.016588][T12943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1659'. [ 794.025674][T12943] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1659'. [ 794.623166][ T30] audit: type=1326 audit(792.490:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 794.736877][ T30] audit: type=1326 audit(792.490:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 794.759859][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.780890][ T30] audit: type=1326 audit(792.490:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 796.771905][ T30] audit: type=1326 audit(792.500:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 797.276597][ T30] audit: type=1326 audit(792.500:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 797.920938][ T30] audit: type=1326 audit(792.500:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 798.271005][T12965] block nbd6: shutting down sockets [ 798.299378][ T30] audit: type=1326 audit(792.500:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 798.357778][ T30] audit: type=1326 audit(792.500:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 798.382249][ T30] audit: type=1326 audit(792.500:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 798.551678][ T30] audit: type=1326 audit(792.500:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 799.021904][ T30] audit: type=1326 audit(792.500:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 799.044740][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.710836][ T30] audit: type=1326 audit(792.500:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 800.113184][ T30] audit: type=1326 audit(792.500:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 800.216779][ T30] audit: type=1326 audit(792.500:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 800.239660][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.250898][ T30] audit: type=1326 audit(792.500:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12918 comm="syz.0.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f38a498ebe9 code=0x7ffc0000 [ 800.273713][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.593196][ T3089] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 800.773649][ T3089] usb 6-1: Using ep0 maxpacket: 8 [ 800.786051][ T3089] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 800.795340][ T3089] usb 6-1: config 0 has no interface number 0 [ 800.801432][ T3089] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 800.883199][ T3089] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 801.023572][ T3089] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 801.083432][ T3089] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 801.123099][ T3089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.123099][ T5909] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 801.147163][ T3089] usb 6-1: config 0 descriptor?? [ 801.152724][T12987] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 801.253669][ T3089] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 801.357495][ T5909] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 801.403040][ T5909] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 801.431793][ T5909] usb 4-1: config 0 has no interface number 0 [ 801.452017][ T5909] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 801.493130][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.543970][ T5909] usb 4-1: config 0 descriptor?? [ 801.564208][ T5909] ftdi_sio 4-1:0.97: FTDI USB Serial Device converter detected [ 801.593205][ T5909] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 801.624701][T13004] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 801.646620][T13004] overlayfs: missing 'lowerdir' [ 803.330790][ T3089] usb 6-1: USB disconnect, device number 36 [ 803.602290][T13018] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1678'. [ 803.611498][T13018] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1678'. [ 803.620687][T13018] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1678'. [ 803.642247][T13018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.364946][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 804.364963][ T30] audit: type=1400 audit(803.810:1324): avc: denied { create } for pid=13020 comm="syz.0.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 804.390675][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.445475][ T5909] usb 4-1: USB disconnect, device number 58 [ 804.452417][ T5909] ftdi_sio 4-1:0.97: device disconnected [ 804.794343][T13029] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1682'. [ 804.803481][T13029] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1682'. [ 805.520238][ T5850] Bluetooth: hci6: command 0x0406 tx timeout [ 807.591766][T13060] lo speed is unknown, defaulting to 1000 [ 808.556547][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.562873][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.232173][ T5845] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 809.264539][T13075] loop2: detected capacity change from 0 to 7 [ 809.301398][T13075] Dev loop2: unable to read RDB block 7 [ 809.325231][T13075] loop2: unable to read partition table [ 809.368834][T13075] loop2: partition table beyond EOD, truncated [ 809.483989][ T5845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.513378][ T5845] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 809.515126][T13075] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 809.527853][ T5845] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 810.032711][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.056038][ T5845] usb 4-1: config 0 descriptor?? [ 810.079776][ T5845] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 810.285614][ T9870] usb 4-1: USB disconnect, device number 59 [ 810.303085][ T30] audit: type=1400 audit(810.240:1325): avc: denied { read } for pid=13070 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 810.684586][T13087] FAULT_INJECTION: forcing a failure. [ 810.684586][T13087] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 810.698546][T13087] CPU: 0 UID: 0 PID: 13087 Comm: syz.6.1696 Not tainted syzkaller #0 PREEMPT(full) [ 810.698574][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 810.698586][T13087] Call Trace: [ 810.698593][T13087] [ 810.698601][T13087] dump_stack_lvl+0x16c/0x1f0 [ 810.698631][T13087] should_fail_ex+0x512/0x640 [ 810.698658][T13087] should_fail_alloc_page+0xe7/0x130 [ 810.698684][T13087] prepare_alloc_pages+0x3c2/0x610 [ 810.698715][T13087] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 810.698741][T13087] ? rcu_is_watching+0x12/0xc0 [ 810.698766][T13087] ? trace_mm_page_alloc+0x11f/0x1a0 [ 810.698793][T13087] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 810.698815][T13087] ? __pfx_stack_trace_save+0x10/0x10 [ 810.698841][T13087] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 810.698861][T13087] ? stack_depot_save_flags+0x29/0x9c0 [ 810.698899][T13087] ? alloc_vmap_area+0xdc8/0x29c0 [ 810.698922][T13087] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 810.698950][T13087] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 810.698969][T13087] ? bpf_prog_alloc+0x3b/0x230 [ 810.698986][T13087] ? bpf_prog_load+0x1a04/0x2490 [ 810.699009][T13087] ? __sys_bpf+0x4a3f/0x4de0 [ 810.699032][T13087] ? __x64_sys_bpf+0x78/0xc0 [ 810.699056][T13087] ? do_syscall_64+0xcd/0x4c0 [ 810.699076][T13087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.699108][T13087] alloc_pages_bulk_noprof+0x71c/0x1410 [ 810.699129][T13087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 810.699154][T13087] ? policy_nodemask+0xea/0x4e0 [ 810.699180][T13087] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 810.699203][T13087] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 810.699240][T13087] kasan_populate_vmalloc+0xf1/0x1f0 [ 810.699276][T13087] alloc_vmap_area+0x959/0x29c0 [ 810.699313][T13087] ? __pfx_alloc_vmap_area+0x10/0x10 [ 810.699346][T13087] __get_vm_area_node+0x1ca/0x330 [ 810.699379][T13087] __vmalloc_node_range_noprof+0x271/0x14b0 [ 810.699407][T13087] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 810.699429][T13087] ? find_held_lock+0x2b/0x80 [ 810.699454][T13087] ? avc_has_perm_noaudit+0x117/0x3b0 [ 810.699474][T13087] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 810.699502][T13087] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 810.699531][T13087] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 810.699568][T13087] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 810.699588][T13087] __vmalloc_node_noprof+0xad/0xf0 [ 810.699615][T13087] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 810.699639][T13087] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 810.699658][T13087] ? security_capable+0x7e/0x260 [ 810.699684][T13087] bpf_prog_alloc+0x3b/0x230 [ 810.699702][T13087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 810.699726][T13087] bpf_prog_load+0x1a04/0x2490 [ 810.699758][T13087] ? __pfx_bpf_prog_load+0x10/0x10 [ 810.699787][T13087] ? avc_has_perm+0x144/0x1f0 [ 810.699822][T13087] ? selinux_bpf+0xde/0x130 [ 810.699843][T13087] ? bpf_lsm_bpf+0x9/0x10 [ 810.699878][T13087] __sys_bpf+0x4a3f/0x4de0 [ 810.699907][T13087] ? __pfx___sys_bpf+0x10/0x10 [ 810.699932][T13087] ? ksys_write+0x190/0x250 [ 810.699958][T13087] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 810.700001][T13087] ? fput+0x9b/0xd0 [ 810.700026][T13087] ? ksys_write+0x1ac/0x250 [ 810.700046][T13087] ? __pfx_ksys_write+0x10/0x10 [ 810.700071][T13087] __x64_sys_bpf+0x78/0xc0 [ 810.700096][T13087] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.700117][T13087] do_syscall_64+0xcd/0x4c0 [ 810.700142][T13087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.700161][T13087] RIP: 0033:0x7fa86c38ebe9 [ 810.700179][T13087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.700198][T13087] RSP: 002b:00007fa86d26f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 810.700218][T13087] RAX: ffffffffffffffda RBX: 00007fa86c5c6180 RCX: 00007fa86c38ebe9 [ 810.700231][T13087] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 810.700243][T13087] RBP: 00007fa86d26f090 R08: 0000000000000000 R09: 0000000000000000 [ 810.700256][T13087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.700267][T13087] R13: 00007fa86c5c6218 R14: 00007fa86c5c6180 R15: 00007ffdac5a20a8 [ 810.700296][T13087] [ 810.700373][T13087] syz.6.1696: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 811.128718][T13087] CPU: 0 UID: 0 PID: 13087 Comm: syz.6.1696 Not tainted syzkaller #0 PREEMPT(full) [ 811.128736][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 811.128744][T13087] Call Trace: [ 811.128748][T13087] [ 811.128752][T13087] dump_stack_lvl+0x16c/0x1f0 [ 811.128770][T13087] warn_alloc+0x248/0x3a0 [ 811.128784][T13087] ? __pfx_warn_alloc+0x10/0x10 [ 811.128797][T13087] ? kfree+0x2b4/0x4d0 [ 811.128816][T13087] ? __get_vm_area_node+0x208/0x330 [ 811.128836][T13087] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 811.128871][T13087] ? find_held_lock+0x2b/0x80 [ 811.128886][T13087] ? avc_has_perm_noaudit+0x117/0x3b0 [ 811.128899][T13087] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 811.128916][T13087] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 811.128933][T13087] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 811.128953][T13087] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 811.128964][T13087] __vmalloc_node_noprof+0xad/0xf0 [ 811.128979][T13087] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 811.128992][T13087] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 811.129003][T13087] ? security_capable+0x7e/0x260 [ 811.129018][T13087] bpf_prog_alloc+0x3b/0x230 [ 811.129027][T13087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 811.129042][T13087] bpf_prog_load+0x1a04/0x2490 [ 811.129059][T13087] ? __pfx_bpf_prog_load+0x10/0x10 [ 811.129075][T13087] ? avc_has_perm+0x144/0x1f0 [ 811.129098][T13087] ? selinux_bpf+0xde/0x130 [ 811.129111][T13087] ? bpf_lsm_bpf+0x9/0x10 [ 811.129128][T13087] __sys_bpf+0x4a3f/0x4de0 [ 811.129145][T13087] ? __pfx___sys_bpf+0x10/0x10 [ 811.129159][T13087] ? ksys_write+0x190/0x250 [ 811.129174][T13087] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 811.129196][T13087] ? fput+0x9b/0xd0 [ 811.129211][T13087] ? ksys_write+0x1ac/0x250 [ 811.129222][T13087] ? __pfx_ksys_write+0x10/0x10 [ 811.129236][T13087] __x64_sys_bpf+0x78/0xc0 [ 811.129250][T13087] ? lockdep_hardirqs_on+0x7c/0x110 [ 811.129262][T13087] do_syscall_64+0xcd/0x4c0 [ 811.129276][T13087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.129288][T13087] RIP: 0033:0x7fa86c38ebe9 [ 811.129298][T13087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.129309][T13087] RSP: 002b:00007fa86d26f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 811.129320][T13087] RAX: ffffffffffffffda RBX: 00007fa86c5c6180 RCX: 00007fa86c38ebe9 [ 811.129328][T13087] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 811.129335][T13087] RBP: 00007fa86d26f090 R08: 0000000000000000 R09: 0000000000000000 [ 811.129341][T13087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.129348][T13087] R13: 00007fa86c5c6218 R14: 00007fa86c5c6180 R15: 00007ffdac5a20a8 [ 811.129363][T13087] [ 811.129368][T13087] Mem-Info: [ 811.406871][T13087] active_anon:19407 inactive_anon:0 isolated_anon:0 [ 811.406871][T13087] active_file:21097 inactive_file:40888 isolated_file:0 [ 811.406871][T13087] unevictable:768 dirty:207 writeback:0 [ 811.406871][T13087] slab_reclaimable:11368 slab_unreclaimable:112086 [ 811.406871][T13087] mapped:50693 shmem:10852 pagetables:1406 [ 811.406871][T13087] sec_pagetables:0 bounce:0 [ 811.406871][T13087] kernel_misc_reclaimable:0 [ 811.406871][T13087] free:1246559 free_pcp:15012 free_cma:0 [ 811.453173][T13087] Node 0 active_anon:77628kB inactive_anon:0kB active_file:84388kB inactive_file:163352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:202772kB dirty:828kB writeback:0kB shmem:41872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12952kB pagetables:5472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 811.485132][T13087] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 811.515015][T13087] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 811.544915][T13087] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 811.550652][T13087] Node 0 DMA32 free:1081488kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:77604kB inactive_anon:0kB active_file:84388kB inactive_file:162032kB unevictable:1536kB writepending:828kB present:3129332kB managed:2539364kB mlocked:0kB bounce:0kB free_pcp:39124kB local_pcp:23524kB free_cma:0kB [ 811.582921][T13087] lowmem_reserve[]: 0 0 1 1 1 [ 811.587637][T13087] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 811.629098][T13087] lowmem_reserve[]: 0 0 0 0 0 [ 811.633920][T13087] Node 1 Normal free:3889380kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20888kB local_pcp:8928kB free_cma:0kB [ 811.665450][T13087] lowmem_reserve[]: 0 0 0 0 0 [ 811.670152][T13087] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 811.682779][T13087] Node 0 DMA32: 1074*4kB (UM) 678*8kB (UME) 442*16kB (UME) 292*32kB (UME) 254*64kB (UME) 208*128kB (UME) 117*256kB (UME) 43*512kB (ME) 22*1024kB (UM) 10*2048kB (UME) 224*4096kB (M) = 1081496kB [ 811.701781][T13087] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 811.713603][T13087] Node 1 Normal: 187*4kB (UME) 49*8kB (UME) 45*16kB (UME) 217*32kB (UME) 62*64kB (UME) 20*128kB (UE) 5*256kB (U) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3889380kB [ 811.732093][T13087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 811.741709][T13087] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 811.751401][T13087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 811.761119][T13087] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 811.770423][T13087] 72833 total pagecache pages [ 811.775123][T13087] 0 pages in swap cache [ 811.779266][T13087] Free swap = 124996kB [ 811.783438][T13087] Total swap = 124996kB [ 811.787578][T13087] 2097051 pages RAM [ 811.791349][T13087] 0 pages HighMem/MovableOnly [ 811.796014][T13087] 430248 pages reserved [ 811.800141][T13087] 0 pages cma reserved [ 812.052216][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1697'. [ 812.156194][T13092] syz_tun: entered allmulticast mode [ 812.224068][T13095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 812.270611][ T30] audit: type=1400 audit(812.230:1326): avc: denied { create } for pid=13097 comm="syz.1.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 812.284825][T13096] netlink: 'syz.6.1698': attribute type 10 has an invalid length. [ 812.284852][T13096] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1698'. [ 812.284894][T13096] team0: entered promiscuous mode [ 812.284913][T13096] team_slave_0: entered promiscuous mode [ 812.285105][T13096] team_slave_1: entered promiscuous mode [ 812.285262][T13096] team0: entered allmulticast mode [ 812.285279][T13096] team_slave_0: entered allmulticast mode [ 812.285294][T13096] team_slave_1: entered allmulticast mode [ 812.291987][T13096] bridge0: port 3(team0) entered blocking state [ 812.292094][T13096] bridge0: port 3(team0) entered disabled state [ 812.321316][T13096] bridge0: port 3(team0) entered blocking state [ 812.321458][T13096] bridge0: port 3(team0) entered forwarding state [ 812.415939][T13100] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 812.526980][T13101] overlayfs: failed to resolve './file1/file0': -2 [ 812.983071][ T5845] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 813.235781][ T5845] usb 2-1: config 3 has an invalid interface number: 249 but max is 0 [ 813.235813][ T5845] usb 2-1: config 3 has no interface number 0 [ 813.235840][ T5845] usb 2-1: config 3 interface 249 has no altsetting 0 [ 813.237835][ T5845] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=8f.c9 [ 813.237867][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.237891][ T5845] usb 2-1: Product: syz [ 813.237906][ T5845] usb 2-1: Manufacturer: syz [ 813.237923][ T5845] usb 2-1: SerialNumber: syz [ 813.411937][ T30] audit: type=1400 audit(813.370:1327): avc: granted { setsecparam } for pid=13106 comm="syz.6.1703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 813.470349][T13098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.470688][T13098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.517275][T13107] block nbd0: shutting down sockets [ 813.587393][T13111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1702'. [ 813.596857][T13111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1702'. [ 814.025110][ T5845] comedi comedi5: Wrong number of endpoints [ 814.061152][ T5845] dt9812 2-1:3.249: driver 'dt9812' failed to auto-configure device. [ 814.101137][ T5845] usb 2-1: USB disconnect, device number 46 [ 814.375476][T13125] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1707'. [ 814.385061][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1707'. [ 814.413710][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1707'. [ 814.463314][ T3089] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 814.573080][ T5962] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 814.914584][T13125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 815.023054][ T3089] usb 7-1: Using ep0 maxpacket: 16 [ 815.029908][ T5962] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 815.041222][ T3089] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 815.172648][ T5962] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 815.434088][ T3089] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.442434][ T5962] usb 6-1: can't read configurations, error -61 [ 815.450008][ T3089] usb 7-1: Product: syz [ 815.454996][ T3089] usb 7-1: Manufacturer: syz [ 815.459903][ T3089] usb 7-1: SerialNumber: syz [ 815.571576][ T3089] r8152-cfgselector 7-1: Unknown version 0x0000 [ 815.578123][ T5962] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 815.586060][ T3089] r8152-cfgselector 7-1: config 0 descriptor?? [ 815.780638][ T5962] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 815.800632][ T5962] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 815.800667][T13132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'. [ 815.824440][ T5854] Bluetooth: hci6: unexpected event for opcode 0x0c03 [ 815.836697][ T5962] usb 6-1: can't read configurations, error -61 [ 815.903785][ T5962] usb usb6-port1: attempt power cycle [ 816.040335][ T9870] r8152-cfgselector 7-1: USB disconnect, device number 8 [ 816.263286][ T5962] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 816.299923][T13144] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 816.327208][ T5962] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 816.341603][ T5962] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 816.350249][ T5962] usb 6-1: can't read configurations, error -61 [ 816.443107][ T3089] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 816.503213][ T5962] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 816.524424][ T5962] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 816.540634][ T5962] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 816.571105][ T5962] usb 6-1: can't read configurations, error -61 [ 816.577575][ T3089] usb 4-1: device descriptor read/64, error -71 [ 816.585715][ T5962] usb usb6-port1: unable to enumerate USB device [ 816.765248][T13146] serio: Serial port ptm0 [ 816.833396][ T3089] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 817.013069][ T3089] usb 4-1: device descriptor read/64, error -71 [ 817.129919][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 817.168983][ T3089] usb usb4-port1: attempt power cycle [ 817.813451][ T3089] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 817.875266][ T3089] usb 4-1: device descriptor read/8, error -71 [ 818.123286][ T3089] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 818.207275][ T3089] usb 4-1: device descriptor read/8, error -71 [ 818.450888][ T3089] usb usb4-port1: unable to enumerate USB device [ 819.053202][ T30] audit: type=1400 audit(819.000:1328): avc: denied { read } for pid=13171 comm="syz.1.1722" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 819.225090][ T30] audit: type=1400 audit(819.010:1329): avc: denied { open } for pid=13171 comm="syz.1.1722" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 819.248134][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.335087][T13180] loop2: detected capacity change from 0 to 7 [ 819.364150][ T30] audit: type=1400 audit(819.050:1330): avc: denied { ioctl } for pid=13171 comm="syz.1.1722" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 819.466250][T13180] Dev loop2: unable to read RDB block 7 [ 819.738116][T13180] loop2: unable to read partition table [ 819.850477][T13180] loop2: partition table beyond EOD, truncated [ 819.944284][T13180] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 821.891342][T13211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1730'. [ 822.219033][T13209] fuse: Unknown parameter 'ù›“fd' [ 822.415547][T13208] openvswitch: netlink: Missing key (keys=40, expected=80) [ 822.780251][T13233] loop2: detected capacity change from 0 to 7 [ 822.837492][T13233] Dev loop2: unable to read RDB block 7 [ 822.880212][T13233] loop2: unable to read partition table [ 822.890977][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1738'. [ 822.948735][T13239] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1738'. [ 823.264770][T13233] loop2: partition table beyond EOD, truncated [ 823.268935][T13225] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.291896][T13233] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 823.541382][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1737'. [ 823.983633][ T5962] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 824.743136][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 824.799885][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 824.803988][T13225] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.833499][ T5962] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 824.842793][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.875634][ T5962] usb 1-1: Product: syz [ 824.896222][ T5962] usb 1-1: Manufacturer: syz [ 824.993157][ T5962] usb 1-1: SerialNumber: syz [ 825.012731][ T5962] usb 1-1: config 0 descriptor?? [ 825.031589][ T5962] hub 1-1:0.0: bad descriptor, ignoring hub [ 825.041698][ T5962] hub 1-1:0.0: probe with driver hub failed with error -5 [ 825.097976][ T5962] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input24 [ 825.569026][ T30] audit: type=1400 audit(825.530:1331): avc: denied { ioctl } for pid=13241 comm="syz.0.1740" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 825.593944][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.687483][T13225] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.744948][ T5962] usb 1-1: USB disconnect, device number 51 [ 825.804736][ T30] audit: type=1400 audit(825.770:1332): avc: denied { write } for pid=13260 comm="syz.3.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 825.858583][ T30] audit: type=1400 audit(825.790:1333): avc: denied { connect } for pid=13260 comm="syz.3.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 825.881377][ T30] audit: type=1400 audit(825.820:1334): avc: denied { read } for pid=13260 comm="syz.3.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 825.944148][T13225] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.064523][ T30] audit: type=1400 audit(825.890:1335): avc: denied { accept } for pid=13260 comm="syz.3.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 826.401000][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1746'. [ 826.474546][ T31] INFO: task syz.2.1398:11790 blocked for more than 143 seconds. [ 826.799034][ T31] Not tainted syzkaller #0 [ 826.828523][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 826.936130][ T31] task:syz.2.1398 state:D stack:27672 pid:11790 tgid:11789 ppid:5842 task_flags:0x400140 flags:0x00004004 [ 826.973455][ T31] Call Trace: [ 826.977950][ T31] [ 826.981427][ T31] __schedule+0x1190/0x5de0 [ 826.987005][ T31] ? __pfx___schedule+0x10/0x10 [ 826.992287][ T31] ? find_held_lock+0x2b/0x80 [ 826.998316][ T31] ? schedule+0x2d7/0x3a0 [ 827.002714][ T31] schedule+0xe7/0x3a0 [ 827.008283][ T31] super_lock+0x2c0/0x3f0 [ 827.070727][ T31] ? __pfx_super_lock+0x10/0x10 [ 827.094422][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 827.102411][T10325] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.102420][ T31] ? __iterate_supers+0x1b6/0x360 [ 827.146455][ T31] __iterate_supers+0x1e0/0x360 [ 827.160307][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 827.169570][T10325] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.187112][ T31] ksys_sync+0x89/0x150 [ 827.201688][T10325] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.224211][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 827.224257][ T31] ? rcu_is_watching+0x12/0xc0 [ 827.224284][ T31] ? do_syscall_64+0x91/0x4c0 [ 827.224311][ T31] __do_sys_sync+0xe/0x20 [ 827.224334][ T31] do_syscall_64+0xcd/0x4c0 [ 827.224361][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.224384][ T31] RIP: 0033:0x7f60da58ebe9 [ 827.224401][ T31] RSP: 002b:00007f60db344038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 827.224424][ T31] RAX: ffffffffffffffda RBX: 00007f60da7c5fa0 RCX: 00007f60da58ebe9 [ 827.224439][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 827.224453][ T31] RBP: 00007f60da7c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 827.224466][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.224484][ T31] R13: 00007f60da7c6038 R14: 00007f60da7c5fa0 R15: 00007fffe43385f8 [ 827.224515][ T31] [ 827.224543][ T31] INFO: task syz.2.1398:11792 blocked for more than 144 seconds. [ 827.224556][ T31] Not tainted syzkaller #0 [ 827.224568][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 827.224577][ T31] task:syz.2.1398 state:D stack:27912 pid:11792 tgid:11789 ppid:5842 task_flags:0x400040 flags:0x00004004 [ 827.224647][ T31] Call Trace: [ 827.224654][ T31] [ 827.224667][ T31] __schedule+0x1190/0x5de0 [ 827.224714][ T31] ? __pfx___schedule+0x10/0x10 [ 827.224742][ T31] ? find_held_lock+0x2b/0x80 [ 827.224769][ T31] ? schedule+0x2d7/0x3a0 [ 827.224794][ T31] schedule+0xe7/0x3a0 [ 827.224816][ T31] super_lock+0x2c0/0x3f0 [ 827.224849][ T31] ? __pfx_super_lock+0x10/0x10 [ 827.224880][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 827.224937][ T31] ? __iterate_supers+0x1b6/0x360 [ 827.224975][ T31] __iterate_supers+0x1e0/0x360 [ 827.225003][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 827.225033][ T31] ksys_sync+0x89/0x150 [ 827.225056][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 827.225079][ T31] ? do_user_addr_fault+0x843/0x1370 [ 827.225104][ T31] ? rcu_is_watching+0x12/0xc0 [ 827.225129][ T31] ? do_syscall_64+0x91/0x4c0 [ 827.225154][ T31] __do_sys_sync+0xe/0x20 [ 827.225177][ T31] do_syscall_64+0xcd/0x4c0 [ 827.225204][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.225225][ T31] RIP: 0033:0x7f60da58ebe9 [ 827.225242][ T31] RSP: 002b:00007f60db323038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 827.225262][ T31] RAX: ffffffffffffffda RBX: 00007f60da7c6090 RCX: 00007f60da58ebe9 [ 827.225277][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 827.225289][ T31] RBP: 00007f60da7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 827.225303][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.225315][ T31] R13: 00007f60da7c6128 R14: 00007f60da7c6090 R15: 00007fffe43385f8 [ 827.225343][ T31] [ 827.226488][ T31] [ 827.226488][ T31] Showing all locks held in the system: [ 827.226502][ T31] 3 locks held by kworker/0:1/10: [ 827.226517][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 827.226583][ T31] #1: ffffc900000f7d10 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 827.226637][ T31] #2: ffff888028c75240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x2e80 [ 827.226704][ T31] 1 lock held by khungtaskd/31: [ 827.226716][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 827.226797][ T31] 2 locks held by getty/5603: [ 827.226809][ T31] #0: ffff88814df790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 827.226881][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 827.226962][ T31] 4 locks held by kworker/1:7/5962: [ 827.226976][ T31] 3 locks held by kworker/u8:10/6281: [ 827.226990][ T31] 1 lock held by syz.4.445/7782: [ 827.227002][ T31] #0: ffff88801db940e0 (&type->s_umount_key#66/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0 [ 827.227075][ T31] 7 locks held by syz.5.1734/13225: [ 827.227088][ T31] [ 827.227093][ T31] ============================================= [ 827.227093][ T31] [ 827.227115][ T31] NMI backtrace for cpu 1 [ 827.227127][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 827.227149][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.227160][ T31] Call Trace: [ 827.227168][ T31] [ 827.227177][ T31] dump_stack_lvl+0x116/0x1f0 [ 827.227200][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 827.227231][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 827.227261][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 827.227291][ T31] watchdog+0xf0e/0x1260 [ 827.227320][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.227340][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 827.227364][ T31] ? __kthread_parkme+0x19e/0x250 [ 827.227394][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.227415][ T31] kthread+0x3c5/0x780 [ 827.227436][ T31] ? __pfx_kthread+0x10/0x10 [ 827.227458][ T31] ? rcu_is_watching+0x12/0xc0 [ 827.227482][ T31] ? __pfx_kthread+0x10/0x10 [ 827.227504][ T31] ret_from_fork+0x5d4/0x6f0 [ 827.227522][ T31] ? __pfx_kthread+0x10/0x10 [ 827.227541][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.227574][ T31] [ 827.227581][ T31] Sending NMI from CPU 1 to CPUs 0: [ 827.227653][ C0] NMI backtrace for cpu 0 [ 827.227665][ C0] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 827.227685][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.227695][ C0] RIP: 0010:lookup_object_or_alloc.part.0+0x38e/0x590 [ 827.227724][ C0] Code: 00 01 00 00 00 00 ad de 48 89 03 48 83 c0 22 48 89 43 08 e9 5b fd ff ff 48 05 00 80 00 00 49 39 c4 0f 83 dd fe ff ff 45 84 f6 <0f> 85 20 ff ff ff 48 b8 00 00 00 00 00 fc ff df 83 c5 01 89 2d 29 [ 827.227741][ C0] RSP: 0018:ffffc90003307c00 EFLAGS: 00000002 [ 827.227754][ C0] RAX: ffffc90003308000 RBX: ffff888021afbe70 RCX: ffff888021afbe78 [ 827.227766][ C0] RDX: 1ffff1100f3c2914 RSI: ffffffff8c162980 RDI: ffff888079e148a0 [ 827.227778][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000660f78 [ 827.227789][ C0] R10: 0000000000000202 R11: 0000000000000000 R12: ffffc90003307d78 [ 827.227799][ C0] R13: ffff888079e14880 R14: 0000000000000001 R15: 0000000000000000 [ 827.227810][ C0] FS: 0000555571422500(0000) GS:ffff8881246b8000(0000) knlGS:0000000000000000 [ 827.227828][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.227840][ C0] CR2: 000020000020a030 CR3: 0000000073a16000 CR4: 00000000003526f0 [ 827.227851][ C0] Call Trace: [ 827.227856][ C0] [ 827.227865][ C0] __debug_object_init+0x2a9/0x3d0 [ 827.227890][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 827.227922][ C0] hrtimer_nanosleep+0xa0/0x380 [ 827.227943][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 827.227969][ C0] ? get_timespec64+0x147/0x240 [ 827.227992][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 827.228018][ C0] common_nsleep+0xa1/0xd0 [ 827.228043][ C0] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 827.228065][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 827.228091][ C0] do_syscall_64+0xcd/0x4c0 [ 827.228111][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.228129][ C0] RIP: 0033:0x7fadbd5c1463 [ 827.228142][ C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 827.228159][ C0] RSP: 002b:00007fffc69353c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 827.228175][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fadbd5c1463 [ 827.228186][ C0] RDX: 00007fffc69353e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 827.228196][ C0] RBP: 0000000000000000 R08: 000000000002719e R09: 00007fadbe4d1000 [ 827.228207][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffc6935830 [ 827.228218][ C0] R13: 0000000000000004 R14: 00007fffc693541c R15: 00007fffc69354b0 [ 827.228237][ C0] [ 827.232869][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 827.232890][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 827.232915][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.232928][ T31] Call Trace: [ 827.232936][ T31] [ 827.232946][ T31] dump_stack_lvl+0x3d/0x1f0 [ 827.232974][ T31] vpanic+0x6e8/0x7a0 [ 827.233002][ T31] ? __pfx_vpanic+0x10/0x10 [ 827.233037][ T31] panic+0xca/0xd0 [ 827.233064][ T31] ? __pfx_panic+0x10/0x10 [ 827.233093][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 827.233123][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 827.233153][ T31] ? watchdog+0xd78/0x1260 [ 827.233174][ T31] ? watchdog+0xd6b/0x1260 [ 827.233195][ T31] watchdog+0xd89/0x1260 [ 827.233219][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.233238][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 827.233260][ T31] ? __kthread_parkme+0x19e/0x250 [ 827.233289][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.233311][ T31] kthread+0x3c5/0x780 [ 827.233331][ T31] ? __pfx_kthread+0x10/0x10 [ 827.233353][ T31] ? rcu_is_watching+0x12/0xc0 [ 827.233376][ T31] ? __pfx_kthread+0x10/0x10 [ 827.233396][ T31] ret_from_fork+0x5d4/0x6f0 [ 827.233415][ T31] ? __pfx_kthread+0x10/0x10 [ 827.233434][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.233468][ T31] [ 827.233852][ T31] Kernel Offset: disabled