last executing test programs: 2m48.08566636s ago: executing program 2 (id=1322): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x400, 0x2, 0x6, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m46.839519552s ago: executing program 2 (id=1327): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x20400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x100f, 0x6, 0x9, 0x9fb4, 0xd, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0xa0, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x68, 0x2, [@TCA_CGROUP_ACT={0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "62bcfc91988604e6c485ef28008e5039"}, @TCA_CT_PARMS={0x18, 0x1, {0x8000, 0xfffffffc, 0x0, 0x8, 0xf}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0xa0}}, 0x20004084) r3 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x4b70, 0x10100, 0xa, 0x40003}, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000800)={0x2a0, 0x12, 0x100, 0x70bd26, 0x25dfdbff, {0x6, 0x4, 0x9, 0x46, {0x4e21, 0x4e23, [0x8, 0xb, 0x6, 0x9e0], [0x4, 0xf, 0x1000, 0x7], r1, [0x0, 0x4]}, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "0879ef9a9165876cb6e8820f6bbba73fe7460a6658be7ef70d3fe8d92b293e781f3448b240960609952ed71032e1e4948a6375a4a8c88de8eef5d910d5e1bc55c0c9d3a737270a240a1423cc68297cfc2e7c0dcd28969b8976384910835237d776f86908bb84da39528a22ffb68764f2565e44260598c89d0f9f13069a3eed3340e00a013ee39965cb8fae092d3702d98ccca639d97b46f4616822ba"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "b114a8acd8fb3d244b9b53b6a47a641626ae554ae00932c5b3cd0584f100c328765d8b7a744fed22fc9df9439a9acf4175fa3937bba20a1dd330ff537e09ba4e208e987f9f2b284a326c10f93e244901c8e074fc18bf16b66a3abfc96caa3197378064c58d79d4671988e70a64f1d1fc6fe10d2ac89b5ef0a6ce26e1d570c1bbf8a2a2eb359bbbb39577c538ec7b9656b3bb75d6bdb614f0878131d8c6280da851e3ad74a13a14632e9129259d969d6a39118a219df45e25c49a624799819052a1c9"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "020d23a4feb055227072370be2d8e51377134cb89f1180f42f06f12d7fafc81aecb7102f6f96cf4c324855988c4ce20731272e6c1d7413c0087420a67c992496080ec798cb4ea93f770a828910319167e2ffe4141d70d9fd729fac7420e5cf637f1704407a210f02f2bdba525753080808057adf5505b434f8556c2d10b4a59c917ff351874c89e01bbd94d65d3ade8a5e4dff3aa596666bd63800fb1c44b1d1bd"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "16d25c2891e342bf63578633cf45c26e5554c54ac70d1b4f6ba076d6a0d06f01274365588b6d4506765ad45f0c4353d355d5aac8b5bf96e23e2f00a165"}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x24040000}, 0x400c001) r8 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x16b601, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000480)={'syztnl2\x00', r1, 0x8000, 0x8, 0x5, 0x4, {{0x1f, 0x4, 0x1, 0x0, 0x7c, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @empty, {[@rr={0x7, 0xb, 0xd0, [@rand_addr=0x64010101, @broadcast]}, @rr={0x7, 0xb, 0x6a, [@rand_addr=0x64010102, @loopback]}, @end, @timestamp_addr={0x44, 0x2c, 0x34, 0x1, 0x3, [{@remote, 0x40}, {@multicast1, 0x2}, {@loopback, 0x8}, {@broadcast}, {@loopback, 0x93}]}, @timestamp_addr={0x44, 0x1c, 0x31, 0x1, 0x0, [{@multicast1, 0x6}, {@empty, 0x48}, {@local, 0x800}]}, @generic={0x94, 0x9, "76d98e5b58c618"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x44000000, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, [@alu={0x4, 0x1, 0xa, 0x1, 0x5, 0x6, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0xfc40, 0x7f, &(0x7f0000000400)=""/127, 0x40f00, 0x40, '\x00', r9, 0x0, r4, 0x8, &(0x7f0000000580)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x5, 0xa, 0xffffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x5, 0xf, 0x1}], 0x10, 0x8}, 0x94) ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m46.614610413s ago: executing program 2 (id=1329): ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0xfffe) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x10940, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x36) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, &(0x7f00000000c0), 0x26) 2m46.331403126s ago: executing program 2 (id=1331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m46.090076538s ago: executing program 2 (id=1334): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000434000/0x4000)=nil) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e23, 0x0, @empty, 0xfffffff8}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x1, 0x50, 0x5]}}, 0x5c) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private2, 0x0, r7}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000040)={@private2, r7}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2m42.827659629s ago: executing program 2 (id=1342): socket$kcm(0x10, 0x2, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) 2m27.686600039s ago: executing program 32 (id=1342): socket$kcm(0x10, 0x2, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) 59.371646322s ago: executing program 4 (id=1767): syz_open_dev$usbfs(0x0, 0x76, 0x101b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, 0x0, 0x0, 0xd33) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r5, &(0x7f0000000500)=[{&(0x7f0000000280)=""/86, 0x56}], 0x1, 0x5, 0xfff7fffd) 56.929319545s ago: executing program 4 (id=1780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8080) 56.823700976s ago: executing program 4 (id=1781): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$kcm(0x29, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 55.297725356s ago: executing program 4 (id=1785): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) 54.494431967s ago: executing program 4 (id=1788): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, 0x0, 0x20000804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 52.874401296s ago: executing program 4 (id=1797): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) userfaultfd(0x801) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000002c0)=[0x3], 0x0, 0x7f}) 37.804758006s ago: executing program 33 (id=1797): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) userfaultfd(0x801) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r2], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000002c0)=[0x3], 0x0, 0x7f}) 8.510275166s ago: executing program 3 (id=1995): sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe95, 0x20004880, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdcde"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) write(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x1e, r6, 0x10ada85e65c25349, 0x3, 0xfffffffc, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x29}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.308329146s ago: executing program 0 (id=2002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1, 0xfc}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.19034973s ago: executing program 5 (id=2003): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = timerfd_create(0x0, 0x800) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='%(0.', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x23b) 7.111189823s ago: executing program 3 (id=2005): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.914112553s ago: executing program 0 (id=2007): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x7ffffffe) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) socket$igmp(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r4, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=@xfs={0x1c, 0x81, {0x5, 0x1000, 0xc, 0xfffffffc}}, &(0x7f0000001500), 0x200) sendmsg$NFT_MSG_GETCHAIN(r4, 0x0, 0x20) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) 6.338242517s ago: executing program 3 (id=2008): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000060000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x111080, 0x0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r1}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 6.277725036s ago: executing program 5 (id=2009): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.146214138s ago: executing program 3 (id=2010): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fde"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) unlinkat(r2, &(0x7f0000000600)='./file0\x00', 0x200) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)={0x278, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4af3}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x29, 0x3, "81785f9162a45cded4d9a9629dfcbde28395484c3edcc369ba9b5a30c09877030b7cf52c12"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "83f85319573575671a99f4ac5d1c8f01059bc908d8de"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x120, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa40a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fa4c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d9a}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4f7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb20}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7cca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c080) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffc, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 6.119245843s ago: executing program 3 (id=2011): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x6, 0x180) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000002c0)=0xf0690e812fd32bb0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 5.652324158s ago: executing program 0 (id=2013): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) socket$inet(0x2, 0x800, 0x5ab4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000140)={0x932, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.621642359s ago: executing program 6 (id=2017): socket$inet6(0xa, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) eventfd2(0x0, 0x0) read$FUSE(r0, &(0x7f0000008280)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,r[fdno', @ANYRESHEX=r0, @ANYBLOB, @ANYBLOB=',\x00']) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000003c0)=0x7, 0x4) write$eventfd(r0, &(0x7f0000000040)=0x9, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000440)={0x6, 0x4, 0x7, 0x901, 'syz1\x00', 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0x1, 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0xca79, 'syz1\x00'}, 0x0, [0x400, 0xffffffffffffffff, 0x7ffc, 0x5, 0xd, 0x100000000, 0x0, 0xde, 0x7, 0x7, 0x200000000c7, 0x8007f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x1, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000001, 0x40, 0x2, 0x10000004, 0x4, 0x4, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x3, 0x20, 0xe8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x9, 0x8, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x7, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x5, 0x404, 0xb4e, 0xffffffff, 0x9, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x200000000000000, 0x0, 0x4, 0x5, 0x0, 0x1, 0x200000, 0x4b7, 0xe9, 0x6, 0x5, 0x0, 0x0, 0x6, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffb, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x1, 0x400003, 0x3, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x400}, 0x38) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1f, &(0x7f0000000400)={[{@dyn}]}) mount$9p_xen(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x345065, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000000)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640), 0x0, 0x0) io_setup(0x3ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="6d74af2a", 0x4}]) 4.567996319s ago: executing program 6 (id=2018): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x1, 0xffff, 0x8, 0x3, 0x772f6461, 0xaf4, "8a"}}, 0x119) write$UHID_INPUT(r5, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) 4.334476245s ago: executing program 1 (id=2019): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.020142232s ago: executing program 1 (id=2020): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = timerfd_create(0x0, 0x800) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xdfe5) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='%(0.', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r7, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, 0x0, 0x23b) 3.920795862s ago: executing program 0 (id=2021): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) rmdir(0x0) keyctl$revoke(0x3, r0) 3.102318468s ago: executing program 5 (id=2022): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x9000, 0x3ff, 0x0, r2, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.999300289s ago: executing program 6 (id=2023): gettid() socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x4, "07000f00007eaba9a208000000706de400000000000000000000008000"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x8, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0x7) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) 2.991979976s ago: executing program 0 (id=2024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a90306000000000000003200000008004001"], 0x1c}}, 0x4004050) 2.939082058s ago: executing program 3 (id=2025): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.14417041s ago: executing program 1 (id=2026): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = fanotify_init(0x1a, 0x800) fanotify_mark(r3, 0x229, 0x4800001a, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) accept4$unix(r1, &(0x7f00000002c0)=@abs, &(0x7f0000000040)=0x6e, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x22, 0x60000000, &(0x7f0000000100)="b9ff03076044238cb89e14f088a847e0ffff00004000632f77fb0806140cac14140c07029f89052f87e577ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 2.046326002s ago: executing program 5 (id=2027): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.396952178s ago: executing program 6 (id=2028): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010800000000fdffffff00000000", @ANYRES32=r2, @ANYBLOB="000000000520040014"], 0x3c}}, 0x8080) 1.200656623s ago: executing program 5 (id=2029): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x28, 0x5, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 1.140472951s ago: executing program 1 (id=2030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x61) fcntl$dupfd(r0, 0x406, r0) socket(0x11, 0x2, 0x0) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 1.044568621s ago: executing program 6 (id=2031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000280)=""/86, 0x56}], 0x1, 0x5, 0xfff7fffd) 318.537484ms ago: executing program 1 (id=2032): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0xd}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 194.531968ms ago: executing program 5 (id=2033): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x1, 0xffff, 0x8, 0x3, 0x772f6461, 0xaf4, "8a"}}, 0x119) write$UHID_INPUT(r5, &(0x7f00000002c0)={0x8, {"d7af35f62e40d167ab82fb30de8754c82d733c7c03b74eba83f1033d0d65541664cb6a7e0477dcec7a7e21ea9fd92e926dec5d2135eefffbeb88c998d4507d0a9ee267a41db3c0d399a84b67136ebe724ac1b9da91133f154efc0c68d627482d2caba7e724890552fcba5f62c843aea1f5c0e08986f108fcaa476be3db7c68d06e94628c589c9b7e7c6756890b975dfc369b141c05baea8a20cb21f06b2f2cb256c74498a2b2d8ceb6d110e6c457665bac3f8d2ba454138b81bc137aaf7266fb7da732f9838ec2bb1236b7bda46e1ccc305aa9ea1c0adfcd59b46fa86e22b008a3d77db95d6daae3f4fb169a53af3395130accbbecbe9ab5de24a3e39ef5051eb2924f50a2336a371906a1abd21d203118edd22a91d12726a3188180433150840f389ec92afa9c149f4cca268a1e3240a5e56a46fc2cd3a1b41c7bcfb6efc4cdd0ef2caed749849ff9c79b67f87da746ce3c89e3d21091fa48a0176cf78a67bc778b5d0749217da9e1cfcb47fd42c9e56f09de4161816c43ab7708d18f145e56185a0ddf0ab6e01083d8decbb05f5a322f974dca80c3067b4b1e60654e8fa6059476db9eed37b7030f69e27f639fb516599ff8c42efb945b2705944e288e177bd0c8d8b2aa175ff012504f65b8a23ad39fef64dc567b878daa7640e81878d52a0b19c258d06d5aea6ce009e7e1f66da3eb23d2e4b495312b37c7a3db4b412a8520633653000e754b87ed2048d77a4a272b5f48759fde89a70a90c470f2942f33308d35e4b45a696776fb906caa6a49727bdf1dc97e4e9e12b3e186ef11e92660dbb9d5b651151c226ee728fab07794d4322675a291f206837a0acc6b668dc37ef60432b724a4773c7c44d1f5f44c53952fb40861be98db019be50cd9ac51592eb0d987e3b93d6ee6c1cc61a8aabda7cb43767c42cd09b1cc994d71b21c2d6af914973c6b7e4096a024968574d30d01f0c64e516cb22c4c05ff1bd2b9a7accce1c201861d4e334e901687685c92d62f0d3cb0525ea3b31409377e332be12173a867017bbd79f1f904f400004b7f75750cc61f36c813baf77bb68ed175170da8c36b2fbb74978c64e7fc47ae6833b19cd7c5ae8fdba7149af6089b68cfba3e75c7cf5e58cc0461999cddc24d68de0f61608eda7752ee9328c21be5a3ff8e5b73ed49f9997b372931920dca7cda9e447f396ba874c175ebcbfa4711cbc6efb6954666827617d6fb2a1f8a1bb59e8886bfdc6bc92ec4894bcb1a54fec5142744d062cdcd7d325c5bac7b4e650b97f7de91fe141a1f83108cde22033d9c18976e8b78bb6f24538c51a9ab9335b4692fc37439359e7b0e7b0f3bdf413b037dff3bc9797c24559b8d2fd62dd5cb62cffc70923beaa043e89ebb77fa081e58f771f02c486749905c1583c397e2154ae38a3c53a23fb5ccfc80806d452355664edb267a0a83a1be23ffcabe06e5990d3514cc24026363f4ea702ce88bec9196d7f74b2d6d9f9d6039f30704ad4757012172f41115b6343aaf478bee43121eaa66e1b4396d7a513347bf497e94a325cd85f5fcfe5f101bde4d1168546959b1a6c81cc9caa09da1fb74cfea3753e86759a24139dec1a5aff716f65fa334af4e8ba833b8baf069a1ade31ef2b24115e56a6f7f71b64c42eb97fb80fa6d605dd4541c801d3e6db7e9d170992caf4c092b384d8f2b42bd9e3012b64692d523b560a01bf7f3416a3d68569fb2f24bb7241231f7c953d0f82d8485143368317113e2a40f21559e42157284fc250da139c669c702b418bc70bee38c5e66c74f5de453c86611f53568397b204a3d172092dca9c9395cdd174158d40d70504bd0be22b752b4e2e0aee604e980431dbebdfe1254ee29ae26586a1ef2fc04ec07103c2b7a83e242e59c791632f2b4a14190e344126a2adb57c1008db1194602b7c53422749ae4939ec0698fcb9075da754f51b1081ad97ab8a08f4f2c7ca3896ae13fee503714e1b701ae1ffe7cfb7790fb80f7fdb76ab7951949cae1f39c7747b5ce27b9e4f9caf35e0046db67ce24b28c7b2ad9aff3610057a9152bab465c6427f65ed4f227042572a9401548e8b271b15f3f6bff29a1b6cfad336c2cdfeb7d0da0b5e927593c9ab69ec6aab6e16fe0e47fd61e799bedb353b35d34f59488032fa57663815e71409077e0e33719af0f72e39399bcf72a852e6a07b5899b5978f662cedf26c97525569365ae709ba02679a68985874e24741c998747d21ffe95b8c51d6b4c6019db6fc0b4ae4e1188b09ff252765e0d1f9688db2ee32f72350f86b338aa614551566144a14bd41811c0beaacd30aaaeb1b7a023cd83b500a2c2013ce347df1124a726402db0666faa8d172897ef71a908f2ccb8e25aaec38766d40e9fa263981ef102939afe29b3e6f5dc58f4f43ed9f5c9526e1b24297837791be62cd1a1cbbc2ba0f44b11a07b3193b80f5eb7773361e3e61859372c3e4855a561aeca1332e25ca7394ee1504bd29ebf23852059a6caf3e6f8895da637dcdd4041532b3bfab92c200b9c2ea58ec0385039d1aeb1118ab4fd2fa7f29a7dab8532274333b4b4eb6cef6cd35d543c8ea52f1b7400d7ef1c451e8417ebc3a304d1988c882e94a8a3c3b7320b0b43f72ca0ce7f2ee46d0078d64b2da4410cb4d8d80e84461add6f0355fec2564f2d6c8a56a1625c02e4bd236898ba19afbc2564e27ee0621fe48c8f5f9da40d4ec7d3be5fc11491d1718d377d1244322ab45377bbc943a31ad2b48fa56ce3ebd50e50041749182109cc3ff0dff19044b4452b6aab2affcd8ed8d177b633e139ab9a03ee86cbccef46aa1b845cbaef21c7b429e512d2a65f95cb58ea62910616d533a3ce44d69d5e6535cbc8fba5711b427ec892886de6dc6919239929f32cd4f12ccbe969586b1a031e9cfa10d63637487501f3e72fae0ec3d6b537fc5d3d45efdb4cee5de57293435d566bbb1923d9ff3d40ba9b45e5049b591389d2e3e42fcecc3283e8506fab01c9825bf7761566009fccfb5c4645e2b043df40094e2b11db5abcc44bbba11d031207f531c00577e0eb87e481b86f4283cc59e379fbfd68894a5c4cdd880866e96e0901acf824ebdf6dc5687624de7fdd318b68a73dc7f2803b3c0416ae1bb90128f24a18819bc61a48445f8bcb82c3824e1e96512493dc19cd56ec2856f72f783c8a8918da0065efac3cc6efc3ae14ce57cfc3aa9ce89f87375eb7fd3b6a96d13fd44bb71b7460c599ba09a352753fc2fd53bccb8f407044f565bd6ee161da1b430fedec970f51fe6a63450550843cbccedbc79b052147d8c3a695acf68e6685f638981d14b775712e24a294be933da6753fb312f46805294b10df79becb055d42240670cb6d42d506a90fc429a49ae6fc82ae7c0313430c8f60044c9517f394c2ce933e39f51dab580641f773ffd5d2b7fd74e59e9363cc1d792c149c2c6f1972e89f01fe13e82c2d4f2de46a1136fa9212cdb8de04302fd79a6637f553c3eddeaa61b3d4e108ff351415139af43596712b4749dad7eaf486d29a01ed2885a84072862e0c3e42983f31396a09b8161305cce927bce74f2cc36a9b88035480855c8f4cd6eece1254dbae198040de846986cf79b79a06496f159ed253bb737e0c01ed33ae5bd4f4b5705f10e76daeefb3edbac520cdd1bbeb0258ea10d23fcbe7d85237828a26e9fb02a8b86852562332dee19a2a242b8da815fd6879311df872713d3b598310aa84f1de984c609b341f81dc4dfa9da05e6fa1f012683044a7b983f69384b23b5bb80e834834faa4daca49f9cbf07c7fe5f9f8476326690642322922b88e087793a10dd71572faa1c8c92cfcbb82e62de1b55fb1377d531513007ced0a43cd4505cffbd2f6ac7cd80407cc1fb4afdee6bd63bcf960d0b4b8f7479e675c074f51b8d67b6b5352702fab510224eb822b75c88df58b0fc1736fa1851d0678e24ba8c7bcf22be0c0678331b210c5368a9de14f4d91dfc5c79cfae0ac5bd1e7fa52612091b375299ed67ff6cd2a973f584138eec10b5c8867df9d272c3d76d29f2132c16727c847adbfe60d23b69cfdd46a2aae215ab9a6f3d2e92863062998b59e84f126621fa0baee70dff5c62e09ca99f454a0e9af4c79ad3bb6772e6fc8e509ee9ec8d3e6f562ed6d0176944b9298a6fa131f5ea32f3fc2612ad002e216e0a8f1f1141e9adb22b9a6acb872dc34acf60ea0deb1ec51d33d00fe0bee336c86ef2803e75e6e766121eefc0f822b6a0d5711519530001e8cc3706cc6d55f5deea5fc911569fdf0d3d08a8baf44124cfa9ab21ed54fa880f07fe0481e3aa125ea9514a1f5dc227079d2a9693397eabf57e77cd89e575862d6142a700f5d72780b6ba5e08462a6f260bcd29151d7a21ac1d23d55a7644e7617c75b27363fb1c54b9683d02df344c7911ff6b12cf8279e8f87705f84d1c3514b023f6c6ab30272eba27c7e8ad0743ae6d15652ae3380e133bce8f407c535725c2e6d7ce1e3fadc649f8ea9c400f997ba289deea432f48f96b7c5d9a021bef7c8a1b854d9c9cccd1dbf90f615c8170b8295e69308b29d0c3b0b359a061186130d3fb2181ef6ad35b8bda19291bc4938b16f721f80e83b2e09264e98a4d871d7a6a6c9a77f0616b01d48b3ca5f18783519309d3ab6bfa050da6e8bf6895dcd245ad913bdb4d2fda155712d532bad651a7b9148aa751af5230b1777ca00a714a0c38fe5a9e621a12e8c9cec4cd3704d05dfae18323c2f112157f129089c7ec277a719b41a2fb834a969138b13d012b8a0e74672ad295a2b33f1c05f11c5b902063a01c17bce32710ae9384e2d51b0b284b8ce33f17d2fea8c0fccf1ca0f69953cd6e1b203ad7f1a7b3494dc7aa87ceed349db243aa77923521d9c8d50b421886176584fc92c1b0494b0c9782c0069686bb6afafdc0a76c6a038476eb150ce6e0bdd6bbe4a9a324a53abc0fd5cfc25b141027e1fa7de4cff78cfac11417b4109c2e6ed26ea4eefb02138f7c5176b8bcdd3c414a83f3cca98ae56175bd2290348b7f77b5a6e3c98d680f8cc5f9f142439efde0086cc2f9006aa9763120c0517ff39587b905498a9867c13341a5f296f1d76c2b18bf52c118caf859eee817cd48fdac84f1ade079c8d00c754833f729a6f954731a4635f42052f441c3161637993a820c88f91e7cb8015c9066155eee8297cd9e36af512b9f1c8f16610ec84aa128898e33f434eefa8f5f8b5ad762db65cf6f9a87203db4f99dc4d71e983def6f2059aa5035b7a583f6ee9a16dbb43f9e81a806c097cc254b9941b2128fdfec4bab46ef51b19900de8b242b4c6f881c50955dd34be6c7d1a137d0f93b4042131980e6f6ffa018bd82964175d55d64175d8c4eb83dbca1c427f47d9fdd06538298295757d6882080898b56ee60d719a400fcb4dde0e6320daa5118c2e6665b09b38462f9019a4c2ddc6bf6739f5a4c94e4fb0a8ca9b103cd4d790a362cdbf379a46c41d8b590bfb42c1a9f738684e9af409a90a6689d19da8ec676e524b0d9c3fbfc96e5bef58355ce35aa171705d0ec8930e3a697205abddee8c2c40d161fc0388ec0bbf8d5117b4e77e65ddb2e45dd2aff236b1157c72601100e721be4af4ef2d040fadc2a2bc10f903f0d985ba969697d94c0d522db6a68b312f48b233744500231b42e7d8ae345ea3cc6a4e79adb0487383a1e799497a9af87f347ed6621702df368f386bec97954712eb0d5c800f05e1ea93aaa27aae2b4601a5ae0af7cad64e1c3a4d08e621d63010512ad1cfa1953945245973f8cfa8d0fcdc98", 0x1000}}, 0x1006) 162.669788ms ago: executing program 1 (id=2034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 136.663683ms ago: executing program 0 (id=2035): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x6261c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) 0s ago: executing program 6 (id=2036): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) kernel console output (not intermixed with test programs): dit(1764644292.012:379): avc: denied { mount } for pid=7924 comm="syz.3.658" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 178.558144][ T7930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.571150][ T7937] macvlan2: entered promiscuous mode [ 178.580367][ T7937] macvlan2: entered allmulticast mode [ 178.623254][ T7937] bond2: entered promiscuous mode [ 178.716462][ T7937] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.749130][ T7937] bond2: left promiscuous mode [ 178.775319][ T7948] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 178.991045][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.196108][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 179.211070][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 179.308075][ T9] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 179.318196][ T9] usb 4-1: config 9 has no interface number 0 [ 179.354183][ T30] audit: type=1400 audit(1764644292.912:380): avc: denied { map } for pid=7952 comm="syz.0.664" path="/dev/vbi3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 179.441346][ T9] usb 4-1: config 9 interface 37 has no altsetting 0 [ 179.460396][ T9] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 179.476020][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.488304][ T9] usb 4-1: Product: Ñ… [ 179.492580][ T9] usb 4-1: Manufacturer: 틙䎞ì–䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费ä…ç¿ç¼³à°»ì‘‰é½®æ¢“ଟ純é æœä·¤â¾£å¤‚å‡ì¯´ï¨¹ëŒ±ì‘€ä«·éŒ¶ï¯½ïƒ¶î¨£éŒ”腮䪖떜怸ᾭ桔䅹闢ë ï‚‰è’몙텞ᒢȉ或篣턄湊诌귇 [ 179.517430][ T30] audit: type=1400 audit(1764644292.912:381): avc: denied { execute } for pid=7952 comm="syz.0.664" path="/dev/vbi3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 179.556849][ T9] usb 4-1: SerialNumber: syz [ 180.514538][ T7962] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 180.551546][ T5826] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 180.818337][ T7966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.453867][ T7981] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 181.986027][ T9] gspca_main: spca506-2.14.0 probing 0734:043b [ 182.404624][ T9] usb 4-1: USB disconnect, device number 10 [ 182.465190][ T7993] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 182.864758][ T8014] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 182.960908][ T8004] ip6_vti0 speed is unknown, defaulting to 1000 [ 183.671061][ T5888] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.869522][ T8025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.879018][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 183.955867][ T5888] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 183.991015][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.173299][ T5888] usb 1-1: config 0 descriptor?? [ 184.225857][ T8029] tipc: Enabling of bearer rejected, failed to enable media [ 184.569710][ T5888] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 184.574738][ T30] audit: type=1400 audit(1764644298.172:382): avc: denied { bind } for pid=8018 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.614612][ T8040] netlink: 44 bytes leftover after parsing attributes in process `syz.2.684'. [ 184.636855][ T5888] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 184.685594][ T5888] dib0700: firmware download failed at 7 with -22 [ 184.704266][ T8037] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 185.082642][ T8054] syzkaller0: entered promiscuous mode [ 185.096163][ T8054] syzkaller0: entered allmulticast mode [ 185.169319][ T8060] tipc: Enabled bearer , priority 0 [ 185.223574][ T8052] tipc: Resetting bearer [ 185.275050][ T8052] tipc: Disabling bearer [ 185.393626][ T30] audit: type=1400 audit(1764644299.002:383): avc: denied { read } for pid=8066 comm="syz.4.692" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 185.533814][ T30] audit: type=1400 audit(1764644299.052:384): avc: denied { open } for pid=8066 comm="syz.4.692" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 185.560519][ T8067] syzkaller0: entered promiscuous mode [ 185.566031][ T8067] syzkaller0: entered allmulticast mode [ 186.388035][ T5888] usb 1-1: USB disconnect, device number 7 [ 186.474641][ T8078] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 186.785236][ T30] audit: type=1326 audit(1764644300.372:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0e98f749 code=0x7ffc0000 [ 187.061461][ T8082] ip6_vti0 speed is unknown, defaulting to 1000 [ 187.081232][ T30] audit: type=1326 audit(1764644300.372:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0e98f749 code=0x7ffc0000 [ 187.121261][ T30] audit: type=1326 audit(1764644300.452:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb0e98df90 code=0x7ffc0000 [ 187.166021][ T5888] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 187.206256][ T30] audit: type=1326 audit(1764644300.452:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0e98f749 code=0x7ffc0000 [ 187.299979][ T30] audit: type=1326 audit(1764644300.452:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0e98f749 code=0x7ffc0000 [ 187.341223][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 187.353552][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.375890][ T5888] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 187.392241][ T5888] usb 2-1: can't read configurations, error -71 [ 187.410824][ T30] audit: type=1326 audit(1764644300.452:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb0e98f749 code=0x7ffc0000 [ 187.529160][ T30] audit: type=1326 audit(1764644300.452:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.0.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0e98f749 code=0x7ffc0000 [ 187.552447][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.130800][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 189.149950][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 189.190164][ T8116] netlink: 44 bytes leftover after parsing attributes in process `syz.0.707'. [ 189.304208][ T8121] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 189.388345][ T8121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.565339][ T8121] macvlan2: entered promiscuous mode [ 189.581229][ T8121] macvlan2: entered allmulticast mode [ 189.587676][ T8121] bond2: entered promiscuous mode [ 189.596972][ T8121] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.598510][ T8132] syz2: rxe_newlink: already configured on ip6_vti0 [ 189.702825][ T8121] bond2: left promiscuous mode [ 189.956216][ T8128] kvm: kvm [8127]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0xc1) = 0x462 [ 189.980462][ T8128] kvm: kvm [8127]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0xc2) = 0x4402 [ 190.021267][ T8128] kvm: kvm [8127]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0x11e) = 0x4a2 [ 190.085934][ T8128] kvm: kvm [8127]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0x186) = 0x4e2 [ 190.095970][ T8128] kvm: kvm [8127]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0x187) = 0x4402 [ 190.117485][ T8128] kvm_intel: kvm [8127]: vcpu0, guest rIP: 0x1bc Unhandled WRMSR(0x1d9) = 0x462 [ 190.145992][ T8143] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 190.183198][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 190.183213][ T30] audit: type=1400 audit(1764644303.742:427): avc: denied { create } for pid=8139 comm="syz.3.714" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 190.895606][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 190.895693][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 190.909276][ T30] audit: type=1400 audit(1764644304.502:428): avc: denied { unlink } for pid=5817 comm="syz-executor" name="file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 191.077810][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 191.097340][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 192.341472][ T8173] netlink: 44 bytes leftover after parsing attributes in process `syz.4.722'. [ 192.388119][ T8176] 9pnet_fd: Insufficient options for proto=fd [ 192.611077][ T5814] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 192.774481][ T5814] usb 2-1: device descriptor read/64, error -71 [ 192.835045][ T30] audit: type=1400 audit(1764644306.442:429): avc: denied { getopt } for pid=8188 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.918627][ T8191] syzkaller0: entered promiscuous mode [ 192.924226][ T8191] syzkaller0: entered allmulticast mode [ 192.934928][ T8191] tipc: Enabled bearer , priority 0 [ 192.943860][ T8191] tipc: Resetting bearer [ 192.991702][ T8190] tipc: Resetting bearer [ 193.006318][ T8190] tipc: Disabling bearer [ 193.021331][ T5814] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 193.127962][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 193.137189][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 193.171080][ T5814] usb 2-1: device descriptor read/64, error -71 [ 193.281334][ T5814] usb usb2-port1: attempt power cycle [ 193.444139][ T7452] IPVS: starting estimator thread 0... [ 193.521704][ T30] audit: type=1400 audit(1764644307.082:430): avc: denied { write } for pid=8199 comm="syz.0.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 193.582105][ T8209] IPVS: using max 53 ests per chain, 127200 per kthread [ 193.651865][ T5814] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 193.674825][ T30] audit: type=1400 audit(1764644307.282:431): avc: denied { read open } for pid=8215 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.712381][ T5814] usb 2-1: device descriptor read/8, error -71 [ 193.768246][ T30] audit: type=1400 audit(1764644307.282:432): avc: denied { getattr } for pid=8215 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.848572][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.855003][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.999975][ T30] audit: type=1400 audit(1764644307.602:433): avc: denied { add_name } for pid=8213 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.023143][ T5814] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 194.048674][ T30] audit: type=1400 audit(1764644307.602:434): avc: denied { create } for pid=8213 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.125211][ T5814] usb 2-1: device descriptor read/8, error -71 [ 194.136343][ T8230] gtp0: entered promiscuous mode [ 194.236005][ T8230] gtp0: entered allmulticast mode [ 194.263457][ T30] audit: type=1400 audit(1764644307.602:435): avc: denied { write } for pid=8213 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=5028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.361463][ T5814] usb usb2-port1: unable to enumerate USB device [ 194.415301][ T30] audit: type=1400 audit(1764644307.632:436): avc: denied { append } for pid=8213 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=5028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.699153][ T8259] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 195.705687][ T8259] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 196.074195][ T8259] vhci_hcd vhci_hcd.0: Device attached [ 196.225126][ T8266] syzkaller0: entered promiscuous mode [ 196.327282][ T8266] syzkaller0: entered allmulticast mode [ 196.337768][ T8261] vhci_hcd: connection closed [ 196.372795][ T1905] vhci_hcd: stop threads [ 196.444943][ T1905] vhci_hcd: release socket [ 196.469697][ T1905] vhci_hcd: disconnect device [ 196.491713][ T42] usb 36-1: enqueue for inactive port 0 [ 196.992066][ T42] usb usb36-port1: attempt power cycle [ 197.014047][ T8287] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 197.573315][ T8303] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 197.672674][ T42] usb usb36-port1: unable to enumerate USB device [ 200.830007][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 200.830024][ T30] audit: type=1326 audit(1764644314.432:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905f78f749 code=0x7ffc0000 [ 201.038477][ T30] audit: type=1326 audit(1764644314.502:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f905f78f749 code=0x7ffc0000 [ 201.061640][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.088442][ T8367] tipc: Enabled bearer , priority 0 [ 201.134108][ T8367] tipc: Resetting bearer [ 201.161231][ T30] audit: type=1326 audit(1764644314.502:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905f78f749 code=0x7ffc0000 [ 201.258693][ T30] audit: type=1326 audit(1764644314.502:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905f78f749 code=0x7ffc0000 [ 201.281899][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.287314][ T8363] tipc: Disabling bearer [ 201.939871][ T30] audit: type=1400 audit(1764644315.542:446): avc: denied { create } for pid=8376 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.979606][ T30] audit: type=1400 audit(1764644315.542:447): avc: denied { connect } for pid=8376 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.571149][ T42] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 202.736763][ T42] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 202.758002][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.788632][ T42] usb 4-1: Product: syz [ 202.801948][ T42] usb 4-1: Manufacturer: syz [ 202.806662][ T42] usb 4-1: SerialNumber: syz [ 202.831448][ T42] usb 4-1: config 0 descriptor?? [ 202.877638][ T42] ldusb 4-1:0.0: Interrupt in endpoint not found [ 203.325251][ T8399] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 203.934467][ T5814] IPVS: starting estimator thread 0... [ 204.031125][ T8414] IPVS: using max 43 ests per chain, 103200 per kthread [ 204.490882][ T8416] syzkaller0: entered promiscuous mode [ 204.517329][ T8416] syzkaller0: entered allmulticast mode [ 205.322271][ T7452] usb 4-1: USB disconnect, device number 11 [ 205.336671][ T30] audit: type=1400 audit(1764644318.482:448): avc: denied { write } for pid=8422 comm="syz.1.794" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 205.385481][ T8429] netlink: 'syz.3.796': attribute type 1 has an invalid length. [ 205.843407][ T8435] vim2m vim2m.0: vidioc_s_fmt queue busy [ 206.416376][ T8421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.474584][ T8445] 9pnet_fd: Insufficient options for proto=fd [ 206.722770][ T8439] warning: `syz.1.798' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 208.251663][ T8468] ip6_vti0 speed is unknown, defaulting to 1000 [ 209.027947][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 209.241621][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 209.297562][ T8490] gtp1: entered promiscuous mode [ 209.333040][ T8490] gtp1: entered allmulticast mode [ 209.616074][ T8501] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 209.696538][ T8501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.136034][ T8504] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.191319][ T8504] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 210.278625][ T8504] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 210.399512][ T8501] macvlan2: entered promiscuous mode [ 210.405092][ T8501] macvlan2: entered allmulticast mode [ 210.472372][ T8501] bond3: entered promiscuous mode [ 210.563522][ T8501] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 210.665430][ T8501] bond3: left promiscuous mode [ 210.776408][ T8520] tipc: Enabled bearer , priority 0 [ 210.941092][ T5814] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 211.049526][ T8514] syzkaller0: entered promiscuous mode [ 211.055219][ T8514] syzkaller0: entered allmulticast mode [ 211.073329][ T8520] tipc: Resetting bearer [ 211.092998][ T5814] usb 5-1: Using ep0 maxpacket: 16 [ 211.117460][ T8513] tipc: Resetting bearer [ 211.140183][ T5814] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 211.177465][ T8513] tipc: Disabling bearer [ 211.199860][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.321314][ T980] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 211.389808][ T5814] usb 5-1: Product: syz [ 211.420777][ T5814] usb 5-1: Manufacturer: syz [ 211.540404][ T980] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.994515][ T980] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.004414][ T980] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.013817][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.027601][ T8524] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 212.034851][ T5814] usb 5-1: SerialNumber: syz [ 212.042799][ T5814] usb 5-1: config 0 descriptor?? [ 212.075836][ T980] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.387471][ T980] usb 1-1: USB disconnect, device number 8 [ 212.551888][ T5814] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 212.605292][ T5814] usb 5-1: USB disconnect, device number 8 [ 213.335173][ T8551] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 213.466433][ T30] audit: type=1400 audit(1764644327.042:449): avc: denied { write } for pid=8547 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 216.314906][ T8586] syzkaller0: entered promiscuous mode [ 216.320406][ T8586] syzkaller0: entered allmulticast mode [ 216.820750][ T8595] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 216.921104][ T30] audit: type=1400 audit(1764644330.522:450): avc: denied { mount } for pid=8593 comm="syz.1.841" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 217.933432][ T30] audit: type=1400 audit(1764644330.632:451): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 218.027502][ T30] audit: type=1400 audit(1764644331.082:452): avc: denied { write } for pid=8607 comm="syz.3.845" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 218.194556][ T30] audit: type=1400 audit(1764644331.082:453): avc: denied { open } for pid=8607 comm="syz.3.845" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 218.421578][ T30] audit: type=1400 audit(1764644331.092:454): avc: denied { ioctl } for pid=8607 comm="syz.3.845" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 218.553742][ T8625] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 218.683605][ T8628] netlink: 60 bytes leftover after parsing attributes in process `syz.1.849'. [ 220.661634][ T30] audit: type=1400 audit(1764644334.272:455): avc: denied { mount } for pid=8657 comm="syz.1.857" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 220.753244][ T30] audit: type=1400 audit(1764644334.342:456): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 220.941435][ T8665] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 221.063283][ T30] audit: type=1400 audit(1764644334.672:457): avc: denied { read } for pid=8661 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.371190][ T8686] input: syz0 as /devices/virtual/input/input10 [ 222.933778][ T8688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.976096][ T8693] vim2m vim2m.0: vidioc_s_fmt queue busy [ 223.053551][ T8688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.032715][ T30] audit: type=1400 audit(1764644338.642:458): avc: denied { read } for pid=8722 comm="syz.3.876" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 225.096651][ T8723] futex_wake_op: syz.3.876 tries to shift op by -1; fix this program [ 225.321121][ T30] audit: type=1400 audit(1764644338.642:459): avc: denied { open } for pid=8722 comm="syz.3.876" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 225.521124][ T30] audit: type=1400 audit(1764644338.682:460): avc: denied { append } for pid=8722 comm="syz.3.876" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 225.603534][ T8736] gtp0: entered promiscuous mode [ 225.608550][ T8736] gtp0: entered allmulticast mode [ 225.852875][ T8739] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 226.825796][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 227.092569][ T8771] 9pnet_fd: Insufficient options for proto=fd [ 228.969991][ T8787] tipc: Enabled bearer , priority 0 [ 229.057785][ T30] audit: type=1400 audit(1764644342.662:461): avc: denied { mount } for pid=8789 comm="syz.3.893" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 229.079703][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.089086][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 229.102215][ T8787] tipc: Resetting bearer [ 229.153164][ T30] audit: type=1400 audit(1764644342.662:462): avc: denied { mounton } for pid=8789 comm="syz.3.893" path="/182/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 229.213731][ T8786] tipc: Disabling bearer [ 229.272323][ T30] audit: type=1400 audit(1764644342.742:463): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 229.273704][ T8803] tipc: Enabled bearer , priority 0 [ 229.292411][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.326654][ T8800] tipc: Resetting bearer [ 229.353642][ T8799] tipc: Disabling bearer [ 229.816844][ T980] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 229.977623][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 230.117528][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 230.124361][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.135569][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.187154][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 230.281592][ T980] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 230.422318][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.526073][ T980] usb 5-1: config 0 descriptor?? [ 230.944782][ T980] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0003/input/input11 [ 231.049222][ T980] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 231.091866][ T30] audit: type=1400 audit(1764644344.692:464): avc: denied { setopt } for pid=8833 comm="syz.3.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.186632][ T980] usb 5-1: USB disconnect, device number 9 [ 231.289622][ T8835] fido_id[8835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 231.306581][ T8839] tipc: Enabled bearer , priority 0 [ 231.328636][ T8838] tipc: Disabling bearer [ 231.465978][ T30] audit: type=1326 audit(1764644345.072:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0e98f749 code=0x7ffc0000 [ 231.533669][ T30] audit: type=1326 audit(1764644345.092:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcb0e98f749 code=0x7ffc0000 [ 231.581839][ T30] audit: type=1326 audit(1764644345.092:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0e98f749 code=0x7ffc0000 [ 231.605551][ T30] audit: type=1326 audit(1764644345.092:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fcb0e98f749 code=0x7ffc0000 [ 231.628785][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.636205][ T30] audit: type=1326 audit(1764644345.092:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0e98f749 code=0x7ffc0000 [ 231.659442][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.734416][ T8851] vim2m vim2m.0: vidioc_s_fmt queue busy [ 231.753752][ T30] audit: type=1326 audit(1764644345.102:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.0.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0e98f749 code=0x7ffc0000 [ 231.777044][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.091610][ T8856] netlink: 'syz.3.907': attribute type 11 has an invalid length. [ 233.220505][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 233.412531][ T8879] tipc: Enabled bearer , priority 0 [ 233.479982][ T8878] tipc: Disabling bearer [ 233.985771][ T8901] gtp2: entered promiscuous mode [ 233.990755][ T8901] gtp2: entered allmulticast mode [ 234.071983][ T42] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 234.341127][ T8909] vim2m vim2m.0: vidioc_s_fmt queue busy [ 234.383855][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.844095][ T42] usb 2-1: not running at top speed; connect to a high speed hub [ 234.945831][ T42] usb 2-1: config 253 has 0 interfaces, different from the descriptor's value: 1 [ 234.965211][ T42] usb 2-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=95.19 [ 235.014606][ T8921] 9pnet_fd: Insufficient options for proto=fd [ 235.027455][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.083195][ T42] usb 2-1: Product: syz [ 235.106023][ T42] usb 2-1: Manufacturer: syz [ 235.117760][ T42] usb 2-1: SerialNumber: syz [ 235.274733][ T8925] tipc: Enabled bearer , priority 0 [ 235.330053][ T8924] tipc: Disabling bearer [ 235.360362][ T5814] usb 2-1: USB disconnect, device number 17 [ 235.635379][ T8931] netlink: 277 bytes leftover after parsing attributes in process `syz.3.936'. [ 236.201197][ T8942] 9pnet_fd: Insufficient options for proto=fd [ 237.314805][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 237.314829][ T30] audit: type=1400 audit(1764644350.922:475): avc: denied { write } for pid=8955 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.677137][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 237.715416][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 237.954073][ T30] audit: type=1400 audit(1764644351.562:476): avc: denied { ioctl } for pid=8975 comm="syz.1.953" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 238.519123][ T8986] tipc: Enabled bearer , priority 0 [ 238.594171][ T8985] tipc: Disabling bearer [ 238.625592][ T8988] netlink: 44 bytes leftover after parsing attributes in process `syz.4.958'. [ 239.837641][ T30] audit: type=1400 audit(1764644353.442:477): avc: denied { setopt } for pid=9006 comm="syz.4.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.857729][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.864893][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 242.872445][ T9053] tipc: Enabling of bearer rejected, already enabled [ 242.912313][ T9053] tipc: Enabled bearer , priority 0 [ 243.462612][ T980] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 243.621932][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 243.659392][ T980] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.671052][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.705843][ T980] usb 4-1: config 0 has no interface number 0 [ 243.857865][ T980] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.901108][ T980] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 243.921008][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.944068][ T980] usb 4-1: config 0 descriptor?? [ 243.965943][ T980] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 244.043862][ T9072] ip6_vti0 speed is unknown, defaulting to 1000 [ 244.239935][ T980] usb 4-1: USB disconnect, device number 12 [ 244.974885][ T9096] 9pnet_fd: Insufficient options for proto=fd [ 245.389634][ T9108] loop9: detected capacity change from 0 to 7 [ 245.397565][ T9108] Dev loop9: unable to read RDB block 7 [ 245.403200][ T9108] loop9: unable to read partition table [ 245.409677][ T9108] loop9: partition table beyond EOD, truncated [ 245.430917][ T9108] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 245.659989][ T9119] tipc: Enabling of bearer rejected, failed to enable media [ 245.794242][ T9121] tipc: Enabled bearer , priority 0 [ 245.822499][ T9121] syzkaller0: entered promiscuous mode [ 245.854857][ T9121] syzkaller0: entered allmulticast mode [ 246.129648][ T9122] tipc: Resetting bearer [ 246.212353][ T9120] tipc: Resetting bearer [ 246.268059][ T9120] tipc: Disabling bearer [ 246.826062][ T9138] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 248.038821][ T9161] tipc: Enabling of bearer rejected, failed to enable media [ 248.404318][ T9178] tipc: Enabling of bearer rejected, failed to enable media [ 248.443351][ T9175] tipc: Enabled bearer , priority 0 [ 248.470103][ T9175] syzkaller0: entered promiscuous mode [ 248.487096][ T9175] syzkaller0: entered allmulticast mode [ 248.612885][ T9197] tipc: Resetting bearer [ 248.681228][ T9173] tipc: Resetting bearer [ 248.945433][ T9173] tipc: Disabling bearer [ 250.716172][ T9223] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 250.858571][ T9230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.377852][ T9234] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 251.384400][ T9234] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 251.595400][ T9234] vhci_hcd vhci_hcd.0: Device attached [ 251.658049][ T9235] vhci_hcd: connection closed [ 251.661070][ T2950] vhci_hcd: stop threads [ 251.706242][ T2950] vhci_hcd: release socket [ 251.711686][ T2950] vhci_hcd: disconnect device [ 251.781090][ T5874] vhci_hcd: vhci_device speed not set [ 251.886107][ T9246] tipc: Enabled bearer , priority 0 [ 251.904055][ T9246] syzkaller0: entered promiscuous mode [ 251.951537][ T9246] syzkaller0: entered allmulticast mode [ 252.040131][ T9246] tipc: Resetting bearer [ 252.050267][ T9245] tipc: Resetting bearer [ 252.078828][ T9245] tipc: Disabling bearer [ 252.243498][ T9267] 9pnet_fd: Insufficient options for proto=fd [ 252.431084][ T42] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 252.611013][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 252.630671][ T42] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 252.645668][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.661037][ T42] usb 1-1: Product: syz [ 252.667284][ T42] usb 1-1: Manufacturer: syz [ 252.675007][ T42] usb 1-1: SerialNumber: syz [ 252.685587][ T42] usb 1-1: config 0 descriptor?? [ 252.757064][ T9279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.196283][ T42] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 253.273646][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 253.290578][ T42] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 253.298839][ T42] usb 1-1: media controller created [ 253.528781][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.725426][ T9287] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 254.002480][ T42] zl10353_read_register: readreg error (reg=127, ret==0) [ 254.009891][ T42] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 254.024318][ T42] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 254.207424][ T42] usb 1-1: USB disconnect, device number 9 [ 254.278635][ T30] audit: type=1326 audit(1764644367.882:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 254.416724][ T30] audit: type=1326 audit(1764644367.882:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 254.444711][ T42] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 254.545216][ T30] audit: type=1326 audit(1764644367.912:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 254.593054][ T9300] netlink: 'syz.0.1042': attribute type 1 has an invalid length. [ 254.622896][ T30] audit: type=1326 audit(1764644367.912:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 254.656703][ T9300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.681821][ T30] audit: type=1326 audit(1764644367.912:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 254.705625][ T30] audit: type=1326 audit(1764644367.912:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 254.730036][ T30] audit: type=1326 audit(1764644367.912:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 254.761316][ T30] audit: type=1326 audit(1764644367.912:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 254.846943][ T9303] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.881674][ T9303] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 255.054270][ T9303] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 255.077866][ T9304] macvlan2: entered promiscuous mode [ 255.083409][ T9304] macvlan2: entered allmulticast mode [ 255.089445][ T9304] bond3: entered promiscuous mode [ 255.106170][ T9304] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 255.121802][ T9304] bond3: left promiscuous mode [ 255.263095][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.269424][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.364715][ T30] audit: type=1400 audit(1764644368.972:486): avc: denied { watch watch_reads } for pid=9316 comm="syz.3.1048" path="/proc/655/net" dev="proc" ino=26494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 255.595243][ T9322] tipc: Enabling of bearer rejected, failed to enable media [ 256.091032][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 256.284393][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 256.309001][ T9351] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 256.315560][ T9351] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 256.334881][ T9351] vhci_hcd vhci_hcd.0: Device attached [ 256.361821][ T30] audit: type=1400 audit(1764644369.962:487): avc: denied { name_bind } for pid=9342 comm="syz.0.1052" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 256.361921][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 256.631045][ T5874] usb 34-1: SetAddress Request (2) to port 0 [ 256.637177][ T5874] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 256.691054][ T9353] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 256.822622][ T9352] vhci_hcd: connection closed [ 256.824916][ T2926] vhci_hcd: stop threads [ 256.846318][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.846398][ T2926] vhci_hcd: release socket [ 256.875622][ T2926] vhci_hcd: disconnect device [ 256.931164][ T9] usb 4-1: Product: syz [ 256.936571][ T9] usb 4-1: Manufacturer: syz [ 256.946909][ T9] usb 4-1: SerialNumber: syz [ 256.961486][ T9] usb 4-1: config 0 descriptor?? [ 257.390010][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 257.419484][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 257.450322][ T9370] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 257.491465][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 257.499427][ T9] usb 4-1: media controller created [ 257.598376][ T9379] vlan2: entered promiscuous mode [ 257.618627][ T9379] vlan2: entered allmulticast mode [ 257.659424][ T9379] hsr_slave_1: entered allmulticast mode [ 257.661595][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.689461][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 258.323037][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 258.330152][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 258.340422][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 258.410859][ T9] usb 4-1: USB disconnect, device number 13 [ 258.473085][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 259.398148][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 259.398165][ T30] audit: type=1400 audit(1764644373.002:491): avc: denied { create } for pid=9411 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 260.003872][ T9433] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 260.374126][ T30] audit: type=1326 audit(1764644373.982:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 260.477685][ T30] audit: type=1326 audit(1764644374.042:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 260.639763][ T30] audit: type=1326 audit(1764644374.042:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 260.848262][ T9455] tipc: Enabling of bearer rejected, failed to enable media [ 260.896422][ T9458] tipc: Enabling of bearer rejected, failed to enable media [ 260.922152][ T30] audit: type=1326 audit(1764644374.042:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 261.047624][ T30] audit: type=1326 audit(1764644374.042:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 261.071305][ T30] audit: type=1326 audit(1764644374.042:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 261.136573][ T30] audit: type=1326 audit(1764644374.042:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 261.167782][ T30] audit: type=1326 audit(1764644374.042:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.2.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572878f749 code=0x7ffc0000 [ 261.501867][ T9471] netlink: 'syz.2.1081': attribute type 1 has an invalid length. [ 261.595696][ T9471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.695286][ T9477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.712809][ T9477] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 261.724929][ T9477] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 261.741158][ T5874] usb 34-1: device descriptor read/8, error -110 [ 261.760763][ T9479] ip6tnl1: entered allmulticast mode [ 261.793503][ T9486] macvlan0: entered promiscuous mode [ 261.798830][ T9486] macvlan0: entered allmulticast mode [ 261.842460][ T9486] bond1: entered promiscuous mode [ 261.860119][ T9486] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 261.908966][ T30] audit: type=1326 audit(1764644375.512:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.4.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905f78f749 code=0x7ffc0000 [ 261.949280][ T9486] bond1: left promiscuous mode [ 261.966932][ T1905] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.981223][ T1905] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.991367][ T5814] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 262.154592][ T5874] usb usb34-port1: attempt power cycle [ 262.171445][ T5814] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 262.685446][ T5814] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 262.972264][ T9522] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 262.982745][ T5874] usb usb34-port1: unable to enumerate USB device [ 263.605662][ T9539] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1102'. [ 263.960382][ T980] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 265.035065][ T980] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 265.042684][ T980] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.054952][ T980] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.250412][ T980] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.262607][ T980] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.291991][ T980] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 265.299438][ T980] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.335144][ T980] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.375612][ T980] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.419764][ T980] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.420661][ T9562] 9pnet_fd: Insufficient options for proto=fd [ 265.792629][ T980] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 265.800134][ T980] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 266.369453][ T980] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.391179][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 266.505460][ T980] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 266.517100][ T980] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 266.601409][ T980] usb 1-1: string descriptor 0 read error: -71 [ 266.608210][ T980] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 266.662495][ T9573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.034141][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.127180][ T980] usb 1-1: can't set config #168, error -71 [ 267.196976][ T980] usb 1-1: USB disconnect, device number 10 [ 267.205858][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 267.205873][ T30] audit: type=1326 audit(1764644380.812:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aef8f749 code=0x7ffc0000 [ 267.307627][ T30] audit: type=1326 audit(1764644380.842:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aef8f749 code=0x7ffc0000 [ 267.392985][ T30] audit: type=1326 audit(1764644380.842:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f34aef8f749 code=0x7ffc0000 [ 267.525936][ T30] audit: type=1326 audit(1764644380.842:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aef8f749 code=0x7ffc0000 [ 267.690260][ T30] audit: type=1326 audit(1764644380.842:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aef8f749 code=0x7ffc0000 [ 267.716740][ T30] audit: type=1326 audit(1764644380.842:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f34aef8f749 code=0x7ffc0000 [ 267.755272][ T30] audit: type=1326 audit(1764644380.842:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aef8f749 code=0x7ffc0000 [ 267.809589][ T30] audit: type=1326 audit(1764644380.842:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aef8f749 code=0x7ffc0000 [ 267.833771][ T30] audit: type=1326 audit(1764644380.842:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f34aef8f749 code=0x7ffc0000 [ 267.857736][ T30] audit: type=1326 audit(1764644380.842:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34aef8f749 code=0x7ffc0000 [ 269.236639][ T9613] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 270.171903][ T9628] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 271.421255][ T9644] tipc: Enabling of bearer rejected, failed to enable media [ 272.400884][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 272.400901][ T30] audit: type=1326 audit(1764644385.962:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9659 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905f78f749 code=0x7ffc0000 [ 272.430297][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.970121][ T9679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.015892][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 274.024415][ T9] syz2: Port: 1 Link ACTIVE [ 274.107295][ T9679] vim2m vim2m.0: vidioc_s_fmt queue busy [ 274.171725][ T980] ip6_vti0 speed is unknown, defaulting to 1000 [ 274.544801][ T9706] Illegal XDP return value 2131226225 on prog (id 108) dev syz_tun, expect packet loss! [ 274.567866][ T9703] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 274.688800][ T9711] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 274.727257][ T9711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.861476][ T9716] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 274.959885][ T9715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.968386][ T9715] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 275.049956][ T9715] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 275.111091][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 275.689757][ T9728] syzkaller0: entered promiscuous mode [ 275.701111][ T9728] syzkaller0: entered allmulticast mode [ 275.783979][ T9728] tipc: Enabled bearer , priority 0 [ 275.792297][ T9728] tipc: Resetting bearer [ 275.828888][ T9727] tipc: Resetting bearer [ 275.990069][ T9727] tipc: Disabling bearer [ 276.010809][ T9734] tipc: Enabled bearer , priority 0 [ 276.153831][ T9734] tipc: Resetting bearer [ 276.273687][ T9731] tipc: Disabling bearer [ 276.517395][ T30] audit: type=1400 audit(1764644390.112:567): avc: denied { connect } for pid=9746 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 276.588029][ T9753] 9pnet_fd: Insufficient options for proto=fd [ 277.468425][ T30] audit: type=1400 audit(1764644390.232:568): avc: denied { accept } for pid=9746 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.488337][ T30] audit: type=1400 audit(1764644391.062:569): avc: denied { read } for pid=9746 comm="syz.4.1159" path="socket:[28202]" dev="sockfs" ino=28202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.641373][ T9763] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1163'. [ 277.796901][ T9770] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 277.970781][ T30] audit: type=1400 audit(1764644391.572:570): avc: denied { write } for pid=9777 comm="syz.0.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.198124][ T9788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1173'. [ 280.932226][ T9829] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 280.938870][ T9829] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 280.969697][ T9829] vhci_hcd vhci_hcd.0: Device attached [ 281.197290][ T9831] vhci_hcd: connection closed [ 281.203297][ T12] vhci_hcd: stop threads [ 281.212662][ T12] vhci_hcd: release socket [ 281.217222][ T12] vhci_hcd: disconnect device [ 281.232727][ T980] usb 34-1: SetAddress Request (6) to port 0 [ 281.239005][ T980] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 281.271218][ T980] usb 34-1: enqueue for inactive port 0 [ 281.671581][ T980] usb usb34-port1: attempt power cycle [ 282.383449][ T9866] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 282.384428][ T980] usb usb34-port1: unable to enumerate USB device [ 282.931657][ T9878] syzkaller0: entered promiscuous mode [ 282.974743][ T9878] syzkaller0: entered allmulticast mode [ 283.414856][ T9889] netlink: 'syz.2.1207': attribute type 23 has an invalid length. [ 283.654681][ T9890] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 283.661297][ T9890] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 283.717680][ T9890] vhci_hcd vhci_hcd.0: Device attached [ 283.906608][ T9892] vhci_hcd: connection closed [ 283.949274][ T2926] vhci_hcd: stop threads [ 283.958908][ T2926] vhci_hcd: release socket [ 283.964334][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 284.011698][ T980] usb 36-1: SetAddress Request (6) to port 0 [ 284.018007][ T980] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 284.030096][ T2926] vhci_hcd: disconnect device [ 284.069045][ T9904] netlink: 'syz.4.1209': attribute type 10 has an invalid length. [ 284.172881][ T9] usb 3-1: config 8 has an invalid interface number: 59 but max is 0 [ 284.184438][ T9] usb 3-1: config 8 has no interface number 0 [ 284.671481][ T9] usb 3-1: config 8 interface 59 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.707013][ T9] usb 3-1: config 8 interface 59 altsetting 0 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 284.745709][ T9] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=f6.ce [ 284.767724][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.810989][ T9] usb 3-1: Product: syz [ 284.815179][ T9] usb 3-1: Manufacturer: syz [ 284.819776][ T9] usb 3-1: SerialNumber: syz [ 284.907642][ T9] kvaser_usb 3-1:8.59: error -ENODEV: Cannot get usb endpoint(s) [ 284.939584][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1212'. [ 285.083641][ T9] usb 3-1: USB disconnect, device number 11 [ 285.130548][ T9915] syzkaller0: entered promiscuous mode [ 285.159431][ T9915] syzkaller0: entered allmulticast mode [ 285.244453][ T9915] tipc: Enabled bearer , priority 0 [ 285.292297][ T9915] tipc: Resetting bearer [ 285.329936][ T9914] tipc: Resetting bearer [ 285.359098][ T9914] tipc: Disabling bearer [ 285.369704][ T9930] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 285.515860][ T9935] netlink: 'syz.0.1220': attribute type 10 has an invalid length. [ 285.585742][ T9935] team0: Port device netdevsim0 added [ 285.663520][ T9934] nbd0: detected capacity change from 0 to 127 [ 285.676260][ T9936] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1221'. [ 285.692507][ T5829] block nbd0: Receive control failed (result -104) [ 286.139775][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1225'. [ 287.656222][ T9973] vivid-003: disconnect [ 287.678809][ T9973] vivid-003: reconnect [ 288.037223][ T30] audit: type=1400 audit(1764644401.252:571): avc: denied { getopt } for pid=9965 comm="syz.1.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 288.321656][ T30] audit: type=1400 audit(1764644401.932:572): avc: denied { ioctl } for pid=9978 comm="syz.0.1234" path="socket:[29164]" dev="sockfs" ino=29164 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 288.444309][ T9983] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 288.715628][ T9987] netlink: 'syz.4.1238': attribute type 1 has an invalid length. [ 288.733474][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'. [ 288.830594][ T9987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.878011][ T9989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.885705][ T9989] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 288.902556][ T9989] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 289.101370][ T980] usb 36-1: device descriptor read/8, error -110 [ 289.107838][ T5933] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 289.174597][ T9996] syzkaller0: entered promiscuous mode [ 289.180190][ T9996] syzkaller0: entered allmulticast mode [ 289.251434][ T9996] tipc: Enabled bearer , priority 0 [ 289.280253][ T9994] tipc: Resetting bearer [ 289.301061][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 289.356480][ T5933] usb 3-1: config 8 has an invalid interface number: 215 but max is 1 [ 289.364751][ T5933] usb 3-1: config 8 has no interface number 1 [ 289.399173][ T5933] usb 3-1: config 8 interface 0 has no altsetting 0 [ 289.415348][ T5933] usb 3-1: config 8 interface 215 has no altsetting 0 [ 289.428230][ T5933] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.1d [ 289.437848][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.447539][ T5933] usb 3-1: Product: syz [ 289.452024][ T5933] usb 3-1: Manufacturer: syz [ 289.457656][ T9994] tipc: Disabling bearer [ 289.464433][ T5933] usb 3-1: SerialNumber: syz [ 289.502477][ T980] usb usb36-port1: attempt power cycle [ 289.710793][ T5933] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 289.766625][ T5933] gspca_vc032x: reg_r err -71 [ 289.834396][ T5933] vc032x 3-1:8.0: probe with driver vc032x failed with error -71 [ 289.918918][ T42] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 289.949551][ T42] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 290.024788][ T5933] usb 3-1: USB disconnect, device number 12 [ 290.093122][ T980] usb usb36-port1: unable to enumerate USB device [ 290.570624][T10023] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 291.208950][T10025] netlink: 'syz.4.1250': attribute type 1 has an invalid length. [ 291.474355][T10034] 9pnet_fd: Insufficient options for proto=fd [ 291.498093][T10025] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.688285][T10028] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.696371][T10028] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 291.741173][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.790651][T10028] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 293.222858][T10066] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 293.612530][T10072] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 293.905047][ T5874] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 293.925126][ T5874] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 294.112745][T10080] fido_id[10080]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 294.179835][T10083] 9pnet_fd: Insufficient options for proto=fd [ 294.434757][T10086] netlink: 'syz.0.1265': attribute type 1 has an invalid length. [ 294.556348][T10086] 8021q: adding VLAN 0 to HW filter on device bond5 [ 294.757609][T10088] 8021q: adding VLAN 0 to HW filter on device bond5 [ 294.774953][T10088] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 294.830751][T10088] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 296.056751][T10126] 9pnet_fd: Insufficient options for proto=fd [ 296.950486][T10139] netlink: 'syz.0.1281': attribute type 1 has an invalid length. [ 297.036768][T10139] 8021q: adding VLAN 0 to HW filter on device bond6 [ 297.082948][T10145] 8021q: adding VLAN 0 to HW filter on device bond6 [ 297.103584][T10145] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 297.153538][T10145] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 297.509453][ T5933] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 297.701071][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 297.707352][ T5933] usb 3-1: no configurations [ 297.713586][ T5933] usb 3-1: can't read configurations, error -22 [ 297.842398][ T5933] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 297.992680][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 298.071923][ T5933] usb 3-1: no configurations [ 298.082050][ T5933] usb 3-1: can't read configurations, error -22 [ 298.102547][ T5933] usb usb3-port1: attempt power cycle [ 298.921017][ T5933] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 298.941669][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 298.962334][ T5933] usb 3-1: no configurations [ 299.006173][ T5933] usb 3-1: can't read configurations, error -22 [ 299.161106][ T5933] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 299.281945][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 299.287735][ T5933] usb 3-1: no configurations [ 299.307382][ T5933] usb 3-1: can't read configurations, error -22 [ 299.327805][ T5933] usb usb3-port1: unable to enumerate USB device [ 299.853282][T10202] netlink: 'syz.4.1296': attribute type 1 has an invalid length. [ 300.094531][T10202] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.133969][T10205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.148345][T10205] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 300.167033][T10205] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 300.276081][T10210] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1298'. [ 300.629970][ T30] audit: type=1400 audit(1764644414.232:573): avc: denied { create } for pid=10216 comm="syz.2.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 300.797144][ T30] audit: type=1400 audit(1764644414.302:574): avc: denied { write } for pid=10216 comm="syz.2.1301" path="socket:[30023]" dev="sockfs" ino=30023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 300.820913][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.841934][ T30] audit: type=1400 audit(1764644414.302:575): avc: denied { create } for pid=10222 comm="syz.0.1303" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 301.389195][ T30] audit: type=1400 audit(1764644670.525:576): avc: denied { read } for pid=10222 comm="syz.0.1303" name="file0" dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 301.413745][ T30] audit: type=1400 audit(1764644670.525:577): avc: denied { open } for pid=10222 comm="syz.0.1303" path="/263/file0" dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 301.443845][ T30] audit: type=1400 audit(1764644670.525:578): avc: denied { ioctl } for pid=10222 comm="syz.0.1303" path="/263/file0" dev="tmpfs" ino=1376 ioctlcmd=0x1280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 301.597410][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 301.613455][ T30] audit: type=1400 audit(1764644671.195:579): avc: denied { unlink } for pid=5818 comm="syz-executor" name="file0" dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 301.955401][ T5874] hid-generic FFFF:0008:0003.0006: item fetching failed at offset 0/1 [ 302.328541][ T5874] hid-generic FFFF:0008:0003.0006: probe with driver hid-generic failed with error -22 [ 302.492965][T10244] syzkaller0: entered promiscuous mode [ 302.571053][T10244] syzkaller0: entered allmulticast mode [ 302.603547][T10244] tipc: Enabled bearer , priority 0 [ 302.623269][T10244] tipc: Resetting bearer [ 302.637869][T10243] tipc: Resetting bearer [ 302.663893][T10243] tipc: Disabling bearer [ 302.801485][T10249] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 302.960998][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 302.961089][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1312'. [ 303.145663][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 303.197198][ T9] usb 3-1: no configurations [ 303.203930][ T9] usb 3-1: can't read configurations, error -22 [ 303.351077][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 303.511031][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 303.516755][ T9] usb 3-1: no configurations [ 303.521816][ T9] usb 3-1: can't read configurations, error -22 [ 303.550559][ T9] usb usb3-port1: attempt power cycle [ 303.746209][T10271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.832834][T10271] vim2m vim2m.0: vidioc_s_fmt queue busy [ 303.901479][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 303.923997][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 303.929893][ T9] usb 3-1: no configurations [ 303.934781][ T9] usb 3-1: can't read configurations, error -22 [ 304.082857][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 304.127286][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 304.139346][ T9] usb 3-1: no configurations [ 304.145661][ T9] usb 3-1: can't read configurations, error -22 [ 304.323217][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1318'. [ 304.501328][ T9] usb usb3-port1: unable to enumerate USB device [ 304.587439][T10281] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 304.897330][T10285] netlink: 'syz.0.1320': attribute type 2 has an invalid length. [ 305.956321][T10297] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 307.762563][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1332'. [ 308.252087][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 309.865359][T10381] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 309.937528][T10381] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 311.466064][T10399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1345'. [ 311.645806][ T5814] hid-generic FFFF:0008:0003.0007: item fetching failed at offset 0/1 [ 311.659584][ T5814] hid-generic FFFF:0008:0003.0007: probe with driver hid-generic failed with error -22 [ 312.887622][ T980] IPVS: starting estimator thread 0... [ 312.981094][T10415] IPVS: using max 38 ests per chain, 91200 per kthread [ 313.893764][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1356'. [ 314.967848][T10440] ip6_vti0 speed is unknown, defaulting to 1000 [ 316.076053][ T5965] block nbd0: Possible stuck request ffff88802604e000: control (read@0,1024B). Runtime 30 seconds [ 316.091181][ T5965] block nbd0: Possible stuck request ffff88802604e1c0: control (read@1024,1024B). Runtime 30 seconds [ 316.103252][ T5965] block nbd0: Possible stuck request ffff88802604e380: control (read@2048,1024B). Runtime 30 seconds [ 316.295675][ T5965] block nbd0: Possible stuck request ffff88802604e540: control (read@3072,1024B). Runtime 30 seconds [ 316.741722][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.748102][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.714810][ T5814] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 318.751441][ T5814] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 318.839182][T10503] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 318.845728][T10503] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 319.004899][T10503] vhci_hcd vhci_hcd.0: Device attached [ 319.243213][T10504] vhci_hcd: connection closed [ 319.287288][T10354] vhci_hcd: stop threads [ 319.312389][T10354] vhci_hcd: release socket [ 319.323161][T10354] vhci_hcd: disconnect device [ 319.331553][ T980] usb 42-1: SetAddress Request (3) to port 0 [ 319.337582][ T980] usb 42-1: new SuperSpeed USB device number 3 using vhci_hcd [ 319.382193][ T980] usb 42-1: enqueue for inactive port 0 [ 320.059519][ T980] usb usb42-port1: attempt power cycle [ 320.721694][ T980] usb usb42-port1: unable to enumerate USB device [ 321.142139][ T980] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 321.151944][ T980] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.232796][T10550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.042545][T10558] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 323.101128][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 324.491881][T10562] ip6_vti0 speed is unknown, defaulting to 1000 [ 324.653832][T10593] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1396'. [ 325.226124][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 325.245417][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.205823][T10613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.356921][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.374298][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.504512][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.514753][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.522434][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.554922][ T30] audit: type=1400 audit(2000000014.160:580): avc: denied { mounton } for pid=10616 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 328.830521][T10630] netlink: 'syz.3.1406': attribute type 10 has an invalid length. [ 329.157804][T10630] team0: Port device netdevsim0 added [ 329.354023][T10616] ip6_vti0 speed is unknown, defaulting to 1000 [ 329.581092][ T5831] Bluetooth: hci5: command tx timeout [ 330.460688][T10644] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 331.671105][ T5831] Bluetooth: hci5: command tx timeout [ 332.426852][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 332.634284][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 332.712384][T10616] chnl_net:caif_netlink_parms(): no params data found [ 332.800278][T10678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.954797][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 332.998979][T10616] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.007043][T10616] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.014317][T10616] bridge_slave_0: entered allmulticast mode [ 333.140988][T10616] bridge_slave_0: entered promiscuous mode [ 333.158818][T10616] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.166354][T10616] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.174205][T10616] bridge_slave_1: entered allmulticast mode [ 333.181843][T10616] bridge_slave_1: entered promiscuous mode [ 333.194737][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 333.201381][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.219925][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.232267][ T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 333.259975][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.270662][ T9] usb 5-1: Product: syz [ 333.278699][T10616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.289796][ T9] usb 5-1: Manufacturer: syz [ 333.303462][T10616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.317733][ T9] usb 5-1: SerialNumber: syz [ 333.326194][ T9] usb 5-1: config 0 descriptor?? [ 333.369440][T10616] team0: Port device team_slave_0 added [ 333.376602][T10616] team0: Port device team_slave_1 added [ 333.423937][T10616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.430899][T10616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.459384][T10616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.472622][T10616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.483500][T10616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.534070][T10616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.566481][T10616] hsr_slave_0: entered promiscuous mode [ 333.573263][T10616] hsr_slave_1: entered promiscuous mode [ 333.616369][T10616] debugfs: 'hsr0' already exists in 'hsr' [ 333.631312][T10616] Cannot create hsr debugfs directory [ 333.741520][ T5829] Bluetooth: hci5: command tx timeout [ 333.935968][T10616] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.945450][T10616] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.955001][T10616] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.963976][T10616] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.095558][T10616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.144898][T10616] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.180484][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.187605][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.250099][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.257266][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.382015][ T5831] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 334.546126][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1423'. [ 335.271413][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 335.499403][T10616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.668105][T10717] syzkaller0: entered promiscuous mode [ 335.680308][T10717] syzkaller0: entered allmulticast mode [ 335.707719][ T5933] usb 5-1: USB disconnect, device number 10 [ 335.822108][ T5831] Bluetooth: hci5: command tx timeout [ 336.088966][T10737] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1432'. [ 337.790669][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 337.916733][T10616] veth0_vlan: entered promiscuous mode [ 338.983576][T10616] veth1_vlan: entered promiscuous mode [ 339.743505][ T5933] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 340.595805][T10616] veth0_macvtap: entered promiscuous mode [ 340.604921][T10616] veth1_macvtap: entered promiscuous mode [ 340.621643][T10616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.632822][T10616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.738987][T10365] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.778409][T10365] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.822819][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 340.831401][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.849924][T10365] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.852756][ T5933] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.868652][T10365] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.879745][ T5933] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 340.889630][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.897843][ T5933] usb 4-1: Product: syz [ 340.902129][ T5933] usb 4-1: Manufacturer: syz [ 340.906730][ T5933] usb 4-1: SerialNumber: syz [ 340.918827][ T5933] usb 4-1: config 0 descriptor?? [ 341.101532][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.122741][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.179330][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.188456][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.189070][T10762] ip6_vti0 speed is unknown, defaulting to 1000 [ 341.213696][ T30] audit: type=1400 audit(2000000283.834:581): avc: denied { mounton } for pid=10616 comm="syz-executor" path="/root/syzkaller.zEoIMu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 341.410319][T10785] syzkaller0: entered promiscuous mode [ 341.425270][T10785] syzkaller0: entered allmulticast mode [ 341.605238][ T30] audit: type=1400 audit(2000000284.224:582): avc: denied { write } for pid=10788 comm="syz.1.1446" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 341.954774][T10806] loop9: detected capacity change from 0 to 7 [ 341.968743][T10806] Dev loop9: unable to read RDB block 7 [ 341.969140][T10804] syzkaller0: entered promiscuous mode [ 341.976051][T10806] loop9: AHDI p1 [ 341.984352][T10806] loop9: partition table partially beyond EOD, truncated [ 341.994584][T10804] syzkaller0: entered allmulticast mode [ 342.069265][T10804] tipc: Started in network mode [ 342.078825][T10804] tipc: Node identity a6e7ceeece76, cluster identity 4711 [ 342.098588][T10804] tipc: Enabled bearer , priority 0 [ 342.119737][T10803] tipc: Resetting bearer [ 342.133461][T10803] tipc: Disabling bearer [ 343.307643][ T9] usb 4-1: USB disconnect, device number 14 [ 345.175742][T10849] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 345.498453][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 346.036438][T10864] syzkaller0: entered promiscuous mode [ 346.042413][T10864] syzkaller0: entered allmulticast mode [ 346.121800][T10864] tipc: Enabled bearer , priority 0 [ 346.130181][T10864] tipc: Resetting bearer [ 346.155126][ T5965] block nbd0: Possible stuck request ffff88802604e000: control (read@0,1024B). Runtime 60 seconds [ 346.166119][T10863] tipc: Resetting bearer [ 346.174583][ T5965] block nbd0: Possible stuck request ffff88802604e1c0: control (read@1024,1024B). Runtime 60 seconds [ 346.192721][ T5965] block nbd0: Possible stuck request ffff88802604e380: control (read@2048,1024B). Runtime 60 seconds [ 346.194512][T10863] tipc: Disabling bearer [ 346.311184][ T5965] block nbd0: Possible stuck request ffff88802604e540: control (read@3072,1024B). Runtime 60 seconds [ 346.376781][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 346.601003][ T5933] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 346.658752][T10880] netlink: 'syz.4.1471': attribute type 23 has an invalid length. [ 346.855054][ T5933] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 346.934643][ T5933] usb 4-1: config 0 has no interface number 0 [ 346.965892][ T5933] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 347.060288][ T5933] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 347.089122][ T5933] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 347.451067][ T5933] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 347.496281][ T5933] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 347.739261][T10893] netlink: 'syz.5.1475': attribute type 1 has an invalid length. [ 347.748728][ T5933] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.777382][ T5933] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 347.846443][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.949233][T10895] gretap1: entered promiscuous mode [ 348.018053][ T5933] usb 4-1: config 0 descriptor?? [ 348.032746][T10872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 348.040051][T10872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 348.068896][ T5933] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 348.423474][T10908] vim2m vim2m.0: vidioc_s_fmt queue busy [ 348.532283][ T5933] usb 4-1: USB disconnect, device number 15 [ 348.551876][ T5933] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 348.668857][T10907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.816322][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1479'. [ 348.861820][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1479'. [ 351.784176][ T30] audit: type=1400 audit(2000000294.384:583): avc: denied { mount } for pid=10941 comm="syz.3.1489" name="/" dev="configfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 352.764569][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 352.836710][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 353.595189][T10971] vim2m vim2m.0: vidioc_s_fmt queue busy [ 353.613989][ T5874] hid-generic FFFF:0008:0003.000B: item fetching failed at offset 0/1 [ 353.651974][ T5874] hid-generic FFFF:0008:0003.000B: probe with driver hid-generic failed with error -22 [ 353.666147][T10969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.685413][T10975] netlink: 'syz.5.1495': attribute type 10 has an invalid length. [ 353.742028][T10975] team0: Port device netdevsim0 added [ 354.479517][ T30] audit: type=1400 audit(2000000297.084:584): avc: denied { setopt } for pid=10978 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 354.570241][ T30] audit: type=1400 audit(2000000297.094:585): avc: denied { write } for pid=10978 comm="syz.0.1497" path="socket:[33735]" dev="sockfs" ino=33735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 355.872409][T10995] 9pnet_fd: Insufficient options for proto=fd [ 356.670157][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1509'. [ 357.790684][ T30] audit: type=1400 audit(2000000300.404:586): avc: denied { ioctl } for pid=11037 comm="syz.5.1514" path="socket:[32758]" dev="sockfs" ino=32758 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 358.178772][T11050] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 358.340991][ T980] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 358.495434][T11052] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 358.524699][ T980] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 358.534585][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.542911][ T980] usb 2-1: Product: syz [ 358.547155][ T980] usb 2-1: Manufacturer: syz [ 358.552694][ T980] usb 2-1: SerialNumber: syz [ 358.563382][ T980] usb 2-1: config 0 descriptor?? [ 358.676933][T11052] 8021q: adding VLAN 0 to HW filter on device bond5 [ 358.734679][T11056] 8021q: adding VLAN 0 to HW filter on device bond5 [ 358.767090][T11056] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 358.832765][T11056] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 358.896551][ T980] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 358.912373][T11060] macvlan2: entered promiscuous mode [ 358.917787][T11060] macvlan2: entered allmulticast mode [ 358.923777][T11060] bond5: (slave macvlan2): Error -98 calling set_mac_address [ 359.026530][T11047] ip6_vti0 speed is unknown, defaulting to 1000 [ 360.063296][ T980] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 360.114521][ T980] usb 2-1: USB disconnect, device number 18 [ 360.206880][T11085] syzkaller0: entered promiscuous mode [ 360.212591][T11085] syzkaller0: entered allmulticast mode [ 360.351703][T11085] tipc: Enabled bearer , priority 0 [ 360.846695][T11085] tipc: Resetting bearer [ 360.864024][T11084] tipc: Resetting bearer [ 360.882577][T11084] tipc: Disabling bearer [ 361.891560][T11104] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 363.045232][ T30] audit: type=1400 audit(2000000305.654:587): avc: denied { write } for pid=11114 comm="syz.1.1536" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 364.398177][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 364.915821][T11133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1543'. [ 366.432868][ T5814] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 366.631781][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 366.816966][ T5814] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 366.849745][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.923870][ T5814] usb 2-1: Product: syz [ 366.935547][ T5814] usb 2-1: Manufacturer: syz [ 367.000983][ T5814] usb 2-1: SerialNumber: syz [ 367.019229][ T5814] usb 2-1: config 0 descriptor?? [ 367.098131][T11168] loop9: detected capacity change from 0 to 7 [ 367.122856][T11168] Dev loop9: unable to read RDB block 7 [ 367.128448][T11168] loop9: unable to read partition table [ 367.281163][T11168] loop9: partition table beyond EOD, truncated [ 367.301134][T11168] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 367.717490][ T5814] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 369.610044][ T5874] usb 2-1: USB disconnect, device number 19 [ 370.778225][T11213] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 371.810000][ T5874] hid-generic FFFF:0008:0003.000C: item fetching failed at offset 0/1 [ 371.856061][ T5874] hid-generic FFFF:0008:0003.000C: probe with driver hid-generic failed with error -22 [ 372.268875][T11228] syzkaller0: entered promiscuous mode [ 372.278190][T11228] syzkaller0: entered allmulticast mode [ 373.719179][ T9] hid-generic FFFF:0008:0003.000D: item fetching failed at offset 0/1 [ 373.765342][ T9] hid-generic FFFF:0008:0003.000D: probe with driver hid-generic failed with error -22 [ 373.782540][ T5933] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 373.787666][T11259] syzkaller0: entered promiscuous mode [ 373.801062][T11259] syzkaller0: entered allmulticast mode [ 373.820271][T11262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1582'. [ 373.838633][T11259] tipc: Enabled bearer , priority 0 [ 373.850631][T11257] tipc: Resetting bearer [ 373.869955][T11257] tipc: Disabling bearer [ 373.963684][ T5933] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 373.975029][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.999750][ T5933] usb 6-1: Product: syz [ 374.012888][ T5933] usb 6-1: Manufacturer: syz [ 374.039817][ T5933] usb 6-1: SerialNumber: syz [ 374.060844][ T5933] usb 6-1: config 0 descriptor?? [ 374.212103][T11272] vim2m vim2m.0: vidioc_s_fmt queue busy [ 374.239306][T11270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.291762][T11269] syzkaller0: entered promiscuous mode [ 374.302415][T11269] syzkaller0: entered allmulticast mode [ 374.388096][ T5933] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 375.407112][ T5933] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 375.429055][ T5933] usb 6-1: USB disconnect, device number 2 [ 376.447393][ T5965] block nbd0: Possible stuck request ffff88802604e000: control (read@0,1024B). Runtime 90 seconds [ 376.458503][ T5965] block nbd0: Possible stuck request ffff88802604e1c0: control (read@1024,1024B). Runtime 90 seconds [ 376.469978][ T5965] block nbd0: Possible stuck request ffff88802604e380: control (read@2048,1024B). Runtime 90 seconds [ 376.481113][ T5965] block nbd0: Possible stuck request ffff88802604e540: control (read@3072,1024B). Runtime 90 seconds [ 378.507895][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.525287][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.966378][T11306] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1594'. [ 379.457833][T11328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1603'. [ 380.100715][ T30] audit: type=1400 audit(2000000012.020:588): avc: denied { mounton } for pid=11333 comm="syz.1.1601" path="/322/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.127298][ T30] audit: type=1400 audit(2000000012.020:589): avc: denied { getattr } for pid=11333 comm="syz.1.1601" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 380.220461][T11337] syzkaller0: entered promiscuous mode [ 380.237757][ T30] audit: type=1400 audit(2000000012.140:590): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 380.264874][T11337] syzkaller0: entered allmulticast mode [ 380.269538][T11340] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 380.635220][T11352] netlink: 'syz.1.1610': attribute type 3 has an invalid length. [ 381.529493][T11371] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 381.544758][T11371] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 383.477670][T11389] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 384.529837][T11404] syzkaller0: entered promiscuous mode [ 384.581038][T11404] syzkaller0: entered allmulticast mode [ 384.699844][T11409] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1625'. [ 385.546026][T11414] 9pnet_fd: Insufficient options for proto=fd [ 386.151423][T11428] siw: device registration error -23 [ 387.323403][ T30] audit: type=1400 audit(2000000019.230:591): avc: denied { setopt } for pid=11441 comm="syz.3.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 388.335839][T11454] 9pnet_fd: Insufficient options for proto=fd [ 388.382308][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 388.407878][T11458] syzkaller0: entered promiscuous mode [ 388.430513][T11458] syzkaller0: entered allmulticast mode [ 391.721047][ T30] audit: type=1400 audit(2000000022.980:592): avc: denied { ioctl } for pid=11503 comm="syz.4.1653" path="socket:[35608]" dev="sockfs" ino=35608 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 391.952823][T11511] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 392.081303][T11522] netlink: 'syz.1.1654': attribute type 10 has an invalid length. [ 392.297435][T11522] team0: Port device netdevsim0 added [ 393.096355][T11532] syzkaller0: entered promiscuous mode [ 393.144074][T11532] syzkaller0: entered allmulticast mode [ 395.886956][T11575] syzkaller0: entered promiscuous mode [ 395.892735][T11575] syzkaller0: entered allmulticast mode [ 396.030996][ T5874] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 396.072852][ T30] audit: type=1400 audit(2000000028.000:593): avc: denied { create } for pid=11578 comm="syz.4.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 396.181304][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 396.188018][ T5874] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 396.210137][ T5874] usb 6-1: config 1 has an invalid descriptor of length 57, skipping remainder of the config [ 397.045218][ T5874] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 397.054312][ T5874] usb 6-1: config 1 has no interface number 1 [ 397.060439][ T5874] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 397.076055][ T5874] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9244, setting to 64 [ 397.088872][ T5874] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.098177][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.108203][ T5874] usb 6-1: Product: syz [ 397.112605][ T5874] usb 6-1: Manufacturer: syz [ 397.117228][ T5874] usb 6-1: SerialNumber: syz [ 397.331249][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1681'. [ 397.774843][ T5874] usb 6-1: USB disconnect, device number 3 [ 397.873551][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.457682][T11610] syzkaller0: entered promiscuous mode [ 398.475091][T11610] syzkaller0: entered allmulticast mode [ 402.473223][T11668] syzkaller0: entered promiscuous mode [ 402.481216][T11668] syzkaller0: entered allmulticast mode [ 402.496506][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1706'. [ 403.819048][T11685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.604847][ T30] audit: type=1400 audit(2000000036.530:594): avc: denied { getopt } for pid=11697 comm="syz.4.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 404.714385][T11708] 9pnet_fd: Insufficient options for proto=fd [ 404.889816][T11717] syzkaller0: entered promiscuous mode [ 404.900657][T11717] syzkaller0: entered allmulticast mode [ 405.007342][T11718] vivid-004: disconnect [ 405.013166][T11718] vivid-004: reconnect [ 406.851670][ T30] audit: type=1400 audit(2000000038.710:595): avc: denied { execute_no_trans } for pid=11730 comm="syz.1.1725" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=37059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 407.679988][ T5965] block nbd0: Possible stuck request ffff88802604e000: control (read@0,1024B). Runtime 120 seconds [ 407.691409][ T5965] block nbd0: Possible stuck request ffff88802604e1c0: control (read@1024,1024B). Runtime 120 seconds [ 407.703479][ T5965] block nbd0: Possible stuck request ffff88802604e380: control (read@2048,1024B). Runtime 120 seconds [ 407.714970][ T5965] block nbd0: Possible stuck request ffff88802604e540: control (read@3072,1024B). Runtime 120 seconds [ 407.840770][T11743] syzkaller0: entered promiscuous mode [ 407.866666][T11743] syzkaller0: entered allmulticast mode [ 407.928166][T11750] 9pnet_fd: Insufficient options for proto=fd [ 407.997550][T11752] syzkaller0: entered promiscuous mode [ 408.028269][T11752] syzkaller0: entered allmulticast mode [ 408.343802][T11767] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.455142][ T30] audit: type=1400 audit(2000000040.260:596): avc: denied { create } for pid=11762 comm="syz.0.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 408.940202][ T30] audit: type=1400 audit(2000000040.270:597): avc: denied { write } for pid=11762 comm="syz.0.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 409.293986][T11773] kAFS: No cell specified [ 409.452015][ T30] audit: type=1400 audit(2000000041.280:598): avc: denied { mounton } for pid=11770 comm="syz.1.1738" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 410.331478][T11780] 9pnet_fd: Insufficient options for proto=fd [ 411.167010][ T30] audit: type=1400 audit(2000000042.430:599): avc: denied { create } for pid=11783 comm="syz.1.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 411.341884][ T30] audit: type=1400 audit(2000000042.440:600): avc: denied { bind } for pid=11783 comm="syz.1.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 411.363452][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'. [ 411.448657][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1743'. [ 411.568363][T11791] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1744'. [ 411.640700][T11791] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 411.669847][T11795] 9pnet_fd: Insufficient options for proto=fd [ 411.905664][T11803] syzkaller0: entered promiscuous mode [ 412.002390][T11803] syzkaller0: entered allmulticast mode [ 412.044965][ T30] audit: type=1400 audit(2000000043.850:601): avc: denied { ioctl } for pid=11808 comm="syz.3.1752" path="/dev/sg0" dev="devtmpfs" ino=749 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 412.379845][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'. [ 412.661855][ T30] audit: type=1400 audit(2000000044.560:602): avc: denied { nlmsg_write } for pid=11823 comm="syz.3.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 413.333580][T11834] 9pnet_fd: Insufficient options for proto=fd [ 413.625379][T11838] Bluetooth: MGMT ver 1.23 [ 413.647303][T11838] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 413.865897][T11866] tipc: Enabling of bearer rejected, failed to enable media [ 414.235486][T11881] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1763'. [ 414.517348][T11891] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 414.675093][T11896] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1769'. [ 415.156278][T11908] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 415.576987][T11910] fuse: Bad value for 'fd' [ 416.930207][T11927] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1779'. [ 419.402314][ T30] audit: type=1400 audit(2000000051.330:603): avc: denied { mount } for pid=11959 comm="syz.4.1788" name="/" dev="autofs" ino=36755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 419.473879][ T30] audit: type=1400 audit(2000000051.360:604): avc: denied { mounton } for pid=11959 comm="syz.4.1788" path="/366/file1/file0" dev="autofs" ino=36756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 419.543748][ T30] audit: type=1400 audit(2000000051.360:605): avc: denied { read } for pid=11959 comm="syz.4.1788" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 420.035951][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1792'. [ 420.902716][ T30] audit: type=1400 audit(2000000052.820:606): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 420.927370][ T30] audit: type=1400 audit(2000000052.820:607): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 420.950160][T11983] binder: 11977:11983 ioctl c0306201 0 returned -14 [ 421.266910][T11995] binder: 11977:11995 ioctl c0306201 2000000001c0 returned -14 [ 422.512469][T12001] tipc: Enabled bearer , priority 0 [ 422.524541][T12001] tipc: Resetting bearer [ 422.545120][T12000] tipc: Disabling bearer [ 423.598826][T12020] syzkaller0: entered promiscuous mode [ 423.605476][T12020] syzkaller0: entered allmulticast mode [ 423.985054][T12024] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.108480][T12034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.139439][T12034] vim2m vim2m.0: vidioc_s_fmt queue busy [ 426.708631][ T5831] Bluetooth: hci5: link tx timeout [ 426.724899][ T5831] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 428.781016][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 428.821511][ T30] audit: type=1400 audit(2000000059.880:608): avc: denied { accept } for pid=12081 comm="syz.5.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 429.134870][T12090] input: syz0 as /devices/virtual/input/input13 [ 429.152854][T12092] tipc: Enabled bearer , priority 0 [ 429.176847][T12092] syzkaller0: entered promiscuous mode [ 429.201833][T12092] syzkaller0: entered allmulticast mode [ 429.239572][T12091] tipc: Resetting bearer [ 429.290657][T12091] tipc: Disabling bearer [ 429.454445][ T5933] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 429.507283][T12103] binder: 12101:12103 ioctl c0306201 0 returned -14 [ 429.822063][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 429.831655][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.851656][ T5933] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 429.860716][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.979998][ T5933] usb 6-1: config 0 descriptor?? [ 430.449451][ T5933] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 431.384545][T12119] ip6_vti0 speed is unknown, defaulting to 1000 [ 431.890789][T12128] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1846'. [ 431.929572][T12130] tipc: Enabled bearer , priority 0 [ 431.969814][T12130] syzkaller0: entered promiscuous mode [ 431.978737][T12130] syzkaller0: entered allmulticast mode [ 432.058318][T12129] tipc: Resetting bearer [ 432.102903][T12129] tipc: Disabling bearer [ 432.117053][T12135] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1849'. [ 432.130859][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1849'. [ 432.687711][ T5888] usb 6-1: USB disconnect, device number 4 [ 433.911461][T12150] vivid-001: disconnect [ 433.916283][T12150] vivid-001: reconnect [ 435.153692][T12152] ip6_vti0 speed is unknown, defaulting to 1000 [ 436.346306][ T30] audit: type=1400 audit(2000000068.270:609): avc: denied { mount } for pid=12191 comm="syz.5.1866" name="/" dev="hugetlbfs" ino=38417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 436.456785][ T30] audit: type=1400 audit(2000000068.320:610): avc: denied { unmount } for pid=10616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 436.523795][T12197] vivid-001: disconnect [ 436.529494][T12197] vivid-001: reconnect [ 436.722338][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 436.736479][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 436.744663][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 436.753106][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 436.765634][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 436.877619][T12205] 9pnet_fd: Insufficient options for proto=fd [ 436.900533][ T30] audit: type=1400 audit(2000000068.810:611): avc: denied { write } for pid=12206 comm="syz.0.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 437.182579][ T5888] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 437.298554][T12221] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1879'. [ 437.311908][T12221] fuse: Bad value for 'group_id' [ 437.312204][T12202] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.316923][T12221] fuse: Bad value for 'group_id' [ 437.340963][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 437.352544][ T5888] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.370972][ T5888] usb 6-1: config 0 has no interfaces? [ 437.376488][ T5888] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 437.389203][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.410031][ T5888] usb 6-1: config 0 descriptor?? [ 438.326591][ T5965] block nbd0: Possible stuck request ffff88802604e000: control (read@0,1024B). Runtime 150 seconds [ 438.340836][ T5965] block nbd0: Possible stuck request ffff88802604e1c0: control (read@1024,1024B). Runtime 150 seconds [ 438.360502][ T5965] block nbd0: Possible stuck request ffff88802604e380: control (read@2048,1024B). Runtime 150 seconds [ 438.384381][ T5965] block nbd0: Possible stuck request ffff88802604e540: control (read@3072,1024B). Runtime 150 seconds [ 438.591800][T12237] 9pnet_fd: Insufficient options for proto=fd [ 438.884182][ T5831] Bluetooth: hci6: command tx timeout [ 439.093079][T12241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1882'. [ 439.174176][T12241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1882'. [ 439.199655][T12241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1882'. [ 439.233141][T12241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1882'. [ 439.279109][T12202] chnl_net:caif_netlink_parms(): no params data found [ 439.438030][T12202] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.446260][T12202] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.453818][T12202] bridge_slave_0: entered allmulticast mode [ 439.462039][T12202] bridge_slave_0: entered promiscuous mode [ 439.470293][T12202] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.477892][T12202] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.485345][T12202] bridge_slave_1: entered allmulticast mode [ 439.498302][T12202] bridge_slave_1: entered promiscuous mode [ 439.545059][T12202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.580542][T12202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.594793][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.601612][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.674913][T12202] team0: Port device team_slave_0 added [ 439.693200][T12202] team0: Port device team_slave_1 added [ 439.769826][T12202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.786561][T12202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.874180][T12202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.965223][ T5933] usb 6-1: USB disconnect, device number 5 [ 439.993902][T12202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.000867][T12202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.060104][T12202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.327640][T12202] hsr_slave_0: entered promiscuous mode [ 440.333827][T12202] hsr_slave_1: entered promiscuous mode [ 440.347800][T12202] debugfs: 'hsr0' already exists in 'hsr' [ 440.361605][T12202] Cannot create hsr debugfs directory [ 440.368369][T12252] ip6_vti0 speed is unknown, defaulting to 1000 [ 440.467964][T12265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.589272][ T30] audit: type=1400 audit(2000000072.440:612): avc: denied { ioctl } for pid=12262 comm="syz.5.1889" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 440.884371][T12202] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 440.955783][ T5831] Bluetooth: hci6: command tx timeout [ 440.968425][T12202] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 441.004995][T12202] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 441.058965][T12202] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 441.960720][T12202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.016759][T12202] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.084649][T12278] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1891'. [ 442.113453][T12278] fuse: Bad value for 'group_id' [ 442.133449][T12278] fuse: Bad value for 'group_id' [ 442.134224][T11870] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.145581][T11870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.185789][T11870] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.192956][T11870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.863773][T12202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.021571][ T5831] Bluetooth: hci6: command tx timeout [ 443.420290][T12202] veth0_vlan: entered promiscuous mode [ 443.428363][T12311] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 443.454343][T12202] veth1_vlan: entered promiscuous mode [ 443.587137][T12202] veth0_macvtap: entered promiscuous mode [ 443.659140][T12202] veth1_macvtap: entered promiscuous mode [ 443.823381][T12202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.891738][T12202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.014043][T11857] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.023435][T11857] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.042321][T11857] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.061693][T11857] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.413841][T11870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.443678][T11870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.532805][T11848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.540683][T11848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.556054][T12323] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.014177][T12339] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 445.101217][ T5831] Bluetooth: hci6: command tx timeout [ 445.546832][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1907'. [ 446.400225][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1911'. [ 446.749663][T12360] netlink: 'syz.3.1911': attribute type 10 has an invalid length. [ 447.332652][T12360] team0: Failed to send options change via netlink (err -105) [ 447.360072][T12360] team0: Port device netdevsim0 removed [ 447.637084][T12360] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 447.670618][T12378] vivid-001: disconnect [ 447.676535][T12378] vivid-001: reconnect [ 448.059853][T12382] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1918'. [ 448.864211][T12394] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 450.141908][T12433] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1929'. [ 450.605948][T12433] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1929'. [ 450.618741][T12433] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1929'. [ 450.628237][T12433] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1929'. [ 451.033734][T12453] vivid-003: disconnect [ 451.047788][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1933'. [ 451.596580][T12444] vivid-003: reconnect [ 452.038554][T12463] vivid-003: disconnect [ 452.762283][T12457] vivid-003: reconnect [ 454.562998][ T30] audit: type=1400 audit(2000000086.260:613): avc: denied { connect } for pid=12472 comm="syz.6.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 455.441394][ T5933] hid-generic FFFF:0008:0003.000E: item fetching failed at offset 0/1 [ 455.566012][ T5933] hid-generic FFFF:0008:0003.000E: probe with driver hid-generic failed with error -22 [ 457.163548][ T7383] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 457.293852][T12518] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 457.311043][ T7383] usb 7-1: device descriptor read/64, error -71 [ 457.551103][ T7383] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 457.680959][ T7383] usb 7-1: device descriptor read/64, error -71 [ 457.791404][ T7383] usb usb7-port1: attempt power cycle [ 457.875762][T12530] binder: 12529:12530 ioctl c0306201 2000000001c0 returned -14 [ 457.967991][T12534] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 458.131006][ T7383] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 458.232277][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'. [ 458.265935][ T7383] usb 7-1: device descriptor read/8, error -71 [ 458.901133][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 458.911549][ T7383] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 458.961473][ T7383] usb 7-1: device descriptor read/8, error -71 [ 459.078770][ T7383] usb usb7-port1: unable to enumerate USB device [ 461.653380][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 463.007027][ T42] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 463.151928][ T42] usb 7-1: device descriptor read/64, error -71 [ 463.411201][ T42] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 463.570991][ T42] usb 7-1: device descriptor read/64, error -71 [ 463.681323][ T42] usb usb7-port1: attempt power cycle [ 463.895978][T12621] cgroup: fork rejected by pids controller in /syz3 [ 464.020979][ T42] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 464.056035][ T42] usb 7-1: device descriptor read/8, error -71 [ 464.301274][ T42] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 464.333107][ T42] usb 7-1: device descriptor read/8, error -71 [ 464.448297][ T42] usb usb7-port1: unable to enumerate USB device [ 465.758248][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'. [ 465.926463][T12695] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1995'. [ 466.004176][T12697] syzkaller0: entered promiscuous mode [ 466.009786][T12697] syzkaller0: entered allmulticast mode [ 466.044740][T12697] tipc: Enabling of bearer rejected, failed to enable media [ 466.553694][T12701] syzkaller0: entered promiscuous mode [ 466.592737][T12701] syzkaller0: entered allmulticast mode [ 466.920491][ T30] audit: type=1400 audit(2000000098.840:614): avc: denied { ioctl } for pid=12712 comm="syz.6.2006" path="socket:[39699]" dev="sockfs" ino=39699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 467.052600][T12713] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.6.2006:12713 [ 467.060690][ T30] audit: type=1400 audit(2000000098.980:615): avc: denied { create } for pid=12712 comm="syz.6.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 467.130238][ T30] audit: type=1400 audit(2000000098.980:616): avc: denied { ioctl } for pid=12712 comm="syz.6.2006" path="socket:[41014]" dev="sockfs" ino=41014 ioctlcmd=0x61f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 467.229679][T12720] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 467.821080][ T7383] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 467.960997][ T7383] usb 6-1: device descriptor read/64, error -71 [ 468.063960][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 468.338161][ T7383] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 468.360961][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 468.372020][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 468.384276][ T5965] block nbd0: Possible stuck request ffff88802604e000: control (read@0,1024B). Runtime 180 seconds [ 468.395064][ T5965] block nbd0: Possible stuck request ffff88802604e1c0: control (read@1024,1024B). Runtime 180 seconds [ 468.406252][ T5965] block nbd0: Possible stuck request ffff88802604e380: control (read@2048,1024B). Runtime 180 seconds [ 468.419430][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 468.430965][ T5965] block nbd0: Possible stuck request ffff88802604e540: control (read@3072,1024B). Runtime 180 seconds [ 468.442173][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.452131][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.465380][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 468.483424][ T7383] usb 6-1: device descriptor read/64, error -71 [ 468.494452][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.608834][ T7383] usb usb6-port1: attempt power cycle [ 468.981237][ T7383] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 469.095783][ T9] usb 4-1: usb_control_msg returned -32 [ 469.110059][ T9] usbtmc 4-1:16.0: can't read capabilities [ 469.118101][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2016'. [ 469.131527][ T7383] usb 6-1: device descriptor read/8, error -71 [ 469.199224][T12749] 9pnet_fd: Insufficient options for proto=fd [ 469.381024][ T7383] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 469.441531][ T7383] usb 6-1: device descriptor read/8, error -71 [ 469.480909][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 469.571921][ T7383] usb usb6-port1: unable to enumerate USB device [ 469.644234][ T5874] hid-generic FFFF:0008:0003.000F: item fetching failed at offset 0/1 [ 469.653119][ T5874] hid-generic FFFF:0008:0003.000F: probe with driver hid-generic failed with error -22 [ 470.829223][ T7383] usb 4-1: USB disconnect, device number 16 [ 471.684759][ T7383] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 471.808180][T12785] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2027'. [ 471.823705][T12785] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 472.160966][ T7383] usb 4-1: Using ep0 maxpacket: 32 [ 472.184806][ T7383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.254045][ T30] audit: type=1400 audit(2000000104.070:617): avc: denied { accept } for pid=12782 comm="syz.1.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 472.422571][ T7383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.598241][ T7383] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 472.609197][ T7383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.620079][ T7383] usb 4-1: config 0 descriptor?? [ 472.627484][ T7383] hub 4-1:0.0: USB hub found [ 472.655245][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2028'. [ 472.909173][ T7383] hub 4-1:0.0: 1 port detected [ 473.928686][ T9] usb 4-1: USB disconnect, device number 17 [ 473.935027][ T7383] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 474.487410][ T31] INFO: task syz.2.1342:10392 blocked for more than 143 seconds. [ 474.501214][ T31] Not tainted syzkaller #0 [ 474.607023][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.650923][ T31] task:syz.2.1342 state:D stack:25752 pid:10392 tgid:10389 ppid:5812 task_flags:0x400040 flags:0x00080003 [ 474.706582][ T31] Call Trace: [ 474.709900][ T31] [ 474.735154][ T31] __schedule+0x1190/0x5de0 [ 474.753176][ T31] ? __lock_acquire+0x622/0x1c90 [ 474.772329][ T31] ? __pfx___schedule+0x10/0x10 [ 474.777244][ T31] ? find_held_lock+0x2b/0x80 [ 475.051002][ T31] ? schedule+0x2d7/0x3a0 [ 475.083451][ T31] schedule+0xe7/0x3a0 [ 475.094104][ T31] io_schedule+0xbf/0x130 [ 475.104001][ T31] folio_wait_bit_common+0x3d5/0x9e0 [ 475.120106][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 475.129559][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 475.142944][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 475.158430][ T31] ? __pfx___might_resched+0x10/0x10 [ 475.172589][ T31] ? compaction_free+0x148/0x3c0 [ 475.184222][ T31] migrate_pages_batch+0x1487/0x3bb0 [ 475.198352][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 475.213120][ T31] ? __pfx_compaction_free+0x10/0x10 [ 475.225018][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 475.239937][ T31] migrate_pages_sync+0x4c5/0x8a0 [ 475.250560][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 475.267454][ T31] ? __pfx_compaction_free+0x10/0x10 [ 475.279439][ T31] ? css_rstat_updated+0x1c2/0x510 [ 475.295322][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 475.315330][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 475.327700][ T31] migrate_pages+0x1b5f/0x23a0 [ 475.338586][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 475.351814][ T31] ? __pfx_compaction_free+0x10/0x10 [ 475.363821][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 475.381066][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 475.397504][ T31] ? pfn_to_online_page+0x1de/0x560 [ 475.415338][ T31] compact_zone+0x2018/0x4750 [ 475.427406][ T31] ? __pfx_compact_zone+0x10/0x10 [ 475.445670][ T31] ? __flush_work+0xa48/0xcc0 [ 475.467010][ T31] compact_node+0x1a3/0x2c0 [ 475.478302][ T31] ? __pfx_compact_node+0x10/0x10 [ 475.490368][ T31] ? __lru_add_drain_all+0xec/0x6f0 [ 475.501231][ T31] sysctl_compaction_handler+0x141/0x210 [ 475.513682][ T31] proc_sys_call_handler+0x445/0x570 [ 475.524586][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 475.530539][ T31] ? splice_from_pipe_next+0x1f7/0x5d0 [ 475.536246][ T31] iter_file_splice_write+0xa24/0x12e0 [ 475.543309][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 475.549306][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 475.555180][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 475.561276][ T31] direct_splice_actor+0x192/0x6c0 [ 475.566465][ T31] splice_direct_to_actor+0x345/0xa30 [ 475.571932][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 475.578113][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 475.586842][ T31] do_splice_direct+0x174/0x240 [ 475.601027][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 475.606496][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 475.612466][ T31] ? rw_verify_area+0xcf/0x6c0 [ 475.617227][ T31] do_sendfile+0xb06/0xe50 [ 475.621671][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 475.626636][ T31] __x64_sys_sendfile64+0x154/0x220 [ 475.631879][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 475.637594][ T31] do_syscall_64+0xcd/0xfa0 [ 475.642233][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.648925][ T31] RIP: 0033:0x7f572878f749 [ 475.653389][ T31] RSP: 002b:00007f57269f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 475.662111][ T31] RAX: ffffffffffffffda RBX: 00007f57289e5fa0 RCX: 00007f572878f749 [ 475.670079][ T31] RDX: 00002000000000c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 475.678559][ T31] RBP: 00007f5728813f91 R08: 0000000000000000 R09: 0000000000000000 [ 475.686887][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 475.695009][ T31] R13: 00007f57289e6038 R14: 00007f57289e5fa0 R15: 00007ffd5ef66558 [ 475.703101][ T31] [ 475.706144][ T31] [ 475.706144][ T31] Showing all locks held in the system: [ 475.713954][ T31] 1 lock held by khungtaskd/31: [ 475.718790][ T31] #0: ffffffff8e3c4020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 475.728693][ T31] 2 locks held by getty/5574: [ 475.733371][ T31] #0: ffff8880352ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 475.743582][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 475.756142][ T31] 2 locks held by kworker/1:7/5888: [ 475.761430][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 475.771695][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 475.780420][ T31] 1 lock held by udevd/5968: [ 475.785149][ T31] #0: ffff888143b20358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 475.794520][ T31] 1 lock held by syz.2.1342/10392: [ 475.799615][ T31] #0: ffff888021b7a420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 475.809712][ T31] [ 475.812312][ T31] ============================================= [ 475.812312][ T31] [ 475.820746][ T31] NMI backtrace for cpu 0 [ 475.820762][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 475.820780][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.820789][ T31] Call Trace: [ 475.820795][ T31] [ 475.820803][ T31] dump_stack_lvl+0x116/0x1f0 [ 475.820826][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 475.820839][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 475.820857][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 475.820882][ T31] watchdog+0xf3f/0x1170 [ 475.820910][ T31] ? rcu_is_watching+0x12/0xc0 [ 475.820929][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.820944][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.820962][ T31] ? __kthread_parkme+0x19e/0x250 [ 475.820978][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.820994][ T31] kthread+0x3c5/0x780 [ 475.821005][ T31] ? __pfx_kthread+0x10/0x10 [ 475.821016][ T31] ? rcu_is_watching+0x12/0xc0 [ 475.821031][ T31] ? __pfx_kthread+0x10/0x10 [ 475.821042][ T31] ret_from_fork+0x675/0x7d0 [ 475.821063][ T31] ? __pfx_kthread+0x10/0x10 [ 475.821074][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.821096][ T31] [ 475.936708][ T31] Sending NMI from CPU 0 to CPUs 1: [ 475.942889][ C1] NMI backtrace for cpu 1 [ 475.942903][ C1] CPU: 1 UID: 0 PID: 12420 Comm: kworker/u8:60 Not tainted syzkaller #0 PREEMPT(full) [ 475.942919][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.942928][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 475.942952][ C1] RIP: 0010:write_comp_data+0x0/0x90 [ 475.942971][ C1] Code: 48 8b 05 bb 03 e5 11 48 8b 80 70 16 00 00 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 87 03 e5 11 65 8b 05 98 03 [ 475.942984][ C1] RSP: 0018:ffffc900047cf080 EFLAGS: 00000286 [ 475.942994][ C1] RAX: 0000000000000000 RBX: ffff8880d52fcf00 RCX: ffffffff816dd3cc [ 475.943003][ C1] RDX: ffff8880d52fcf00 RSI: ffff8880552fcf00 RDI: 0000000000000006 [ 475.943011][ C1] RBP: ffff8880552fcf00 R08: 0000000000000001 R09: 0000000000000001 [ 475.943020][ C1] R10: ffffffff908237d7 R11: 0000000000000001 R12: 0000000000000000 [ 475.943028][ C1] R13: ffff888055811800 R14: ffff888055811800 R15: ffffc900047cf300 [ 475.943037][ C1] FS: 0000000000000000(0000) GS:ffff888124af6000(0000) knlGS:0000000000000000 [ 475.943052][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.943060][ C1] CR2: 00007f1ff5fb6ad8 CR3: 0000000032733000 CR4: 00000000003526f0 [ 475.943069][ C1] Call Trace: [ 475.943073][ C1] [ 475.943078][ C1] __virt_addr_valid+0x2c/0x610 [ 475.943097][ C1] kasan_addr_to_slab+0xd/0x80 [ 475.943120][ C1] kasan_record_aux_stack+0xe/0xc0 [ 475.943139][ C1] kvfree_call_rcu+0x86/0x520 [ 475.943160][ C1] cfg80211_update_known_bss+0x4f3/0x1300 [ 475.943178][ C1] __cfg80211_bss_update+0x1b7/0x23c0 [ 475.943194][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 475.943214][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 475.943229][ C1] ? cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 475.943248][ C1] cfg80211_inform_single_bss_data+0x7ba/0x1df0 [ 475.943266][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 475.943281][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 475.943310][ C1] ? stack_trace_save+0x8e/0xc0 [ 475.943329][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 475.943347][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 475.943368][ C1] ? cfg80211_inform_bss_data+0x22b/0x3be0 [ 475.943384][ C1] cfg80211_inform_bss_data+0x22b/0x3be0 [ 475.943400][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 475.943414][ C1] ? __kmalloc_noprof+0x32f/0x880 [ 475.943431][ C1] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 475.943447][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xc79/0x2fe0 [ 475.943462][ C1] ? cfg80211_wiphy_work+0x2c7/0x580 [ 475.943480][ C1] ? kthread+0x3c5/0x780 [ 475.943491][ C1] ? ret_from_fork+0x675/0x7d0 [ 475.943509][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 475.943529][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 475.943548][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 475.943565][ C1] ? _ieee802_11_parse_elems_full+0x626/0x44e0 [ 475.943587][ C1] ? __lock_acquire+0x622/0x1c90 [ 475.943601][ C1] ? ieee802_11_parse_elems_full+0x143/0x3780 [ 475.943618][ C1] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 475.943638][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 475.943653][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 475.943671][ C1] ? find_held_lock+0x2b/0x80 [ 475.943688][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x18e1/0x2fe0 [ 475.943704][ C1] ieee80211_ibss_rx_queued_mgmt+0x191b/0x2fe0 [ 475.943717][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 475.943733][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 475.943747][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 475.943761][ C1] ? rcu_is_watching+0x12/0xc0 [ 475.943783][ C1] ? kcov_remote_start+0x3c9/0x6d0 [ 475.943803][ C1] ieee80211_iface_work+0xe2e/0x1360 [ 475.943818][ C1] ? rcu_is_watching+0x12/0xc0 [ 475.943835][ C1] cfg80211_wiphy_work+0x2c7/0x580 [ 475.943855][ C1] process_one_work+0x9cf/0x1b70 [ 475.943871][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 475.943889][ C1] ? __pfx_process_one_work+0x10/0x10 [ 475.943905][ C1] ? assign_work+0x1a0/0x250 [ 475.943918][ C1] worker_thread+0x6c8/0xf10 [ 475.943935][ C1] ? __pfx_worker_thread+0x10/0x10 [ 475.943948][ C1] kthread+0x3c5/0x780 [ 475.943960][ C1] ? __pfx_kthread+0x10/0x10 [ 475.943972][ C1] ? rcu_is_watching+0x12/0xc0 [ 475.943989][ C1] ? __pfx_kthread+0x10/0x10 [ 475.944001][ C1] ret_from_fork+0x675/0x7d0 [ 475.944019][ C1] ? __pfx_kthread+0x10/0x10 [ 475.944031][ C1] ret_from_fork_asm+0x1a/0x30 [ 475.944051][ C1] [ 478.603437][ T5187] udevd[5187]: worker [5968] /devices/virtual/block/nbd0 timeout; kill it [ 478.615144][ T5187] udevd[5187]: seq 15639 '/devices/virtual/block/nbd0' killed