last executing test programs: 4m26.780328643s ago: executing program 2 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000280)='erofs\x00', 0x0, 0x0) 4m25.691124479s ago: executing program 2 (id=421): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket(0x10, 0x3, 0x9) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xc076) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, 0x0, 0x1, 0x103) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8101}, 0x8800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = socket(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0xfffffffe}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r3, @ANYRESHEX, @ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001", @ANYRES32=r2], 0xa8}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000001040), 0x0) gettid() r4 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r4, &(0x7f0000000580)=""/251, 0xfb, 0xfffc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRES64=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x4, 0x100}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) 4m24.756088198s ago: executing program 2 (id=424): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0xfffffffd}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@deltaction={0xa0, 0x31, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcba0}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x700000}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40081}, 0x4c8d0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$alg(0x26, 0x5, 0x0) write$cgroup_int(r0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xe, 0x400eeb4, 0x13}, 0x2c) socket$kcm(0x10, 0x2, 0x0) 4m24.316939036s ago: executing program 2 (id=427): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_flags_allowed={0x2, 0x21}, @ioring_restriction_sqe_op={0x1, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1a}, @ioring_restriction_sqe_op={0x1, 0x2}], 0x19) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 4m24.230736304s ago: executing program 2 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000680)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000400)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r4}, 0x10) sync() 4m21.980078885s ago: executing program 2 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000280)='erofs\x00', 0x0, 0x0) 4m21.319383052s ago: executing program 32 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000280)='erofs\x00', 0x0, 0x0) 12.018000105s ago: executing program 3 (id=677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket(0x2, 0x803, 0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000c00", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001900010000000000000000000a000000000000"], 0x30}}, 0x0) 10.845806655s ago: executing program 3 (id=680): syz_usb_connect(0x3, 0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c7baf82063074110bd640102030109025800010000e0000904b80006ff6f090009058e1c100004fff9072501020000010930103be6155ecf69d396ac6705031040000501d609050910a31c30b2ff07250182020b0009050a0210000205cb090501040002098006020509050010200010060a15"], 0x0) (async) r0 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x40, 0xc, 0x1, 0xdd}, {0x9, 0x5, 0x9, 0x2, 0x200, 0x4, 0x5, 0xff}, {0x9, 0x5, 0x6, 0x3, 0x20, 0x7, 0x9, 0x7}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x11, 0xe4, {0xe4, 0x24, "b6df2c8bad51bbbe6e20ea1cf9a03d6cd87e6d22443b89adaba6591015d5c470d4deb047a3b0dde75b58ec2b563dd4b9eeb9c8a3a38477b3cab03ceb9be00a39d67a767d4b55308a6e8504c4ec662987bca67937533729cb34e196d1a614a006c979e945d17101a69fafbd6d7f12c289ac99829aa264b4b9aa9847cb1b0fbde96ec9af3c9be441333763b45a1c147e9b65b395d0ceee878afed3d2e6b1629ddb95290a17dc310d1c8c059cf4cb10ea70b4dbf27dcd5143e5fcc539084ad7ae4cf73119eb4f68948a1ce0393eecc58db86872a912bc0fa0fb97058a0659e7736e341f"}}, &(0x7f00000001c0)={0x0, 0x3, 0x27, @string={0x27, 0x3, "06ebbac23c752f6f6f389b18a3998e835ef738ac6e8f1552d8783da918af10b02e5830f137"}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000240)={0x0, 0x0, 0x15, "021c92cc68be72b4a91052710d79eea4e1c076fd90"}, &(0x7f0000000280)={0xa1, 0x1, 0x400, "d18d7bd4b898e34b293d62360e879f2ffff0c38145941cfeceab6773cab7043534e51d2684f49faaa9d3740552f78174f8eb23ff18d76bfb446e19158f7f40c810e2527f27216282b0df914a91f5209588f82044f9735a1ac9c2eb8d2025a702c29ff0e73786407e62a81b3c89963de017cf3cc1d75ab548ca5d2e1627cec65881cf62b4609542ee58d9e7baa997e4c33390a86f83c6666d219f36b04bf58864622927367df35a86b3d0ea5329de669a87b2d2164363202db79ce2df1ea36d7be8ea95857708bdde2498682ba3c1f7bbf023bf37ae20e06a0e652e925cf63e53c224e96543b65c8f3b21d0beb6a6c56ec81a2b8dc549c11237b27c6afc69265883be854a9b1eac6638eb0834596cf233a3761302549b5edf0f852d2f8dc8c8afdba9b658f20cc662110078fe30809731c0e136d9e4f21489c7a273b1722b75ee973d26adadc47dc40b5a43dd86635df00fb3933067837a4fae061c65047fafe8392b7d98f7c423960665a3f5c7f69f1d7f0ef42071a60b44434e0f45c3453db6176b07668c0c3b4b197071ce1cf147af9e5240645b0045005cd8ecaa435531665ed6f55c292d5fae393caef39ab9bf38a1fe0e6969b5560ee0d0e468ef8e92fc6a56a15aa14137f21468ff7fbab3cc7893c41ba3a1040d5ad3f0a9529b579de939bd74021dabe51a73593cdcdf5328573f118c7eef609696ce28e75d761f186e808429cc895c4f4b199199efd8318950eab5078a5087d86fa3ad1a78a491070ad63c0597604bd40a4e9f9a8008050572c78ab966864b3cb89ab81d56f5103ceb263fab5930e7f5311c930b322326d48641094ba09b52a53e3b09eb0b0f12332f7e8b884bc84bcfa38c113d2beda3aeafd9fdacc32c14c2f2426ed86dadcc2bd3039d3478151150b417b754613c44ba35a23a6b203df80780b93285004e5dba5792f1d26885bd82f5dfed237da064ebb95f7f1beed08348287024cace1841bc81d791e545efa933b8b7fc0c6dff2d6ea9cca71778b4568a0150427f274d810c4d47f6797b39e3f26634baab52ea801bd179e12df8c9831806b9a90a88d267b88a8166470a7149e64a66b97b113cddb99f21539b6d30a98a06e8fb70b89346ac713a7f3a7e920e65fd070cd8be399b4df72d9674b4b741b6e3707c31f6764759c796b0effd1ce3db78da6a76d3fcba7e040552cc70a3f2fa2de498fd079b4a7f5844c653e6be48b8de2a443d44770145d6a6928ddce7272adf28ba40caf3b5528a588f559fcff376d3f2bb6c09ed44fdecb53a76186b299a17578b68c68db1335272c8e818e4bbbd13dbfd100b64ab4ec90b252139ecff0c30fcfb5327fc4f4d25e5dc1712b3f41a4f8e131a91c5b85f3c8fccb257ebfaee7707c641d0b33ce48615d30da485f0a2a472c1109c189530aba0885ad47b7ee34e3f2064efa71be779"}, &(0x7f00000006c0)={0x21, 0x0, 0x4, '%)2Q'}}) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x0, 0x3, 0xa, 0xf}, {0x9, 0x5, 0xe, 0x2, 0x8, 0x3, 0x1, 0xd5}, {0x9, 0x5, 0x0, 0x3, 0x200, 0x20, 0x2, 0x80}}}}}}]}}, 0x0) 9.371896192s ago: executing program 3 (id=686): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a4, 0x10, 0x7ffc, 0x38d}, 0x0, &(0x7f0000000100)) getrlimit(0x7, &(0x7f0000000140)) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x2, 0x4, 0x0, 0x7}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) nanosleep(&(0x7f0000000300)={0x44, 0xfffffffe}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x15) epoll_pwait2(r4, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000240)={[0x7fffffff]}, 0x8) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 6.238361216s ago: executing program 3 (id=690): r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x4, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x8, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x1, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x7f}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x400, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0x8, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x7, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x180, 0xb2ee, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffd}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x5}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92c4, 0x130, 0xfff, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x2}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 5.865328671s ago: executing program 1 (id=693): syz_open_dev$loop(0x0, 0x75f, 0xa382) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x737222) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) ioprio_set$pid(0x2, 0x0, 0x4000) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) (async, rerun: 32) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) (async) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="3fd56ddd0394694a1f1d08af1735d16a51f0f2d946e857c6a43db4f68c90a91156aaba41d802fc83399bfca1bb37d036e61d2a7d37108c5ed0f440eb85eed4b0594e87108c59ef839471114ff948", 0x4e}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f00000006c0)="22ffb8517ddc31f6bfdd4e1d10cbbbd7c711950228cd1a5178172b4cd66519af680a31c5d8c98016c2064e7c1879e8c1c0e0d025438175c9b24e9119ced979f8c3ee1a3622c553d4d5717a48443d04a4a77950a8e3545d35d7a0654bdc0df9b8eefe355f80a03dac0fcb0ca3bd66cb364e5e293445b094d69fb31f05a965180926debcf1d6496da8c7ebe98ec3fa04fe7cecd92253b07ee0aa377f3afe5a926dac7fc7a45e", 0xa5}, {&(0x7f0000000180)="e5406738dfba920b0dc23f10be8aa6336f19c3b4bfa4310e3ca31539cd43d4a7dac8f127cd6e13153adb382b8c", 0x2d}], 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x120, 0x40004000}], 0x1, 0x18001) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) 5.292329274s ago: executing program 1 (id=696): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000040)=0xffffade5, 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 5.028905923s ago: executing program 4 (id=697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x1011, &(0x7f0000001100)={@multicast, @multicast, @void, {@x25={0x805, {0x0, 0x80, 0x13, "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"}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002600)={0x0, 0x0, 0xd9}, 0x0, 0x0, &(0x7f00000026c0)="878d6303953135fcf851412e7de488b3896566772ad2e6fa0fcb84e0cbc93ffa9ce35ec53a003ca35cacc6b4e57af82f95a7d2d93aca389f353ff5da9e3419f4cd3231e8ab282d986e4f438923e50a60a1fa57d082aeacb1ce6db9535ad499df2b07ca1a0b577b3ce1b07c22551291d23378c9c0c14aa282081e4f17b99ff8eb934cbd97a6e8647b2fa9513a0d0efaebddda8d0b6490024daa7974fe6b5915fc5647b636c09da42d3c372698b8e86beb5bd9994e3c86b6afa97d2be7e78068cb649dba03c09e5832203cd71ada5e5d3ba2d62123566bcfa1bd") r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x8000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000840)={0x1c, 0x22, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="b7"]}, 0x1c}], 0x1}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x7, 0x512, 0x2, 0x4, 0x2, 0x4, 0x8, 0x1, 0x7, 0x1, 0xb, 0x3, 0x3}, {0x80, 0x4966, 0xff, 0x0, 0xc, 0x8, 0x40, 0xd6, 0x4, 0x4, 0x2, 0x5, 0x3}, {0x5, 0x4, 0x0, 0xc, 0x9, 0x6, 0x1, 0x3, 0x4, 0x5, 0x84, 0x0, 0xb}], 0x3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.174244324s ago: executing program 1 (id=701): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r2 = dup(r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x5, 0xc1, &(0x7f0000000040)={0x20, 0x1}, 0x8, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.141558517s ago: executing program 5 (id=702): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) close(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x7, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x24}, {0x80a0000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0x3, 0x1}, {0x0, 0x41000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0xfec00000, 0xc, 0x0, 0x2, 0x7, 0x8, 0x40, 0x26, 0x5, 0x80, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x6000, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000180)=0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a300000"], 0x70}}, 0x24044850) socket$netlink(0x10, 0x3, 0x0) 3.998969622s ago: executing program 4 (id=703): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f94924fc60040011", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004005}, 0x24000050) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.489907612s ago: executing program 5 (id=705): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000003680), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r7, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000004f40)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000005040)=0xe8) fstat(r2, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r9, &(0x7f0000005200)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000dc0)="bb7f09f30bf3f6a5785f32fb35baa49dd6f75a164692c45ac5052446d4ff270f6bd7e61ba5aefe8c0c3864b695203b82fb89f1bed2ed50c63da9eb66030d36951a5b7c983bbc9ba8d1ddd3cf454a4577ef599ad5231b8fe3248101858b6fddd7e769f57b8ae691f57110c3eeefaf248dad01700cbe2ad863c6347a930dca6082ef97e0355a53d7981bb5cea751d0fdba94b4e63f6255cc1bb7e29fbeffe80e34e241736f7a917fc2dc60bd3897ef91b7ab623354aa4cf21d58cc2c5b7578e8371ffae99fec479694dfc00a2ae1b58bf89da20d31517a41fda9553d91", 0xdc}, {&(0x7f0000000240)="3136af422a8fea8dadf5508d41363068719fe4ffe61e2eec459b31437eddc138", 0x20}, {&(0x7f00000002c0)="6e365fa6c1", 0x5}, {&(0x7f00000004c0)="ca6d106e931d8ec5e041a7a15a3935cc4864577d875cb31da98b175d36bb2a8248126ee1e5ab938e292154ff01ac0bc73064ea0a578c394ab4f5eae1bcce2e1e725a83664a27e44cc60d38593e812dfb5511978c9a8bf07e6e13ecb6f0604636293c9cbaaf36a0c5ef14ac441f18165284738cec2596bd91b92e9183c8d3be0bacc9acc61c81791b60d72825eb7f2c788f5c71440c60fe98a4228135a93c8d8a4d39f1ac841c12b869a4f809ba874f305f17802b2a05b338bfa09badd746aefc6ad3a5e193b90faa30aaaf09badd05f6fcd13bf43cd44cff5cb35fdd704411aa0c9c0c38cb567b296c6c58600a5c0a9adce445957c66", 0xf6}, {&(0x7f00000006c0)="ebafbc345dae2d2c2339ccfd691b9dfb8fa22c59564789bea8b79c918e5a74f010912f139e97c028692230316bb47eac921826ba43494afdeba0b64b39484c89faf23404360a83f966ec522378bcd03b23a4a8f422f2df29d3be00f5882bd087d79d391445505440d4bf99b28deafd9654f5640439289fb4d5fb573ab829abb9e6b925a452134b0d291063e37fac04237e895688ed19920ad3d9189e039d1fca5e64355d5036c198cade6ccdfd1fd186f5e9bef995a2919783cf0c0800b54e75054dca", 0xc3}, {&(0x7f0000000600)="947aa48f6f84c4dad7544f84c02fd8cb396b48ab8d4b89349991c2a021197dccf5a5215ee8f6ace10a2934162611ebd81f756d1ffbd0ab8cd67c44057316d8045b6bd99fd94963a522708f06669fd41bad153a571b0e70", 0x57}], 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000100000008000000", @ANYRES32=r4, @ANYRES32=r8], 0x18, 0x801}}, {{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000b80)}, {&(0x7f0000000c00)="629e7525586619a318e264f67a744dc0fb65096373eb05c9defd9c65c30c3ddead4ed08680bb1cead41d1b0940de850c5c920d8bb0b4439c374bc43fb820bf9f2e0eea06aa4452d999de918764019c8703de4a70bbd0c99870e806e232e2645c3c28cc94713ba3258e6d0279b9a9c623bcf6c6d76403d6d3e078f83e1ca25e8b960b0a3902dbc883b2aae45726a1d46b6e6979ba5b52da011a4b1ad14dbf43eaf1dc3313ab9c4b56e0abee04859eb654691796355fac8f2fad6a53d73aca3bcd", 0xc0}, {&(0x7f0000000cc0)="8c6091ca0906e2bb12e2d9d7b01346e080a2c98b79376b54808b1b47edbff649ee05186a7433b34579128f3d5b3aad80ef4cdd30accaabe46ff4d5ef45dcd7078e263083336968c6cb7c16696356052f0ca9277221a3cd30dafbc73f344e53fa8408025b898eb9d4f0b548cc6db679873cce2b48677309b6adcbe0ff9f8a2887b2ac0f9d3a491956ee73cf46d08a062d5f73c940228526b40dcb6a75b360083ab54a5baa13fb150b77713948033058d6e2cfc857b196660330f40b2753394bd54027c466d698c37db9214a8c5acb90194253101f2beccda28d94a348a81c03", 0xdf}, {&(0x7f0000000840)="7415c2d94341f1c4bf0dd5b62978c5eb42f22e5348edc27030921953b64204b5b258d6bd1818c3f75342f73168e0fb596b1eeb191a786869517abf184888624997746f7dff7a09b0b511b17d95b0fb8e293362f861ead2a592c6fb6f1d986031f756f3660666e9fdaf08f8c74e517741860c6c6b04fdd32c3e924bb1ae14f8379245be50fa76e341d0c3b8c6ebdb0a7c60", 0x91}, {&(0x7f0000000900)="d090be508418ad0a0f3428c4412866b4ea9f8ec3b691cdaa602144d67bcc9194c0a8f034eaefcf7299f9823f64262fbd1820c84d32150baa0f5c8f1d7c34acda288b0d91ce4fa6af2c", 0x49}, {&(0x7f0000000980)="1bcf06f496bc8f3669a16be78f49a4abddb74cd80179eb2b59699e0e5254e5ea8c93b19ac52ef7924bf129cf52a7d5975003bf7e96d7a7840759f7916ec895a6ad010e5fd76710519943a231cdbe0ad5ea5ebb25cb3930b280fbfe6f1696767e32c3805665998a49b1b1b4d404c28df8859ce49c87037048a71662dce94212779a54694af5b8107b65ff17", 0x8b}, {&(0x7f0000001000)="7d3a6a35338369e67c2287784abe7a672d8a23cd9ab0a3f4067b2015f17f0047b946c97c6c19821c0431a4be0445146514872a3596a7ed10e4b2b63833ea9442d03ace0a7dc05339872aaa58f8eafd1fe690e7194aa7ca85e2b393129c9edc95f92d44f7df716041194c13faa7c9336aefbe689d9e1ce40bc50b560f29af0ea0", 0x80}], 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYRES32=r6, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYRES16, @ANYRES32=r2, @ANYRES32, @ANYRESDEC=r12, @ANYRES64=r5, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="000000001000000000000000010000000100000024000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r7, @ANYRESOCT=r10, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x40000}}], 0x2, 0x640c0) r14 = socket(0x10, 0x803, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_MESH(r14, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f00000001c0)=0x6000009, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r15 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r15, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 3.478986705s ago: executing program 4 (id=706): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x9}, 0x50) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000300)={r3, 0x7}, 0x8) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r5, 0x5006}], 0x1, 0x5) r7 = dup3(r6, 0xffffffffffffffff, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, 0x0}) 2.778720773s ago: executing program 0 (id=708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r2) io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x40, 0x2, 0x383}) io_submit(0x0, 0x0, &(0x7f0000000500)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010011a80100005800400058008000000000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c8008002c000000000005000600000000001400190002dd96197a"], 0x270}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000004c001280110001006272696467655f736c61766500000000340005800500190002"], 0x98}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 2.774695538s ago: executing program 3 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x1fd}) fchmod(r1, 0x40) unlink(0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 2.679720431s ago: executing program 5 (id=710): r0 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\xce\x00', 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x2}, r1) io_setup(0x1000, &(0x7f00000001c0)) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='keyring\x00', r2) keyctl$join(0x1, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) request_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='+F\x00', 0xfffffffffffffff9) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000400)={r3, 0x80000001, 0xfffffffffffffc57, 0x62}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x20001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='mm_compaction_kcompactd_sleep\x00', r5, 0x0, 0x48}, 0x18) add_key$fscrypt_provisioning(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)={0x0, 0x0, @a}, 0x48, r0) r6 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, r0) r7 = request_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@', r6) r8 = accept4$x25(r4, 0x0, &(0x7f0000000740), 0x80800) ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f0000000780)={0x18}) add_key(&(0x7f00000007c0)='cifs.idmap\x00', &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)="634cfc79eb4543531982e8d313a9bf1c6ed35a2a053bb14591300d549f4bd2e3ddac7874cee6e4f78f0c93d015de214334e139baeece24eef68e93f10a699d0d59f7b3b454730c43b1364b9c5c409c0455169e4aa300bf3183f278b521a7cb9bc11a4e422653e726827a89801f5fbcc77fd29d62ac29", 0x76, r7) splice(r8, &(0x7f00000008c0)=0x401, r3, &(0x7f0000000900)=0x4, 0x3ff, 0x8) read$FUSE(r5, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r9, 0x8, &(0x7f0000002980)=0x1) recvmsg$unix(r5, &(0x7f0000004bc0)={&(0x7f00000029c0), 0x6e, &(0x7f0000004b40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/179, 0xb3}, {&(0x7f0000003b00)=""/14, 0xe}, {&(0x7f0000003b40)=""/4096, 0x1000}], 0x4, &(0x7f0000004b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40) socket(0x3d, 0x3, 0x800) syz_open_dev$vbi(&(0x7f0000004c00), 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000004c40)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000004d00)={'syztnl2\x00', &(0x7f0000004c80)={'gretap0\x00', r11, 0x80, 0x700, 0x4, 0x7, {{0x17, 0x4, 0x2, 0x27, 0x5c, 0x64, 0x0, 0xd0, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x19}, {[@generic={0x94, 0x9, "4e892b1139e58b"}, @noop, @rr={0x7, 0x1b, 0xbc, [@rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010102, @multicast1, @loopback]}, @timestamp_addr={0x44, 0x14, 0xc9, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x4}, {@empty, 0x1}]}, @ra={0x94, 0x4, 0x5}, @lsrr={0x83, 0xb, 0xee, [@empty, @loopback]}]}}}}}) r12 = syz_open_dev$video4linux(&(0x7f0000004d40), 0x100000000, 0x0) ioctl$VIDIOC_QUERYSTD(r12, 0x8008563f, &(0x7f0000004d80)) r13 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r13, 0xc4c85513, &(0x7f0000004dc0)={{0x9, 0x6, 0x9, 0x8, 'syz1\x00', 0x78a4bf8b}, 0x1, [0x4, 0x80000001, 0x0, 0x4, 0x80000000, 0x4, 0x5, 0x4, 0x8000000000000000, 0x9, 0x81, 0x4, 0x15, 0x9, 0x81, 0x1000, 0x10001, 0x200, 0x0, 0x6, 0x9, 0xfff, 0xfffffffffffffff7, 0xdc6, 0x9, 0x5, 0x3, 0xf, 0x1, 0x0, 0x6, 0x1, 0xe, 0x8, 0xffffffff, 0x51f, 0xc000000000000000, 0x80000000, 0x7, 0x1, 0x10, 0x6, 0x1, 0x6, 0x2, 0x8, 0x5, 0x7e, 0x3, 0x0, 0xd3c3, 0x353a, 0xffffffffffffffff, 0x8, 0xffffffff7fffffff, 0xffffffffffffffff, 0x100000000, 0xe8, 0x9fef, 0x0, 0x7, 0x1, 0x6, 0x5, 0x1, 0xd53c, 0x0, 0x5, 0x2, 0x105, 0x2, 0xdd7, 0x10000, 0xaa, 0x1, 0x2, 0xa, 0x2, 0x6, 0x9, 0x2, 0x2, 0xfffffffffffffffa, 0x1ff, 0x4, 0x2, 0x4, 0x8, 0x0, 0x9, 0x5, 0x0, 0x4, 0x0, 0x1, 0x7, 0x1ff, 0xffff, 0x7102, 0x0, 0x1, 0x8fe, 0x1, 0x8, 0x0, 0x5ed8, 0x10000, 0x100000001, 0x1ff, 0x7fff, 0x5, 0x2, 0x2, 0x400040000, 0x4, 0xf73a, 0x3, 0x7ff, 0x86, 0x9, 0xfffffffffffffffb, 0x3, 0xf3b, 0x5, 0x5e02, 0x6, 0x8]}) 2.629624947s ago: executing program 4 (id=711): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="4010678b0fed"], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x40}, &(0x7f00000006c0)={0x40, 0x9, 0x1}, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.362142034s ago: executing program 5 (id=712): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x0, {0x1}, {0x0, 0xf0}, 0x1, 0x7f}], 0x4000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x88e59, 0x0, 0x3}) close_range(r1, 0xffffffffffffffff, 0x0) 2.147720579s ago: executing program 5 (id=713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd25, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000025300)=""/102392, 0x18ff8) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000520001002abd7000000000000200"], 0x1c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x174}}, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r9, 0x104, 0x7, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140001800500020001010000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1.952383833s ago: executing program 0 (id=714): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000a40)={0x0, [{0x2, 0x0, 0x109, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) 1.930842646s ago: executing program 5 (id=715): sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5f5, 0x34}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5f5, 0x34}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x1) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40008c0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@getstats={0x1c, 0x5e, 0x610, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x84) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000600)) (async) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000600)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000cc0)={0xb, 0x8, {}, {0xee00}, 0x2, 0x3}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000cc0)={0xb, 0x8, {}, {0xee00}, 0x2, 0x3}) r10 = fcntl$getown(r4, 0x9) r11 = geteuid() r12 = getgid() sendmsg$netlink(r4, &(0x7f0000000d40)={&(0x7f00000005c0), 0xc, &(0x7f0000000c80)=[{&(0x7f0000000700)={0xa0, 0x29, 0x8, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0xf3, 0x0, 0x0, @pid=r6}, @generic="73659aef7baedda2329d93e3feb63face76b9df7656d360abbcee5a3d7602ca4c6c32e5083ecf1ef9406db0958708db6642b49ee10807e91a8bbc8a6b95924f1057ec8c9eef8c99bbdd27598cb18823bd01c236e7390bf44c5c754d86b8f93424c88948675ebee0e6886b4b7a7ccc4", @typed={0x4, 0xda}, @nested={0x14, 0xc6, 0x0, 0x1, [@nested={0x4, 0xc4}, @nested={0x4, 0xc6}, @typed={0x8, 0xa2, 0x0, 0x0, @uid=r7}]}]}, 0xa0}, {&(0x7f00000007c0)={0x3ec, 0x15, 0x800, 0x70bd27, 0x25dfdbff, "", [@generic="d7bb4d7cafdf4724d7bdb400396c276e22208a3f3ef41b4e3c1f77a55f5d0b99ea83c5a3d2bd7d82a2387742cb498e32f4dd7dc5380f2bdfe9fbe9e2a6381fc3edd52aa3fc6cb333ab285217f3", @nested={0x1a4, 0x59, 0x0, 0x1, [@generic="2a1220f342d81fffe5cc828e320526ef8cdc564d6ba6886ac0c611341a6652a371b0d47a270d37b478ea5bab9ee374fbb840590487607fc5a420ac1f0588c12a683bc8c1100f39b0c28d4737446d33c91232f5ccfeb30015c8f278aeec63b94ed40a3cf7486858e700ddf0f6cc3e3737da728e7b742ea4834f749072ddd1be87f81badcb1079be15485c8e332764e52b6387ed9289a7a556a8b1d94505d2f856", @typed={0xfb, 0x26, 0x0, 0x0, @binary="2f2ae7a579783ba1c2f0a5befd0aceb95eb840f1f40bbd21139ab3e83b443665dc98fde1884307b03ae0fb5691d8028fe5933d80106831154c540275efa8220ccee24e67192c227100366c5f00eb05ef2aa2f32a9601d0c0e356ad418da6ef46aaa01e4787f09aa6619bc17f18744f297072148c4b6e96bcdf0c23593b75efd74c04e686706714260e79d4acde5891b55ab15a9f8fa186a84e24ae16280c9e0f9a8e9d34c0ac5678753a829ed30ec5c8ed29fb70cb8b1abd0331c9dfb6eb4249a9352fe79f22be3219857c55736eb03a91068b0f450121bec0b63809c45f7f804658723ea0e772b7ec378529c931abd68bb2bcb568034f"}, @nested={0x4, 0x2a}]}, @nested={0x1d9, 0x107, 0x0, 0x1, [@typed={0x77, 0x11a, 0x0, 0x0, @binary="060d41980d231b8cfe47552bf0bbf8a57933ef5c81a74624515875cff70ff8c345144d4b4bb49d14219ac1fc0f624b5b4f1b7892de8d62365cea07c1d1bb7048bb84e90fe0332ac6e756f36403283ee304e1ec8082c23d83c918c4a6e4fb3390e4616451d6f2d2cca9e9575895fdc8b1bd89e8"}, @nested={0x4, 0xd2}, @typed={0xc, 0xbd, 0x0, 0x0, @u64=0x8835}, @generic="3bb9b055b4ef2f9875204f216140cbeeddb5d8c618f7c0466df190f0eb05a99c4da7dfbc1a49cc69cdfd67b11e0d93af8dbecb684a89823d865b59b6e365074271c1ae0762f881f19cf912700075190a55c4eeaa340103e68abb336146dabb31fb293c43a79b2e3e", @typed={0xa, 0x32, 0x0, 0x0, @str='wpan0\x00'}, @typed={0x8, 0x1b, 0x0, 0x0, @fd=r4}, @typed={0x65, 0xa8, 0x0, 0x0, @binary="80b79e19eec526915186956aecfba176981f7a36ad9cea67d6bc8c1d016380fd737d60ee7981f4dd9a91e307d94bfe22243cd997ec1c30b7e89fd680aba007ae9436148c3af23d5365d8650929fabf89aa491db3337891b4576fb20eaf06f64f19"}, @typed={0x8, 0xd2, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}, @generic="0942868240a0f05b50ca59f438c4718bb13d036a01475dd4d6cc69c72d05e0c252ad83d31746d04057453e7adbbf43d467450a2c4d6deff2d7a6eb9d836655f3ff96e0a5825b5edb6dbc733bcc2036c8634205c58f7ac5f20535af6a721ea39084"]}, @typed={0xc, 0x139, 0x0, 0x0, @u64}]}, 0x3ec}, {&(0x7f0000000bc0)={0x88, 0xb00, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x75, 0x8a, 0x0, 0x0, @binary="95954e12be540c5742c8a6f576db4de6846e2f128f18f826902a5c043cba1ac9b50c87499dd8fd0cf02ef67a9817a7577b28d9863ef1f179f900ca250922d40698382cc5561e178dcc9c1571d7b1bf6142926a518497d8011cbe48129e9ca29c13e2054005e136e4d35a4b29249b24ec34"}]}, 0x88}], 0x3, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x40}, 0x20040044) r13 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000d80), 0x40, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r13, 0x941c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r13, {r11, r8}}, './file0/../file0\x00'}) statx(r4, &(0x7f0000000e80)='./file0\x00', 0x2000, 0x40, &(0x7f0000000ec0)) (async) statx(r4, &(0x7f0000000e80)='./file0\x00', 0x2000, 0x40, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x90010, &(0x7f0000000fc0)={[{@uid={'uid', 0x3d, r14}}, {@gid={'gid', 0x3d, r12}}, {@uid={'uid', 0x3d, r9}}, {@uid={'uid', 0x3d, r15}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}], [{@fowner_lt={'fowner<', r7}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) (async) mount$bpf(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x90010, &(0x7f0000000fc0)={[{@uid={'uid', 0x3d, r14}}, {@gid={'gid', 0x3d, r12}}, {@uid={'uid', 0x3d, r9}}, {@uid={'uid', 0x3d, r15}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}], [{@fowner_lt={'fowner<', r7}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) umount2(&(0x7f00000010c0)='./file0/../file0\x00', 0x4) syz_usb_connect(0x5, 0x5b9, &(0x7f0000001100)={{0x12, 0x1, 0x0, 0xc7, 0x4b, 0x31, 0x0, 0x2357, 0x138, 0x85d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a7, 0x1, 0x0, 0x2, 0xa8b531e349967108, 0x2, [{{0x9, 0x4, 0x15, 0x8, 0xe, 0xff, 0xff, 0xff, 0x3, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "86774f"}, {0x5, 0x24, 0x0, 0xe8}, {0xd, 0x24, 0xf, 0x1, 0x3a, 0x81, 0x5, 0x4}, {0x6, 0x24, 0x1a, 0xae7}, [@mbim={0xc, 0x24, 0x1b, 0x1000, 0x6b, 0x6, 0x12, 0x90, 0x7}, @dmm={0x7, 0x24, 0x14, 0xd, 0xfff}, @obex={0x5, 0x24, 0x15, 0x6}]}], [{{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xd, 0x3, 0xb7, [@generic={0xf5, 0x8, "936b7f114d6051f45dec8aee89aa2ca9293c2147267b658c2502255ee3fea6bb78f40f3b954b40cf10b1aa611d2ed4aa838cc59bbc7e7f552461d5e5a1932ee7b4cb0e7ece848c1c243f12106c64146d91690e02dba8f493cceceba11094fca66f541a793bfc3820b4ae1213c5dcccfb003aba4265feb911bdb1024c80403e42c99f4549928ed82260d18d0adb7f55dbbac1fb7d5c111b463555558ae5c4dc7cb10d876122fc770efe675c4b3b1884093a5fb2fd113ef593f116ad774d6c17e61b19c94db5c05bbe8d9674b30424e71214d6c14f8fe037d8bc30ba5b8757540cc8366a9044e271e2c740672194c1e3102872d6"}, @generic={0x1e, 0x23, "f87e4072c3f784f11e110525c123e3f21e571649b4d5ac3ac482b74e"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x6, 0x40, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x7, 0xa, 0x2}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xd7, 0x6, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x1a}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x3, 0x81, 0x7f}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0xc, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x4, 0x401}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0xfe, 0x7, 0x9, [@generic={0xbf, 0xc, "d6fb365c7576aee6f5d8bd0a2003162573924cce0e7f1d2dd3f3c98b061ac4430c531ca51922ec3d7feaa748320175408757669e9aae6bda1b1ecda12f9cd9c7fbe54cd916ae3305843e1d8f8999059c75ccb273084549e49b9fd43ad0419c84a221ce5d25863a3cda0823a385c89f022a5030daf40ae3d339e5f7132a334d6df7dce33631e3b8074f4a971c3f3e082cef08cb6871d25fe460d4130c8d1a94a22fdddf65d7c90ce33b5c0b3a9e539cd6eb0d797f2ff1f884d61dbe48c0"}, @generic={0xc2, 0xe, "d7c74b48f9b25d9ad7cd4d18a92bf676466abab7c7ba63807365830d164e2df07c6461f1650d8638941a651862b916cbee1180484a9420ce63218b88020db536bc29d7cd2236c7f28d254d136bbd1a6c9de885e504653c8c0c219b1df2d2bf9206030f4ce4f8ee4c2afdb761636a6659eece270201a1f59a3eeed9515ac80d36df7ae84ba08b1d1ce8eeb69104974b16407157350f907d2e87c8df02dfe0eb8fe78cae256b5c52f01d537e66ec415cdfe4f4d783d145c72b3b616ebe9c40b509"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xb, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0xb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x1ff}, @generic={0x49, 0xe, "a064d9cf0b4317462056c22133ab4d9a8e6d2edd53e1005282754c6042b6f04d5447d12c74c54d89af7c65718067336ffba3008cb3ae0f2ce45a936085d8c92574589f0153f0e7"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x0, 0x6}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x2e, 0x6, 0x10}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x7, 0x4, 0xf8}}, {{0x9, 0x5, 0x7, 0x2c, 0x48, 0x2, 0x9, 0x4, [@generic={0xa2, 0x1, "571f72e3c17b36abbc41360e41ff4ea6f54b783a9198cfd28b88fdddc762e7cb09df58f6af3a666813e501f1d6fc207e48587bc0e0a319071b90d07a84c4aee318d032dac285a000998316a672a88ae88e7f54ee596159dac2e5e246d81eeeebbc863b47e4208f1b54490b3747ecf93e1049e7f932723c8b7b4f0f8f2e1066bbb6715af1e5ae00ca60edaf6d8a9b186afe97948da3a7be06a6e832b2992fd370"}, @generic={0xab, 0xb, "68bb79297ae97c7368a3df2650ee3070e2cdaaaa4b0c6b952fa6bca1e0ca2d440e40f56ebc60449adc438d6a6cc2c23de9eb494cf224756421b4b5b779ce428e3171bade5cd498851033a0fa7b25d0cc52198d39ff62c02f745c148254d0a8644d91565f1c99d83d62473dc661286878079b252ae6c5d0936d2087d9a8503510889436dab8edd7703af4ab28466a649d82880c2e52b09b259fb889ce78903280944020a2bdbfe1fd14"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x5, 0x1, 0x4, [@generic={0x84, 0x4, "d169fd43398c18b90d2e18127bc8fd9b0a6e265c8997ef7468fe1baad2fc91b0b306e2ab18fb7c1d9c67eff96b501a09da04ea74f7f43c7a83c6a499be9576286c6a74d3d1d7b71d2a079c2a83958839bab1740939074102494c5f5c7cba085e8b5cfd2a7717699f2218d8a29a4f811cc6b953df818a0430d5ce116eac0720212008"}]}}]}}]}}]}}, &(0x7f0000001980)={0xa, &(0x7f00000016c0)={0xa, 0x6, 0x300, 0xf, 0x7, 0xfd, 0x8, 0x8}, 0xbd, &(0x7f0000001700)={0x5, 0xf, 0xbd, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xf, 0x5, 0xef5}, @wireless={0xb, 0x10, 0x1, 0xedaf5cf46d788608, 0x4, 0x7, 0x0, 0x0, 0x1}, @generic={0x82, 0x10, 0x1, "4aa1fde67cca3b3a9bef9b1063a0593dce9d75ca98a06c30761f81675d78ba38d111293b7defb62ead616af689de3e237642ed5912733817e1337b05d7533654077b2f2ea1efc626507d79bf3e736a33deac5ad93a149971b1601ffadc5b48fb85c81ddc0fff092346ad746a8fbaacf63cef5949967012b00716cdd7acee0c"}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x2, 0xff0f, 0x4, [0xff0000, 0xff0000, 0xc000, 0xc0cf, 0xf0, 0xff000f]}]}, 0x3, [{0xef, &(0x7f00000017c0)=@string={0xef, 0x3, "946b37f021c8403465c449c38178832f9c9f201c24c6db812840623fc546c7cb2de8dc30805a4da4f8ee9f523c231162900cce090f23e90cf08e4e5632aca5518d44a0b1132d90a3e21ed65499366acf9f51534c1af4c5026e70a30a830efccf321914f6938910c7f31b10b8e8b86a8ee4c177e8a68780ac6f7c21ab6833e383c0ae14c1c7e879aec4463fbf5436951d2d2236c27572069929d353c58748bdff6e2e5bda135f8860f4ef373f599545215b2a35ee275338b72aaefab7ee042fc0650342feb3ac817a838a6076c03ae285975ddf8f7474eff338defad7d7408508772168403f8afb23dd89178145"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x813}}, {0x5d, &(0x7f0000001900)=@string={0x5d, 0x3, "22b4c8f31eea4da9287e81ba18bfe20e4252cb48d8f67e03fe0ab40e035744006152f622d7612d245ef17a0012c5879a474896b6f703b18789b4b87d007df872d9a3e972d8a36baf0c80f6d940d026ab7b65fe3a433a6b78036e32"}}]}) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000001a00), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001a40)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001a40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001a80)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r16, &(0x7f0000001b80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, r17, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) (async) sendmsg$NFC_CMD_GET_DEVICE(r16, &(0x7f0000001b80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, r17, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) 1.884278147s ago: executing program 0 (id=716): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000040)) (async) sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="ef21bd26ab0c3d045f4400ee889a712aab9c51d965e747cbacfab7865a4b413054069b0a8f3105fa283dc45641b3e6aead72a6c06da548782a2ca1120a74db8269844480bfea6d5e2d3425ac035305fa3cb14e7df466f1fc228ed8ca5f4e25e65e6f32ab6a91d9b30144d7c134d3ac32c2600bcd1655d6874ebfa297f4c732d4", 0x80, 0x0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x5, [@enum64={0x4, 0xa, 0x0, 0x13, 0x1, 0x2, [{0x5, 0x9, 0x50}, {0xb, 0x10, 0x7}, {0x6, 0x6, 0x46}, {0x5, 0xffff, 0x9}, {0xe, 0x1ff, 0x7}, {0x9, 0x8000, 0x7}, {0xe, 0x80000001, 0x1ff}, {0x8, 0x7, 0x3}, {0x6, 0x6}, {0xf, 0x3, 0x5}]}, @typedef={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x5}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x5}]}, {0x0, [0x5f, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/158, 0xc9, 0x9e, 0x1}, 0x28) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) (async, rerun: 64) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0xff000, '\x00', 0x0, r3, 0x5, 0x2, 0x2}, 0x50) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) (async) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async, rerun: 32) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000006c0), 0x228002, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x402000, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%-010d \x00'}, 0x20) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000008c0), 0x101080, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x6b, 0x88, &(0x7f00000004c0)=""/136, 0x41000, 0x8, '\x00', r5, @fallback, r6, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x8, 0x1, 0xffffff49}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000000940)=[r8, r9, r10, r11, 0xffffffffffffffff, r12], 0x0, 0x10, 0x4}, 0x94) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000a40)={r10}) (async) r13 = memfd_secret(0x80000) ftruncate(r13, 0xfffffffffffffff7) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), r13) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r14, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000bc0)) (async, rerun: 32) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x3000)=nil) (async) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000c40)={@multicast2, @dev={0xac, 0x14, 0x14, 0x18}}, 0x8) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200000a0}, 0x44850) 1.68425026s ago: executing program 1 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x180) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064d1, &(0x7f0000000040)={0xe, 0x1000000, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r5, &(0x7f0000000100)="96ca98f31f53756247189c7e553f924e240f11525637e24cad760157b6e2ec58db0e0e19c06bc267d86d28f9d1d3edd4079a7b79dee0ea9b7ccab936ca006a9c31701116c5b48155efd6189a7dd42e112bf1b7aef59fe26e69738b5f8a1f83fa7cdd8686fe43cd24b9079bb64de761f0a4e6ffbf57cd9a0e0edd4ef5597d6830e1bf1793", 0x84, 0x20040050, &(0x7f00000002c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xeb41, 0x112) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xd}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.67275909s ago: executing program 0 (id=718): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x2000000811, 0x0) read$msr(r0, &(0x7f0000019300)=""/102392, 0x18ff8) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, 0x0, 0x40000) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='vfat\x00', 0x208405, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x80, 0x9, 0x8}, {0x8, 0x7, 0x9, 0x40}, {0xc, 0x9, 0x9, 0x9}]}) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfffffffffffffefa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="c4e17a70d90166b846008ec0657a0f660f38802bd8f6b805000000b9040000000f01c10f01c8b805000000b9000000000f01c1b8000000000f23d80f21f835400000200f23f80f01db", 0x49}], 0x1, 0x0, &(0x7f00000002c0)=[@cr4={0x1, 0x22}, @cstype0], 0x2) getpid() 1.56536771s ago: executing program 0 (id=719): pipe(&(0x7f00000007c0)) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000100)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0xa, 0x4e21, 0x7a80, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000540)}, 0x80) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000040)={0xc, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r5, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.561525246s ago: executing program 3 (id=720): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r7, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) sendmmsg$unix(r4, &(0x7f00000050c0)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000140)}, {&(0x7f0000000800)="deb4ddae240788a732551f0d2b7d135a7537071c6340d0e5d3ce27306cc44c4088231862a600b2c360aeab0159d30586b8156a9d81457357222434bc51a468c9abe886476f0bf973e840c94bf0d0cb18a5860b142bc6a78b9487913fd532c2fa51e87bb04c21b3b9cdb06d4609e837947c97b07e429e8301d3200d15b936c6ad48dbeabc85132a310e9dca909df1aa66dce2ef3fe1620c37d0cd14a6c31d4b9d0fa868590222bb290f5bcd65cccc486de6db1115f00f8ccc9aca175cc48122fd4f", 0xc1}, {&(0x7f0000000900)="dff5c459cc2efc7edb059e2e7bcccd6b46af998e49d0739ea744cb1c6a51c348be33f1c0b0224f209e6e1a93a5471b3093fb38d7c80215d02bbbb875f1b16686faf423e3a505c9321c7931b56a33640b11c654f9cfeec11ca6942c555dc04bad9f571a8e794eacf4b5e9a1cd02403a6ed8ee81ce8f09eda561d8c09a572d4822", 0x80}, {&(0x7f0000000980)="546f94672a", 0x5}], 0x4, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x4000011}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000000d80)="e6dfd71d1aaf77c31e5eae528c4a4ee7740952a5f35e1f6310e7ae161da99666ca7abe0fe4b4f9e584fe4ff0e441b1298d45e016bab6039eed54dcbea4a9127df43ef0a8de1835c68335a282c47c8cba2d23cc4f6cc13317fec8f6f57e29fb7e3b4dbdd952ba818241d68f9977a3baecc0f6ace40c6c1d17096a9be551a1559771", 0x81}, {&(0x7f0000000e40)="ce9a34ef15da99167acfb8e2cd9bbddd7b2356b7391c", 0x16}], 0x3, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x10}}, {{&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000001040)="d06ec082ace8a22f3659a4a896053e22e636ab6487cc1adc32579f1cdcd160720d03cd34c9175357309e316d909b4a47de442362be8957e5f39e2dc148ff26294bc1e45eb015a5d18f8fab7421dde29cdc8785766b3a84b3bd704d7a", 0x5c}, {&(0x7f0000002180)="c3f6ab58b64f26da61e1ed496622aa9ee127824c2f03fd7e92c91ce529c32f84b967a7ad7d0197761f183d2d636cda3795bcf2c5d09000aa2f4c9fdf36ad44f9c699cf079d2e964ef8949de4b1e8a5d65af47cfaab8c7638655218bfb0df1a4bda45f2e6b374059afefd4e600a4031b6469058e85a5abc1bf782674234b09b34aab72717b30a845c4964a48a2a55be09545d66e335ac9988fc3b38313092d4ff5fe88ab167e069cd575ddb0f94d0da3890a6d7f5b338b5a821c22fe6cd297de4164000e52227a62ac92fbe", 0xcb}, {&(0x7f00000010c0)="51dab3", 0x3}], 0x3, 0x0, 0x0, 0x4000004}}, {{&(0x7f0000002280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000002300)="d7e0deead54406400678e8fc9d6a82903338bef1161bd244ba9fbb3cee6f273582edd9349cf49712636c8bce4deed156601744e55df85cba7a3dcdb245d40e2b41c09f168326309d7313ca950a0112046ade83fade0b26ab8a8dfac0a5da4445c66f98187be0b6a314f35d5567b2dd97cb6da22c19deb448e298f2d90f4c7d5857b5c243dae342055337d3c2597086d686f0f629709199ce0e1aefb78aa2b9c5f0c16bbed480359ba9ff0deb17c16613193a32131a7d05ec4e0a93e447dbf8b8a5de378897f7899b213aea4a06e1d83f2c6b4865b3d2", 0xd6}, {&(0x7f0000002400)="9fbe219ac1fc981e1436e1ad2cd7deba46e300940b503f4cd2e25156ca5cfec12f750146ff0c7d8716fe6d7d1c2b98d58bc0d2ef5e02e0847458924a321575008824d09fcca0db", 0x47}], 0x2, &(0x7f0000002480)=[@cred={{0x1c}}], 0x20, 0x40}}, {{&(0x7f00000024c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002540), 0x0, &(0x7f0000002700)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r6, r1, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}], 0x80, 0x20008000}}, {{&(0x7f0000002780)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000002800)="a8467902ee1346ceb121fa6120c2a21b85482503fdcc3010a222126db84fa202f638fd999afc243ee0b1019f8d37eddee243ed786a6ace614abc6cc3da6ed0167cafbfa14eed3de7a46c8e1a", 0x4c}, {&(0x7f0000003d40)="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", 0x1000}, {&(0x7f0000002880)="0d3333b26416a8e223eef7fe6e2eed876e89b72ed313948f25a73c64d9bc08e70251c83becafa3cfa076d4b6cede57cea74159ba2e83fc8c1280801607d9abf1fe8ec8f89483f7eac0cdfa7faa72aca23b14704d33f9e5e79297db9f1b012b960247688da60dc748d0b1138057cfb9d20cc47a5057f3ca27268c74aea138e22dd54abd7fa7ee2edefe6b2d86d05d", 0x8e}], 0x3, &(0x7f0000002b00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r5, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r6, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120, 0x40800}}, {{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000002c40)="3a148da5cb4d26e2a3db0c", 0xb}, {&(0x7f0000002c80)="93faa35600", 0x5}, {&(0x7f0000004d40)="ba3d5cdb06ba1806a3287da96108df4c6d4a94376bc4f2118731e27ac9fa659ca6be4421b7505362820f41715b751ab40fccdd954ceee4b89c5ffc22a76d0be36f3b5998f7c1ab20edf2a16e052f3e3535eacb91b1da69fe77b7d501247073edc2f41a3993c21f1ac6d81152d3450b2e366352d08e710ae2d5250d1a53bca04178b2884034aa3bf9e6a5df89beba3b9b1d48ef93daac0e2b98738003ea0797b34e3a586a47cba4cdef12f18c760dabac56", 0xb1}, {&(0x7f0000004e00)="3f4b4fea54fc43072d97cdc7696aa1a4ad927b2da50a182230776ed5e8ca0aecf59006c94906ceffd82d0d1350ffcef6c3443b70982ce7a2ba9384bd979cc44e73ffe19658250ce210387e20d60359f34cce6b3dff082142105e4867f3663880d73e9effba4ea45ab1cb4f8ec7819ba175b2ff985d46485af89cb7078d4496", 0x7f}, {&(0x7f0000004e80)="cf962b5d4ae6d979789977ea112e269fe076ffb76b2527c9a9ae7fb5446938748b6fecda764d5530e3c97063365cbc60c46278b84d391c9077da09ca5560b0f153522936554ebf11fbd4e8ae21ac801929dd3da4d0902e2dee531f4d02f3f084f7d5682a0cefda2ce684667c74925eff4f4624918189fc92c1cf7d513454", 0x7e}, {&(0x7f0000004f00)="2c64bd52f168a21094a99ecf3a2ec0086f9b0da03fce08191c16b01cc7e3f3dd96671df0ea5599155f0dd73afa128a1b7c536331607b99529d9b3d5ac005a55107e76255186db57455cfd4e73dd2860990d41e8b59acbcf3522fc79e37a198c674b010134cf612534a10205def98a600ab19874549109c105d31498c9f0f6d0e263fe8a769a99a782ab8e1379f0b835d7fa26571d78ba5c79f7c1bc61e5702a47470a20e6b63547b64ecdb904b23507a2f976a84d856357c5013049ba220ae724b935b331733812d1d984eec0cb10353d6626ba8b0c4d9c60ba0c5436e9a65d2c63c3ac677", 0xe5}, {&(0x7f0000002cc0)="5e8e78e5fab59ca4e5c70999111e1861", 0x10}, {&(0x7f0000005000)="0d256dc7fdc7fef993a5fa6f7f84c4988bc816cf17ac047610253774d046f8fb6f5dac39a2de94a927f4fc6f4991ce9ef150", 0x32}], 0x8, 0x0, 0x0, 0x91}}], 0x7, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000209010100000000000000000e00000508000040000000180800054000000011"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x200080c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="557d5adf1418ecb91281f3c4292ce107878c8cda0978132a85d4ea366ccc3c7dc9e629"], 0x0) 1.203992117s ago: executing program 1 (id=721): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200048d0}, 0x20040080) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) (async) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x1, 0x0) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) 1.112781241s ago: executing program 1 (id=722): syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000c8549b407c9cb54cb8e3ca4cf0c87ff5eac96a562c0e03288101020301090224000100000000090400006daf38f3f654efc8a7fe7190d89502ff18d40009050602"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r8, 0x0, &(0x7f0000000040)="05", 0x1, 0xb}) capget(&(0x7f0000000180), 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x734, 0xffffffffffffffff, 0x1}) ioctl$sock_inet_SIOCGIFDSTADDR(r9, 0x8917, &(0x7f0000000100)={'nicvf0\x00', {0x2, 0x0, @multicast1}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x484001, 0x0) 384.811462ms ago: executing program 4 (id=723): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x0, {0x1}, {0x0, 0xf0}, 0x1, 0x7f}], 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, 0x0) close_range(0xffffffffffffffff, r1, 0x0) 284.608535ms ago: executing program 4 (id=724): socket$inet(0x2, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 0s ago: executing program 0 (id=725): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1801000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x7) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x65) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x50, 0x8, 0x101d, {0x2012, 0xcac}, {0x5b, 0x3}, @ramp={0x7, 0x0, {0x3, 0x1000, 0x8b50, 0x4}}}) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x14182, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x8}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f00000001c0)={[0x4]}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x324000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) kernel console output (not intermixed with test programs): ][ T5918] usb 3-1: USB disconnect, device number 17 [ 147.639453][ T30] audit: type=1400 audit(1767896126.719:409): avc: denied { setopt } for pid=7012 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.639851][ T5918] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 147.752885][ T5955] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.782379][ T5918] ftdi_sio 3-1:0.0: device disconnected [ 147.828261][ T7024] netlink: 84 bytes leftover after parsing attributes in process `syz.4.240'. [ 147.862122][ T30] audit: type=1400 audit(1767896126.949:410): avc: denied { shutdown } for pid=7021 comm="syz.4.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.882480][ T7025] netlink: 64 bytes leftover after parsing attributes in process `syz.4.240'. [ 147.971798][ T5955] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 147.980865][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.995634][ T5955] usb 1-1: config 0 descriptor?? [ 148.148792][ T30] audit: type=1400 audit(1767896127.229:411): avc: denied { listen } for pid=7031 comm="syz.3.241" lport=38999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.215265][ T5955] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 148.389752][ T30] audit: type=1400 audit(1767896127.469:412): avc: denied { map } for pid=7043 comm="syz.2.243" path="socket:[13212]" dev="sockfs" ino=13212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 148.447337][ T5955] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 148.465186][ T5955] [drm] Initialized udl on minor 2 [ 148.781672][ T5955] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 148.836351][ T5955] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 149.010258][ T5955] usb 1-1: USB disconnect, device number 11 [ 149.019602][ T5920] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 149.054026][ T5920] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 149.061608][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.244'. [ 149.070959][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.244'. [ 149.196441][ T7061] binder: 7060:7061 ioctl 40309410 200000000240 returned -22 [ 149.249295][ T7061] syz.3.246 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 149.351966][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.359458][ T5947] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 149.369242][ T5947] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 149.675973][ T7082] tc_dump_action: action bad kind [ 149.747900][ T7088] netlink: 'syz.2.248': attribute type 6 has an invalid length. [ 149.758263][ T7088] netlink: 'syz.2.248': attribute type 6 has an invalid length. [ 151.047344][ T7108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.136277][ T7111] Cannot find set identified by id 0 to match [ 151.207525][ T7105] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 151.431924][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.431930][ T5947] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 151.431950][ T5947] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 152.313723][ T7133] pimreg: entered allmulticast mode [ 153.591825][ T5817] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.591977][ T5947] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 153.604299][ T5947] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 155.671781][ T5817] Bluetooth: hci4: command 0x0405 tx timeout [ 155.677840][ T5947] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 155.684386][ T5947] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 155.900368][ T30] audit: type=1400 audit(1767896134.979:413): avc: denied { getopt } for pid=7134 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.933221][ T7135] pimreg: entered allmulticast mode [ 156.178014][ T30] audit: type=1400 audit(1767896135.249:414): avc: denied { module_request } for pid=7150 comm="syz.0.262" kmod="net-pf-16-proto-19" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 156.224821][ T7155] 9p: Bad value for 'wfdno' [ 156.234511][ T30] audit: type=1400 audit(1767896135.319:415): avc: denied { bind } for pid=7150 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.820226][ T7165] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 157.151861][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 157.361342][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 157.370529][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.385366][ T24] usb 3-1: Product: syz [ 157.397922][ T24] usb 3-1: Manufacturer: syz [ 157.411266][ T24] usb 3-1: SerialNumber: syz [ 157.851808][ T5955] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.876833][ T7187] netlink: 'syz.3.268': attribute type 21 has an invalid length. [ 157.887647][ T7187] netlink: 128 bytes leftover after parsing attributes in process `syz.3.268'. [ 157.904062][ T7187] netlink: 'syz.3.268': attribute type 5 has an invalid length. [ 157.916267][ T7187] netlink: 'syz.3.268': attribute type 6 has an invalid length. [ 157.928490][ T7187] netlink: 3 bytes leftover after parsing attributes in process `syz.3.268'. [ 157.962399][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 157.994871][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 158.018180][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 158.053343][ T5955] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 158.101974][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.109991][ T5955] usb 2-1: Product: syz [ 158.122347][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 158.149071][ T5955] usb 2-1: Manufacturer: syz [ 158.163743][ T5955] usb 2-1: SerialNumber: syz [ 158.171432][ T24] usb 3-1: USB disconnect, device number 18 [ 158.181965][ T5955] usb 2-1: config 0 descriptor?? [ 158.194503][ T5955] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 009 [ 159.409511][ T30] audit: type=1400 audit(1767896138.059:416): avc: denied { create } for pid=7196 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 159.464135][ T5894] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 159.471782][ T889] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 160.502643][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 160.519643][ T889] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.541987][ T889] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.552186][ T5894] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 160.560217][ T5894] usb 4-1: config 0 has no interface number 0 [ 161.261231][ T889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 161.267996][ T5894] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 161.277672][ T889] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 161.286894][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.293629][ T5955] (null): failure reading functionality [ 161.295192][ T889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.311905][ T5955] i2c i2c-1: failure reading functionality [ 161.334377][ T5894] usb 4-1: config 0 descriptor?? [ 161.339247][ T5955] i2c i2c-1: connected i2c-tiny-usb device [ 161.356046][ T889] usb 5-1: config 0 descriptor?? [ 161.393655][ T889] usb 5-1: can't set config #0, error -71 [ 161.394795][ T5955] usb 2-1: USB disconnect, device number 9 [ 161.428422][ T5894] usb 4-1: can't set config #0, error -71 [ 161.432047][ T7203] netlink: 56 bytes leftover after parsing attributes in process `syz.0.274'. [ 161.445536][ T889] usb 5-1: USB disconnect, device number 6 [ 161.465758][ T5894] usb 4-1: USB disconnect, device number 13 [ 161.621856][ T5947] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 161.631063][ T30] audit: type=1400 audit(1767896140.709:417): avc: denied { ioctl } for pid=7201 comm="syz.0.274" path="socket:[13661]" dev="sockfs" ino=13661 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.653613][ T7210] : renamed from bond0 (while UP) [ 161.672494][ T7213] fuse: Unknown parameter '¦' [ 161.677230][ T30] audit: type=1400 audit(1767896140.719:418): avc: denied { getopt } for pid=7201 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.688837][ T7210] binder: 7209:7210 ioctl c0306201 200000000540 returned -22 [ 161.701785][ T30] audit: type=1400 audit(1767896140.719:419): avc: denied { bind } for pid=7209 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 161.781812][ T5947] usb 3-1: Using ep0 maxpacket: 16 [ 161.790773][ T5947] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 161.803267][ T5947] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.842285][ T5947] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.871924][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.890154][ T5947] usb 3-1: Product: syz [ 161.900451][ T5947] usb 3-1: Manufacturer: syz [ 161.901980][ T889] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 161.910368][ T5947] usb 3-1: SerialNumber: syz [ 161.979699][ T30] audit: type=1400 audit(1767896141.059:420): avc: denied { block_suspend } for pid=7218 comm="syz.1.279" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.072361][ T889] usb 5-1: device descriptor read/64, error -71 [ 162.198330][ T5947] usb 3-1: 0:2 : does not exist [ 162.219061][ T5947] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 162.237642][ T5947] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 163.400652][ T7202] smc: net device bond0 applied user defined pnetid SYZ2 [ 163.451892][ T5894] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 163.454089][ T7202] mkiss: ax0: crc mode is auto. [ 163.459571][ T889] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.468277][ T5947] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 163.498384][ T5947] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 163.525627][ T5947] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 163.564443][ T5947] usb 3-1: USB disconnect, device number 19 [ 163.601818][ T5894] usb 2-1: device descriptor read/64, error -71 [ 163.652773][ T889] usb 5-1: device descriptor read/64, error -71 [ 163.708668][ T30] audit: type=1400 audit(1767896142.789:421): avc: denied { getopt } for pid=7227 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 163.782588][ T889] usb usb5-port1: attempt power cycle [ 163.851797][ T5894] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 163.957168][ T7235] netlink: 288 bytes leftover after parsing attributes in process `syz.3.283'. [ 164.021820][ T5894] usb 2-1: device descriptor read/64, error -71 [ 164.031780][ T5947] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 164.101449][ T30] audit: type=1400 audit(1767896143.179:422): avc: denied { read } for pid=7236 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 164.152334][ T5894] usb usb2-port1: attempt power cycle [ 164.157823][ T889] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.192204][ T5947] usb 3-1: device descriptor read/64, error -71 [ 164.192879][ T889] usb 5-1: device descriptor read/8, error -71 [ 164.204871][ T30] audit: type=1400 audit(1767896143.189:423): avc: denied { write } for pid=7236 comm="syz.0.284" path="socket:[13735]" dev="sockfs" ino=13735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 164.402011][ T5918] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 164.462085][ T889] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 164.462119][ T5947] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 164.486108][ T889] usb 5-1: device descriptor read/8, error -71 [ 164.501822][ T5894] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 164.533548][ T5894] usb 2-1: device descriptor read/8, error -71 [ 164.565670][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 164.599144][ T5918] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 164.622358][ T889] usb usb5-port1: unable to enumerate USB device [ 164.623533][ T5947] usb 3-1: device descriptor read/64, error -71 [ 164.631064][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.675290][ T5918] usb 4-1: config 0 descriptor?? [ 164.688690][ T7240] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 164.771978][ T5947] usb usb3-port1: attempt power cycle [ 164.781032][ T7244] netlink: 'syz.4.287': attribute type 10 has an invalid length. [ 164.782619][ T5894] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 164.796906][ T7244] netlink: 55 bytes leftover after parsing attributes in process `syz.4.287'. [ 164.833444][ T30] audit: type=1400 audit(1767896143.919:424): avc: denied { name_bind } for pid=7243 comm="syz.4.287" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 164.848195][ T5894] usb 2-1: device descriptor read/8, error -71 [ 164.997979][ T5894] usb usb2-port1: unable to enumerate USB device [ 165.082928][ T30] audit: type=1400 audit(1767896144.149:425): avc: denied { getopt } for pid=7247 comm="syz.0.289" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.334410][ T30] audit: type=1400 audit(1767896144.419:426): avc: denied { write } for pid=7257 comm="syz.1.291" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 166.923324][ T30] audit: type=1400 audit(1767896146.009:427): avc: denied { map } for pid=7268 comm="syz.2.292" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.181294][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 167.258437][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 167.281871][ T5894] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 167.313296][ T5918] usb 4-1: USB disconnect, device number 14 [ 167.461867][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 167.474786][ T5894] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 167.501762][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.509955][ T5894] usb 3-1: Product: syz [ 167.520113][ T5894] usb 3-1: Manufacturer: syz [ 167.531551][ T5894] usb 3-1: SerialNumber: syz [ 167.551150][ T5894] usb 3-1: config 0 descriptor?? [ 167.682959][ T5918] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 167.693561][ T7283] tmpfs: Bad value for 'mpol' [ 167.789220][ T5894] snd-usb-6fire 3-1:0.0: unable to receive device firmware state. [ 167.809286][ T7286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'. [ 167.810325][ T5894] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -32 [ 167.841830][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 167.852215][ T5918] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 167.880912][ T5918] usb 4-1: config 251 has no interface number 0 [ 167.895119][ T5918] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 167.919587][ T5918] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 167.947501][ T5918] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 167.982783][ T5918] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 167.997206][ T7287] netlink: 'syz.2.292': attribute type 12 has an invalid length. [ 168.028694][ T5918] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 13688, setting to 1024 [ 168.058186][ T5918] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 168.087688][ T5918] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.161935][ T5918] usb 4-1: config 251 interface 202 has no altsetting 0 [ 168.258325][ T5918] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 168.299672][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.348255][ T5918] usb 4-1: Product: syz [ 168.376864][ T5918] usb 4-1: Manufacturer: syz [ 168.409746][ T5918] usb 4-1: SerialNumber: syz [ 168.448610][ T7272] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 168.467158][ T7272] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 168.661780][ T5947] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 168.721350][ T5918] cxacru 4-1:251.202: send of cm 0x90 failed (-71) [ 168.765274][ T5918] cxacru 4-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 168.808547][ T5918] cxacru 4-1:251.202: probe with driver cxacru failed with error -22 [ 168.835397][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.872510][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.922664][ T5918] usb 4-1: USB disconnect, device number 15 [ 168.935286][ T5947] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 168.962562][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.995706][ T5947] usb 1-1: config 0 descriptor?? [ 169.273716][ T7294] netlink: 'syz.1.299': attribute type 10 has an invalid length. [ 169.289289][ T7294] team0: Device ipvlan1 failed to register rx_handler [ 169.349229][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.736716][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.921510][ T30] audit: type=1400 audit(1767896148.999:428): avc: denied { create } for pid=7295 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.074360][ T5947] hid_parser_main: 38 callbacks suppressed [ 170.074382][ T5947] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 170.090017][ T5947] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 170.106674][ T5947] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 170.140739][ T30] audit: type=1400 audit(1767896149.039:429): avc: denied { mount } for pid=7300 comm="syz.1.302" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 170.266160][ T5947] hid-led 0003:0FC5:B080.0004: probe with driver hid-led failed with error -71 [ 170.303775][ T5947] usb 1-1: USB disconnect, device number 12 [ 170.331810][ T5918] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 170.345424][ T7304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.463325][ T5955] usb 3-1: USB disconnect, device number 23 [ 170.501901][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 170.509226][ T5918] usb 4-1: config 255 has an invalid interface number: 91 but max is 0 [ 170.521138][ T5918] usb 4-1: config 255 has no interface number 0 [ 170.528916][ T7308] openvswitch: netlink: Unknown key attributes 1 [ 170.529155][ T5918] usb 4-1: config 255 interface 91 has no altsetting 0 [ 170.560247][ T5918] usb 4-1: New USB device found, idVendor=19d2, idProduct=0086, bcdDevice= 0.27 [ 170.570368][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.579118][ T5918] usb 4-1: Product: syz [ 170.583680][ T5918] usb 4-1: Manufacturer: syz [ 170.590508][ T5918] usb 4-1: SerialNumber: syz [ 171.171670][ T7312] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 171.186411][ T7312] /dev/nullb0: Can't open blockdev [ 171.754337][ T11] block nbd4: Possible stuck request ffff888026790000: control (read@0,1024B). Runtime 30 seconds [ 171.769178][ T11] block nbd4: Possible stuck request ffff888026790200: control (read@1024,1024B). Runtime 30 seconds [ 171.780208][ T11] block nbd4: Possible stuck request ffff888026790400: control (read@2048,1024B). Runtime 30 seconds [ 171.791182][ T11] block nbd4: Possible stuck request ffff888026790600: control (read@3072,1024B). Runtime 30 seconds [ 171.814150][ T5918] option 4-1:255.91: GSM modem (1-port) converter detected [ 172.387042][ T30] audit: type=1400 audit(1767896151.459:430): avc: denied { read } for pid=7296 comm="syz.3.300" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 172.705309][ T30] audit: type=1400 audit(1767896151.459:431): avc: denied { open } for pid=7296 comm="syz.3.300" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 172.779200][ T30] audit: type=1400 audit(1767896151.459:432): avc: denied { ioctl } for pid=7296 comm="syz.3.300" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 173.426086][ T7333] overlay: Unknown parameter 'fsuuid' [ 173.931827][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 173.950931][ T5918] usb 4-1: USB disconnect, device number 16 [ 173.965173][ T5918] option 4-1:255.91: device disconnected [ 174.066096][ T7338] netlink: 4376 bytes leftover after parsing attributes in process `syz.3.309'. [ 174.075558][ T24] usb 3-1: device descriptor read/64, error -71 [ 174.083415][ T7338] netlink: 4376 bytes leftover after parsing attributes in process `syz.3.309'. [ 174.109448][ T30] audit: type=1400 audit(1767896153.189:433): avc: denied { listen } for pid=7336 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 174.183872][ T30] audit: type=1400 audit(1767896153.209:434): avc: denied { accept } for pid=7336 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 174.236827][ T7346] netlink: 'syz.0.310': attribute type 1 has an invalid length. [ 174.324460][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 174.385752][ T30] audit: type=1400 audit(1767896153.469:435): avc: denied { ioctl } for pid=7352 comm="syz.4.305" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 174.388679][ T7353] x_tables: duplicate underflow at hook 2 [ 174.471805][ T5947] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 174.499758][ T24] usb 3-1: device descriptor read/64, error -71 [ 174.621992][ T24] usb usb3-port1: attempt power cycle [ 174.661811][ T5947] usb 2-1: Using ep0 maxpacket: 32 [ 174.685790][ T5947] usb 2-1: config index 0 descriptor too short (expected 6683, got 27) [ 174.694333][ T5947] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 174.702543][ T5947] usb 2-1: config 0 has no interface number 0 [ 174.712694][ T5947] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.731003][ T5947] usb 2-1: config 0 interface 85 has no altsetting 0 [ 174.740131][ T5947] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 174.749360][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.758313][ T5947] usb 2-1: Product: syz [ 174.763682][ T5947] usb 2-1: Manufacturer: syz [ 174.768286][ T5947] usb 2-1: SerialNumber: syz [ 174.792687][ T5947] usb 2-1: config 0 descriptor?? [ 175.022002][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 175.045103][ T7356] bond1: down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 175.052412][ T24] usb 3-1: device descriptor read/8, error -71 [ 175.070063][ T7356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.118441][ T30] audit: type=1400 audit(1767896154.199:436): avc: denied { kexec_image_load } for pid=7336 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 175.209805][ T5947] appletouch 2-1:0.85: Geyser mode initialized. [ 175.240226][ T5947] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input10 [ 175.323079][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 175.352868][ T24] usb 3-1: device descriptor read/8, error -71 [ 175.453014][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.491407][ T24] usb usb3-port1: unable to enumerate USB device [ 175.543466][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.111418][ T7358] kexec: Could not allocate control_code_buffer [ 176.862636][ T30] audit: type=1400 audit(1767896155.939:437): avc: denied { accept } for pid=7383 comm="syz.2.319" lport=54293 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.956027][ T30] audit: type=1400 audit(1767896155.979:438): avc: denied { setopt } for pid=7383 comm="syz.2.319" lport=54293 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 177.012443][ T30] audit: type=1400 audit(1767896155.989:439): avc: denied { bind } for pid=7383 comm="syz.2.319" lport=54293 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 177.100982][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.322'. [ 177.109167][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 177.408405][ T5918] usb 2-1: USB disconnect, device number 14 [ 177.471378][ T5918] appletouch 2-1:0.85: input: appletouch disconnected [ 177.773046][ T30] audit: type=1400 audit(1767896156.849:440): avc: denied { bind } for pid=7403 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.963735][ T30] audit: type=1400 audit(1767896156.849:441): avc: denied { name_bind } for pid=7403 comm="syz.0.325" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 178.017952][ T30] audit: type=1400 audit(1767896156.849:442): avc: denied { node_bind } for pid=7403 comm="syz.0.325" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 178.041560][ T30] audit: type=1400 audit(1767896156.849:443): avc: denied { connect } for pid=7403 comm="syz.0.325" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.064161][ T30] audit: type=1400 audit(1767896156.849:444): avc: denied { read } for pid=7403 comm="syz.0.325" path="socket:[14823]" dev="sockfs" ino=14823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.096656][ T30] audit: type=1400 audit(1767896156.899:445): avc: denied { read } for pid=7403 comm="syz.0.325" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 178.296129][ T7416] netlink: 'syz.4.329': attribute type 3 has an invalid length. [ 178.345832][ T30] audit: type=1400 audit(1767896157.429:446): avc: denied { load_policy } for pid=7417 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 178.604671][ T30] audit: type=1400 audit(1767896157.689:447): avc: denied { mounton } for pid=7420 comm="syz.1.330" path="/proc/246/task" dev="proc" ino=14930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 178.692953][ T7419] SELinux: failed to load policy [ 178.735860][ T30] audit: type=1400 audit(1767896157.819:448): avc: denied { create } for pid=7427 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 178.818782][ T30] audit: type=1400 audit(1767896157.839:449): avc: denied { write } for pid=7427 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 178.998258][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.155700][ T6348] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 179.213939][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 179.372121][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 179.414009][ T6348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.430466][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 179.439523][ T24] usb 4-1: can't read configurations, error -61 [ 179.446023][ T6348] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 179.476102][ T6348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.515330][ T6348] usb 5-1: config 0 descriptor?? [ 179.612180][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 180.342831][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 180.357749][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 180.365969][ T24] usb 4-1: can't read configurations, error -61 [ 180.373001][ T24] usb usb4-port1: attempt power cycle [ 180.383155][ T7468] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 180.415248][ T7468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.711872][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 180.752678][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 180.771871][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 180.796366][ T24] usb 4-1: can't read configurations, error -61 [ 180.943618][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 180.992477][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 181.006464][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 181.028776][ T24] usb 4-1: can't read configurations, error -61 [ 181.048059][ T24] usb usb4-port1: unable to enumerate USB device [ 181.555221][ T7505] overlayfs: failed to clone upperpath [ 181.800864][ T6348] usbhid 5-1:0.0: can't add hid device: -71 [ 181.871988][ T6348] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 181.932512][ T6348] usb 5-1: USB disconnect, device number 11 [ 182.012910][ T7511] pimreg: entered allmulticast mode [ 182.042790][ T7511] pimreg: left allmulticast mode [ 182.085500][ T7515] netlink: 'syz.3.355': attribute type 10 has an invalid length. [ 182.119040][ T7515] team0: Port device netdevsim0 added [ 182.136992][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 182.282338][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 182.349542][ T7522] netlink: 35 bytes leftover after parsing attributes in process `syz.2.356'. [ 182.430054][ T6348] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 182.653606][ T7522] netlink: 'syz.2.356': attribute type 4 has an invalid length. [ 182.701914][ T5936] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 182.750161][ T6348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.774630][ T6348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.803149][ T6348] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 182.829513][ T6348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.866742][ T6348] usb 5-1: config 0 descriptor?? [ 182.871984][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 182.900130][ T5936] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 182.911258][ T5936] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 182.923849][ T5936] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 182.934223][ T5936] usb 4-1: config 1 has no interface number 0 [ 182.954823][ T5936] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.993128][ T5936] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 183.039400][ T5936] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 183.079801][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.140093][ T5936] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 183.330844][ T6348] usbhid 5-1:0.0: can't add hid device: -71 [ 183.339779][ T5936] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 183.372782][ T6348] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.379856][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 183.379872][ T30] audit: type=1400 audit(1767896162.459:461): avc: denied { write } for pid=7539 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 183.449709][ T6348] usb 5-1: USB disconnect, device number 12 [ 183.711518][ T7546] lo speed is unknown, defaulting to 1000 [ 183.717496][ T7546] lo speed is unknown, defaulting to 1000 [ 183.724890][ T7546] lo speed is unknown, defaulting to 1000 [ 183.733952][ T7546] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 183.745812][ T7546] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 183.795068][ T7546] lo speed is unknown, defaulting to 1000 [ 183.802150][ T7546] lo speed is unknown, defaulting to 1000 [ 183.808831][ T7546] lo speed is unknown, defaulting to 1000 [ 183.815525][ T7546] lo speed is unknown, defaulting to 1000 [ 183.822317][ T7546] lo speed is unknown, defaulting to 1000 [ 183.883025][ T7531] netlink: 56 bytes leftover after parsing attributes in process `syz.3.360'. [ 183.892887][ T7531] netlink: 56 bytes leftover after parsing attributes in process `syz.3.360'. [ 183.922643][ T7531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.931578][ T7531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.966617][ T5936] usb 4-1: USB disconnect, device number 21 [ 183.995581][ T5936] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 184.103430][ T7556] fuse: Unknown parameter 'f' [ 184.440456][ T30] audit: type=1400 audit(1767896163.519:462): avc: denied { append } for pid=7574 comm="syz.3.368" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 184.471676][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 184.702516][ T30] audit: type=1400 audit(1767896163.789:463): avc: denied { execute } for pid=7559 comm="syz.2.366" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.776833][ T7583] /dev/nullb0: Can't open blockdev [ 185.232049][ T30] audit: type=1400 audit(1767896164.319:464): avc: denied { append } for pid=7582 comm="syz.4.370" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.678797][ T7593] xt_time: unknown flags 0xc [ 185.842569][ T30] audit: type=1400 audit(1767896164.919:465): avc: denied { unmount } for pid=7587 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 186.170297][ T7597] netem: change failed [ 186.291893][ T7601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 186.310153][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 186.659319][ T7621] 9pnet_virtio: no channels available for device syz [ 187.715889][ T30] audit: type=1400 audit(1767896166.799:466): avc: denied { map } for pid=7634 comm="syz.3.385" path="socket:[16403]" dev="sockfs" ino=16403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 187.784128][ T7630] lo speed is unknown, defaulting to 1000 [ 187.985781][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 188.233841][ T30] audit: type=1400 audit(1767896167.319:467): avc: denied { ioctl } for pid=7645 comm="syz.3.386" path="socket:[16445]" dev="sockfs" ino=16445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.861519][ T30] audit: type=1400 audit(1767896167.339:468): avc: denied { bind } for pid=7645 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.262370][ T30] audit: type=1400 audit(1767896168.289:469): avc: denied { ioctl } for pid=7659 comm="syz.2.389" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 189.305222][ T7663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.389'. [ 189.571921][ T6348] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 189.962592][ T30] audit: type=1400 audit(1767896168.989:470): avc: denied { accept } for pid=7667 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 190.255415][ T6348] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.278946][ T6348] usb 4-1: not running at top speed; connect to a high speed hub [ 190.309799][ T6348] usb 4-1: config 129 has an invalid interface number: 28 but max is 0 [ 190.319637][ T30] audit: type=1400 audit(1767896168.999:471): avc: denied { nlmsg_write } for pid=7667 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 190.344637][ T6348] usb 4-1: config 129 has no interface number 0 [ 190.351844][ T6348] usb 4-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 190.364187][ T6348] usb 4-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 190.376828][ T6348] usb 4-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.391356][ T6348] usb 4-1: config 129 interface 28 has no altsetting 0 [ 190.783478][ T6348] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 190.815746][ T6348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.826182][ T6348] usb 4-1: Product: syz [ 190.830481][ T6348] usb 4-1: Manufacturer: syz [ 190.835510][ T6348] usb 4-1: SerialNumber: syz [ 190.858088][ T7651] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 191.089861][ T6348] etas_es58x 4-1:129.28: Starting syz syz (Serial Number syz) [ 191.164964][ T6348] etas_es58x 4-1:129.28: could not retrieve the product info string [ 191.353461][ T30] audit: type=1400 audit(1767896170.429:472): avc: denied { listen } for pid=7687 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.144581][ T7694] lo speed is unknown, defaulting to 1000 [ 192.161905][ T6348] usb 4-1: USB disconnect, device number 22 [ 192.704636][ T6348] etas_es58x 4-1:129.28: Disconnecting syz syz [ 193.251892][ T6348] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 193.273543][ T5918] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 193.453344][ T5918] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 193.454307][ T6348] usb 4-1: not running at top speed; connect to a high speed hub [ 193.472239][ T5918] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 193.478336][ T6348] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.491938][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 193.494209][ T6348] usb 4-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.512201][ T6348] usb 4-1: config 1 interface 0 has no altsetting 0 [ 193.512833][ T5918] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 193.521091][ T6348] usb 4-1: New USB device found, idVendor=0524, idProduct=a4a1, bcdDevice= 0.40 [ 193.538566][ T30] audit: type=1400 audit(1767896172.619:473): avc: denied { remount } for pid=7711 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 193.558225][ T5936] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 193.559480][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 193.566647][ T6348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.586221][ T5918] usb 3-1: Product: syz [ 193.590403][ T5918] usb 3-1: Manufacturer: syz [ 193.598439][ T5918] usb 3-1: SerialNumber: syz [ 193.600704][ T6348] usb 4-1: Product: syz [ 193.607864][ T6348] usb 4-1: Manufacturer: syz [ 193.613934][ T6348] usb 4-1: SerialNumber: syz [ 193.622843][ T5918] usb 3-1: config 0 descriptor?? [ 193.638849][ T5918] hub 3-1:0.0: bad descriptor, ignoring hub [ 193.647107][ T5918] hub 3-1:0.0: probe with driver hub failed with error -5 [ 193.657517][ T5918] usb 3-1: selecting invalid altsetting 0 [ 193.704131][ T5936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.752869][ T5936] usb 5-1: config 0 has no interfaces? [ 193.758389][ T5936] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 193.791759][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.822390][ T5936] usb 5-1: config 0 descriptor?? [ 194.006711][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.013610][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.102209][ T5918] usb 3-1: USB disconnect, device number 28 [ 194.651845][ T5918] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 194.801805][ T5918] usb 3-1: device descriptor read/64, error -71 [ 195.024710][ T6348] cdc_ether 4-1:1.0: skipping garbage [ 195.030659][ T6348] cdc_ether 4-1:1.0: skipping garbage [ 195.042907][ T5918] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 195.044241][ T6348] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 195.070096][ T6348] usb 4-1: USB disconnect, device number 23 [ 195.297261][ T5918] usb 3-1: device descriptor read/64, error -71 [ 195.409240][ T7747] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 195.419897][ T7744] lo speed is unknown, defaulting to 1000 [ 195.449602][ T5918] usb usb3-port1: attempt power cycle [ 195.535944][ T7751] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.413'. [ 195.545551][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 195.679382][ T7753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.686700][ T7753] IPv6: NLM_F_CREATE should be set when creating new route [ 195.694021][ T7753] IPv6: NLM_F_CREATE should be set when creating new route [ 195.801973][ T5918] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 195.832517][ T5918] usb 3-1: device descriptor read/8, error -71 [ 195.892070][ T7756] overlayfs: failed to clone upperpath [ 195.901006][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 196.472025][ T30] audit: type=1400 audit(1767896175.439:474): avc: denied { setopt } for pid=7759 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.483247][ T5918] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 196.579873][ T5947] usb 5-1: USB disconnect, device number 14 [ 196.630066][ T7768] netlink: 'syz.2.418': attribute type 4 has an invalid length. [ 196.648810][ T7768] erofs (device loop2): cannot find valid erofs superblock [ 196.728401][ T5918] usb 3-1: device not accepting address 32, error -71 [ 197.165447][ T7770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.420'. [ 197.228386][ T5918] usb usb3-port1: unable to enumerate USB device [ 197.944785][ T30] audit: type=1400 audit(1767896177.029:475): avc: denied { create } for pid=7778 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 197.997117][ T30] audit: type=1400 audit(1767896177.049:476): avc: denied { connect } for pid=7778 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 198.333038][ T7791] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 198.356587][ T7790] lo speed is unknown, defaulting to 1000 [ 198.368351][ T30] audit: type=1326 audit(1767896177.449:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 198.424722][ T30] audit: type=1326 audit(1767896177.449:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 198.481776][ T30] audit: type=1326 audit(1767896177.449:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 198.505642][ T30] audit: type=1326 audit(1767896177.449:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 198.530435][ T30] audit: type=1326 audit(1767896177.449:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 198.555278][ T30] audit: type=1326 audit(1767896177.449:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 198.628015][ T30] audit: type=1326 audit(1767896177.459:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7792 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 199.134707][ T7811] netlink: 76 bytes leftover after parsing attributes in process `syz.0.430'. [ 199.210785][ T7810] syz.4.431 (7810): drop_caches: 2 [ 199.601880][ T5918] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 199.839191][ T7825] xt_connbytes: Forcing CT accounting to be enabled [ 199.852114][ T7825] Cannot find del_set index 1 as target [ 199.862527][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 199.900098][ T5918] usb 5-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 199.972537][ T5918] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.029798][ T5918] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 200.084559][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 200.118108][ T5918] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 200.168353][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.227823][ T5918] usb 5-1: config 0 descriptor?? [ 200.741520][ T5918] usbhid 5-1:0.0: can't add hid device: -71 [ 200.769780][ T5918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 200.823199][ T5918] usb 5-1: USB disconnect, device number 15 [ 201.085233][ T7846] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 201.137713][ T1146] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.244455][ T7850] mkiss: ax0: crc mode is auto. [ 201.325645][ T1146] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.455123][ T1146] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.512423][ T5947] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 201.583267][ T1146] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.691807][ T5947] usb 4-1: Using ep0 maxpacket: 8 [ 201.836943][ T5947] usb 4-1: config 11 has an invalid interface number: 95 but max is 0 [ 201.862635][ T5947] usb 4-1: config 11 has no interface number 0 [ 201.868855][ T5947] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.172160][ T5947] usb 4-1: config 11 interface 95 has no altsetting 0 [ 202.185665][ T5947] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 202.332493][ T11] block nbd4: Possible stuck request ffff888026790000: control (read@0,1024B). Runtime 60 seconds [ 202.344889][ T11] block nbd4: Possible stuck request ffff888026790200: control (read@1024,1024B). Runtime 60 seconds [ 202.358461][ T11] block nbd4: Possible stuck request ffff888026790400: control (read@2048,1024B). Runtime 60 seconds [ 202.370989][ T11] block nbd4: Possible stuck request ffff888026790600: control (read@3072,1024B). Runtime 60 seconds [ 202.590269][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.623096][ T5947] usb 4-1: Product: syz [ 202.694991][ T5947] usb 4-1: Manufacturer: syz [ 202.699627][ T5947] usb 4-1: SerialNumber: syz [ 202.749857][ T1146] bridge_slave_1: left promiscuous mode [ 202.787307][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.867546][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 202.867562][ T30] audit: type=1400 audit(1767896181.949:612): avc: denied { ioctl } for pid=7865 comm="syz-executor" path="socket:[16155]" dev="sockfs" ino=16155 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.923123][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.964044][ T1146] bridge_slave_0: left allmulticast mode [ 202.969694][ T1146] bridge_slave_0: left promiscuous mode [ 202.983784][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.994920][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.025637][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.113784][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.121457][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.147484][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.155075][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.162356][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.180450][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.188635][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.892241][ T5920] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 204.031775][ T5920] usb 2-1: device descriptor read/64, error -71 [ 204.271932][ T5920] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 204.693275][ T5920] usb 2-1: device descriptor read/64, error -71 [ 204.802308][ T5920] usb usb2-port1: attempt power cycle [ 204.860919][ T5947] usbtouchscreen 4-1:11.95: probe with driver usbtouchscreen failed with error -8 [ 204.880997][ T1146] smc: removing net device bond0 with user defined pnetid SYZ2 [ 204.903604][ T5947] usb 4-1: USB disconnect, device number 24 [ 204.911592][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.924807][ T30] audit: type=1400 audit(1767896184.009:613): avc: denied { create } for pid=7892 comm="syz.4.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 205.038660][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.058852][ T1146] bond0 (unregistering): Released all slaves [ 205.153135][ T5920] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 205.185468][ T5920] usb 2-1: device descriptor read/8, error -71 [ 205.227761][ T1146] bond1 (unregistering): Released all slaves [ 205.272897][ T5817] Bluetooth: hci3: command tx timeout [ 205.342546][ T30] audit: type=1400 audit(1767896184.419:614): avc: denied { read } for pid=5483 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 205.378990][ T7865] lo speed is unknown, defaulting to 1000 [ 205.433464][ T5920] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 205.495063][ T5920] usb 2-1: device descriptor read/8, error -71 [ 205.614399][ T5920] usb usb2-port1: unable to enumerate USB device [ 207.183830][ T7934] syz.1.454 (7934): drop_caches: 2 [ 207.287163][ T7865] chnl_net:caif_netlink_parms(): no params data found [ 207.351950][ T5817] Bluetooth: hci3: command tx timeout [ 207.415684][ T30] audit: type=1400 audit(1767896186.499:615): avc: denied { write } for pid=7952 comm="syz.3.459" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 208.335047][ T7974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.460'. [ 208.419311][ T30] audit: type=1400 audit(1767896187.499:616): avc: denied { getopt } for pid=7954 comm="syz.0.460" laddr=fe80::a8aa:aaff:feaa:aaaa lport=30999 faddr=ff04::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 209.532133][ T5817] Bluetooth: hci3: command tx timeout [ 209.878232][ T1146] hsr_slave_0: left promiscuous mode [ 209.885010][ T1146] hsr_slave_1: left promiscuous mode [ 209.890966][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.903487][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.934972][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.959706][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.961287][ T7990] binder: transaction release 25 bad handle 1, ret = -22 [ 209.968718][ T30] audit: type=1400 audit(1767896189.039:617): avc: denied { transfer } for pid=7989 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 209.984300][ T7990] binder: 7989:7990 ioctl 8010671f 200000000000 returned -22 [ 210.021112][ T1146] veth1_macvtap: left promiscuous mode [ 210.027227][ T1146] veth0_macvtap: left promiscuous mode [ 210.033164][ T1146] veth1_vlan: left promiscuous mode [ 210.038684][ T1146] veth0_vlan: left promiscuous mode [ 210.154899][ T1146] pimreg (unregistering): left allmulticast mode [ 210.701499][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 210.760964][ T30] audit: type=1400 audit(1767896189.839:618): avc: denied { bind } for pid=8000 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.826431][ T30] audit: type=1400 audit(1767896189.839:619): avc: denied { listen } for pid=8000 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.875924][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 210.883722][ T30] audit: type=1400 audit(1767896189.869:620): avc: denied { accept } for pid=8000 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.935838][ T30] audit: type=1400 audit(1767896189.869:621): avc: denied { read } for pid=8000 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 211.577045][ T8002] netlink: 88 bytes leftover after parsing attributes in process `syz.1.465'. [ 211.601831][ T5817] Bluetooth: hci3: command tx timeout [ 213.127442][ T8020] netlink: 'syz.0.466': attribute type 4 has an invalid length. [ 213.379312][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.405596][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.424452][ T7865] bridge_slave_0: entered allmulticast mode [ 213.433929][ T7865] bridge_slave_0: entered promiscuous mode [ 213.444281][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.452445][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.459666][ T7865] bridge_slave_1: entered allmulticast mode [ 213.475389][ T7865] bridge_slave_1: entered promiscuous mode [ 213.572432][ T5894] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 213.748360][ T7865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.776102][ T7865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.909048][ T5894] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 213.939595][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.975200][ T5894] usb 2-1: Product: syz [ 213.979395][ T5894] usb 2-1: Manufacturer: syz [ 214.002769][ T5894] usb 2-1: SerialNumber: syz [ 214.014903][ T5894] usb 2-1: config 0 descriptor?? [ 214.029218][ T30] audit: type=1400 audit(1767896193.109:622): avc: denied { connect } for pid=8034 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 214.128415][ T7865] team0: Port device team_slave_0 added [ 214.169928][ T7865] team0: Port device team_slave_1 added [ 214.190020][ T1146] IPVS: stop unused estimator thread 0... [ 214.269853][ T5894] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 214.317545][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.325972][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.750399][ T7865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.776772][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.784149][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.843279][ T7865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.843300][ T5918] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 214.969319][ T7865] hsr_slave_0: entered promiscuous mode [ 214.992882][ T7865] hsr_slave_1: entered promiscuous mode [ 215.003521][ T5918] usb 5-1: device descriptor read/64, error -71 [ 215.013904][ T7865] debugfs: 'hsr0' already exists in 'hsr' [ 215.019679][ T7865] Cannot create hsr debugfs directory [ 215.262583][ T5918] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 215.409725][ T7865] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.421424][ T7865] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.421930][ T5918] usb 5-1: device descriptor read/64, error -71 [ 215.440599][ T7865] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.452495][ T7865] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.552780][ T5918] usb usb5-port1: attempt power cycle [ 215.656383][ T7865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.727967][ T7865] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.743849][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.750984][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.785375][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.792581][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.901939][ T5918] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 215.943309][ T5918] usb 5-1: device descriptor read/8, error -71 [ 215.988998][ T5894] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 216.023589][ T5894] usb 2-1: USB disconnect, device number 19 [ 216.396063][ T7865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.421942][ T5918] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 216.452503][ T5918] usb 5-1: device descriptor read/8, error -71 [ 216.575325][ T5918] usb usb5-port1: unable to enumerate USB device [ 216.700535][ T7865] veth0_vlan: entered promiscuous mode [ 216.723646][ T30] audit: type=1400 audit(1767896195.809:623): avc: denied { connect } for pid=8107 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 216.726387][ T7865] veth1_vlan: entered promiscuous mode [ 216.779164][ T7865] veth0_macvtap: entered promiscuous mode [ 216.830907][ T7865] veth1_macvtap: entered promiscuous mode [ 216.871133][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.909168][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.052806][ T1029] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.061630][ T1029] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.077097][ T1029] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.130073][ T1029] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.140492][ T30] audit: type=1400 audit(1767896196.219:624): avc: denied { bind } for pid=8115 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 217.246341][ T6435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.270575][ T6435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.350174][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.367169][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.384825][ T30] audit: type=1400 audit(1767896196.469:625): avc: denied { mounton } for pid=7865 comm="syz-executor" path="/root/syzkaller.E63n8R/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 217.452739][ T8124] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.483'. [ 217.833725][ T30] audit: type=1400 audit(1767896196.499:626): avc: denied { mounton } for pid=7865 comm="syz-executor" path="/root/syzkaller.E63n8R/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 217.999434][ T30] audit: type=1400 audit(1767896196.519:627): avc: denied { mounton } for pid=7865 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 218.056946][ T30] audit: type=1400 audit(1767896197.139:628): avc: denied { accept } for pid=8131 comm="syz.5.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 218.114972][ T8136] tmpfs: Bad value for 'mpol' [ 218.752583][ T8150] lo speed is unknown, defaulting to 1000 [ 219.127958][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 219.318990][ T24] usb 6-1: config 0 has no interfaces? [ 219.335008][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 219.646299][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.675896][ T24] usb 6-1: Product: syz [ 219.683957][ T24] usb 6-1: Manufacturer: syz [ 219.691602][ T24] usb 6-1: SerialNumber: syz [ 219.702262][ T24] usb 6-1: config 0 descriptor?? [ 219.758127][ T30] audit: type=1400 audit(1767896198.839:629): avc: denied { create } for pid=8151 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 219.928990][ T8170] netem: change failed [ 219.940330][ T8150] netlink: 'syz.5.487': attribute type 17 has an invalid length. [ 219.963454][ T8150] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 220.003855][ T24] usb 6-1: USB disconnect, device number 2 [ 220.121113][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.494'. [ 221.631952][ T5918] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 221.792102][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 221.826122][ T5918] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 221.851958][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.881742][ T5918] usb 2-1: Product: syz [ 221.885934][ T5918] usb 2-1: Manufacturer: syz [ 221.922270][ T5918] usb 2-1: SerialNumber: syz [ 221.946359][ T5918] usb 2-1: config 0 descriptor?? [ 221.961021][ T5918] usb-storage 2-1:0.0: USB Mass Storage device detected [ 222.007368][ T5918] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 222.031817][ T5918] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 222.031817][ T5918] Please send a copy of this message to and [ 222.221192][ T8220] tmpfs: Bad value for 'mpol' [ 222.227149][ T8221] tmpfs: Bad value for 'mpol' [ 222.232812][ T5947] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 222.601486][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.612633][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.623482][ T5947] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 222.634158][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.642589][ T8224] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 222.653896][ T5920] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 222.662891][ T30] audit: type=1400 audit(1767896201.739:630): avc: denied { relabelto } for pid=8213 comm="syz.3.503" name="84" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 222.666015][ T5947] usb 6-1: config 0 descriptor?? [ 222.720687][ T30] audit: type=1400 audit(1767896201.739:631): avc: denied { associate } for pid=8213 comm="syz.3.503" name="84" dev="tmpfs" ino=462 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 222.811979][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 222.819057][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.845724][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.856032][ T5920] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 222.865281][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.879272][ T5920] usb 5-1: config 0 descriptor?? [ 222.907226][ T30] audit: type=1400 audit(1767896201.989:632): avc: denied { remove_name } for pid=5825 comm="syz-executor" name="binderfs" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 222.935303][ T30] audit: type=1400 audit(1767896201.989:633): avc: denied { rmdir } for pid=5825 comm="syz-executor" name="84" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 223.129376][ T8216] netlink: 44 bytes leftover after parsing attributes in process `syz.5.504'. [ 223.194836][ T30] audit: type=1400 audit(1767896202.279:634): avc: denied { getopt } for pid=8235 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.289470][ T24] usb 2-1: USB disconnect, device number 20 [ 223.871120][ T5920] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 224.051074][ T5920] usb 5-1: USB disconnect, device number 20 [ 224.116772][ T8243] fido_id[8243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 224.216007][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.512'. [ 224.219116][ T8250] netlink: 'syz.0.511': attribute type 39 has an invalid length. [ 224.267858][ T8245] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 224.310348][ T8245] bond0 (unregistering): Released all slaves [ 224.577573][ T5947] usbhid 6-1:0.0: can't add hid device: -71 [ 224.584214][ T5947] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 224.596118][ T5947] usb 6-1: USB disconnect, device number 3 [ 224.632030][ T5894] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 224.832311][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 224.889121][ T5894] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 224.933612][ T889] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 225.021502][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.050806][ T5894] usb 5-1: config 0 has no interface number 0 [ 225.067954][ T5894] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 225.094961][ T5894] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 225.117113][ T5894] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 225.130032][ T5894] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 225.140266][ T5894] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 225.153890][ T5894] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 225.163005][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.201915][ T889] usb 4-1: Using ep0 maxpacket: 16 [ 225.213931][ T889] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.233771][ T5894] usb 5-1: config 0 descriptor?? [ 225.256877][ T889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.266183][ T8256] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 225.297604][ T889] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.307747][ T5894] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.328076][ T889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.339286][ T889] usb 4-1: Product: syz [ 225.368915][ T889] usb 4-1: Manufacturer: syz [ 225.386737][ T889] usb 4-1: SerialNumber: syz [ 225.514073][ T8256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.567226][ T8256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.646233][ T5894] usb 5-1: USB disconnect, device number 21 [ 225.661742][ T30] audit: type=1400 audit(1767896204.739:635): avc: denied { connect } for pid=8257 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.765967][ T8271] ntfs3(nullb0): Primary boot signature is not NTFS. [ 225.772929][ T8271] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 226.506662][ T8274] syz.5.518 (8274): drop_caches: 2 [ 226.694494][ T30] audit: type=1400 audit(1767896205.779:636): avc: denied { write } for pid=8288 comm="syz.5.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.801882][ T5936] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 227.143400][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 227.166327][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.522'. [ 227.175345][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.522'. [ 227.188049][ T5936] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 227.197427][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.208090][ T5936] usb 5-1: Product: syz [ 227.212734][ T5936] usb 5-1: Manufacturer: syz [ 227.218173][ T5936] usb 5-1: SerialNumber: syz [ 227.226174][ T5936] usb 5-1: config 0 descriptor?? [ 227.434488][ T889] usb 4-1: invalid UAC_HEADER (v1) [ 227.515570][ T889] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 227.588621][ T889] usb 4-1: USB disconnect, device number 25 [ 227.634467][ T5936] usb 5-1: USB disconnect, device number 22 [ 227.701160][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.799543][ T6107] udevd[6107]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.001857][ T889] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 228.227416][ T30] audit: type=1400 audit(1767896207.309:637): avc: denied { read } for pid=8321 comm="syz.5.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 228.272107][ T889] usb 4-1: Using ep0 maxpacket: 16 [ 228.296899][ T889] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 228.354424][ T889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.417729][ T889] usb 4-1: config 0 descriptor?? [ 228.660825][ T889] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 228.861650][ T8328] pim6reg9: entered allmulticast mode [ 229.069590][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.095265][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.281931][ T5894] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 229.386090][ T889] gspca_sonixj: reg_r err -110 [ 229.420872][ T889] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 229.504763][ T8346] syz.4.531 (8346): drop_caches: 2 [ 229.541788][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 229.683196][ T5894] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 229.727253][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.768748][ T5894] usb 6-1: Product: syz [ 229.787179][ T5894] usb 6-1: Manufacturer: syz [ 229.806279][ T5894] usb 6-1: SerialNumber: syz [ 229.844392][ T5894] usb 6-1: config 0 descriptor?? [ 229.875441][ T5894] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 230.049380][ T8341] geneve2: entered promiscuous mode [ 230.062065][ T8341] geneve2: entered allmulticast mode [ 230.467713][ T8362] tmpfs: Unknown parameter '18446744073709551615' [ 230.619794][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.707160][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.046238][ T5894] gspca_sonixj: reg_w err -71 [ 231.057662][ T5894] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 231.138070][ T5894] usb 6-1: USB disconnect, device number 4 [ 232.210466][ T8407] overlayfs: failed to clone upperpath [ 232.226658][ T8407] tmpfs: Group quota inode hardlimit too large. [ 232.248829][ T30] audit: type=1400 audit(1767896211.329:638): avc: denied { search } for pid=8404 comm="syz.0.540" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 232.281774][ T5936] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 232.302268][ T30] audit: type=1400 audit(1767896211.329:639): avc: denied { search } for pid=8404 comm="syz.0.540" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 232.331505][ T30] audit: type=1400 audit(1767896211.359:640): avc: denied { search } for pid=8404 comm="syz.0.540" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 232.363848][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 232.409286][ T11] block nbd4: Possible stuck request ffff888026790000: control (read@0,1024B). Runtime 90 seconds [ 232.431422][ T11] block nbd4: Possible stuck request ffff888026790200: control (read@1024,1024B). Runtime 90 seconds [ 232.442951][ T11] block nbd4: Possible stuck request ffff888026790400: control (read@2048,1024B). Runtime 90 seconds [ 232.454174][ T11] block nbd4: Possible stuck request ffff888026790600: control (read@3072,1024B). Runtime 90 seconds [ 232.493593][ T5920] usb 4-1: USB disconnect, device number 26 [ 232.501879][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 232.512219][ T5936] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 232.523808][ T5936] usb 2-1: config 0 has no interface number 0 [ 232.531535][ T5936] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.543374][ T5936] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 232.562019][ T5936] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.564094][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 232.610619][ T5936] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.626686][ T5936] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 232.647897][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.674313][ T5936] usb 2-1: config 0 descriptor?? [ 232.683125][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.711469][ T5936] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 232.761157][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 232.794454][ T24] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 232.836184][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.889292][ T24] usb 5-1: config 0 descriptor?? [ 233.053587][ T8420] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 233.070653][ T8420] netlink: 'syz.1.538': attribute type 2 has an invalid length. [ 233.088812][ T8420] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 233.096963][ T8420] netlink: 'syz.1.538': attribute type 2 has an invalid length. [ 233.138578][ T8420] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 233.195354][ T8420] netlink: 'syz.1.538': attribute type 2 has an invalid length. [ 233.208360][ T8424] rdma_op ffff888058aaa1f0 conn xmit_rdma 0000000000000000 [ 233.267654][ T8420] netlink: 'syz.1.538': attribute type 2 has an invalid length. [ 234.871095][ T8433] netlink: 20 bytes leftover after parsing attributes in process `syz.5.545'. [ 234.904026][ T8433] netlink: 20 bytes leftover after parsing attributes in process `syz.5.545'. [ 235.165390][ T5920] usb 2-1: USB disconnect, device number 21 [ 235.207758][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 235.238432][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 235.247899][ T5920] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 235.291052][ T24] usb 5-1: USB disconnect, device number 23 [ 236.356096][ T30] audit: type=1400 audit(1767896215.439:641): avc: denied { ioctl } for pid=8456 comm="syz.0.554" path="socket:[19590]" dev="sockfs" ino=19590 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 237.280077][ T8468] syz.5.553 (8468): drop_caches: 2 [ 237.770371][ T5947] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 237.993908][ T5947] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 238.008886][ T8491] overlayfs: failed lookup in lower (newroot/89, name='file0', err=-40): overlapping layers [ 238.020267][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.031937][ T5947] usb 5-1: config 0 has no interface number 0 [ 238.038057][ T5947] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 238.050892][ T8491] overlayfs: failed lookup in lower (newroot/89, name='file0', err=-40): overlapping layers [ 238.076276][ T8491] overlayfs: failed lookup in lower (newroot/89, name='file0', err=-40): overlapping layers [ 238.230293][ T8491] overlayfs: failed lookup in lower (newroot/89, name='file0', err=-40): overlapping layers [ 238.240776][ T5936] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 238.249459][ T5947] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.250021][ T8491] overlayfs: failed lookup in lower (newroot/89, name='file0', err=-40): overlapping layers [ 238.264715][ T5947] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 238.282038][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.290113][ T5947] usb 5-1: Product: syz [ 238.297352][ T5947] usb 5-1: Manufacturer: syz [ 238.309186][ T8491] overlayfs: failed lookup in lower (newroot/89, name='file0', err=-40): overlapping layers [ 238.320320][ T8491] overlayfs: failed lookup in lower (newroot/89, name='file0', err=-40): overlapping layers [ 238.336686][ T8491] overlayfs: failed lookup in lower (newroot/89, name='file0', err=-40): overlapping layers [ 238.347261][ T8491] overlayfs: failed lookup in lower (newroot/89, name='file0', err=-40): overlapping layers [ 238.358004][ T8491] overlayfs: failed lookup in lower (newroot/89, name='file0', err=-40): overlapping layers [ 238.395479][ T5936] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 238.404554][ T5936] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 238.434016][ T5936] usb 6-1: config 6 has no interface number 0 [ 238.461904][ T5936] usb 6-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.503981][ T5936] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 238.523781][ T5936] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 238.551419][ T5936] usb 6-1: Product: syz [ 238.564640][ T5936] usb 6-1: Manufacturer: syz [ 238.579525][ T5936] usb 6-1: SerialNumber: syz [ 238.586340][ T5947] usb 5-1: SerialNumber: syz [ 238.605835][ T5947] usb 5-1: config 0 descriptor?? [ 238.618989][ T5936] hso 6-1:6.2: Failed to find INT IN ep [ 238.975332][ T8508] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 239.210042][ T5947] usb 5-1: USB disconnect, device number 24 [ 239.304383][ T8518] syzkaller1: entered promiscuous mode [ 239.311993][ T8518] syzkaller1: entered allmulticast mode [ 239.373199][ T30] audit: type=1400 audit(1767896218.449:642): avc: denied { create } for pid=8519 comm="syz.4.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 239.427561][ T30] audit: type=1400 audit(1767896218.449:643): avc: denied { setopt } for pid=8519 comm="syz.4.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 239.465331][ T5947] usb 6-1: USB disconnect, device number 5 [ 239.661826][ T889] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 239.943518][ T8526] netlink: 'syz.0.571': attribute type 2 has an invalid length. [ 240.384044][ T889] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 240.403289][ T889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 240.409954][ T889] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 240.452503][ T889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.475854][ T889] usb 5-1: config 0 descriptor?? [ 240.476874][ T8547] netlink: 'syz.0.577': attribute type 8 has an invalid length. [ 240.488612][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 240.509902][ T8520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 240.648846][ T8553] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 240.665628][ T30] audit: type=1400 audit(1767896219.749:644): avc: denied { write } for pid=8545 comm="syz.5.575" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 240.689297][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 240.694938][ T8553] qnx6: wrong signature (magic) in superblock #1. [ 240.702857][ T8553] qnx6: unable to read the first superblock [ 240.710630][ T24] usb 4-1: config index 0 descriptor too short (expected 47, got 45) [ 240.720287][ T24] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 240.731873][ T24] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 240.742762][ T30] audit: type=1400 audit(1767896219.799:645): avc: denied { execute } for pid=8552 comm="syz.1.580" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 240.771669][ T24] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 240.797390][ T24] usb 4-1: config 17 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.827934][ T24] usb 4-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 240.843749][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.856520][ T24] usb 4-1: Product: syz [ 240.860837][ T24] usb 4-1: Manufacturer: syz [ 240.866053][ T24] usb 4-1: SerialNumber: syz [ 240.884515][ T24] usbtouchscreen 4-1:17.0: probe with driver usbtouchscreen failed with error -8 [ 240.989654][ T8561] syzkaller0: entered promiscuous mode [ 241.001873][ T8561] syzkaller0: entered allmulticast mode [ 241.023279][ T8561] tipc: Started in network mode [ 241.035569][ T8561] tipc: Node identity 06f9a5ec9061, cluster identity 4711 [ 241.047673][ T889] redragon 0003:0C45:760B.0006: item fetching failed at offset 3/5 [ 241.062980][ T8561] tipc: Enabled bearer , priority 0 [ 241.081920][ T889] redragon 0003:0C45:760B.0006: probe with driver redragon failed with error -22 [ 241.102124][ T8560] tipc: Resetting bearer [ 241.153076][ T8560] tipc: Disabling bearer [ 241.199252][ T24] usb 4-1: USB disconnect, device number 27 [ 241.280499][ T8563] @: renamed from vlan0 (while UP) [ 241.459316][ T889] usb 5-1: USB disconnect, device number 25 [ 241.912529][ T889] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 242.074211][ T889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.098312][ T889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.114086][ T889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.132187][ T889] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.151425][ T889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.160376][ T30] audit: type=1400 audit(1767896221.239:646): avc: denied { read } for pid=8594 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 242.187999][ T30] audit: type=1400 audit(1767896221.269:647): avc: denied { accept } for pid=8594 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 242.231378][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.593'. [ 242.242146][ T889] usb 2-1: config 0 descriptor?? [ 242.441878][ T5894] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 242.596194][ T5894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 242.605362][ T5894] usb 4-1: not running at top speed; connect to a high speed hub [ 242.616987][ T5894] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 242.625993][ T5894] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 242.636966][ T5894] usb 4-1: config 4 has no interface number 0 [ 242.647537][ T5894] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 242.657215][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.667719][ T5894] usb 4-1: Product: syz [ 242.772369][ T5894] usb 4-1: Manufacturer: syz [ 242.777455][ T5894] usb 4-1: SerialNumber: syz [ 242.791480][ T889] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 242.801262][ T889] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 242.819418][ T889] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 242.998410][ T5947] usb 2-1: USB disconnect, device number 22 [ 243.400695][ T8613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.408602][ T8614] bond3: option mode: unable to set because the bond device is up [ 243.606139][ T5894] uvcvideo 4-1:4.147: probe with driver uvcvideo failed with error -22 [ 243.835254][ T5894] usb 4-1: USB disconnect, device number 28 [ 243.913689][ T889] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 244.004045][ T8620] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 244.094158][ T889] usb 5-1: config 0 has an invalid interface number: 99 but max is 0 [ 244.111588][ T889] usb 5-1: config 0 has no interface number 0 [ 244.121888][ T889] usb 5-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 244.145772][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.600'. [ 244.148535][ T8632] xt_hashlimit: size too large, truncated to 1048576 [ 244.156082][ T889] usb 5-1: config 0 interface 99 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 244.210599][ T889] usb 5-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 244.248907][ T889] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 244.291798][ T889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.306651][ T889] usb 5-1: Product: syz [ 244.320443][ T889] usb 5-1: Manufacturer: syz [ 244.331225][ T889] usb 5-1: SerialNumber: syz [ 244.487887][ T889] usb 5-1: config 0 descriptor?? [ 244.493905][ T8613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 244.497734][ T8632] xt_hashlimit: size too large, truncated to 1048576 [ 244.503053][ T889] ftdi_sio 5-1:0.99: FTDI USB Serial Device converter detected [ 244.518623][ T889] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 245.058195][ T30] audit: type=1400 audit(1767896224.099:648): avc: denied { setopt } for pid=8649 comm="syz.5.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 245.093676][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 245.130479][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 245.154625][ T8614] bridge_slave_0: left allmulticast mode [ 245.232652][ T8614] bridge_slave_0: left promiscuous mode [ 245.249018][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.296200][ T8614] bridge_slave_1: left allmulticast mode [ 245.305940][ T8614] bridge_slave_1: left promiscuous mode [ 245.325896][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.393977][ T8664] netlink: 'syz.3.606': attribute type 11 has an invalid length. [ 245.402526][ T8614] bond0: (slave bond_slave_0): Releasing backup interface [ 245.415555][ T8614] bond0: (slave bond_slave_1): Releasing backup interface [ 245.442294][ T8614] team0: Port device team_slave_0 removed [ 245.458571][ T8614] team0: Port device team_slave_1 removed [ 245.465223][ T8614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.483363][ T8614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.493123][ T8614] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.493601][ T8632] xt_hashlimit: size too large, truncated to 1048576 [ 245.510250][ T8654] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.548280][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.570900][ T8613] bond3: (slave bond0): Enslaving as an active interface with a down link [ 245.655447][ T889] usb 5-1: USB disconnect, device number 26 [ 245.665212][ T889] ftdi_sio 5-1:0.99: device disconnected [ 246.224013][ T8632] xt_hashlimit: size too large, truncated to 1048576 [ 246.680012][ T8632] xt_hashlimit: size too large, truncated to 1048576 [ 246.727539][ T8686] block nbd5: NBD_DISCONNECT [ 247.484663][ T30] audit: type=1400 audit(1767896226.539:649): avc: denied { read } for pid=8683 comm="syz.4.612" path="socket:[20872]" dev="sockfs" ino=20872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 247.577429][ T8698] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 247.589761][ T8698] block device autoloading is deprecated and will be removed. [ 248.295426][ T30] audit: type=1400 audit(1767896227.379:650): avc: denied { read } for pid=8707 comm="syz.1.617" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 248.591859][ T5947] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 248.773782][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 248.789030][ T5947] usb 2-1: unable to get BOS descriptor or descriptor too short [ 248.819606][ T5947] usb 2-1: config 11 has an invalid interface number: 242 but max is 0 [ 248.849163][ T5947] usb 2-1: config 11 has no interface number 0 [ 248.874895][ T5947] usb 2-1: config 11 interface 242 altsetting 225 endpoint 0x6 has invalid maxpacket 15735, setting to 1024 [ 248.917809][ T5947] usb 2-1: config 11 interface 242 altsetting 225 bulk endpoint 0x6 has invalid maxpacket 1024 [ 248.990685][ T5947] usb 2-1: config 11 interface 242 altsetting 225 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 249.019589][ T5947] usb 2-1: config 11 interface 242 has no altsetting 0 [ 249.049816][ T5947] usb 2-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=38.8a [ 249.068845][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.085811][ T5947] usb 2-1: Product: syz [ 249.100363][ T5947] usb 2-1: Manufacturer: syz [ 249.111340][ T5947] usb 2-1: SerialNumber: syz [ 249.156803][ T8708] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 249.221939][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 249.412070][ T30] audit: type=1400 audit(1767896228.499:651): avc: denied { setopt } for pid=8707 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 249.446693][ T24] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 249.498396][ T5947] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 4 is not bulk. [ 249.516363][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.551768][ T5947] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 14 is not bulk. [ 249.563576][ T24] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 249.581847][ T5947] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 249.592238][ T24] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 249.600241][ T24] usb 5-1: Manufacturer: syz [ 249.628151][ T5947] usb 2-1: USB disconnect, device number 23 [ 249.704595][ T24] usb 5-1: config 0 descriptor?? [ 249.931774][ T24] rc_core: IR keymap rc-hauppauge not found [ 249.958005][ T24] Registered IR keymap rc-empty [ 249.985745][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 250.034457][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 250.093754][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 250.138200][ T8724] CUSE: info not properly terminated [ 250.199834][ T5920] usb 5-1: USB disconnect, device number 27 [ 250.225471][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 250.986257][ T30] audit: type=1400 audit(1767896230.069:652): avc: denied { ioctl } for pid=8751 comm="syz.0.631" path="socket:[21021]" dev="sockfs" ino=21021 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 251.081833][ T889] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 251.231846][ T889] usb 5-1: Using ep0 maxpacket: 32 [ 251.240795][ T889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.270628][ T889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.296149][ T889] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 251.305778][ T889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.316110][ T889] usb 5-1: config 0 descriptor?? [ 251.582126][ T5894] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 251.786204][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.842197][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.013847][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 252.163197][ T30] audit: type=1400 audit(1767896231.139:653): avc: denied { setopt } for pid=8747 comm="syz.4.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 252.191119][ T5894] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 252.200892][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.215991][ T5894] usb 2-1: config 0 descriptor?? [ 252.644632][ T5894] aureal 0003:0755:2626.0008: unknown main item tag 0x0 [ 252.670662][ T5894] aureal 0003:0755:2626.0008: unknown main item tag 0x0 [ 252.699769][ T5894] aureal 0003:0755:2626.0008: unknown main item tag 0x0 [ 252.723833][ T5894] aureal 0003:0755:2626.0008: unknown main item tag 0x0 [ 252.818077][ T5894] aureal 0003:0755:2626.0008: unknown main item tag 0x0 [ 252.855997][ T5894] aureal 0003:0755:2626.0008: unknown main item tag 0x0 [ 252.889427][ T8780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.898509][ T5894] aureal 0003:0755:2626.0008: unknown main item tag 0x0 [ 252.917952][ T5894] aureal 0003:0755:2626.0008: unknown main item tag 0x0 [ 252.938687][ T5894] aureal 0003:0755:2626.0008: unknown main item tag 0x0 [ 252.960749][ T5894] aureal 0003:0755:2626.0008: unknown main item tag 0x0 [ 252.961281][ T8780] loop5: detected capacity change from 0 to 4095 [ 253.011764][ T5894] aureal 0003:0755:2626.0008: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 253.097240][ T5894] usb 2-1: USB disconnect, device number 24 [ 253.234918][ T8785] fido_id[8785]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 253.388015][ T8789] nftables ruleset with unbound chain [ 253.432542][ T8789] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 253.612530][ T30] audit: type=1400 audit(1767896232.699:654): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 253.653179][ T8787] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 253.756065][ T8787] bond1 (unregistering): Released all slaves [ 253.878255][ T889] usbhid 5-1:0.0: can't add hid device: -71 [ 253.921858][ T889] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 253.931486][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 253.997975][ T889] usb 5-1: USB disconnect, device number 28 [ 255.082930][ T889] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 255.285175][ T889] usb 6-1: Using ep0 maxpacket: 16 [ 255.307944][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.325467][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.335979][ T889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.354505][ T889] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.364856][ T889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.426714][ T889] usb 6-1: config 0 descriptor?? [ 255.436172][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.442815][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.727865][ T30] audit: type=1400 audit(1767896234.769:655): avc: denied { setopt } for pid=8821 comm="syz.1.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.910305][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 255.933879][ T8820] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 255.963028][ T30] audit: type=1400 audit(1767896235.009:656): avc: denied { ioctl } for pid=8824 comm="syz.3.650" path="socket:[21116]" dev="sockfs" ino=21116 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 256.246551][ T889] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 256.287872][ T889] microsoft 0003:045E:07DA.0009: implement() called with n (56) > 32! (kworker/0:2) [ 256.397380][ T889] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 256.439581][ T889] microsoft 0003:045E:07DA.0009: no inputs found [ 256.462040][ T889] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 256.513493][ T889] usb 6-1: USB disconnect, device number 6 [ 256.657709][ T30] audit: type=1326 audit(1767896235.709:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8840 comm="syz.4.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1be478f749 code=0x0 [ 256.692918][ T8844] netlink: 80 bytes leftover after parsing attributes in process `syz.4.653'. [ 257.185590][ T30] audit: type=1326 audit(1767896236.269:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8858 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 257.185710][ T30] audit: type=1326 audit(1767896236.269:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8858 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 257.191141][ T30] audit: type=1326 audit(1767896236.269:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8858 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 257.192138][ T30] audit: type=1326 audit(1767896236.279:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8858 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 257.195700][ T30] audit: type=1326 audit(1767896236.279:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8858 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 257.195967][ T30] audit: type=1400 audit(1767896236.279:663): avc: denied { nlmsg_read } for pid=8858 comm="syz.3.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 257.198419][ T8860] netlink: 48 bytes leftover after parsing attributes in process `syz.3.657'. [ 257.198847][ T30] audit: type=1326 audit(1767896236.279:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8858 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 257.200776][ T30] audit: type=1400 audit(1767896236.279:665): avc: denied { ioctl } for pid=8858 comm="syz.3.657" path="socket:[21146]" dev="sockfs" ino=21146 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 257.313357][ T30] audit: type=1326 audit(1767896236.399:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8858 comm="syz.3.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbc7b58f749 code=0x7ffc0000 [ 257.694915][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.658'. [ 259.233963][ T8897] IPVS: length: 4096 != 24 [ 259.924366][ T8910] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 259.951217][ T8910] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 259.970181][ T8915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.666'. [ 260.366764][ T8919] lo speed is unknown, defaulting to 1000 [ 262.472067][ T11] block nbd4: Possible stuck request ffff888026790000: control (read@0,1024B). Runtime 120 seconds [ 262.483277][ T11] block nbd4: Possible stuck request ffff888026790200: control (read@1024,1024B). Runtime 120 seconds [ 262.494352][ T11] block nbd4: Possible stuck request ffff888026790400: control (read@2048,1024B). Runtime 120 seconds [ 262.505507][ T11] block nbd4: Possible stuck request ffff888026790600: control (read@3072,1024B). Runtime 120 seconds [ 263.830406][ T5188] udevd[5188]: worker [6102] /devices/virtual/block/nbd4 is taking a long time [ 292.551906][ T11] block nbd4: Possible stuck request ffff888026790000: control (read@0,1024B). Runtime 150 seconds [ 292.562768][ T11] block nbd4: Possible stuck request ffff888026790200: control (read@1024,1024B). Runtime 150 seconds [ 292.573892][ T11] block nbd4: Possible stuck request ffff888026790400: control (read@2048,1024B). Runtime 150 seconds [ 292.585585][ T11] block nbd4: Possible stuck request ffff888026790600: control (read@3072,1024B). Runtime 150 seconds [ 316.883655][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.890231][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.631995][ T11] block nbd4: Possible stuck request ffff888026790000: control (read@0,1024B). Runtime 180 seconds [ 322.643542][ T11] block nbd4: Possible stuck request ffff888026790200: control (read@1024,1024B). Runtime 180 seconds [ 322.654586][ T11] block nbd4: Possible stuck request ffff888026790400: control (read@2048,1024B). Runtime 180 seconds [ 322.665616][ T11] block nbd4: Possible stuck request ffff888026790600: control (read@3072,1024B). Runtime 180 seconds [ 323.912643][ T5188] udevd[5188]: worker [6102] /devices/virtual/block/nbd4 timeout; kill it [ 323.921259][ T5188] udevd[5188]: seq 12174 '/devices/virtual/block/nbd4' killed [ 329.191834][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 352.714557][ T11] block nbd4: Possible stuck request ffff888026790000: control (read@0,1024B). Runtime 210 seconds [ 352.725475][ T11] block nbd4: Possible stuck request ffff888026790200: control (read@1024,1024B). Runtime 210 seconds [ 352.736506][ T11] block nbd4: Possible stuck request ffff888026790400: control (read@2048,1024B). Runtime 210 seconds [ 352.747727][ T11] block nbd4: Possible stuck request ffff888026790600: control (read@3072,1024B). Runtime 210 seconds [ 378.314585][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.320942][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.812106][ T11] block nbd4: Possible stuck request ffff888026790000: control (read@0,1024B). Runtime 240 seconds [ 382.822924][ T11] block nbd4: Possible stuck request ffff888026790200: control (read@1024,1024B). Runtime 240 seconds [ 382.833908][ T11] block nbd4: Possible stuck request ffff888026790400: control (read@2048,1024B). Runtime 240 seconds [ 382.844929][ T11] block nbd4: Possible stuck request ffff888026790600: control (read@3072,1024B). Runtime 240 seconds [ 412.872112][ T11] block nbd4: Possible stuck request ffff888026790000: control (read@0,1024B). Runtime 270 seconds [ 412.883033][ T11] block nbd4: Possible stuck request ffff888026790200: control (read@1024,1024B). Runtime 270 seconds [ 412.894087][ T11] block nbd4: Possible stuck request ffff888026790400: control (read@2048,1024B). Runtime 270 seconds [ 412.905783][ T11] block nbd4: Possible stuck request ffff888026790600: control (read@3072,1024B). Runtime 270 seconds [ 439.763713][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.770094][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.952191][ T11] block nbd4: Possible stuck request ffff888026790000: control (read@0,1024B). Runtime 300 seconds [ 442.963027][ T11] block nbd4: Possible stuck request ffff888026790200: control (read@1024,1024B). Runtime 300 seconds [ 442.974253][ T11] block nbd4: Possible stuck request ffff888026790400: control (read@2048,1024B). Runtime 300 seconds [ 442.985339][ T11] block nbd4: Possible stuck request ffff888026790600: control (read@3072,1024B). Runtime 300 seconds [ 450.707945][ T8942] use of bytesused == 0 is deprecated and will be removed in the future, [ 450.718927][ T8942] use the actual size instead. [ 450.802378][ T8947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.674'. [ 450.902175][ T5920] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 450.924902][ T8956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.676'. [ 451.116782][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 451.147927][ T8967] netlink: 'syz.0.676': attribute type 13 has an invalid length. [ 451.148613][ T8956] lo speed is unknown, defaulting to 1000 [ 451.333016][ T889] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 451.346895][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.677'. [ 451.427244][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.434633][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.583540][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.594138][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 451.595105][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.614796][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 451.615570][ T5920] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 451.635452][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 451.640909][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 451.644494][ T5920] usb 5-1: SerialNumber: syz [ 451.658699][ T8967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.670670][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 451.673075][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.688053][ T8967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.692750][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.700571][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 451.709048][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 451.722377][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 451.730204][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.756947][ T889] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 451.758072][ T24] usb 2-1: config 0 descriptor?? [ 451.774548][ T889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.798883][ T889] usb 6-1: Product: syz [ 451.803709][ T889] usb 6-1: Manufacturer: syz [ 451.808313][ T889] usb 6-1: SerialNumber: syz [ 451.816392][ T889] usb 6-1: config 0 descriptor?? [ 451.824970][ T889] ti_usb_3410_5052 6-1:0.0: TI USB 5052 2 port adapter converter detected [ 451.834175][ T889] ti_usb_3410_5052 6-1:0.0: missing endpoints [ 452.046700][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 452.057716][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.063709][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 452.063747][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.063787][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 452.063817][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.063855][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 452.063885][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.085891][ T8938] netlink: 'syz.1.670': attribute type 19 has an invalid length. [ 452.085937][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 452.086148][ T8938] netlink: 'syz.1.670': attribute type 19 has an invalid length. [ 452.086165][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 452.140969][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.141325][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.155027][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.156475][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.381917][ T6348] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 452.552382][ T6348] usb 4-1: Using ep0 maxpacket: 32 [ 452.554741][ T6348] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 452.554769][ T6348] usb 4-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 452.554793][ T6348] usb 4-1: config 0 has no interface number 0 [ 452.554834][ T6348] usb 4-1: config 0 interface 184 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 452.556825][ T6348] usb 4-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=64.bd [ 452.556856][ T6348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.556881][ T6348] usb 4-1: Product: syz [ 452.556899][ T6348] usb 4-1: Manufacturer: syz [ 452.556916][ T6348] usb 4-1: SerialNumber: syz [ 452.575108][ T6348] usb 4-1: config 0 descriptor?? [ 452.700728][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 452.700823][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 452.704708][ T24] usb 2-1: USB disconnect, device number 25 [ 452.800717][ T6348] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 452.931419][ T6348] snd-usb-audio 4-1:0.184: probe with driver snd-usb-audio failed with error -2 [ 452.994547][ T5921] usb 4-1: USB disconnect, device number 29 [ 453.030284][ T6098] udevd[6098]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.222918][ T5894] usb 6-1: USB disconnect, device number 7 [ 453.565674][ T8996] bridge0: port 3(syz_tun) entered blocking state [ 453.595750][ T8996] bridge0: port 3(syz_tun) entered disabled state [ 453.617564][ T8997] netlink: 56 bytes leftover after parsing attributes in process `syz.1.685'. [ 453.631483][ T8996] syz_tun: entered allmulticast mode [ 453.639018][ T8996] syz_tun: entered promiscuous mode [ 453.645367][ T8996] bridge0: port 3(syz_tun) entered blocking state [ 453.652318][ T8996] bridge0: port 3(syz_tun) entered forwarding state [ 453.673628][ T8997] netlink: 56 bytes leftover after parsing attributes in process `syz.1.685'. [ 456.610331][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 456.610380][ T30] audit: type=1400 audit(1767896435.689:668): avc: denied { connect } for pid=9006 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.695553][ T5920] usb 5-1: 0:2 : does not exist [ 456.707614][ T5920] usb 5-1: unit 5 not found! [ 456.781480][ T5920] usb 5-1: USB disconnect, device number 29 [ 456.847477][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.969739][ T9019] netlink: 56 bytes leftover after parsing attributes in process `syz.0.691'. [ 457.564611][ T9036] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 457.597648][ T30] audit: type=1400 audit(1767896436.679:669): avc: denied { listen } for pid=9031 comm="syz.5.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 457.649176][ T30] audit: type=1400 audit(1767896436.699:670): avc: denied { accept } for pid=9031 comm="syz.5.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 457.729173][ T30] audit: type=1400 audit(1767896436.789:671): avc: denied { setopt } for pid=9038 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 457.773779][ T30] audit: type=1400 audit(1767896436.849:672): avc: denied { map } for pid=9038 comm="syz.1.696" path="socket:[22747]" dev="sockfs" ino=22747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 458.847653][ T9061] netlink: 'syz.0.700': attribute type 10 has an invalid length. [ 458.945244][ T30] audit: type=1400 audit(1767896438.029:673): avc: denied { mounton } for pid=9060 comm="syz.5.702" path=2F34332FE91F7189591E9233614B dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 459.014603][ T9061] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 459.053079][ T9062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 459.152795][ T5918] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 459.182366][ T9066] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.703'. [ 459.257486][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.703'. [ 459.277374][ T9062] netlink: 40 bytes leftover after parsing attributes in process `syz.5.702'. [ 459.333547][ T5918] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 459.367842][ T5918] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 459.398664][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.442985][ T5918] usb 2-1: Product: syz [ 459.460248][ T5918] usb 2-1: Manufacturer: syz [ 459.484771][ T5918] usb 2-1: SerialNumber: syz [ 459.520219][ T5918] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 459.703248][ T30] audit: type=1400 audit(1767896438.779:674): avc: denied { read } for pid=9070 comm="syz.5.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 459.807116][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 460.006067][ T9073] syz.4.706 (9073): drop_caches: 2 [ 460.017010][ T5918] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 460.050319][ T5918] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 460.077917][ T5918] usb 2-1: media controller created [ 460.129619][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.345815][ T9083] netlink: 'syz.0.708': attribute type 25 has an invalid length. [ 460.379482][ T9083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 460.389191][ T9085] evm: overlay not supported [ 460.397666][ T30] audit: type=1400 audit(1767896439.479:675): avc: denied { ioctl } for pid=9087 comm="syz.5.710" path="socket:[22961]" dev="sockfs" ino=22961 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 460.410020][ T9083] netlink: 44 bytes leftover after parsing attributes in process `syz.0.708'. [ 460.590470][ T5918] usb 2-1: USB disconnect, device number 26 [ 460.621895][ T5947] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 460.721100][ T9083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.708'. [ 460.811834][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 460.838578][ T5947] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 460.864782][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.713'. [ 460.900595][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.930608][ T5947] usb 5-1: Product: syz [ 460.950386][ T5947] usb 5-1: Manufacturer: syz [ 460.959500][ T5947] usb 5-1: SerialNumber: syz [ 460.992653][ T5947] usb 5-1: config 0 descriptor?? [ 461.023101][ T5947] gspca_main: se401-2.14.0 probing 047d:5003 [ 461.125400][ T30] audit: type=1400 audit(1767896440.209:676): avc: denied { ioctl } for pid=9103 comm="syz.5.715" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 461.365508][ T30] audit: type=1400 audit(1767896440.439:677): avc: denied { write } for pid=9111 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 461.536277][ T5918] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 461.681796][ T5918] usb 6-1: device descriptor read/64, error -71 [ 461.916337][ T5947] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 461.932602][ T5918] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 461.985599][ T5936] usb 5-1: USB disconnect, device number 30 [ 462.081818][ T5918] usb 6-1: device descriptor read/64, error -71 [ 462.151933][ T889] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 462.212143][ T5918] usb usb6-port1: attempt power cycle [ 462.337835][ T889] usb 2-1: too many configurations: 200, using maximum allowed: 8 [ 462.363028][ T889] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 462.383544][ T889] usb 2-1: can't read configurations, error -61 [ 462.521800][ T889] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 462.532210][ T5947] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 462.572271][ T5918] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 462.613830][ T5918] usb 6-1: device descriptor read/8, error -71 [ 462.682656][ T889] usb 2-1: too many configurations: 200, using maximum allowed: 8 [ 462.692621][ T5947] usb 4-1: device descriptor read/64, error -71 [ 462.711047][ T889] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 462.731078][ T889] usb 2-1: can't read configurations, error -61 [ 462.752643][ T889] usb usb2-port1: attempt power cycle [ 462.862179][ T5918] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 462.892523][ T5918] usb 6-1: device descriptor read/8, error -71 [ 462.944071][ T5947] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 463.893098][ T5918] usb usb6-port1: unable to enumerate USB device [ 568.951689][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 568.958690][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9135/1:b..l [ 568.966990][ C0] rcu: (detected by 0, t=10502 jiffies, g=32537, q=169 ncpus=2) [ 568.974684][ C0] task:syz.4.724 state:R running task stack:26664 pid:9135 tgid:9135 ppid:5816 task_flags:0x40004c flags:0x00080000 [ 568.988997][ C0] Call Trace: [ 568.992268][ C0] [ 568.995181][ C0] ? __schedule+0x10b9/0x6150 [ 568.999845][ C0] __schedule+0x1139/0x6150 [ 569.004338][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 569.009130][ C0] ? __pfx___schedule+0x10/0x10 [ 569.013965][ C0] preempt_schedule_irq+0x51/0x90 [ 569.018967][ C0] irqentry_exit+0x1d8/0x8c0 [ 569.023548][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 569.029515][ C0] RIP: 0010:stack_access_ok+0x0/0x200 [ 569.034870][ C0] Code: 20 ff ff ff 44 8b 85 30 ff ff ff e9 ba fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> b8 00 00 00 00 00 fc ff df 41 57 41 56 4c 8d 77 08 41 55 41 54 [ 569.054457][ C0] RSP: 0018:ffffc900048df878 EFLAGS: 00000246 [ 569.060500][ C0] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff9120f558 [ 569.068447][ C0] RDX: 0000000000000008 RSI: ffffc900048df938 RDI: ffffc900048df940 [ 569.076394][ C0] RBP: ffffc900048df988 R08: ffffffff9120f55c R09: 00000000ffffffff [ 569.084339][ C0] R10: 0000000000000002 R11: 0000000000006cdb R12: ffffc900048df990 [ 569.092284][ C0] R13: ffffc900048df940 R14: ffffc900048df940 R15: ffffc900048df974 [ 569.100240][ C0] ? __unwind_start+0x573/0x7f0 [ 569.105074][ C0] unwind_next_frame+0xb7d/0x20b0 [ 569.110080][ C0] ? __unwind_start+0x574/0x7f0 [ 569.114915][ C0] __unwind_start+0x45f/0x7f0 [ 569.119571][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 569.125703][ C0] arch_stack_walk+0x73/0x100 [ 569.130363][ C0] ? __unwind_start+0x574/0x7f0 [ 569.135194][ C0] stack_trace_save+0x8e/0xc0 [ 569.139847][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 569.145243][ C0] ? __lock_acquire+0x436/0x2890 [ 569.150159][ C0] kasan_save_stack+0x33/0x60 [ 569.154835][ C0] kasan_save_track+0x14/0x30 [ 569.159493][ C0] kasan_save_free_info+0x3b/0x60 [ 569.164492][ C0] __kasan_slab_free+0x5f/0x80 [ 569.169230][ C0] kfree+0x2f8/0x6e0 [ 569.173099][ C0] ? put_files_struct.part.0+0x261/0x330 [ 569.178714][ C0] ? put_files_struct.part.0+0x261/0x330 [ 569.184326][ C0] ? kvfree+0xd/0x20 [ 569.188195][ C0] put_files_struct.part.0+0x261/0x330 [ 569.193654][ C0] exit_files+0xb7/0xe0 [ 569.197791][ C0] do_exit+0x1772/0x2bd0 [ 569.202018][ C0] ? __pfx_do_exit+0x10/0x10 [ 569.206582][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 569.211933][ C0] do_group_exit+0xd3/0x2a0 [ 569.216411][ C0] __x64_sys_exit_group+0x3e/0x50 [ 569.221495][ C0] x64_sys_call+0x151c/0x1740 [ 569.226154][ C0] do_syscall_64+0xcd/0xf80 [ 569.230638][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.236524][ C0] RIP: 0033:0x7f1be478f749 [ 569.240916][ C0] RSP: 002b:00007ffc611e3798 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 569.249302][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1be478f749 [ 569.257253][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 569.265199][ C0] RBP: 00007ffc611e37fc R08: 0000000e611e388f R09: 00000000000927c0 [ 569.273146][ C0] R10: 000000000000d174 R11: 0000000000000246 R12: 000000000000008b [ 569.281095][ C0] R13: 00000000000927c0 R14: 0000000000070ee8 R15: 00007ffc611e3850 [ 569.289051][ C0] [ 569.292046][ C0] rcu: rcu_preempt kthread starved for 10463 jiffies! g32537 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 569.303209][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 569.313148][ C0] rcu: RCU grace-period kthread stack dump: [ 569.319008][ C0] task:rcu_preempt state:R running task stack:27880 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 569.332461][ C0] Call Trace: [ 569.335715][ C0] [ 569.338627][ C0] ? __schedule+0x10b9/0x6150 [ 569.343280][ C0] __schedule+0x1139/0x6150 [ 569.347766][ C0] ? __pfx___schedule+0x10/0x10 [ 569.352589][ C0] ? find_held_lock+0x2b/0x80 [ 569.357246][ C0] ? schedule+0x2d7/0x3a0 [ 569.361552][ C0] schedule+0xe7/0x3a0 [ 569.365593][ C0] schedule_timeout+0x123/0x290 [ 569.370419][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 569.375763][ C0] ? __pfx_process_timeout+0x10/0x10 [ 569.381023][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 569.386804][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 569.392238][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 569.396981][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 569.402239][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 569.407413][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 569.412325][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 569.417153][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 569.422939][ C0] rcu_gp_kthread+0x26d/0x380 [ 569.427598][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 569.432771][ C0] ? rcu_is_watching+0x12/0xc0 [ 569.437510][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 569.442687][ C0] ? __kthread_parkme+0x19e/0x250 [ 569.447684][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 569.452861][ C0] kthread+0x3c5/0x780 [ 569.456906][ C0] ? __pfx_kthread+0x10/0x10 [ 569.461471][ C0] ? rcu_is_watching+0x12/0xc0 [ 569.466208][ C0] ? __pfx_kthread+0x10/0x10 [ 569.470793][ C0] ret_from_fork+0x983/0xb10 [ 569.475362][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 569.480447][ C0] ? __switch_to+0x7af/0x10d0 [ 569.485101][ C0] ? __pfx_kthread+0x10/0x10 [ 569.489666][ C0] ret_from_fork_asm+0x1a/0x30 [ 569.494417][ C0] [ 569.497409][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 569.503700][ C0] Sending NMI from CPU 0 to CPUs 1: [ 569.508908][ C1] NMI backtrace for cpu 1 [ 569.508931][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.508960][ C1] Tainted: [L]=SOFTLOCKUP [ 569.508967][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 569.508978][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 569.509007][ C1] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 569.509025][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 569.509041][ C1] RAX: 0000000000bdd185 RBX: 0000000000000001 RCX: ffffffff8b7826d9 [ 569.509054][ C1] RDX: 0000000000000000 RSI: ffffffff8dace031 RDI: ffffffff8bf2b380 [ 569.509068][ C1] RBP: ffffed1003b58498 R08: 0000000000000001 R09: ffffed10170a673d [ 569.509081][ C1] R10: ffff8880b85339eb R11: ffff88801dac2ff0 R12: 0000000000000001 [ 569.509104][ C1] R13: ffff88801dac24c0 R14: ffffffff9088b8d0 R15: 0000000000000000 [ 569.509118][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 569.509137][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.509151][ C1] CR2: 00007f3c991eef98 CR3: 000000005c597000 CR4: 00000000003526f0 [ 569.509164][ C1] Call Trace: [ 569.509171][ C1] [ 569.509177][ C1] default_idle+0x13/0x20 [ 569.509204][ C1] default_idle_call+0x6c/0xb0 [ 569.509232][ C1] do_idle+0x38d/0x510 [ 569.509263][ C1] ? __pfx_do_idle+0x10/0x10 [ 569.509295][ C1] cpu_startup_entry+0x4f/0x60 [ 569.509324][ C1] start_secondary+0x21d/0x2d0 [ 569.509345][ C1] ? __pfx_start_secondary+0x10/0x10 [ 569.509368][ C1] common_startup_64+0x13e/0x148 [ 569.509399][ C1]