last executing test programs: 26.481095252s ago: executing program 1 (id=1509): syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x800) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/power/wakeup_count', 0x42, 0x0) write$sndseq(r0, &(0x7f0000000240)=[{0x3, 0x0, 0x19, 0x40, @time={0x2, 0x80000000}, {0x8, 0x6}, {0x40, 0x7}, @quote={{0xa7, 0x1e}, 0xc}}], 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x8b1d, 0x10100, 0x0, 0xfffffffe}, &(0x7f00000003c0)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x40012000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "23ed87", "1c31f5c6f3ee325f414711887778888a438fa6adfd462c3368b10b7a02205ebb1d163bd8ee0091b53b64cba3051742106ae3252c9166e6782d4dc4deb01fcfde771bfdbc352100f872456a48fc601c284a5562f66289a8eafe3959395e609f0b46221aca2f2abf72ea0499db120dbf5d0c985fb18a8b5e859489b651bb007edf8df1ced7ea26b497a8b4140a1de972d595c65adaba2b5077e1ac986bae61c55b10f6d18c6045025e1a7eeca65783344ec46a93067e973b653e682203d92e091b1936bfc187f70dcd50a3e6ae44ef66017a29c14b3ff0ffb6eb4674fa43b2ce609b609604eb0d7d3243f162b3c7cc6d195c7f0bb8279d3b7dd310255fde91b97a"}}, 0x110) io_uring_enter(r2, 0x1066, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 26.219747677s ago: executing program 1 (id=1512): r0 = msgget$private(0x0, 0x20) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000380)=""/45) msgsnd(r0, &(0x7f0000000240)=ANY=[@ANYRES16], 0x31, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) fsopen(&(0x7f00000001c0)='binder\x00', 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000280)={0xf0f022}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x1) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) readv(r2, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1) shutdown(r2, 0x1) 26.152035794s ago: executing program 1 (id=1514): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fdatasync(r2) semop(r1, &(0x7f0000000240)=[{0x1, 0x20, 0x800}, {0x3, 0x0, 0x1800}, {0x1, 0x800, 0x1800}, {0x0, 0xe65b}], 0x4) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0xd}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200649078020000000100000004001000628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526f863033b291322d4a74882ed6741e7632daeaec0c95f2ad1cd68fb3d9fd3efe8e4ea8b5ec7448ddd6a3215990e1b896120966af96b22cf049f0"], 0x0) accept(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x80) 25.987432852s ago: executing program 1 (id=1515): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000009060102000000cf93650c91045c75840900020073797a31000000000500010007000000280007"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x9, @loopback}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@float={0x10, 0x0, 0x0, 0x10, 0xa}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @fwd={0x3}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x101, [{0xc, 0x2, 0x2e0f}, {0xa, 0x5, 0x5}]}]}, {0x0, [0x2e, 0x3e, 0x5f, 0x61, 0x0, 0x61]}}, &(0x7f0000000240)=""/123, 0x68, 0x7b, 0x0, 0xd2b}, 0x28) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0xffffff6c) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) r7 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = fsmount(r7, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x209800700, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000500000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000000018000000ffffffd000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41100, 0x42}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000500000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000000018000000ffffffd000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41100, 0x42}, 0x94) r9 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dd7b) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) write$tun(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="000088090203000f"], 0x22) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 22.594469575s ago: executing program 1 (id=1534): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2081, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c00000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e00003c00128009000100766c616e000000002c0002800400038006000100020000001c0004800c010007000000050000000c00010007000000050000000800050000", @ANYRES32=r3, @ANYBLOB="0800040044000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xc) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x9) (async) mkdir(&(0x7f0000000140)='./file1\x00', 0x89) (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000280)='./file1\x00') (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0xffffffffffffff7f, 0x5, 0x1000, 0xffffffffffffffff, 0x3fffffffffffffff, 0xffffff7ffffffffc, 0x3, 0x80000, 0xfedf}) (async) syz_open_dev$mouse(&(0x7f0000000180), 0x400, 0x80000) (async) syz_open_dev$dri(&(0x7f0000000140), 0x5, 0xc000) 22.214657067s ago: executing program 1 (id=1537): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1b) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4, 0xf, 0x6}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 22.059559477s ago: executing program 32 (id=1537): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1b) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4, 0xf, 0x6}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 13.419653462s ago: executing program 5 (id=1604): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d10402064d8c57ff202030109021b0001000000000904"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 11.301664991s ago: executing program 5 (id=1613): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, 0x0, &(0x7f0000000040)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(r2, 0x4201, 0xcb, 0xf, 0x0, 0x0) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20042, 0x1}) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x8, 0x6, 0x5b8, 0xd0, 0x0, 0x3c0, 0xd0, 0x220, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@private1, @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'caif0\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd0, 0x118, 0x0, {0x5002}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@loopback, 0x29, 0x37}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [0xff], 'veth1_to_batadv\x00', 'wlan0\x00', {}, {}, 0x32, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x6, 0x1, [0x0, 0x7, 0x1ff, 0x7f, 0x7f, 0x7, 0x1, 0x799c, 0xd, 0x7, 0x2, 0x100, 0x1, 0xf6ee, 0xffff, 0x7f], 0xa}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @HL={0x28, 'HL\x00', 0x0, {0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 7.785380687s ago: executing program 5 (id=1626): r0 = socket$netlink(0x10, 0x3, 0x9) close_range(0xffffffffffffffff, r0, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x8, 0x40, 0x7, 0xc574, {{0x2e, 0x4, 0x2, 0x3, 0xb8, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x7, 0x8, "498bcfc3916a"}, {0x2, 0x10, "3f140c5ccb98fc2a49917785afb5"}, {0x7, 0xc, "e0cc7416964998e97765"}]}, @generic={0x189, 0x9, "c03db23d1d016e"}, @rr={0x7, 0x13, 0xcb, [@remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x31}, @local]}, @cipso={0x86, 0x34, 0x3, [{0x7, 0x3, 'M'}, {0x7, 0xa, "f86df0d582cb6b28"}, {0x1a9267dcc7464ca5, 0xe, "9a3e37714f976940a53a51c3"}, {0x3, 0x10, "095283adfef60830b6cc3a8d1a63"}, {0x2, 0x3, "9f"}]}, @generic={0x82, 0x6, "2853c8bb"}, @cipso={0x86, 0x16, 0x1, [{0x1, 0x10, "1cfbe12a3e4a29ba884f172cce85"}]}, @lsrr={0x83, 0x7, 0x84, [@empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, r2, 0x25, 0x18, @val=@perf_event={0x8}}, 0x18) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_getaddr={0x4c, 0x16, 0x8, 0x70bd28, 0x25dfdbfd, {0x2, 0x8f633af82f4a6d86, 0x94, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @remote}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc00}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0xff, 0xffff, 0x7, 0x10}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6048885}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0xfffffff8, 0x6, 0xfffffff4, 0x5, 0xc0, 0x1, 0x6}, &(0x7f0000000380)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000003c0)=r4, 0x4) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400), 0xc4440, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000440)=0xb0000) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x505040, 0x182) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000004c0)=0x3bfa000, 0x4) fsetxattr$security_ima(r1, &(0x7f0000000500), &(0x7f0000000540)=@sha1={0x1, "8497f2a164b64253d0373654c8d88e3928d899ac"}, 0x15, 0x3) r6 = accept$unix(r5, &(0x7f0000000580), &(0x7f0000000600)=0x6e) connect$unix(r6, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e22}, 0x6e) wait4(0xffffffffffffffff, 0x0, 0x1000000, &(0x7f00000006c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000780)=0x6, 0x0, 0x4) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000007c0)={r3}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x1a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x4, 0xe, 0x1, {0x22, 0x74}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x53, 0x4}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x110, 0xfa, 0x81, 0x6, 0xaf, 0x5f}, 0x70, &(0x7f0000000880)={0x5, 0xf, 0x70, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "fe1d57cfb57c1229ecf574c94779889e"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xfd, 0x4, 0x9, 0xf, 0x8, [0x3f30, 0xff000f, 0xc03f, 0x3f00]}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x7fffffe, 0xff0f, 0x3, [0xa0cf, 0x30, 0xff000f, 0xc0, 0x3f30, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "08b50e54f41f53f4b5ee7680ea8c660d"}]}, 0x6, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x41e}}, {0xd8, &(0x7f0000000980)=@string={0xd8, 0x3, "da2fb270621d418b9a03b46c7df36ed3c0b51eb50f90b37e6f04b341e453e0c00e027bebebad83fbcfc8cf408059ab3f208524318ec1b9c2b323f8cb47ef0aa770a67ff431e60f2b678736cdc0064a1992e314c775a26bc9deb9d73ec0ec05ccdf730e5450462f480757193da3f9cc712ea536ec8ef42840c9f035bb8ca0a6eaccbb2773e434e80bf45cb4d95a7c7d90348f2f34fdb11e9d7e01b096ea30b6d81f51b79cf8babd9d5546e388c0e4c750f556174050c72770ea2382c278333ed1ea87d61b3d2264da0fee2c381236ec41c4b159b34054"}}, {0xd2, &(0x7f0000000a80)=@string={0xd2, 0x3, "186417114f51423faa2325292193fb578086d7fc0a4d5774d78789b1a92923425001516f4448f8fa90e9f92e68905d63168ce73acf29444714416e2ac33cda857fb294175301ffc9a6e32bf140e91b231d53a336ee24906a39d4f23ffca3595683f377bd06a0da991ac09f6261ce6ce5cacaeaaf3924de82d16eada4b3986cf3ee8463bf1e75030d1ae0f4dbc0691b0c75aab1ba88be880cfd1393e6524625afe8f21f0bf55d24190033087dc6451d09bb537668005b1c0c61057aa16b7914c2275d0f89c9b25aa01a5e74bea03d68f9"}}, {0xb1, &(0x7f0000000b80)=@string={0xb1, 0x3, "4dc7e2a369f53b7833bf247dbce55ee76b7b3c299fca27446071335ce06d65f1e7c0c850675793d3e4b7e089b6dafe58d5b2704de463faee7317ddc70015d2de76e20ee2975941d4946c42a90712f0461b03ac7d1b8ee48ddc3a9c71ce3c6e455234fd7ade84d2f9d971f348bf2263a068479805e597ecfcd160d6d372f9b0efffd06ad74db57c15dace5b6a015b59454218b0bd2e89e1b57d8de5bd90bb94998b90274c6821e2e4f64b6f153c530c"}}, {0x7f, &(0x7f0000000c40)=@string={0x7f, 0x3, "eeb0383fb64dd970e2f33780d494b81dab93734ac41d5cf0c98a72c98b3a73f7ab978eb61b156530429d5f2c7b8156a7c1eccb31e93de951ab5d1ed9a7da113d4814a609f2afe2832ea8291cadc72216bcca3e9c5914a7bab0134ac7c35c1c33e9983e43d04dfcc77788578d8ca167cb1dc70af134962dc0fc865732ac"}}]}) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) mknodat$null(r8, &(0x7f0000000d80)='./file0/file0\x00', 0x40, 0x103) recvmmsg(r6, &(0x7f0000003780)=[{{&(0x7f0000000dc0)=@ieee802154, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/252, 0xfc}, {&(0x7f0000000f80)=""/13, 0xd}], 0x3, &(0x7f0000001000)=""/40, 0x28}, 0x6}, {{&(0x7f0000001040)=@nl=@proc, 0x80, &(0x7f0000001500)=[{&(0x7f00000010c0)=""/99, 0x63}, {&(0x7f0000001140)=""/193, 0xc1}, {&(0x7f0000001240)=""/89, 0x59}, {&(0x7f00000012c0)=""/87, 0x57}, {&(0x7f0000001340)=""/120, 0x78}, {&(0x7f00000013c0)=""/131, 0x83}, {&(0x7f0000001480)=""/50, 0x32}, {&(0x7f00000014c0)}], 0x8, &(0x7f0000001580)=""/15, 0xf}}, {{&(0x7f00000015c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001640)=""/50, 0x32}, {&(0x7f0000001680)=""/191, 0xbf}, {&(0x7f0000001740)=""/14, 0xe}, {&(0x7f0000001780)=""/221, 0xdd}], 0x4}, 0x101}, {{&(0x7f00000018c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001940)=""/206, 0xce}, {&(0x7f0000001a40)=""/144, 0x90}, {&(0x7f0000001b00)=""/115, 0x73}, {&(0x7f0000001b80)=""/60, 0x3c}], 0x4, &(0x7f0000001c00)=""/250, 0xfa}, 0x10000}, {{&(0x7f0000001d00)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001d80)=""/121, 0x79}, {&(0x7f0000001e00)=""/245, 0xf5}, {&(0x7f0000001f00)=""/234, 0xea}], 0x3, &(0x7f0000002040)=""/15, 0xf}, 0xff}, {{&(0x7f0000002080)=@tipc, 0x80, &(0x7f0000003680)=[{&(0x7f0000002100)=""/154, 0x9a}, {&(0x7f00000021c0)=""/8, 0x8}, {&(0x7f0000002200)=""/90, 0x5a}, {&(0x7f0000002280)=""/183, 0xb7}, {&(0x7f0000002340)=""/127, 0x7f}, {&(0x7f00000023c0)=""/200, 0xc8}, {&(0x7f00000024c0)=""/230, 0xe6}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/159, 0x9f}], 0x9, &(0x7f0000003740)=""/2, 0x2}}], 0x6, 0x40000043, &(0x7f0000003900)) write$sndseq(r1, &(0x7f0000003940)=[{0x1, 0xcd, 0x0, 0x6, @time={0x3, 0x8}, {0xd, 0x2}, {0x2, 0xd}, @note={0xfd, 0x8, 0x1, 0x2, 0xb}}, {0x9e, 0x1, 0x5, 0x2, @time={0x10000, 0xfffff001}, {0x8, 0xb}, {0x2, 0x8b}, @raw8={"e435a1211f60178b7d67b6d1"}}, {0x75, 0x6, 0x1, 0x1, @time={0xa11, 0xd}, {0x8, 0x1}, {0xff, 0x2}, @control={0x7, 0x8}}, {0x1, 0x8, 0x2, 0x8, @time={0x6, 0x10000}, {0x6, 0x53}, {0x7, 0xeb}, @note={0x9, 0xa, 0x1, 0x1, 0x2}}, {0x91, 0x5, 0xa, 0x5, @tick=0x5, {0xf, 0x1a}, {0x3, 0x2}, @control={0x7, 0x2, 0x2}}, {0x8, 0x1, 0x4, 0x5, @tick=0x6, {0x0, 0x2}, {0x10, 0x75}, @control={0x0, 0xbab, 0x200}}, {0x5, 0x4, 0x3, 0xe6, @time={0x7, 0x9}, {0x5, 0x5}, {0xe, 0x5}, @queue={0x0, {0x7f, 0x9}}}], 0xc4) openat$fuse(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000003e00)={&(0x7f0000003a80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000003d40)=[{&(0x7f0000003ac0)="3146b60ed11e9587d539694796abcb587598f65939dfe1a5160da69529e45cdd5d12cc65c6b3aa7499c81261dedb0e056a9af89bf1060d8a6bc0841eae42eeefb7f42dea11627a1539226cfa47efdc1dea8c8c6474876b26c4d1523a9c194b2493693f765d0713cb847dae9c03d8895d367a68a4bd4a43", 0x77}, {&(0x7f0000003b40)="2ca4d7214157dd2678", 0x9}, {&(0x7f0000003b80)="0de6d6233b04281f0ce3b828f0a9f5195fcd5b389440f8f01b9ed2bc622b5b567e636ba2072d86c67bb7258d9a5ca69660b149925218bcd098c87ef43e2ba7ab0625f1131cec034a01bc70662abbb5b2d7bf2d24817f3f692843d3b5fa1a69d8bfa3c9e86f36cb98601164e75fd9adf7c6e6dc1907088b3cd1d799122597cf5bdc7e8f6e478ba75f3b931062d6e56fd656bf90191f762cdab1123d76b3fc68d31004d19599f6ecaa3e7a4cf846a53d534a2956e88c27b831b8ed3991debb63f6cf6410715c52cf26cf349eb12a353874ea", 0xd1}, {&(0x7f0000003c80)="af648a44cd315b1919ec5a2dd63a56735dd0b08cb0bed03d4eef153a16332580d0373f9da71a0502123eeb77cb7fb1d58180aa445a82d221963f60897cdf449319aaa9e082e620632d3fedf4215484a314bf418d86674ebffa235c6937bd2f1fbd256f03f6ba66b77afca364fe3e88ae75c27027f5f0e05fa92c7121facb1f10815f77db04339383e18c8752f6ccbaa58d10ba6036abcb3c02725b79806b3c7beabd61c65c2ec8806ce25220f6eebca0fa", 0xb1}], 0x4, &(0x7f0000003d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0xf, 0x1, [{0x0, 0x9, "251672175bdab7"}]}, @timestamp={0x44, 0x4, 0x55, 0x0, 0x4}, @noop, @end, @timestamp={0x44, 0x10, 0x25, 0x0, 0x0, [0x8, 0x2, 0x401]}]}}}], 0x50}, 0x0) execve(&(0x7f0000003e40)='./file0\x00', &(0x7f0000003f00)={[&(0x7f0000003e80)='\x00', &(0x7f0000003ec0)='^\x00']}, &(0x7f0000004040)={[&(0x7f0000003f40)='\x00', &(0x7f0000003f80)='\x00', &(0x7f0000003fc0)='/dev/cachefiles\x00', &(0x7f0000004000)='+-]\xc0\x00']}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000004080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r8, 0xc01064c5, &(0x7f0000004140)={&(0x7f0000004100)=[r9, 0x0], 0x2}) 7.414395062s ago: executing program 2 (id=1630): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010380f4090400726638405af79751180000010100000a24010f000302010209"], 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7801, 0xffffffff, 0x4, 0x5, 0x1, 0xffffffffffffffff}) prlimit64(r1, 0xd, &(0x7f0000000140)={0x305, 0xd}, &(0x7f0000000180)) syz_usb_disconnect(r0) syz_open_dev$dri(&(0x7f0000000080), 0xc000000000000000, 0x65a000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r5, r4, 0x2) r6 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x200042, 0x0) fcntl$setlease(r6, 0x403, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getpid() 7.277888125s ago: executing program 0 (id=1633): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x54b93e79}, &(0x7f0000000480)=0x8) close(r5) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "6ad2"}, @TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x5, 0x9}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) r11 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r11, &(0x7f0000000000)='fq\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYRESHEX=r8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x64f38de65d3e0110, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xf}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}]}}, @TCA_RATE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 7.142115928s ago: executing program 0 (id=1634): bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x35, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000200085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'pimreg1\x00'}}, 0x1e) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.023330421s ago: executing program 3 (id=1639): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x60881, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000180)=""/256, 0x100}], 0x2}, 0x60}], 0x1, 0x10042, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r5, r6, 0x6, 0x0, 0xffffffff, 0x804, {0x100, 0x1, 0x3, 0x67, 0x6, 0x5, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000002060100060000060000005d0c0000000e0003006269746d61703a69700000000500040000003000"], 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xffe0}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x653c7b97591b1b6b) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002b000b0000000800018004008d00000000"], 0x24}}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r9, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x7, 0x80, 0xda, 0x81, {{0x16, 0x4, 0x1, 0x2a, 0x58, 0x68, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0x78, 0x3, 0xc, [{@remote, 0x7}, {@loopback, 0x5}, {@local, 0x7}, {@empty, 0x3}, {@multicast1, 0xe3c}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x200}]}, @rr={0x7, 0xf, 0x6b, [@dev={0xac, 0x14, 0x14, 0x15}, @loopback, @broadcast]}]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000373099d2338b11dd7435d20a1fe8f0882f68f558f8540f5a89572960db013502fe8a488c307b70b894b83c34ab177fb40f3acaaa4c2a1a6e352e77fbaa1ead0d1f00ff84b388932a376428d70c07d0b3c8ba74220bad43961585d9354977f4d9a842e12b094f2afdd176ad2efa7bef2f3477b2c8", @ANYRES16=r9, @ANYBLOB="00012bbd7000fedbdf250600000008003b0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="a98bb2b3cb71cc6cff656047ec15bf79a1a3cc4751c8a8155d97202cf3a068ad87f398e1f86aba540e45c7f29df2a4a04862684fb4dc4f161a3bff364ff665cd178f7932325bd328807ff2bcf827415340297d0809fc4a5bd06197788afcb0250ad3", @ANYRES16=r0, @ANYRESHEX], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) (async, rerun: 64) io_setup(0x3, &(0x7f00000003c0)) (async, rerun: 64) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x208, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r11, 0x5522) (async) r12 = gettid() sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="ec160000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fadbdf250b00000008000600000000003400028006000e004e21000008000900fd02000006000b000a0000000800070000000000080003000300000008000300000000001c0003800800010000000000060007004e230000060007004e22000008000400010000800c000180060004004e2000003000038014000600ff020000000000000000000000000001050008000c000000080003000200000005000800bb00000014000180060002002f000000060002003c0000001800028014000100ac14142b000000000000000000000000100001800c0007000800000030000000"], 0xec}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) (async) timer_create(0x4, &(0x7f0000000740)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) ioctl$USBDEVFS_BULK(r11, 0x5523, 0x0) 5.006953359s ago: executing program 3 (id=1640): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x44004}, 0xc080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8002848}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)=@deltclass={0x500, 0x29, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1e, 0xfff1}, {0x13ff9bafef840e0a, 0xffff}, {0x2, 0x5}}, [@c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xb}, 0x3ff, 0x503f0e51}}]}}, @c_atm={{0x8}, {0x30, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xe, 0x2}}, @TCA_ATM_HDR={0x12, 0x3, "4c7d7dc1c1267fbe38c66a26221f"}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_FD={0x8, 0x1, r1}]}}, @c_cbq={{0x8}, {0x480, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x2, 0xfc00, 0x4, 0x400, 0x10}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0xffffff80, 0x6, 0x9, 0x400, 0x1, 0x2a88, 0x6, 0x3, 0x9, 0x4, 0x4, 0x4e54, 0x860, 0x1, 0x9, 0x5e5, 0x9, 0x6, 0x3, 0x6, 0x7f, 0x80000001, 0x4, 0x5, 0x10, 0x0, 0x6, 0x21, 0x99b, 0x5, 0x5, 0x80000000, 0x6, 0x4, 0x7, 0x9, 0x5, 0x0, 0x8, 0xd, 0x4, 0x9, 0x6, 0x81, 0x9, 0x6, 0x2, 0xdb, 0x6, 0x9, 0x9, 0x8, 0x9, 0x10000, 0x40, 0x4, 0xfffff001, 0x5, 0x5, 0xffffff80, 0x8, 0x18, 0x5, 0x800, 0x1, 0x5, 0x1a7b, 0x46b1, 0x7, 0x3, 0x5, 0x3949, 0x5, 0x2, 0xa67171a, 0x6, 0xbd68, 0x4, 0xe, 0x5, 0x7, 0x0, 0x2, 0x2, 0x5, 0xffffffc0, 0x8cd1, 0x9, 0x6b, 0xa, 0x800, 0x87, 0xa, 0x8, 0x4, 0xe0, 0x5, 0x7b, 0x9, 0x9, 0x15b, 0xc2, 0x9, 0x8000, 0x32, 0xfffff39a, 0xfffffff7, 0xfffffff7, 0x9, 0x6, 0x8000, 0x8, 0x6, 0x4, 0x1, 0x9, 0x6, 0x101b, 0x200, 0x7, 0x8000, 0x3, 0x664, 0x3, 0x2, 0x0, 0x4, 0x3, 0x2, 0x2, 0x3ff, 0x9, 0x81, 0x6, 0x3, 0x2000000, 0x9, 0x8, 0x1ff, 0x923, 0x2, 0x45324bd0, 0x3, 0x3ff, 0x6, 0x1, 0x1, 0x1, 0x81, 0x3c4, 0x0, 0x38ef9f99, 0x9, 0xc649, 0x19316ade, 0x7, 0x0, 0x5, 0xd, 0x5, 0x8001, 0x2, 0x6, 0x5, 0x2, 0xffffffff, 0x8, 0x8491, 0x0, 0x1, 0x7, 0x80, 0x1, 0x0, 0x6, 0x2, 0x6, 0x9, 0xfffffffa, 0x3, 0x1, 0x144, 0xc9, 0x3, 0x10000, 0x8, 0x8, 0x7f, 0x9, 0xfffffffc, 0xdfef, 0x4, 0x800, 0x3, 0xfffffff9, 0x3, 0x1000000, 0x8, 0x8, 0x1, 0xf6, 0x9, 0x9, 0x2, 0x7fff, 0xa0da, 0x10, 0x800, 0x7, 0x2, 0x7, 0xd2a0, 0xd04, 0x9, 0xb0c, 0x1, 0x5, 0xffffffff, 0x1, 0x4, 0x2, 0x800, 0x3f9, 0x1, 0x7, 0x0, 0xe9, 0x2, 0xffff0001, 0x4, 0x8, 0x7d3, 0x4, 0xd4, 0x12000000, 0x3, 0x8276, 0xff, 0x4, 0xa, 0x0, 0x800, 0x0, 0x80, 0x5, 0x7, 0x4, 0x3, 0xbf0, 0xb, 0xba1, 0x3, 0x4, 0xe0, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0x44, 0x0, 0x6, 0x40, 0x4, 0xc}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x0, 0x4, 0x1e, 0x80000001, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x38, 0x1, 0x1f, 0x9, 0x2, 0x0, 0xfffffff8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x0, 0x5, 0xfff8, 0xa, 0x4}}, @TCA_CBQ_RATE={0x10, 0x5, {0xa, 0x0, 0x5, 0x1000, 0x6, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x2, 0x2, 0xc2, 0x8, 0x81}}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000b80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f00000008c0)={0x244, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9f18}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xb}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xfffffffa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0xf}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x80000001}}]}, 0x244}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$kcm(0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000bc0)=0x91, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r1) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x84, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x44880}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x64, r8, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_emit_vhci(&(0x7f0000000f80)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001000)={0x214, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x6f, 0xa9, @random="061e0c9ecc81b16bab4c5cc6dd8bc3a5a17247be063d01b2ca7806ed66555713fdfd8bca3c824e7f1040a3e53b2f47c54d78734e55d444f5f8099af1545972b16b28a87b6fea1ff50a05e2ec44ffdd4aef8db819b709418633c20c5d72a8cdd5fb11fd398c7e8165318436"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x29, 0xa8, @random="6ee80f70b9ca75abc6d02750544833dbfeeeaa999e70556dad49d8e0f0845b6fe494d928d7"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffffd}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x102, 0xa9, @random="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"}]}, 0x214}, 0x1, 0x0, 0x0, 0x40880}, 0xd0) bind$inet6(0xffffffffffffffff, &(0x7f00000012c0)={0xa, 0x4e24, 0x3, @empty, 0x1000}, 0x1c) r10 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000001500)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001340)={0x164, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x42b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x10}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xba4b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x47, 0x3e}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0x164}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000001540)={0x2a, 0x4, 0x0, {0x0, 0x4, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) r11 = syz_genetlink_get_family_id$team(&(0x7f00000015c0), r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={r10, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000016c0)={@local, 0x0}, &(0x7f0000001700)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000017c0)={'ip_vti0\x00', &(0x7f0000001740)={'ip_vti0\x00', r2, 0x8000, 0x1, 0x2688, 0x5, {{0x17, 0x4, 0x3, 0x6, 0x5c, 0x3b3, 0x0, 0xf, 0x4, 0x0, @multicast2, @remote, {[@noop, @noop, @timestamp_addr={0x44, 0x44, 0x26, 0x1, 0x1, [{@rand_addr=0x64010100, 0x7}, {@rand_addr=0x64010102, 0xcc4c}, {@multicast2}, {@empty, 0x5f2}, {@multicast1, 0x4f}, {@empty, 0x1}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000001800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000002000)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001a40)={0x55c, r11, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r16}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe9b}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x55c}, 0x1, 0x0, 0x0, 0x48000}, 0x200008c0) 4.958223965s ago: executing program 3 (id=1641): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000006c0)="02", 0x1}, {&(0x7f0000000700)="7e0f4aadaffb682d5ace5afe018b14baf84fd2a798fb61b74bcf64d9e8c527fc7faf121489d83708ee0519e3fe1730ec56bb2eba1836fff5526a04928f73e5098da47873a3f1d47a386a7ef209d0ab14b5ace762cb47393684cdef1527d0c828347d75fa3062ee364a5391af65b7c9046d38f710922cf2a6e1ad9100540c554e3d3af8fcf1f3ad0e5813a349bc4c40641b6922b609d264be9ddcfb6bcaf941d01ef9f46447cbd0461ef9af606368c982c7c17db0b01d7525987ff77a1f27a42e47dc5f0c7b6a282be09d7e8f1f765a491da8ae3c2623451fe4120a4d8f62f240674c", 0xe2}], 0x2}}], 0x2, 0x24000045) shutdown(r0, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r2}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1, {0x0, r6}}) (async) io_uring_enter(r3, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r2}, 0x4) (async) r8 = socket$kcm(0x10, 0x400000002, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'sit0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x1, "0663c89f187ab5f7a561193250929f0c"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x10) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@delchain={0x8c, 0x65, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xffff, 0x10}, {0x4, 0xe}, {0x9, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xb0}}, @TCA_CHAIN={0x8, 0xb, 0xff}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0xff000000]}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x51, 0x5a, 0x4e23}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xc0000000}, @TCA_RATE={0x6, 0x5, {0x9, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) (async) r13 = socket(0x400000000010, 0x3, 0x0) (async) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r15, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r16, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) 4.67719432s ago: executing program 3 (id=1643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) r1 = socket(0x2, 0x80002, 0x2) (async) socket(0x200000000000011, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmdt(0x0) shmdt(0x0) (async) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) (async) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0xa001, 0x190) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c00018006000600800a0000f0160280ec1617801f"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000) (async) clock_gettime(0x0, 0x0) utimensat(r4, 0x0, &(0x7f0000000100)={{0x0, 0x2710}}, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="e1a228da5d6b29a8305adce4d4517225405d7e29fa723cd40ad7694acaab6d005aa7202b1d21bd99f1ce73658494bf3f6712f1c6be7ef1a75f53c9e28ee0e544dc06d1a91a4d85e941989e99d408b869c10e2fd54becc2", @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') (async) preadv(r7, &(0x7f0000000680)=[{&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000280)=""/74, 0x4a}, {&(0x7f0000000480)=""/127, 0x7f}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000580)=""/95, 0x5f}, {&(0x7f0000000700)=""/115, 0x73}], 0x6, 0xfffffffd, 0x8) 4.649846243s ago: executing program 5 (id=1644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000002480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r8, 0x0, 0x100000000000000}, 0x38) r9 = socket(0x10, 0x3, 0x2) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x0, 0x200000}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000019080), r0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000190c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000020000000240012800b000100627269646765f8e5ecd0450a000014000280080015000100002700000000008ff2109971bcb44764e420a94e89d65cbd40713765a8619d148023b85d32b15edde3e97f4338489d4382c74aec58cca6b8683758b94e35c2df91fdec6a0d5229e63a066b886700e4bd37fd782e637e2a4fc0b2a64aa089d561a40e75ed9db7c4be50a258b2dbaf7462bafa1e910b95f53f0dd695fc8a7c000000"], 0x44}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000540)=0xd7d2, 0x8) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x20040011) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000db34a3c600070000000c0001800500020001000000"], 0x20}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') pread64(r11, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 3.895408129s ago: executing program 3 (id=1645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000"], 0x48) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1c2725e7", 0x5}], 0x2}, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000540)}, 0x20) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@allocspi={0x130, 0x16, 0x1, 0x70bd28, 0x25dfdbfb, {{{@in6=@local, @in=@multicast2, 0x4e23, 0xf, 0x4e23, 0xe, 0x2, 0x20, 0x0, 0x5e}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@private=0xa010100, {0x8, 0x100, 0x5, 0x7, 0x1000, 0x1, 0x0, 0x10000}, {0x2, 0x9, 0x3, 0x195d}, {0x9, 0x6, 0x81}, 0x70bd25, 0x3501, 0xa, 0x1, 0xda, 0xec}, 0x3, 0x32b}, [@srcaddr={0x14, 0xd, @in=@remote}, @lifetime_val={0x24, 0x9, {0x9, 0x2, 0x3, 0x8}}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000"], 0x48) (async) socket(0x2c, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1c2725e7", 0x5}], 0x2}, 0x4000000) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000540)}, 0x20) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@allocspi={0x130, 0x16, 0x1, 0x70bd28, 0x25dfdbfb, {{{@in6=@local, @in=@multicast2, 0x4e23, 0xf, 0x4e23, 0xe, 0x2, 0x20, 0x0, 0x5e}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@private=0xa010100, {0x8, 0x100, 0x5, 0x7, 0x1000, 0x1, 0x0, 0x10000}, {0x2, 0x9, 0x3, 0x195d}, {0x9, 0x6, 0x81}, 0x70bd25, 0x3501, 0xa, 0x1, 0xda, 0xec}, 0x3, 0x32b}, [@srcaddr={0x14, 0xd, @in=@remote}, @lifetime_val={0x24, 0x9, {0x9, 0x2, 0x3, 0x8}}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) (async) 3.892474707s ago: executing program 2 (id=1646): mkdirat(0xffffffffffffff9c, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffff9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.850332854s ago: executing program 0 (id=1647): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x8, 0xc, '\x00', 0x1}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x40d, 0x30bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r10}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001300050200"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a000100aaaaaaaaaa30"], 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) 3.84641045s ago: executing program 4 (id=1648): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x3, 0x0, @c}, 0x29, 0xfffffffffffffff8) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x1c) r1 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/222, 0xde}], 0x3}, 0x80000001) r2 = epoll_create1(0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480), 0x202200, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000580)={0x3, @default, r4}) sendmsg$kcm(r1, &(0x7f0000000ac0)={&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @empty}, 0x1, 0x3, 0x3, 0x2}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)="94ef49cf941ef67eef76f6f2dd9acd7bf7015a2f25d41e0fbb5b54c56e", 0x1d}, {&(0x7f0000000680)="a2245110dd164604e4aaadd6e6ab2f3e8efc9ec65b74c4d6e382c6102da9a06b47758d2c042a5c1dffe8abcc9d4ef3422f8e13b5a53a1a55591bf6834694768f52ff34eeeaf6a54767c79e3cc6f93bd1a908365f5734721432a1ba193a6ab3978a66c0827a80771223d4a2ad67018f33979f72d1b382a6a34dacf092e1e6d53efecfed30ee4c1529cd9de81c071423306be656b09cf55fe432d02d", 0x9b}], 0x2, &(0x7f0000000780)=[{0x68, 0x84, 0x8, "082bb4cb3941d2c85fea983ac60b679c9ed422035e16c4bcb9d7b5daf417c21748b1c7c52da7a8a9c84eea07515f67e6abf5e8d70c07667b4af37cd97741f2999a331958472a8ab1d937289adf9fe59836"}, {0x60, 0x114, 0x690, "8f21da4b83eaaf10bfe4854fada79d553f85b6fa4366ac6bb85fd903a99da1b0a2bbbaceea7dc3a320be1fd966f36d276ae041a3c641fbd88c97773a09f6a3aab3950b4295a292b9f8df"}, {0x70, 0x10a, 0x1, "23a8353574a6cfbe3d4cb04ff36842dfe7491c7712994046bc901ff20b12b26949c0d3d919d8b262d04b081ce408580f4985212ce06c9c740d8fc6796f111ec59a1ab554462ebdcdf7a8721f7e8e0c2645cfeeaa2be1d649f66aa07a3e"}, {0xf8, 0x116, 0x1, "5ab3c3656d3d1c4ed2207820b32456e0b22313e364cb52d7b9bc4bea924513eca3ea5ade88229dfa07f6a5ce5d9da80147f71fbe98774f31ae4b61377700db1b79bf558423bb9129c536937c0a502c0447edaf39090900cbb64d4a88f9588992ddaf4af9ad282a0d95f8a84d9d68f1ffac0eadd7ef8ab88dfb022bedb7c1b5ae68a9fa1264a559573796a4dcc9548498d26a2ecac2b96ef06008038b9f559b0497df0c7c855a91cced340954647402a26e8598c07525d7eb09f014f3bce25a0ece72c1bb7c100bfa5d36e60ec61b4867c618758622713e234e92901998bc336cd062f7866cc0"}, {0x108, 0x10b, 0xfffffff7, "2c4fdde433b030c63f7f3aa142b64796cb70ea188d6258aa6503062073217d592b67450b118bc83f64015ef6f22225cee2125ff98d99efbfd5c35f0dc2b0f9425487503e6c546d284ae991e524300b03de9325f5ea7f7be67984a3093f60c5b4b38560ebc05a654cc894a940c70a03ba22e2c7fb2151b2927b7bf131a220d87de400a96094d420f66d05afb418b2e57b8585eec98825eca7544a5578689aecd702899af7fcdc109682af3da1fb3d80fd76ba795ae494b9744ab7134b84daebb13f7d62bb0b108c1054e0750dc34e064b0b26486230e0a5d687b4b8137b023374c2e0e8255c51aec19f32bf9b5d938371bcbb20"}], 0x338}, 0x800) set_mempolicy(0x2, &(0x7f0000000b00)=0x8, 0x2a0d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000b40)={0x0, 0x0}) fcntl$lock(r2, 0x7, &(0x7f0000000bc0)={0x2, 0x0, 0x71, 0x8, r5}) setxattr(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40)=@random={'os2.', '/selinux/enforce\x00'}, &(0x7f0000000c80)='&\x00', 0x2, 0x3) r6 = signalfd4(r2, &(0x7f0000000cc0)={[0x6]}, 0x8, 0x800) fcntl$lock(r6, 0x25, &(0x7f0000000d00)={0x1, 0x0, 0x3, 0x9, r5}) ioctl$int_in(r1, 0x5452, &(0x7f0000000d40)=0x9) splice(r1, &(0x7f0000000d80)=0x6, r1, &(0x7f0000000dc0)=0x7, 0x7, 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000e00)) read$watch_queue(r6, &(0x7f0000000e80)=""/155, 0x9b) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000f40)={r1, 0xb, 0x4, 0x3}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}}, 0x80) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x4000010, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x0, &(0x7f00000010c0)=0x848, 0x0, 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001140), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r9, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x1c}}, 0x8000) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001240)='veth1\x00', 0x10) set_mempolicy(0x0, &(0x7f0000001280)=0x8, 0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000a, 0x100010, r3, 0x8000000) set_mempolicy(0x4000, &(0x7f00000012c0)=0x7, 0x7) 3.0557673s ago: executing program 5 (id=1649): syz_usb_connect(0x2, 0x3f, &(0x7f0000001340)=ANY=[@ANYBLOB="120101026e2f6d40da05a3807a4c0102030109022d0500000000000000a40103ffffff0109050610400008030f09050d021000000c04090502040804080401"], &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0}) 2.873486101s ago: executing program 0 (id=1650): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$audion(0x0, 0xd, 0x80000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r3, &(0x7f0000005a40)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) ptrace(0x10, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x33, &(0x7f0000000300)=ANY=[@ANYRES64=r2], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xfffffffe) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000000e1404f627bd7000ffdb773608003c00040000000800030000000000080003000300000008003c000500000008003c0005000000e39d5e0c8cc02dea95a3a04b85236728c6ac9bf1f5e875150645650386992cac753d44040290bc104c3b9daf330b6807f83669fd9b8677531b507774f0a52f9d8b11006747a6cfda0731997e8ee77e0a77ba24f3deb3cf6dc90bd777f4"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40810) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r6, 0x58, &(0x7f0000000400)={0x0, 0x0}}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01002dbd70a0faffffffffffff009665239af0e9dd0a0000008fac23e7b75d21b7247c316aaa50cda119d0aa"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={r7, 0xa, 0x18}, 0xc) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000bf9e50df4613001114100025bd7080fedbdf250800"], 0x18}, 0x1, 0x0, 0x0, 0x78a00b2448cb50fb}, 0x40) write$FUSE_INIT(r1, 0x0, 0x0) 2.787546087s ago: executing program 3 (id=1651): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'ipvlan1\x00', {0x2}}) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)={[&(0x7f0000000100)=' ', &(0x7f0000000240)='\x00', &(0x7f0000000300)='dctcp\x00', &(0x7f0000000340)=' ']}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x39f2, 0x1000, 0xfffffffd, 0xbfe02000}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x108, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_io_uring_submit(r4, r6, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd_index=0x6, 0x33, 0x0, 0x0, 0x4}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYRESHEX=r3, @ANYRES16=r2, @ANYRESOCT=r5, @ANYRESOCT=r1, @ANYRESOCT=0x0], 0x0) shutdown(r7, 0x1) 2.786542535s ago: executing program 4 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000340)}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) close_range(r2, 0xffffffffffffffff, 0x0) 1.966380363s ago: executing program 2 (id=1653): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="af76dd2ced528bf1b7e31470324e65fe41b0c48e921668e6757c8aef70c41769a6b81dcd17c9ea31a130859dd5cb0fe42b7986b2f9dc251fc331dab6ac7f34cf13ffa12e5fc4c6e5e0f63fad9f706d7383f0606fe79683b43bb574f2073167ac1fa77aa995c9c9ede7fdd7edadc1eb834a522bd9b118c5a8a68a90e7afffc384bc1fe6969a5ada7de44cbaaba91766d7524d957e2ac3bd66be50dac1a4a21725f5eb70f9d0ce7ca5d626a5437ac660e3125c64b115d5793304c87856dec79a05512120350b53785938613d90f3f1268072896530b0a1b88cbd712725a7f090cb4d"], 0x0) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000000)={'\x00', 0x5, 0x0, 0x10000}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000003c0)={0x20, 0xf, 0x2, "a685"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.798443089s ago: executing program 4 (id=1654): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 32) syz_usb_disconnect(0xffffffffffffffff) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) (async) socket$alg(0x26, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) chdir(&(0x7f0000000080)='./file1\x00') (async, rerun: 32) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x6625000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) (async, rerun: 32) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) (rerun: 32) sendfile(r7, r3, 0x0, 0x20000023893) (async, rerun: 64) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x78, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 1.711881659s ago: executing program 4 (id=1655): prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x478002, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x7c1, 0x6, {{0x22, 0x4, 0x1, 0x2, 0x88, 0x65, 0x0, 0xc, 0x4, 0x0, @multicast2, @broadcast, {[@cipso={0x86, 0x62, 0x2, [{0x0, 0x5, "8505b1"}, {0xf4605ada792b202b, 0x10, "791b5dcb5a0e12a578fd46154aa7"}, {0x1, 0x10, "b7533a4ffdc0ca9a250e34f17d3e"}, {0x5, 0x8, "ee7ff866f02a"}, {0x6, 0x9, "4e11a6ba262e6a"}, {0x5, 0x8, "67fc74279d82"}, {0x2, 0x4, "e041"}, {0x6, 0xa, "6c1b8a983158d5d8"}, {0x6, 0x10, "794dec2be411ceca3a25dc5e3ff0"}]}, @ssrr={0x89, 0xb, 0xb, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}]}}}}}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000480)=r1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000111401002dbd700000000000080001000000000008004a000000000008004b0013000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="1400000024000b47568013db354d1fae20cf0000", 0x14}], 0x1}, 0x44) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) sched_setscheduler(r6, 0x0, &(0x7f00000004c0)=0x8001) syz_usb_control_io$hid(r5, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x6, "0de7353d"}]}}, 0x0}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x646081, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x1f, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf5300, 0x0, 0x0, 0x0, 0x1bfe}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @alu={0x7, 0x1, 0x8, 0x6, 0x1, 0x30}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) 1.659629552s ago: executing program 0 (id=1656): r0 = syz_io_uring_setup(0xec8, &(0x7f0000000c00)={0x0, 0xfffffffc, 0x2, 0x0, 0x2f1}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xd8c, 0x6fba, 0x3, &(0x7f0000000080)={[0xfffffffffffffbff]}, 0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 1.553569948s ago: executing program 0 (id=1657): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5b, 0x7fffffff}]}) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$vim2m(0x0, 0xca55, 0x2) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) r8 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5863, 0x200, 0xfffffffc, 0x158}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x90, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x1, 0x5, 0x1, {0x0, r11}}) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6000003, 0x80010, 0xffffffffffffffff, 0x10000000) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r12, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x50, 0x0, r1, 0x0, &(0x7f0000000180)="d04b4c1930b6df80dd6b691b66f40bb650c3db8f35fc5e53b267d64cad7c0e76ca3f46c067286060d9322223afa21e81d583b78a6dc0607063c4c4f44a307464c784a17ed69844b3f095cf61c8ab05fc9f6bf90fe7b1edead514ab23fe16adc97f1f6469b49d512125b85c63dac14ca8b09eab5ac2e6a9482fd5a93a52fbdc8b", 0x80, 0x4090, 0x1, {0x0, r13}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.350273184s ago: executing program 5 (id=1658): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x4, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) r5 = syz_clone3(&(0x7f0000000500)={0x80060000, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), {0x1d}, &(0x7f0000000400)=""/147, 0x93, &(0x7f0000000880)=""/4096, &(0x7f0000000380)=[0x0, 0xffffffffffffffff], 0x2, {r1}}, 0x58) sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000001a40)=[{&(0x7f0000000580)="4497ebc8e87c0901a1bfb153cb3ca59e64eb4ba38a899c9c12cd36cbfa2af21935ba94fd7fa02aa7a3ca4eed4f05e3361935daab3847018e528d04977c4ea6969e0c55a2d6d9663885edcedfa0cf8d32cee0b6a707d68d58e0178cf961b92f6a9555d426a327c54f6c33282bbcde5b270ed62cd9b4094ca51610624cb951de1655858942270aec65cf8cb64fdafafb89d80bc6a95cf9069b49abe22be8bb035520266d4ade8e0f8be9eb46ba9159fcc0bc821c74d4b9bb696831c564a3c07e00bf3af3a2", 0xc4}, {&(0x7f00000006c0)="0d42eea1ebc60316c6f19a75c3125573a4d86e3c40da0f9d16535574a9f5810eef042f0af9e58bf6a3c7337506828b2844fef661645089982ee34889d6ac9059b89b774d392c2fd60c9e4167c7de9263861c49fd787a88b54b759159536c5839513ea6982f8c8dce1db478ac799b5e004ce10eb68ced501e25ba28d415c7106f2637afd0be1654059eb24cba50d88e48c4a475a9d6a67646519f62370d8742df8ce6b4e0afb3e90331372dd7746a", 0xae}, {&(0x7f0000001ac0)="31a599f62ec98a6e3089d9449e3fb9ac03ecc6e1b47fd72bac803a000000004a194f79aa9492bac42bfe2eb999dc35c6654f8f04b3fffc92e77f93554c5f64cb8789b709d2fae5198df2948548562719203ff87d13ec66982e9af76500241648fec92618b3eb3c1d7a7024d7e56346829844fcf80b0bca0ed65ccdd98b85f63746ba38b8236fddc4b33dec136d10ba6dcab1a49b42f768ffb2a476070f6bace5233453b3bedb3e5cfb95f82ce7dfc95581c1b52e1c8007c3ff86220fbd3033ffa887ef32fc1960", 0xc7}, {&(0x7f0000001880)="46fa60c2b83e95921eb02f4ef2f86e35dde0076cea4fbed13bf0e1ed3914512f4aae9db0e0ec512e62411f880451dbca1471b7c55b14b1f0fd30efde9a55827ab36784b1a7d0267e6f9f5cfb034cf5050d71fb71a019f5f1e165be8e4bc38f3c6131a4eab4c2a22b5245d21080495927cd76352d65038bb304d975904bdf8cb0c3f41991f650937005c00a74b9976c582f3a23ad4172bcaac8941925b99d6429c4ea7f35deab457e6950c056b58b0bca75080eff98212dd08bfe865e98cea652ab746f29924cd91d949ef0a85caba3540c", 0xd1}, {&(0x7f00000007c0)="f07014d28732f4230ff4f8145da672a4c1800bc65b18032b0e6687b8735454f5b5f52f36ca01d433906a10b9d8002512b6bd41d091dc98cca5167f44", 0x3c}, {&(0x7f0000001980)="39cd7ee7f18b254c79fad42456f0e0352893579a9d5f4a7bcbd880cee388476e5a32fc6125e81dab88bac9b57f8a937176004fb74449383e31cd3b41487eca2d754b1c9438d4e24434693f8cd014ab874ec615c3eb72f054c3be56bc74c758d56c1e29c924b77b89d107e1ada9b066a419ffe9d9bd599dcfa459d54dbd3a9c39b8d1af", 0x83}, {&(0x7f0000000800)="cba2bff491c218d969d4300d2ebdd6fa423faeb474628f28f3a318111471aacdf8557356b21e6ca5170bfb7faac7915378939503804d39a8f8d3d4f419d590266699d6c2e99e38d955d06d5611b00c4f9b1f5abc3e8ff0795eca88ec", 0x5c}], 0x7) syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0x17ce, 0x100, 0x0, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 1.239657686s ago: executing program 2 (id=1659): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000180005800e000100697036677265746170000000040002800a0001ed730b05bbbbbb0000"], 0x44}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x50, r1, 0x100, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x3e}}}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abe00000000ee398d162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x50}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044854}, 0x20000001) 1.035681282s ago: executing program 4 (id=1660): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x8, 0xc, '\x00', 0x1}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x40d, 0x30bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x34, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r10}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001300050200"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a000100aaaaaaaaaa30"], 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) 994.733073ms ago: executing program 2 (id=1661): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="8514de191ca75e5ac7cfc8998f82d895c801b0728ba4b84fad1c0d9a65ac1378c9ce1e229e9f90f8d6538019b5bb2c7aa994d4c5c0a4f26bc3040f99a4fda3794243c2c32b6c8d075b547ddf18bacf0d74a5d92ba8635884902f34b682262a36814a8be7fb6e7470b750a748fc4976b2afb4468275e5915a2293243b1c259c3e6fc1ddf7f3ead77de9b2f6234ca2ea8c9ec4707bd1546904a1e0a5b558ad2ef458caaa5d8d6b965cc812f32e1f985bac2b4475ff96ac28b41efbbb1bd3", 0xbd, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "210ec480ec192dafb5513a644c4dcf80c94d4d9d26bed58acb118f8171b0d762a6fc864dc9de6f6a0969353afa2929a2307aa0648abd02730828a212a27df87f", 0x28}, 0x48, r0) add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000380)="d587089fbacd41ec52f675377339f071773c0d23f10ddafe595fb894f775dff8f28d633e9202dd8a47f77c9cb17993aed5e1ede2cd7cc7ba6f65f08a5ecd2a193a7b6675d2d86bd61424775899e72fb083bd93dcb48cee82ca95c1768709ae35a7b3efc2a60b92a6ff82a4ad698292cf9c6f23ae825052831dad31f1e82e6e5a7e3670e29bdae41dada3046a05bfce361c1c496c3ffdec7aeb317027182311187457b655e20d23ff1c0c172eb0303f9f1a0d6d6dc449a95fb47a2f37ac199261109f855911b67981c90d345cd353f8c2ccd6e60eee42a3", 0xd7, r2) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) accept4$phonet_pipe(r3, 0x0, 0x0, 0x800) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000340)) 183.49964ms ago: executing program 2 (id=1662): ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f00000013c0)={0x10, 0x1}) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newtaction={0x114, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x100, 0x1, [@m_ct={0x44, 0x202, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0xb8, 0x6, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1000, 0xe4a5, 0xffffffffffffffff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10001}]}, {0x59, 0x6, "568de9f336d93bc4b9f5993d283290b41eceb81dd7faf26c952b94745e674214b875f04a9105f9766bb10da373a7dc4fd95315eb779f87d82f1aa63732c29e4a051c922d376dbb31788fdc71be5fb2a313bb9c3f8a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r4, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdcd120", 0x56}], 0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r2, @ANYRESOCT=r6]) chdir(&(0x7f0000000300)='./file0\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r7, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000002c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1663): socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x410040, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x3dc, r5, 0x10, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x390, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @loopback, 0x6d2}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2f4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0xffffffffffffff5a, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2ac, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x4004050}, 0x40804) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) (async) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.297440][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 271.315158][ T5959] em28xx 4-1:0.0: Registering input extension [ 271.318915][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 271.336255][ T5835] em28xx 4-1:0.0: Closing input extension [ 271.340173][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.353719][ T10] usb 3-1: Product: syz [ 271.369902][ T10] usb 3-1: Manufacturer: syz [ 271.374837][ T10] usb 3-1: SerialNumber: syz [ 271.521197][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 271.570852][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 271.846461][ T5835] em28xx 4-1:0.0: Freeing device [ 272.268834][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.814381][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 273.321704][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.737176][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.985367][ T9214] loop6: detected capacity change from 0 to 7 [ 273.993100][ T9214] Dev loop6: unable to read RDB block 7 [ 274.000792][ T9214] loop6: unable to read partition table [ 274.006730][ T9214] loop6: partition table beyond EOD, truncated [ 274.015221][ T9214] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 274.756003][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.885305][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.866'. [ 274.937279][ T10] r8152-cfgselector 3-1: USB disconnect, device number 28 [ 274.991871][ T5959] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 275.005817][ T30] audit: type=1400 audit(1751984584.550:883): avc: denied { setopt } for pid=9258 comm="syz.2.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 275.036988][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 275.048808][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 275.182447][ T5959] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.198277][ T5959] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.242383][ T5959] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.271192][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.397087][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 275.412270][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 275.443083][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 275.625847][ T5959] usb 2-1: usb_control_msg returned -32 [ 275.634746][ T5959] usbtmc 2-1:16.0: can't read capabilities [ 275.662438][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 275.681201][ T9267] mmap: syz.0.870 (9267): VmData 25841664 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 275.791588][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.997378][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 276.742204][ T9272] ceph: No mds server is up or the cluster is laggy [ 276.761610][ T5959] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 276.816534][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 276.830567][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.997821][ T5959] usb 4-1: device descriptor read/64, error -71 [ 277.073265][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.329804][ T9306] tipc: Started in network mode [ 277.335343][ T9306] tipc: Node identity 7f000001, cluster identity 4711 [ 277.346304][ T9306] tipc: Enabling of bearer rejected, failed to enable media [ 277.354781][ T5959] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 277.457833][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 277.471699][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 277.507864][ T5959] usb 4-1: device descriptor read/64, error -71 [ 277.559433][ T9309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9309 comm=syz.4.877 [ 277.609156][ T24] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 277.618696][ T5959] usb usb4-port1: attempt power cycle [ 277.624890][ T9307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.637163][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 277.657068][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.672884][ T24] usb 3-1: Product: syz [ 277.682560][ T24] usb 3-1: Manufacturer: syz [ 277.697041][ T24] usb 3-1: SerialNumber: syz [ 277.718708][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 277.735427][ T5910] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 277.863111][ T5902] usb 2-1: USB disconnect, device number 21 [ 277.871661][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.936516][ T9300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.945212][ T9300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.970528][ T5959] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 278.001405][ T24] usb 3-1: USB disconnect, device number 29 [ 278.018439][ T5959] usb 4-1: device descriptor read/8, error -71 [ 278.287956][ T5959] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 278.427012][ T5959] usb 4-1: device descriptor read/8, error -71 [ 278.578284][ T5959] usb usb4-port1: unable to enumerate USB device [ 278.598067][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.919407][ T5910] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 278.928080][ T5910] ath9k_htc: Failed to initialize the device [ 278.941373][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.950224][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 279.958097][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.097905][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 280.108191][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.126060][ T30] audit: type=1400 audit(1751984589.670:884): avc: denied { mounton } for pid=9345 comm="syz.3.889" path="/syzcgroup/unified/syz3" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 280.172052][ T9355] hpfs: Bad magic ... probably not HPFS [ 280.259750][ T24] usb 3-1: too many configurations: 196, using maximum allowed: 8 [ 280.284710][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.294986][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.326329][ T24] usb 3-1: Product: syz [ 280.343743][ T24] usb 3-1: Manufacturer: syz [ 280.366676][ T24] usb 3-1: SerialNumber: syz [ 280.451374][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.482320][ T5949] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.695624][ T9360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.830460][ T9361] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 280.878416][ T9361] bond1: entered promiscuous mode [ 280.888004][ T9361] bond1: entered allmulticast mode [ 280.892750][ T9347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.902699][ T9347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.927075][ T9361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.989653][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.119894][ T5902] usb 3-1: USB disconnect, device number 30 [ 281.130048][ T9374] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 281.167353][ T9374] cramfs: wrong magic [ 281.457586][ T9379] netlink: 'syz.1.898': attribute type 1 has an invalid length. [ 281.465520][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 281.550051][ T5949] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 281.550201][ T5949] ath9k_htc: Failed to initialize the device [ 281.550757][ T5902] usb 3-1: ath9k_htc: USB layer deinitialized [ 281.586331][ T9384] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 281.949708][ T9391] bond1: entered promiscuous mode [ 281.954837][ T9391] bond1: entered allmulticast mode [ 282.558907][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.580013][ T9391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.599145][ T9383] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 282.609953][ T9383] batman_adv: batadv0: Adding interface: gretap1 [ 282.616295][ T9383] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.642502][ T9383] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 282.749160][ T9402] unknown channel width for channel at 909000KHz? [ 282.786660][ T5948] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 282.937908][ T5948] usb 2-1: device descriptor read/64, error -71 [ 282.964800][ T30] audit: type=1400 audit(1751984592.510:885): avc: denied { read write } for pid=9403 comm="syz.3.904" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 283.024618][ T30] audit: type=1400 audit(1751984592.510:886): avc: denied { open } for pid=9403 comm="syz.3.904" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 283.050036][ T30] audit: type=1400 audit(1751984592.540:887): avc: denied { ioctl } for pid=9403 comm="syz.3.904" path="socket:[26832]" dev="sockfs" ino=26832 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 283.286143][ T5948] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 283.295836][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.417862][ T5948] usb 2-1: device descriptor read/64, error -71 [ 283.485801][ T30] audit: type=1400 audit(1751984593.030:888): avc: denied { read } for pid=9427 comm="syz.3.911" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 283.536199][ T30] audit: type=1400 audit(1751984593.030:889): avc: denied { open } for pid=9427 comm="syz.3.911" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 283.629649][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.702679][ T5948] usb usb2-port1: attempt power cycle [ 284.047995][ T5948] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 284.068441][ T5948] usb 2-1: device descriptor read/8, error -71 [ 284.307846][ T5948] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 284.329001][ T5948] usb 2-1: device descriptor read/8, error -71 [ 284.706983][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 284.714771][ T5948] usb usb2-port1: unable to enumerate USB device [ 284.738276][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.771537][ T30] audit: type=1400 audit(1751984594.320:890): avc: denied { append } for pid=9441 comm="syz.3.915" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 284.795659][ T9444] random: crng reseeded on system resumption [ 284.803516][ T9442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.914'. [ 284.889649][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 284.896859][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.911329][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.968467][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 285.030460][ T30] audit: type=1400 audit(1751984594.540:891): avc: denied { write } for pid=9447 comm="syz.0.916" path="socket:[26249]" dev="sockfs" ino=26249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.068051][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 285.132056][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 285.459394][ T30] audit: type=1400 audit(1751984594.850:892): avc: denied { search } for pid=9451 comm="syz.1.917" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 285.487821][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 285.508503][ T10] usb 3-1: Manufacturer: syz [ 285.555369][ T10] usb 3-1: config 0 descriptor?? [ 285.772772][ T5948] usb 3-1: USB disconnect, device number 31 [ 285.792044][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.827958][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 285.988030][ T5902] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 286.017946][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 286.027207][ T10] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 286.036081][ T10] usb 4-1: config 1 has no interface number 0 [ 286.044771][ T10] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 286.055271][ T10] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 286.065799][ T10] usb 4-1: config 1 interface 105 has no altsetting 0 [ 286.076596][ T10] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 286.096012][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.114793][ T10] usb 4-1: Product: syz [ 286.119363][ T10] usb 4-1: Manufacturer: syz [ 286.123970][ T10] usb 4-1: SerialNumber: syz [ 286.141674][ T9460] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 286.149432][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 286.155458][ T9460] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 286.170500][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.181261][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.192594][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 286.202790][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 286.217276][ T5902] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 286.227433][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.238186][ T5902] usb 2-1: config 0 descriptor?? [ 286.353581][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.924'. [ 286.365622][ T30] audit: type=1400 audit(1751984595.910:893): avc: denied { getopt } for pid=9472 comm="syz.0.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 286.474006][ T5948] usb 2-1: USB disconnect, device number 26 [ 286.618508][ T9460] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 286.694232][ T9460] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 286.706586][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 286.807915][ T9500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 287.331498][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 287.343065][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 287.397967][ T5910] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 287.414978][ T10] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fa:c8:19:87:8e:c4 [ 287.438076][ T10] usb 4-1: USB disconnect, device number 38 [ 287.505534][ T10] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 287.548156][ T5910] usb 2-1: device descriptor read/64, error -71 [ 287.557113][ T30] audit: type=1400 audit(1751984597.100:894): avc: denied { watch_sb } for pid=9508 comm="syz.2.934" path="/169/file1" dev="tmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 287.698185][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 287.713359][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 287.728156][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 287.838103][ T5910] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 287.977888][ T5910] usb 2-1: device descriptor read/64, error -71 [ 288.147433][ T5910] usb usb2-port1: attempt power cycle [ 288.590425][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 288.617997][ T5910] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 288.718347][ T5910] usb 2-1: device descriptor read/8, error -71 [ 289.830959][ T5910] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 289.859836][ T5910] usb 2-1: device descriptor read/8, error -71 [ 289.942897][ T30] audit: type=1400 audit(1751984599.490:895): avc: denied { connect } for pid=9552 comm="syz.2.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 289.988369][ T5910] usb usb2-port1: unable to enumerate USB device [ 290.059436][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 290.103467][ T9561] netlink: 64 bytes leftover after parsing attributes in process `syz.1.947'. [ 290.139786][ T30] audit: type=1400 audit(1751984599.690:896): avc: denied { mounton } for pid=9560 comm="syz.1.947" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 290.166833][ T9561] 9pnet_fd: p9_fd_create_tcp (9561): problem connecting socket to 127.0.0.1 [ 290.336835][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 290.343830][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.357862][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.367701][ T10] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 290.401168][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.471822][ T10] usb 4-1: config 0 descriptor?? [ 290.508427][ T9567] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[9567] [ 291.067699][ T10] hid (null): global environment stack underflow [ 291.690182][ T10] usb 4-1: string descriptor 0 read error: -71 [ 291.732406][ T10] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 291.757328][ T10] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -32 [ 291.813842][ T10] usb 4-1: USB disconnect, device number 39 [ 292.537933][ T5902] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 292.658239][ T9593] netlink: 152 bytes leftover after parsing attributes in process `syz.3.956'. [ 292.674745][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.956'. [ 292.719303][ T5902] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 292.727684][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.796786][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 292.829828][ T5902] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 292.856936][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.876964][ T5902] usb 2-1: Product: syz [ 292.880685][ T9600] No control pipe specified [ 292.889386][ T5902] usb 2-1: Manufacturer: syz [ 292.894013][ T5902] usb 2-1: SerialNumber: syz [ 292.900436][ T9601] tmpfs: Unknown parameter 'usrquotaB3qg]h$F$z[˟]/.G^bטDԵxc`ʅ./file1' [ 292.920200][ T9601] overlayfs: failed to clone upperpath [ 292.946926][ T5902] usb 2-1: config 0 descriptor?? [ 293.087357][ T9604] qrtr: Invalid version 0 [ 293.092106][ T5835] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 293.092261][ T9604] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[9604] [ 293.247850][ T5835] usb 3-1: device descriptor read/64, error -71 [ 293.289016][ T9585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.299310][ T9585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.310891][ T5902] usb 2-1: USB disconnect, device number 31 [ 293.488003][ T5835] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 293.557828][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 293.637892][ T5835] usb 3-1: device descriptor read/64, error -71 [ 293.647324][ T30] audit: type=1400 audit(1751984603.190:897): avc: denied { read } for pid=9613 comm="syz.0.964" path="socket:[27736]" dev="sockfs" ino=27736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 293.706383][ T9616] netlink: 240 bytes leftover after parsing attributes in process `syz.0.964'. [ 293.753280][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 293.754180][ T5835] usb usb3-port1: attempt power cycle [ 293.766716][ T10] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 293.795576][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.846702][ T10] usb 4-1: config 0 has no interfaces? [ 293.855883][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 294.034275][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.045172][ T10] usb 4-1: config 0 descriptor?? [ 294.589163][ T5835] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 294.620291][ T5835] usb 3-1: device descriptor read/8, error -71 [ 295.780927][ T5835] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 295.808464][ T5835] usb 3-1: device descriptor read/8, error -71 [ 296.200878][ T5835] usb usb3-port1: unable to enumerate USB device [ 296.260723][ T10] usb 4-1: USB disconnect, device number 40 [ 296.455609][ T9643] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[9643] [ 296.626380][ T9655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.977'. [ 296.635544][ T9655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.977'. [ 298.090392][ T30] audit: type=1400 audit(1751984607.640:898): avc: denied { ioctl } for pid=9664 comm="syz.3.979" path="socket:[28441]" dev="sockfs" ino=28441 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 298.731141][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'. [ 298.867327][ T9687] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 299.232890][ T9694] qrtr: Invalid version 0 [ 299.237581][ T9694] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[9694] [ 299.398012][ T5949] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 299.860573][ T9679] vivid-002: disconnect [ 299.871916][ T9678] vivid-002: reconnect [ 299.898036][ T5949] usb 2-1: unable to get BOS descriptor or descriptor too short [ 299.922487][ T5949] usb 2-1: no configurations [ 299.936763][ T5949] usb 2-1: can't read configurations, error -22 [ 299.964040][ T30] audit: type=1400 audit(1751984609.510:899): avc: denied { watch watch_reads } for pid=9700 comm="syz.3.989" path="/177/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 300.026755][ T30] audit: type=1400 audit(1751984609.570:900): avc: denied { write } for pid=9704 comm="syz.0.991" path="socket:[29802]" dev="sockfs" ino=29802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 300.062527][ T9713] loop4: detected capacity change from 0 to 7 [ 300.070323][ T9713] Dev loop4: unable to read RDB block 7 [ 300.076599][ T9713] loop4: unable to read partition table [ 300.085447][ T9713] loop4: partition table beyond EOD, truncated [ 300.092230][ T9713] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 300.105627][ T9713] Dev loop4: unable to read RDB block 7 [ 300.112621][ T9713] loop4: unable to read partition table [ 300.119987][ T9713] loop4: partition table beyond EOD, truncated [ 300.161606][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 301.196383][ T9737] nvme_fabrics: missing parameter 'transport=%s' [ 301.203562][ T9737] nvme_fabrics: missing parameter 'nqn=%s' [ 301.248949][ T30] audit: type=1400 audit(1751984610.790:901): avc: denied { nlmsg_read } for pid=9740 comm="syz.2.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 301.284369][ T9742] netlink: 'syz.2.1002': attribute type 33 has an invalid length. [ 301.292480][ T9742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1002'. [ 301.312278][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 301.508090][ T5902] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 301.819083][ T9759] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 301.881900][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 301.910489][ T5902] usb 4-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 301.922054][ T5902] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 301.940388][ T5902] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 301.966119][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.166806][ T5902] usb 4-1: Product: syz [ 302.173616][ T5902] usb 4-1: Manufacturer: syz [ 302.179829][ T5902] usb 4-1: SerialNumber: syz [ 302.188764][ T5902] usb 4-1: config 0 descriptor?? [ 302.448559][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 302.493673][ T5949] usb 4-1: USB disconnect, device number 41 [ 302.505400][ T9768] netlink: 'syz.0.1011': attribute type 5 has an invalid length. [ 303.269823][ T9780] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 303.298399][ T9781] binder: 9779:9781 ioctl c0306201 2000000003c0 returned -14 [ 303.378627][ T9785] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 303.635025][ T30] audit: type=1400 audit(1751984613.180:902): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 303.688103][ T9800] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 303.711170][ T9808] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 303.720713][ T9808] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 303.949525][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 304.110890][ T5902] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 304.272297][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 304.355642][ T5902] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 304.432228][ T5902] usb 3-1: can't read configurations, error -61 [ 304.570094][ T5902] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 305.208154][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 305.222721][ T5902] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 305.233346][ T5902] usb 3-1: can't read configurations, error -61 [ 305.242617][ T5902] usb usb3-port1: attempt power cycle [ 305.588760][ T5902] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 305.599160][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 305.622888][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 305.900739][ T5902] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 305.916645][ T5902] usb 3-1: can't read configurations, error -61 [ 306.037962][ T30] audit: type=1326 audit(1751984615.580:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7fc00000 [ 306.079935][ T5902] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 306.131319][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 306.154275][ T5902] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 306.168324][ T5902] usb 3-1: can't read configurations, error -61 [ 306.177559][ T5902] usb usb3-port1: unable to enumerate USB device [ 306.187972][ T30] audit: type=1326 audit(1751984615.740:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7fc00000 [ 306.217866][ T30] audit: type=1326 audit(1751984615.740:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7fc00000 [ 306.578242][ T30] audit: type=1326 audit(1751984615.740:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.0.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7fc00000 [ 306.608002][ T30] audit: type=1400 audit(1751984616.150:907): avc: denied { mount } for pid=9863 comm="syz.0.1040" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 307.260219][ T30] audit: type=1400 audit(1751984616.180:908): avc: denied { setopt } for pid=9863 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.584024][ T30] audit: type=1400 audit(1751984616.180:909): avc: denied { read } for pid=9863 comm="syz.0.1040" path="socket:[29996]" dev="sockfs" ino=29996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.747832][ T30] audit: type=1400 audit(1751984617.170:910): avc: denied { name_bind } for pid=9876 comm="syz.3.1044" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 308.458626][ T117] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 308.509424][ T30] audit: type=1400 audit(1751984618.050:911): avc: denied { mounton } for pid=9911 comm="syz.1.1055" path="/proc/721/task" dev="proc" ino=30880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 308.555631][ T9897] netlink: 'syz.3.1050': attribute type 4 has an invalid length. [ 308.563923][ T9897] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1050'. [ 308.611497][ T9902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.619688][ T117] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 308.629029][ T117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.637297][ T117] usb 3-1: Product: syz [ 308.645756][ T9902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.653717][ T117] usb 3-1: Manufacturer: syz [ 308.662678][ T117] usb 3-1: SerialNumber: syz [ 308.672425][ T117] usb 3-1: config 0 descriptor?? [ 308.680791][ T117] ch341 3-1:0.0: ch341-uart converter detected [ 308.713363][ T9902] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.722978][ T9902] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.733318][ T9902] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.742965][ T9902] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.788084][ T5948] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 309.969628][ T117] ch341-uart ttyUSB0: break control not supported, using simulated break [ 310.067370][ T5948] usb 4-1: device descriptor read/64, error -71 [ 310.116229][ T117] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 310.866133][ T5948] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 310.997469][ T9948] netlink: 'syz.0.1064': attribute type 1 has an invalid length. [ 311.018013][ T5948] usb 4-1: device descriptor read/64, error -71 [ 311.048929][ T9948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.093127][ T9948] bond2: (slave veth3): Enslaving as an active interface with a down link [ 311.129586][ T9948] bond2: (slave dummy0): making interface the new active one [ 311.138346][ T5948] usb usb4-port1: attempt power cycle [ 311.139430][ T9948] dummy0: entered promiscuous mode [ 311.149893][ T9948] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 311.488447][ T5948] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 311.508606][ T5948] usb 4-1: device descriptor read/8, error -71 [ 311.588230][ T30] audit: type=1326 audit(1751984621.130:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 311.612895][ T30] audit: type=1326 audit(1751984621.130:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 311.645898][ T30] audit: type=1326 audit(1751984621.130:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 311.689157][ T30] audit: type=1326 audit(1751984621.130:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 311.728658][ T30] audit: type=1326 audit(1751984621.130:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 311.753025][ T30] audit: type=1326 audit(1751984621.130:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 311.786640][ T30] audit: type=1326 audit(1751984621.140:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 311.792058][ T5948] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 311.822040][ T30] audit: type=1326 audit(1751984621.140:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 311.866786][ T9974] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 311.871456][ T30] audit: type=1326 audit(1751984621.150:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 311.886442][ T5948] usb 4-1: device descriptor read/8, error -71 [ 311.971536][ T5949] usb 3-1: USB disconnect, device number 40 [ 311.982084][ T5949] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 311.990957][ T5949] ch341 3-1:0.0: device disconnected [ 311.996398][ T30] audit: type=1326 audit(1751984621.150:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 312.083788][ T5948] usb usb4-port1: unable to enumerate USB device [ 312.537918][ T5948] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 312.723459][ T5948] usb 4-1: not running at top speed; connect to a high speed hub [ 312.746464][ T5948] usb 4-1: config 9 has an invalid interface number: 232 but max is 1 [ 312.762738][ T5948] usb 4-1: config 9 has an invalid interface number: 170 but max is 1 [ 312.771475][ T5948] usb 4-1: config 9 has no interface number 0 [ 312.778188][ T5948] usb 4-1: config 9 has no interface number 1 [ 312.784418][ T5948] usb 4-1: config 9 interface 232 altsetting 11 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 312.801021][ T5948] usb 4-1: config 9 interface 232 altsetting 11 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 312.812794][ T5948] usb 4-1: config 9 interface 170 altsetting 205 has a duplicate endpoint with address 0x8, skipping [ 312.837817][ T5948] usb 4-1: config 9 interface 170 altsetting 205 has a duplicate endpoint with address 0xD, skipping [ 312.858115][ T5948] usb 4-1: config 9 interface 170 altsetting 205 has a duplicate endpoint with address 0xA, skipping [ 312.874698][ T5948] usb 4-1: config 9 interface 170 altsetting 205 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 312.889164][ T5948] usb 4-1: config 9 interface 170 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 312.908571][ T5948] usb 4-1: config 9 interface 170 altsetting 205 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 313.063886][ T5948] usb 4-1: config 9 interface 170 altsetting 205 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 313.094313][ T5948] usb 4-1: config 9 interface 170 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 313.134315][ T5948] usb 4-1: config 9 interface 170 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 313.164189][ T5948] usb 4-1: config 9 interface 170 altsetting 205 has a duplicate endpoint with address 0x4, skipping [ 313.176198][ T5948] usb 4-1: config 9 interface 170 altsetting 205 has a duplicate endpoint with address 0xF, skipping [ 313.187510][ T5948] usb 4-1: config 9 interface 232 has no altsetting 0 [ 313.194598][ T5948] usb 4-1: config 9 interface 170 has no altsetting 0 [ 313.209606][ T5948] usb 4-1: New USB device found, idVendor=13b1, idProduct=000a, bcdDevice=16.fa [ 313.225764][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.238122][ T5948] usb 4-1: Product: 〉 [ 313.242724][ T5948] usb 4-1: Manufacturer: э [ 313.312021][ T5948] usb 4-1: SerialNumber: 鶖ᚻ栦虲Ҥ騣㌖륚 [ 313.917645][ T9980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.928924][ T9980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.945157][ T9980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.954314][ T9980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.144611][ T5948] usb 4-1: USB disconnect, device number 46 [ 315.071603][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 316.597841][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 316.597878][ T30] audit: type=1326 audit(1751984626.110:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 317.013834][ T30] audit: type=1326 audit(1751984626.120:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 317.414099][ T30] audit: type=1326 audit(1751984626.120:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 317.659171][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.665705][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.733016][ T30] audit: type=1326 audit(1751984626.120:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 317.802316][ T30] audit: type=1326 audit(1751984626.120:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 317.854186][ T30] audit: type=1326 audit(1751984626.120:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 317.923430][T10085] pim6reg: entered allmulticast mode [ 317.932574][T10085] pim6reg: left allmulticast mode [ 317.978088][ T30] audit: type=1326 audit(1751984626.120:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 318.005893][ T30] audit: type=1326 audit(1751984626.120:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 318.033533][ T30] audit: type=1326 audit(1751984626.120:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 318.061808][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1108'. [ 318.074409][ T30] audit: type=1326 audit(1751984626.120:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.0.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 318.475770][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'. [ 319.101512][T10125] vlan2: entered allmulticast mode [ 319.195293][T10125] bond3: entered allmulticast mode [ 321.054798][T10149] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 322.234470][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1118'. [ 322.389423][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 322.389435][ T30] audit: type=1400 audit(1751984631.940:976): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 324.183914][T10168] xt_CT: No such helper "pptp" [ 324.276125][ T30] audit: type=1400 audit(1751984633.820:977): avc: denied { validate_trans } for pid=10180 comm="syz.2.1124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 324.610223][T10193] qrtr: Invalid version 0 [ 324.615057][T10193] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10193] [ 326.471171][ T30] audit: type=1804 audit(1751984636.020:978): pid=10230 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1137" name="/newroot/211/file0" dev="tmpfs" ino=1126 res=1 errno=0 [ 326.472560][T10230] ref_ctr increment failed for inode: 0x466 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888077dcb200 [ 326.509716][ T30] audit: type=1400 audit(1751984636.060:979): avc: denied { create } for pid=10226 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 326.548922][T10229] uprobe: syz.1.1137:10229 failed to unregister, leaking uprobe [ 326.668076][ T5949] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 326.827853][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 326.834855][ T5949] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 326.844305][ T5949] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 326.855930][ T5949] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.870635][ T5949] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 326.883600][ T5949] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 326.895281][ T5949] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 326.903114][ T5949] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 326.915028][ T5949] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.927093][ T5949] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 326.940834][ T5949] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 326.953156][T10252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1142'. [ 326.953256][ T5949] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 326.972364][ T30] audit: type=1400 audit(1751984636.520:980): avc: denied { name_bind } for pid=10251 comm="syz.0.1142" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 326.973081][ T5949] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 326.999503][ T5902] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 327.012910][ T30] audit: type=1400 audit(1751984636.550:981): avc: denied { node_bind } for pid=10251 comm="syz.0.1142" saddr=fe88::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 327.040267][ T5949] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.052859][ T5949] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 327.123050][ T5949] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 327.143756][ T5949] usb 4-1: string descriptor 0 read error: -22 [ 327.196883][ T5949] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 327.216901][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.229249][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 327.354071][ T5902] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 327.357216][ T5949] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 327.419809][ T5902] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.462474][ T5902] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.516397][T10225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.568980][T10225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.589756][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.603678][ T5902] usbtmc 2-1:16.0: bulk endpoints not found [ 327.645169][ T5949] usb 4-1: USB disconnect, device number 47 [ 327.685687][ T30] audit: type=1400 audit(1751984637.230:982): avc: denied { connect } for pid=10268 comm="syz.3.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 327.712735][T10269] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1148'. [ 327.776933][T10273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1149'. [ 327.864111][T10275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.881540][ T5902] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 327.902286][ T117] usb 2-1: USB disconnect, device number 34 [ 327.922795][T10275] bond0: (slave rose0): Enslaving as an active interface with an up link [ 327.926233][ T30] audit: type=1400 audit(1751984637.470:983): avc: denied { search } for pid=10276 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.941684][T10278] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[10278] [ 327.981731][ T30] audit: type=1400 audit(1751984637.510:984): avc: denied { search } for pid=10276 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.047802][ T30] audit: type=1400 audit(1751984637.510:985): avc: denied { search } for pid=10276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.095306][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 328.111214][ T5902] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 328.125913][ T5902] usb 3-1: config 0 has no interface number 0 [ 328.138005][ T30] audit: type=1400 audit(1751984637.510:986): avc: denied { search } for pid=10276 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.165788][ T5902] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 328.187199][ T5902] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 328.210305][ T30] audit: type=1400 audit(1751984637.520:987): avc: denied { read open } for pid=10279 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.238578][ T5902] usb 3-1: config 0 interface 41 has no altsetting 0 [ 328.275678][ T5902] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 328.287629][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.313800][ T5902] usb 3-1: Product: syz [ 328.322313][ T30] audit: type=1400 audit(1751984637.520:988): avc: denied { getattr } for pid=10279 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.362973][ T5902] usb 3-1: Manufacturer: syz [ 328.371437][ T5902] usb 3-1: SerialNumber: syz [ 328.382069][ T30] audit: type=1400 audit(1751984637.520:989): avc: denied { getattr } for pid=10279 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.424785][ T5902] usb 3-1: config 0 descriptor?? [ 328.451230][T10267] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 328.477982][T10267] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 328.488191][ T30] audit: type=1400 audit(1751984637.640:990): avc: denied { read } for pid=10281 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.550295][ T30] audit: type=1400 audit(1751984637.640:991): avc: denied { open } for pid=10281 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.694673][ T59] dummy0: left promiscuous mode [ 328.721576][T10267] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 328.784701][T10267] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 329.212639][ T5902] Error reading MAC address [ 329.231877][T10267] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 329.239892][T10267] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 329.533387][T10267] netlink: 'syz.2.1146': attribute type 10 has an invalid length. [ 329.557789][T10328] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 329.756684][T10330] ptrace attach of ""[10327] was attempted by "./syz-executor exec"[10330] [ 330.088344][ T5902] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 330.100670][ T5902] usb 3-1: USB disconnect, device number 41 [ 330.494012][ T24] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 330.692696][ T24] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 330.726651][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.742016][ T24] usb 2-1: config 0 has no interface number 0 [ 330.759220][ T24] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 330.790639][ T24] usb 2-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.822045][ T24] usb 2-1: config 0 interface 113 has no altsetting 0 [ 330.839015][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 330.864338][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.877610][ T24] usb 2-1: Product: syz [ 330.885286][ T24] usb 2-1: Manufacturer: syz [ 330.894789][ T24] usb 2-1: SerialNumber: syz [ 330.905830][ T24] usb 2-1: config 0 descriptor?? [ 330.924652][ T24] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 331.135005][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 331.162504][ T117] usb 2-1: USB disconnect, device number 35 [ 331.825582][T10394] qrtr: Invalid version 0 [ 331.825788][T10394] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[10394] [ 332.428332][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88805686f800: Timeout. Failed to send simple message. [ 332.847873][ T5902] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 332.987505][T10415] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1173'. [ 333.555050][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.569429][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.580036][ T5902] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 333.589732][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.603609][ T5902] usb 3-1: config 0 descriptor?? [ 333.617506][ T5902] gspca_main: spca501-2.14.0 probing 0000:0000 [ 333.830834][ T5902] gspca_spca501: reg write: error -71 [ 333.860124][ T5902] spca501 3-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 333.907841][ T5902] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 333.947695][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 333.975700][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 334.008852][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 334.058197][ T5902] usb 3-1: USB disconnect, device number 42 [ 334.986136][T10456] qrtr: Invalid version 0 [ 334.992401][T10456] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[10456] [ 335.376333][T10454] Device name cannot be null; rc = [-22] [ 335.917869][ T117] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 335.920813][T10471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.947990][T10471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.982550][T10471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.991023][T10471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.011564][T10475] 9pnet_fd: Insufficient options for proto=fd [ 336.069282][ T117] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 336.078998][ T117] usb 2-1: config 0 has an invalid descriptor of length 148, skipping remainder of the config [ 336.092425][ T117] usb 2-1: config 0 has no interface number 0 [ 336.104085][ T117] usb 2-1: config 0 interface 46 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 336.121658][ T117] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 336.136168][ T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.200705][ T117] usb 2-1: Product: syz [ 336.205022][ T117] usb 2-1: Manufacturer: syz [ 336.209740][ T117] usb 2-1: SerialNumber: syz [ 336.220669][ T117] usb 2-1: config 0 descriptor?? [ 336.756737][T10464] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 337.081184][ T117] ums-karma 2-1:0.46: USB Mass Storage device detected [ 337.221332][T10464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 337.249595][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 337.249611][ T30] audit: type=1400 audit(1751984646.800:1006): avc: denied { write } for pid=10501 comm="syz.3.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 337.340727][ T117] usb 2-1: USB disconnect, device number 36 [ 337.438553][ T5835] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 337.601941][ T5835] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 337.610903][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.622354][ T5835] usb 3-1: config 0 has no interface number 0 [ 337.629445][ T5835] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 337.647364][ T5835] usb 3-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.670445][ T5835] usb 3-1: config 0 interface 113 has no altsetting 0 [ 337.683637][ T5835] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 337.696085][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.705241][ T5835] usb 3-1: Product: syz [ 337.709900][ T5835] usb 3-1: Manufacturer: syz [ 337.714869][ T5835] usb 3-1: SerialNumber: syz [ 337.721804][ T5835] usb 3-1: config 0 descriptor?? [ 337.729015][ T5835] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 337.914955][T10519] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 337.939433][T10519] bond3: entered promiscuous mode [ 337.944691][T10519] bond3: entered allmulticast mode [ 337.950712][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 337.985909][T10519] 8021q: adding VLAN 0 to HW filter on device bond3 [ 338.024179][T10522] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[10522] [ 338.136425][ T5835] usb 3-1: USB disconnect, device number 43 [ 338.228100][ T5949] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 338.434221][T10528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1201'. [ 338.480357][ T5949] usb 2-1: device descriptor read/64, error -71 [ 338.777813][ T5949] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 339.093638][ T5949] usb 2-1: device descriptor read/64, error -71 [ 339.790502][T10558] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 339.869486][T10549] xt_hashlimit: max too large, truncated to 1048576 [ 340.089341][ T5949] usb usb2-port1: attempt power cycle [ 340.856187][ T5949] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 340.878473][ T5949] usb 2-1: device descriptor read/8, error -71 [ 341.465845][ T5949] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 341.567498][ T5949] usb 2-1: device descriptor read/8, error -71 [ 341.673726][T10584] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 341.767224][ T5949] usb usb2-port1: unable to enumerate USB device [ 342.478605][ T30] audit: type=1400 audit(1751984652.010:1007): avc: denied { shutdown } for pid=10596 comm="syz.3.1218" lport=50402 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 342.597876][ T5949] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 342.664804][T10593] PKCS8: Unsupported PKCS#8 version [ 342.894388][T10606] netlink: 'syz.2.1219': attribute type 15 has an invalid length. [ 342.903676][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1219'. [ 342.921374][T10607] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 342.969425][ T5949] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 342.978841][ T5949] usb 2-1: config 0 has no interface number 0 [ 342.985034][ T5949] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 343.006378][ T5949] usb 2-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.019791][ T5949] usb 2-1: config 0 interface 113 has no altsetting 0 [ 343.029319][ T5949] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 343.039432][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.048171][ T5949] usb 2-1: Product: syz [ 343.052497][ T5949] usb 2-1: Manufacturer: syz [ 343.057149][ T5949] usb 2-1: SerialNumber: syz [ 343.065341][ T5949] usb 2-1: config 0 descriptor?? [ 343.072829][ T5949] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 343.261943][T10624] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 343.281482][T10624] PKCS7: Only support pkcs7_signedData type [ 343.313948][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 343.422778][ T5949] usb 2-1: USB disconnect, device number 41 [ 343.610144][T10638] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 343.732179][ T30] audit: type=1400 audit(1751984653.270:1008): avc: denied { execute } for pid=10629 comm="syz.3.1224" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 344.124832][ T30] audit: type=1326 audit(1751984653.640:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 344.164839][ T30] audit: type=1326 audit(1751984653.640:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 344.193461][T10648] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 344.291824][ T30] audit: type=1326 audit(1751984653.640:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 344.320253][ T30] audit: type=1326 audit(1751984653.640:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 344.393869][ T30] audit: type=1326 audit(1751984653.640:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 344.419957][ T5949] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 344.480012][ T30] audit: type=1326 audit(1751984653.640:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 344.531883][T10663] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1231'. [ 344.547944][ T30] audit: type=1326 audit(1751984653.640:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 344.693038][ T30] audit: type=1326 audit(1751984653.640:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1e78e929 code=0x7ffc0000 [ 344.780403][ T5949] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.980812][ T5949] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.093782][ T5949] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.103053][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.111452][ T5949] usb 2-1: Product: syz [ 345.116644][ T5949] usb 2-1: Manufacturer: syz [ 345.125536][ T5949] usb 2-1: SerialNumber: syz [ 345.144857][T10674] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1234'. [ 345.407343][ T5949] usb 2-1: 0:2 : does not exist [ 345.659758][ T5949] usb 2-1: USB disconnect, device number 42 [ 347.465219][T10711] loop6: detected capacity change from 0 to 7 [ 347.475285][T10711] Dev loop6: unable to read RDB block 7 [ 347.498011][T10711] loop6: unable to read partition table [ 347.530176][T10711] loop6: partition table beyond EOD, truncated [ 347.547101][T10711] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 350.585863][T10773] hsr0: entered promiscuous mode [ 350.592369][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1259'. [ 350.601369][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 350.601382][ T30] audit: type=1400 audit(1751984660.130:1026): avc: denied { listen } for pid=10772 comm="syz.3.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 350.638312][ T5835] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 350.638900][T10773] hsr_slave_0: left promiscuous mode [ 350.663262][ T30] audit: type=1400 audit(1751984660.130:1027): avc: denied { setattr } for pid=10772 comm="syz.3.1259" name="audio" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 350.689320][T10773] hsr_slave_1: left promiscuous mode [ 350.700680][T10773] hsr0 (unregistering): left promiscuous mode [ 350.721443][ T30] audit: type=1400 audit(1751984660.130:1028): avc: denied { bind } for pid=10772 comm="syz.3.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 350.880136][ T5835] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.890089][ T5835] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.909686][ T5834] Bluetooth: hci5: command 0x1003 tx timeout [ 350.916786][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 350.989042][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 350.998036][T10779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1260'. [ 351.342813][ T5835] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 351.404059][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.451065][ T30] audit: type=1400 audit(1751984661.000:1029): avc: denied { read } for pid=10780 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 351.502845][ T30] audit: type=1400 audit(1751984661.050:1030): avc: denied { ioctl } for pid=10780 comm="syz.3.1261" path="socket:[33780]" dev="sockfs" ino=33780 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 351.647476][ T5835] usb 2-1: GET_CAPABILITIES returned 0 [ 351.653109][ T5835] usbtmc 2-1:16.0: can't read capabilities [ 351.831649][T10786] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 352.196134][ T117] usb 2-1: USB disconnect, device number 43 [ 352.471109][T10796] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 352.522989][ T5841] Bluetooth: hci4: unexpected event for opcode 0x202a [ 352.539716][ T5835] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 352.570783][T10801] nfs: Unknown parameter '' [ 352.699852][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 352.706914][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.730245][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 352.754958][ T5835] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 352.772337][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.793446][ T5835] usb 4-1: Product: syz [ 352.797997][ T5835] usb 4-1: Manufacturer: syz [ 352.802834][ T5835] usb 4-1: SerialNumber: syz [ 352.812039][ T5835] usb 4-1: config 0 descriptor?? [ 353.019980][ T5949] usb 4-1: USB disconnect, device number 48 [ 353.103852][T10810] overlay: filesystem on ./bus not supported as upperdir [ 353.280870][T10816] netlink: 'syz.0.1271': attribute type 3 has an invalid length. [ 353.297844][ T117] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 353.352954][T10819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1272'. [ 353.460395][ T117] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.474660][ T117] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 353.487099][ T117] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 353.520883][ T117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 353.594562][ T117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 353.621456][ T117] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 353.662509][ T117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.674758][T10813] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 353.676245][ T117] hub 3-1:1.0: bad descriptor, ignoring hub [ 353.676270][ T117] hub 3-1:1.0: probe with driver hub failed with error -5 [ 353.680810][ T117] cdc_wdm 3-1:1.0: skipping garbage [ 353.680830][ T117] cdc_wdm 3-1:1.0: skipping garbage [ 353.684069][ T117] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 353.684086][ T117] cdc_wdm 3-1:1.0: Unknown control protocol [ 353.904575][ T30] audit: type=1400 audit(1751984663.450:1031): avc: denied { ioctl } for pid=10812 comm="syz.2.1270" path="socket:[34906]" dev="sockfs" ino=34906 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 354.013975][ T30] audit: type=1400 audit(1751984663.450:1032): avc: denied { write } for pid=10812 comm="syz.2.1270" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 354.015120][ T30] audit: type=1400 audit(1751984663.450:1033): avc: denied { read } for pid=10812 comm="syz.2.1270" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 354.539984][ T5948] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 354.854137][ T5948] usb 2-1: Using ep0 maxpacket: 32 [ 354.867688][ T5948] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 354.876866][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.897650][ T5948] usb 2-1: Product: syz [ 354.902173][ T5948] usb 2-1: Manufacturer: syz [ 354.907189][ T5948] usb 2-1: SerialNumber: syz [ 354.917291][ T5948] usb 2-1: config 0 descriptor?? [ 354.981877][ T5948] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 355.073740][ T30] audit: type=1326 audit(1751984664.620:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 355.121408][ T30] audit: type=1326 audit(1751984664.650:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 355.195751][T10871] kvm: pic: non byte read [ 355.209351][T10871] kvm: pic: level sensitive irq not supported [ 355.212763][T10871] kvm: pic: non byte read [ 355.228775][T10871] kvm: pic: level sensitive irq not supported [ 355.228844][T10871] kvm: pic: non byte read [ 355.243005][T10871] kvm: pic: level sensitive irq not supported [ 355.243069][T10871] kvm: pic: non byte read [ 355.254201][T10871] kvm: pic: level sensitive irq not supported [ 355.254258][T10871] kvm: pic: non byte read [ 355.267217][T10871] kvm: pic: level sensitive irq not supported [ 355.267274][T10871] kvm: pic: non byte read [ 355.280322][T10871] kvm: pic: level sensitive irq not supported [ 355.280388][T10871] kvm: pic: non byte read [ 355.305065][T10871] kvm: pic: level sensitive irq not supported [ 355.305127][T10871] kvm: pic: non byte read [ 355.316826][T10871] kvm: pic: level sensitive irq not supported [ 355.316885][T10871] kvm: pic: non byte read [ 355.930985][ T5948] gspca_topro: reg_r err -32 [ 355.935657][ T5948] gspca_topro: Sensor soi763a [ 355.968961][ T5948] usb 2-1: USB disconnect, device number 44 [ 356.096542][T10893] loop6: detected capacity change from 0 to 7 [ 356.135609][T10893] Dev loop6: unable to read RDB block 7 [ 356.156460][T10893] loop6: unable to read partition table [ 356.171438][T10893] loop6: partition table beyond EOD, truncated [ 356.188062][T10893] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 356.224607][ T5949] usb 3-1: USB disconnect, device number 44 [ 357.496753][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 357.496770][ T30] audit: type=1400 audit(1751984667.040:1040): avc: denied { bind } for pid=10923 comm="syz.1.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.546265][T10927] C: renamed from team_slave_0 (while UP) [ 357.555126][T10927] netlink: 'syz.4.1303': attribute type 3 has an invalid length. [ 357.563239][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 357.568069][T10927] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1303'. [ 357.581890][ T5835] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 357.589100][T10927] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 357.669061][T10932] netlink: 'syz.1.1304': attribute type 2 has an invalid length. [ 357.838528][ T5835] usb 3-1: Invalid ep0 maxpacket: 64 [ 357.932450][T10944] qrtr: Invalid version 0 [ 357.938710][T10944] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10944] [ 357.978121][ T5835] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 358.268638][ T5835] usb 3-1: Invalid ep0 maxpacket: 64 [ 358.275985][ T5835] usb usb3-port1: attempt power cycle [ 358.468093][ T5949] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 358.512483][T10969] xfrm0: entered allmulticast mode [ 358.639620][ T5949] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 358.647942][ T5835] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 358.666650][ T5949] usb 4-1: config 0 has no interface number 0 [ 358.676740][ T5949] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 358.689500][ T5949] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 358.689704][ T5835] usb 3-1: Invalid ep0 maxpacket: 64 [ 358.707921][ T5949] usb 4-1: config 0 interface 113 has no altsetting 0 [ 358.721320][T10973] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 358.722017][ T5949] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 358.741718][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.750162][ T5949] usb 4-1: Product: syz [ 358.754346][ T5949] usb 4-1: Manufacturer: syz [ 358.759205][ T5949] usb 4-1: SerialNumber: syz [ 358.769124][ T5949] usb 4-1: config 0 descriptor?? [ 358.785042][ T5949] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 358.927129][ T5835] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 358.960345][ T5835] usb 3-1: Invalid ep0 maxpacket: 64 [ 358.966178][ T5835] usb usb3-port1: unable to enumerate USB device [ 358.990713][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 359.024473][ T5835] usb 4-1: USB disconnect, device number 49 [ 359.297875][ T5949] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 359.469281][ T5949] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 359.495831][ T5949] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.511890][ T5949] usb 2-1: config 0 has no interface number 0 [ 359.520250][ T5949] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 359.530272][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.542797][ T5949] usb 2-1: Product: syz [ 359.547006][ T5949] usb 2-1: Manufacturer: syz [ 359.553190][ T5949] usb 2-1: SerialNumber: syz [ 359.560345][ T5949] usb 2-1: config 0 descriptor?? [ 359.570470][ T5949] imon 2-1:0.2: unable to register, err -19 [ 359.615033][T10987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1319'. [ 359.838057][ T5949] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 359.987920][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 359.994567][ T5949] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 360.006440][ T5949] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 360.015771][ T5949] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 360.023979][ T5949] usb 4-1: Product: syz [ 360.028323][ T5949] usb 4-1: Manufacturer: syz [ 360.032942][ T5949] usb 4-1: SerialNumber: syz [ 360.243379][ T5949] usb 4-1: Invalid connection information received from device [ 360.404476][T10996] 9pnet_fd: Insufficient options for proto=fd [ 360.446953][T10986] ip6t_srh: unknown srh match flags B153 [ 360.483643][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.539620][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.569654][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.683645][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.713449][T10986] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.784923][T11003] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[11003] [ 361.736060][ T5949] usb 4-1: USB disconnect, device number 50 [ 361.857861][T11009] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 361.951092][ T5841] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 362.050902][ T5948] usb 2-1: USB disconnect, device number 45 [ 362.571157][ T30] audit: type=1400 audit(1751984672.120:1041): avc: denied { write } for pid=11027 comm="syz.3.1335" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 362.856749][T11036] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1339'. [ 362.865917][T11036] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1339'. [ 363.088768][T11050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.602967][T11043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=11043 comm=syz.2.1338 [ 363.615509][T11043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11043 comm=syz.2.1338 [ 363.628685][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 363.650425][T11043] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.659471][T11043] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.668258][T11043] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.679055][T11043] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.689123][T11043] vxlan0: entered promiscuous mode [ 363.818425][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1341'. [ 364.150659][T11058] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11058 comm=syz.4.1342 [ 364.503476][T11078] loop6: detected capacity change from 0 to 7 [ 364.520453][T11078] Dev loop6: unable to read RDB block 7 [ 364.526087][T11078] loop6: unable to read partition table [ 364.557577][T11078] loop6: partition table beyond EOD, truncated [ 364.565835][T11078] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 365.246549][T11098] qrtr: Invalid version 0 [ 365.255273][T11098] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[11098] [ 365.738706][T11106] input: syz1 as /devices/virtual/input/input17 [ 366.031992][ T5841] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 366.042943][ T5841] Bluetooth: hci2: Injecting HCI hardware error event [ 366.051901][ T5841] Bluetooth: hci2: hardware error 0x00 [ 366.393275][ T30] audit: type=1400 audit(1751984675.939:1042): avc: denied { recv } for pid=11120 comm="syz.0.1360" saddr=10.128.0.169 src=39952 daddr=10.128.1.32 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 366.994537][T11139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=11139 comm=syz.2.1362 [ 367.839048][T11152] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 368.246023][ T5841] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 368.999775][T11166] loop8: detected capacity change from 0 to 8 [ 369.009885][T11166] Dev loop8: unable to read RDB block 8 [ 369.016965][T11166] loop8: unable to read partition table [ 369.023673][T11166] loop8: partition table beyond EOD, truncated [ 369.030046][T11166] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 369.091431][T11168] loop6: detected capacity change from 0 to 7 [ 369.097788][ T5948] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 369.106292][T11168] Dev loop6: unable to read RDB block 7 [ 369.112349][T11168] loop6: unable to read partition table [ 369.120823][T11168] loop6: partition table beyond EOD, truncated [ 369.127175][T11168] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 369.281508][ T5948] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 369.299715][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.324807][ T5948] usb 4-1: Product: syz [ 369.334281][ T5948] usb 4-1: Manufacturer: syz [ 369.346362][ T5948] usb 4-1: SerialNumber: syz [ 369.357315][ T5948] usb 4-1: config 0 descriptor?? [ 369.364753][ T5948] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 051 [ 370.083924][ T5948] (null): failure reading functionality [ 370.186948][ T5948] i2c i2c-1: connected i2c-tiny-usb device [ 370.388495][ T30] audit: type=1400 audit(1751984679.939:1043): avc: denied { map } for pid=11157 comm="syz.3.1368" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 370.391946][ T5949] usb 4-1: USB disconnect, device number 51 [ 370.551139][T11186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1376'. [ 371.068876][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 371.080166][T11201] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1380'. [ 371.473421][T11219] loop6: detected capacity change from 0 to 7 [ 371.500294][T11219] Dev loop6: unable to read RDB block 7 [ 371.531045][T11219] loop6: unable to read partition table [ 371.578328][T11219] loop6: partition table beyond EOD, truncated [ 371.603930][T11219] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 372.066206][T11244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.348354][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 372.351495][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 372.379615][ T30] audit: type=1400 audit(1751984681.869:1044): avc: denied { name_bind } for pid=11255 comm="syz.0.1394" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 372.717037][T11271] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11271 comm=syz.3.1397 [ 373.058201][ T5948] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 373.820038][ T5948] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.831423][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 373.841803][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.860868][T11294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1404'. [ 373.872020][ T5948] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 373.899399][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.918933][ T5948] usb 3-1: config 0 descriptor?? [ 373.931723][T11298] random: crng reseeded on system resumption [ 373.953372][T11299] Restarting kernel threads ... [ 373.959811][ T30] audit: type=1400 audit(1751984683.499:1045): avc: denied { ioctl } for pid=11297 comm="syz.1.1405" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 373.978625][T11299] Done restarting kernel threads. [ 374.104806][T11302] fuse: Bad value for 'fd' [ 374.138663][T11275] ubi: mtd0 is already attached to ubi31 [ 374.176211][ T5948] usb 3-1: USB disconnect, device number 49 [ 375.559621][T11333] x_tables: ip_tables: osf match: only valid for protocol 6 [ 375.975293][T11337] overlayfs: failed to resolve './file0': -2 [ 376.208514][T11342] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1419'. [ 376.225392][T11342] batadv2: entered promiscuous mode [ 376.243196][T11342] batadv2: entered allmulticast mode [ 376.271551][ T30] audit: type=1400 audit(1751984685.819:1046): avc: denied { listen } for pid=11331 comm="syz.1.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 376.768597][ T30] audit: type=1400 audit(1751984686.229:1047): avc: denied { connect } for pid=11343 comm="syz.2.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 378.226249][T11377] loop6: detected capacity change from 0 to 7 [ 378.261121][T11377] Dev loop6: unable to read RDB block 7 [ 378.269890][T11368] vxcan1: MTU too low for tipc bearer [ 378.275536][T11368] tipc: Enabling of bearer rejected, failed to enable media [ 378.294568][T11379] futex_wake_op: syz.4.1427 tries to shift op by 36; fix this program [ 378.297867][T11377] loop6: unable to read partition table [ 378.319470][T11377] loop6: partition table beyond EOD, truncated [ 378.348001][T11377] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 378.466193][ T30] audit: type=1400 audit(1751984688.009:1048): avc: denied { read write } for pid=11382 comm="syz.1.1428" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 378.532585][ T30] audit: type=1400 audit(1751984688.009:1049): avc: denied { open } for pid=11382 comm="syz.1.1428" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 378.698320][ T5949] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 378.859911][ T5949] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.876737][ T5949] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 378.924501][ T30] audit: type=1400 audit(1751984688.439:1050): avc: denied { execute } for pid=11394 comm="syz.0.1431" name="file1" dev="ramfs" ino=36993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 378.960752][ T5949] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 378.976858][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 378.993131][ T30] audit: type=1400 audit(1751984688.439:1051): avc: denied { execute_no_trans } for pid=11394 comm="syz.0.1431" path="/file1" dev="ramfs" ino=36993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 379.017787][ T5949] usb 2-1: SerialNumber: syz [ 379.047978][ T30] audit: type=1400 audit(1751984688.469:1052): avc: denied { ioctl } for pid=11399 comm="syz.0.1433" path="socket:[36999]" dev="sockfs" ino=36999 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 379.158652][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.165063][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.236931][ T5949] usb 2-1: 0:2 : does not exist [ 379.241989][ T5949] usb 2-1: unit 5 not found! [ 379.280235][ T5949] usb 2-1: USB disconnect, device number 46 [ 379.671219][T11422] tipc: Enabling of bearer rejected, failed to enable media [ 379.688201][ T5948] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 379.786595][ T30] audit: type=1400 audit(1751984689.329:1053): avc: denied { read write } for pid=11423 comm="syz.1.1441" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 379.787478][T11424] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1441'. [ 379.837006][ T30] audit: type=1400 audit(1751984689.329:1054): avc: denied { open } for pid=11423 comm="syz.1.1441" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 379.862411][T11424] syz.1.1441: attempt to access beyond end of device [ 379.862411][T11424] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 379.880931][ T5948] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 379.889711][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.900856][ T5948] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 379.910567][ T5948] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 379.919040][ T5948] usb 3-1: Manufacturer: syz [ 379.925965][ T5948] usb 3-1: config 0 descriptor?? [ 379.952117][ T30] audit: type=1400 audit(1751984689.499:1055): avc: denied { ioctl } for pid=11423 comm="syz.1.1441" path="/dev/input/mouse0" dev="devtmpfs" ino=923 ioctlcmd=0x7440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 380.046658][T11435] ubi: mtd0 is already attached to ubi31 [ 380.065885][ T5948] rc_core: IR keymap rc-hauppauge not found [ 380.072223][ T5948] Registered IR keymap rc-empty [ 380.078992][ T5948] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 380.090094][ T5948] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 381.945732][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 381.945754][ T30] audit: type=1400 audit(1751984691.489:1057): avc: denied { getopt } for pid=11450 comm="syz.1.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 381.987670][T11451] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 381.994513][T11451] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 382.318005][ T5910] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 382.336814][T11451] vhci_hcd vhci_hcd.0: Device attached [ 382.631569][T11453] vhci_hcd: connection reset by peer [ 382.687226][ T8786] vhci_hcd: stop threads [ 382.693060][ T8786] vhci_hcd: release socket [ 382.702865][ T8786] vhci_hcd: disconnect device [ 382.734707][T11461] tipc: Started in network mode [ 382.739945][T11461] tipc: Node identity 4, cluster identity 4711 [ 382.746288][T11461] tipc: Node number set to 4 [ 383.040844][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 383.055689][ T30] audit: type=1400 audit(1751984692.599:1058): avc: denied { append } for pid=11468 comm="syz.3.1452" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 383.095494][T11469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63746 sclass=netlink_route_socket pid=11469 comm=syz.4.1451 [ 383.238743][ T5949] usb 3-1: USB disconnect, device number 50 [ 384.426416][T11487] veth0: entered promiscuous mode [ 384.467812][ T5835] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 384.478564][T11486] veth0: left promiscuous mode [ 384.638017][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 384.762131][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.793700][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 384.838454][T11501] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1460'. [ 384.861770][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 384.871541][ T5835] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 384.881304][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.964061][ T5835] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 384.976921][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1460'. [ 384.989873][ T5835] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 384.998341][ T5835] usb 2-1: Manufacturer: syz [ 385.019075][ T5835] usb 2-1: config 0 descriptor?? [ 385.039723][T11506] 8021q: adding VLAN 0 to HW filter on device bond4 [ 385.357817][ T5835] rc_core: IR keymap rc-hauppauge not found [ 385.398023][ T5835] Registered IR keymap rc-empty [ 385.407962][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.457830][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.500278][ T5835] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 385.531401][ T5835] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 385.580646][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.611186][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.743326][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.777844][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.792454][T11526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 385.801623][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 385.878029][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 386.103421][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 386.248142][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 386.421342][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 386.456599][ T5835] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 386.569614][ T5835] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 387.119122][ T5835] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 387.161706][ T5835] usb 2-1: USB disconnect, device number 47 [ 387.495617][ T5910] vhci_hcd: vhci_device speed not set [ 388.343138][T11563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11563 comm=syz.2.1476 [ 388.368550][T11563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.797875][T11565] netlink: 'syz.4.1477': attribute type 10 has an invalid length. [ 389.063438][ T30] audit: type=1400 audit(1751984698.609:1059): avc: denied { setopt } for pid=11575 comm="syz.4.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 389.585159][T11584] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 389.917086][T11593] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.944593][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1487'. [ 389.965281][T11596] netlink: 'syz.4.1487': attribute type 1 has an invalid length. [ 389.985087][T11596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1487'. [ 390.477103][T11612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1489'. [ 390.909473][T11614] input: syz1 as /devices/virtual/input/input20 [ 390.958509][T11616] nfs4: Unknown parameter '01777777777777777777777' [ 391.020567][ T30] audit: type=1326 audit(1751984700.569:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.2.1492" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef7a18e929 code=0x0 [ 391.883707][T11644] random: crng reseeded on system resumption [ 392.517033][T11664] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 393.527536][ T30] audit: type=1400 audit(1751984703.069:1061): avc: denied { accept } for pid=11695 comm="syz.1.1514" laddr=fe80::c lport=3618 faddr=fe80::37 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 393.557840][ T5835] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 393.717781][ T5835] usb 4-1: device descriptor read/64, error -71 [ 393.967864][ T5835] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 394.097991][ T5835] usb 4-1: device descriptor read/64, error -71 [ 394.218171][ T5835] usb usb4-port1: attempt power cycle [ 394.676739][ T5910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5910 comm=kworker/1:5 [ 394.690820][ T5835] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 394.720902][ T5835] usb 4-1: device descriptor read/8, error -71 [ 394.957983][ T5835] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 394.978418][ T5835] usb 4-1: device descriptor read/8, error -71 [ 395.088257][ T5835] usb usb4-port1: unable to enumerate USB device [ 395.397552][T11725] overlayfs: failed to clone upperpath [ 395.877093][T11731] 9pnet_fd: Insufficient options for proto=fd [ 396.212128][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 396.909960][T11747] Process accounting resumed [ 396.950073][T11752] fuse: Unknown parameter '' [ 396.957270][T11752] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=11752 comm=syz.2.1532 [ 397.148503][ T5948] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 397.347879][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 397.366007][ T5948] usb 4-1: too many configurations: 250, using maximum allowed: 8 [ 397.375751][ T5948] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 397.384060][ T5948] usb 4-1: can't read configurations, error -61 [ 397.527926][ T5948] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 397.621958][T11767] pim6reg: entered allmulticast mode [ 397.628398][T11766] pim6reg: left allmulticast mode [ 397.641057][T11764] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1539'. [ 397.667867][T11764] netlink: zone id is out of range [ 397.677197][T11764] netlink: zone id is out of range [ 397.687790][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 397.694331][T11764] netlink: zone id is out of range [ 397.694871][ T5948] usb 4-1: too many configurations: 250, using maximum allowed: 8 [ 397.709640][T11764] netlink: get zone limit has 8 unknown bytes [ 397.711608][ T5948] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 397.727970][ T5948] usb 4-1: can't read configurations, error -61 [ 397.735207][ T5948] usb usb4-port1: attempt power cycle [ 397.748052][T11767] uprobe: syz.2.1540:11767 failed to unregister, leaking uprobe [ 398.080093][ T5948] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 398.117487][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 398.134407][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 398.144553][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 398.153625][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 398.155069][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 398.168842][ T5948] usb 4-1: too many configurations: 250, using maximum allowed: 8 [ 398.171707][T11779] openvswitch: netlink: IP tunnel dst address not specified [ 398.176975][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 398.193915][ T5948] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 398.202028][ T5948] usb 4-1: can't read configurations, error -61 [ 398.215328][ T30] audit: type=1400 audit(1751984707.759:1062): avc: denied { mounton } for pid=11773 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 398.367884][ T5948] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 398.380855][T11773] chnl_net:caif_netlink_parms(): no params data found [ 398.388411][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 398.394278][ T5948] usb 4-1: too many configurations: 250, using maximum allowed: 8 [ 398.404129][ T5948] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 398.411993][ T5948] usb 4-1: can't read configurations, error -61 [ 398.418963][ T5948] usb usb4-port1: unable to enumerate USB device [ 398.462219][T11773] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.469560][T11773] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.476786][T11773] bridge_slave_0: entered allmulticast mode [ 398.483872][T11773] bridge_slave_0: entered promiscuous mode [ 398.491626][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.499311][T11773] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.506718][T11773] bridge_slave_1: entered allmulticast mode [ 398.513698][T11773] bridge_slave_1: entered promiscuous mode [ 398.545980][T11773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.557509][T11773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.592936][T11773] team0: Port device team_slave_0 added [ 398.601930][T11773] team0: Port device team_slave_1 added [ 398.627494][T11773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.635393][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.661902][T11773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.674249][T11773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.681356][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.709617][T11773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.750211][T11773] hsr_slave_0: entered promiscuous mode [ 398.757542][T11773] hsr_slave_1: entered promiscuous mode [ 398.763675][T11773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.780279][T11773] Cannot create hsr debugfs directory [ 398.829322][T11791] overlay: Unknown parameter 'permit_directio' [ 399.019818][T11773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 399.037347][T11773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 399.048968][T11773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 399.061293][T11773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.087546][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.094737][T11773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.102276][T11773] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.109436][T11773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.162218][T11773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.178505][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.186741][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.268571][T11773] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.283727][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.290966][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.308030][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.315191][ T8784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.570860][T11808] syz.0.1547: attempt to access beyond end of device [ 399.570860][T11808] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 399.608861][T11808] FAT-fs (loop1): unable to read boot sector [ 399.794413][ T30] audit: type=1400 audit(1751984709.339:1063): avc: denied { setopt } for pid=11813 comm="syz.2.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 400.063685][T11773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.267886][ T5841] Bluetooth: hci0: command tx timeout [ 400.376124][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 400.386600][ T30] audit: type=1400 audit(1751984709.919:1064): avc: denied { read } for pid=11826 comm="syz.0.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 400.624880][ T30] audit: type=1400 audit(1751984710.169:1065): avc: denied { getopt } for pid=11844 comm="syz.2.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 400.653948][ T30] audit: type=1400 audit(1751984710.199:1066): avc: denied { append } for pid=11844 comm="syz.2.1555" name="file2" dev="tmpfs" ino=1523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 400.682722][ T30] audit: type=1400 audit(1751984710.199:1067): avc: denied { ioctl } for pid=11844 comm="syz.2.1555" path="/278/file2" dev="tmpfs" ino=1523 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 400.766380][T11773] veth0_vlan: entered promiscuous mode [ 400.779558][T11773] veth1_vlan: entered promiscuous mode [ 400.815567][T11773] veth0_macvtap: entered promiscuous mode [ 400.826504][T11773] veth1_macvtap: entered promiscuous mode [ 400.853856][T11773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.875981][T11773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.894684][T11773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.904406][T11773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.916689][T11773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.926840][T11773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.215741][ T8786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.242869][ T8786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.499151][ T8788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.520204][ T8788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.547147][ T30] audit: type=1400 audit(1751984711.089:1068): avc: denied { mounton } for pid=11773 comm="syz-executor" path="/root/syzkaller.BmrhY0/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 401.720428][ T30] audit: type=1400 audit(1751984711.089:1069): avc: denied { mounton } for pid=11773 comm="syz-executor" path="/root/syzkaller.BmrhY0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=38500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 401.758094][ T30] audit: type=1400 audit(1751984711.169:1070): avc: denied { mounton } for pid=11773 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 402.134022][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 402.268572][ T30] audit: type=1400 audit(1751984711.169:1071): avc: denied { mounton } for pid=11773 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 402.348983][ T5841] Bluetooth: hci0: command tx timeout [ 402.420137][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.435362][T11886] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 402.437618][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 402.456510][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 402.470973][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.484473][T11886] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1564'. [ 402.498082][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.507160][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.526893][ T24] usb 4-1: config 0 descriptor?? [ 402.960341][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 403.010049][ T24] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 403.208670][T11902] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1571'. [ 403.230944][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 403.230961][ T30] audit: type=1400 audit(1751984712.769:1149): avc: denied { mount } for pid=11866 comm="syz.3.1561" name="/" dev="configfs" ino=1241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 403.512648][ T30] audit: type=1400 audit(1751984713.059:1150): avc: denied { read } for pid=11913 comm="syz.2.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 403.572896][T11927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.017581][ T30] audit: type=1400 audit(1751984713.559:1151): avc: denied { map } for pid=11955 comm="syz.5.1583" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 404.064095][ T30] audit: type=1400 audit(1751984713.589:1152): avc: denied { execute } for pid=11955 comm="syz.5.1583" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 404.110553][T11960] syz_tun: entered allmulticast mode [ 404.116166][T11960] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 404.131511][T11959] syz_tun: left allmulticast mode [ 404.418641][ T5902] usb 4-1: reset high-speed USB device number 60 using dummy_hcd [ 404.428281][ T5841] Bluetooth: hci0: command tx timeout [ 404.514744][T11972] can: request_module (can-proto-0) failed. [ 404.601473][T11970] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1583'. [ 404.617457][ T30] audit: type=1400 audit(1751984714.139:1153): avc: denied { ioctl } for pid=11955 comm="syz.5.1583" path="socket:[38770]" dev="sockfs" ino=38770 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 404.684621][T11978] vlan0: entered promiscuous mode [ 404.714599][T11978] vlan0: entered allmulticast mode [ 404.738064][T11978] hsr_slave_1: entered allmulticast mode [ 405.642642][ T5948] usb 4-1: USB disconnect, device number 60 [ 405.650508][T12005] No source specified [ 405.684676][T12005] No source specified [ 405.710813][T12010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1598'. [ 406.194430][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 406.217848][ T5948] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 406.406357][ T30] audit: type=1400 audit(1751984715.899:1154): avc: denied { create } for pid=12013 comm="syz.0.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 406.528096][ T5910] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 406.535863][ T30] audit: type=1400 audit(1751984715.899:1155): avc: denied { connect } for pid=12013 comm="syz.0.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 406.538842][ T5841] Bluetooth: hci0: command tx timeout [ 406.617877][ T5948] usb 4-1: device descriptor read/64, error -71 [ 406.704448][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 406.717208][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 406.721379][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.857933][ T5948] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 406.868961][ T5910] usb 6-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5 [ 406.878450][ T5910] usb 6-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3 [ 406.887034][ T5910] usb 6-1: Product: syz [ 406.891289][ T5910] usb 6-1: Manufacturer: syz [ 406.895902][ T5910] usb 6-1: SerialNumber: syz [ 406.902814][ T5910] usb 6-1: config 0 descriptor?? [ 406.910897][ T5910] usb 6-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 406.923576][ T5910] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 406.939903][ T5910] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 406.947850][ T5910] usb 6-1: media controller created [ 406.986553][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.026443][ T5910] usb 6-1: selecting invalid altsetting 2 [ 407.040371][ T5910] set interface failed [ 407.043259][ T5910] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 407.066062][ T5910] error writing reg: 0xff, val: 0x00 [ 407.114309][T12030] loop6: detected capacity change from 0 to 7 [ 407.130709][ T5910] dvb_usb_mxl111sf 6-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 407.141000][ T5948] usb 4-1: device descriptor read/64, error -71 [ 407.143060][T12030] Dev loop6: unable to read RDB block 7 [ 407.153813][T12030] loop6: unable to read partition table [ 407.164624][T12030] loop6: partition table beyond EOD, truncated [ 407.170950][T12030] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 407.182247][ T5910] usb 6-1: USB disconnect, device number 2 [ 407.258813][ T5948] usb usb4-port1: attempt power cycle [ 408.093172][ T5948] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 408.141634][T12057] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 408.142017][ T5948] usb 4-1: device descriptor read/8, error -71 [ 408.160999][T12057] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 408.304305][ T30] audit: type=1326 audit(1751984717.849:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 408.336290][T12059] 9pnet_fd: Insufficient options for proto=fd [ 408.343223][T12059] sctp: [Deprecated]: syz.4.1612 (pid 12059) Use of int in maxseg socket option. [ 408.343223][T12059] Use struct sctp_assoc_value instead [ 408.400642][ T30] audit: type=1326 audit(1751984717.849:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 408.429534][ T5910] IPVS: starting estimator thread 0... [ 408.429548][ T5948] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 408.505083][ T30] audit: type=1326 audit(1751984717.859:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f770198d3df code=0x7ffc0000 [ 408.677960][T12062] IPVS: using max 76 ests per chain, 182400 per kthread [ 408.689626][ T30] audit: type=1326 audit(1751984717.859:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 408.715576][ T5948] usb 4-1: device descriptor read/8, error -71 [ 408.731295][ T30] audit: type=1326 audit(1751984717.859:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 408.761988][ T30] audit: type=1326 audit(1751984717.859:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 408.826073][ T30] audit: type=1326 audit(1751984717.859:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 408.853369][ T5948] usb usb4-port1: unable to enumerate USB device [ 408.943824][ T30] audit: type=1326 audit(1751984717.859:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 408.972158][ T30] audit: type=1326 audit(1751984717.859:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 409.029825][ T30] audit: type=1326 audit(1751984717.859:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770198e929 code=0x7ffc0000 [ 409.253239][T12071] xt_limit: Overflow, try lower: 0/0 [ 409.632033][T12083] openvswitch: netlink: IPv4 tun info is not correct [ 411.868804][T12111] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=12111 comm=syz.5.1626 [ 411.962430][T12120] 9pnet_fd: Insufficient options for proto=fd [ 412.137765][ T24] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 412.220264][ T5910] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 412.303398][ T24] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 412.317070][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 412.343064][T12135] tipc: Enabling of bearer rejected, failed to enable media [ 412.379974][ T5910] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 412.390616][ T5910] usb 4-1: config 0 has no interface number 0 [ 412.396814][ T5910] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 412.412382][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.423780][ T5910] usb 4-1: config 0 descriptor?? [ 412.434007][ T5910] hub 4-1:0.3: bad descriptor, ignoring hub [ 412.442819][ T5910] hub 4-1:0.3: probe with driver hub failed with error -5 [ 412.455383][ T5910] sierra 4-1:0.3: Sierra USB modem converter detected [ 412.624280][T12145] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 412.635018][ T5841] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 412.645716][ T5910] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 412.669139][ T5910] usb 4-1: USB disconnect, device number 65 [ 412.682221][ T5910] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 412.693252][ T5910] sierra 4-1:0.3: device disconnected [ 413.461824][T12149] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 414.181981][T12152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.819080][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 414.819097][ T30] audit: type=1400 audit(1751984724.369:1239): avc: denied { override_creds } for pid=12172 comm="syz.3.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 414.949452][ T24] usb 6-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.40 [ 414.963724][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.981547][ T24] usb 6-1: can't set config #1, error -71 [ 415.003338][ T24] usb 6-1: USB disconnect, device number 3 [ 415.326769][T12191] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1644'. [ 416.848305][ T5902] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 416.958062][T12230] 8021q: VLANs not supported on ipvlan1 [ 417.046693][ T30] audit: type=1400 audit(1751984726.589:1240): avc: denied { map } for pid=12226 comm="syz.3.1651" path="socket:[41394]" dev="sockfs" ino=41394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 417.249198][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1652'. [ 417.264865][ T5902] usb 6-1: unable to get BOS descriptor or descriptor too short [ 417.297466][ T5902] usb 6-1: not running at top speed; connect to a high speed hub [ 417.325598][ T5902] usb 6-1: config index 0 descriptor too short (expected 1325, got 45) [ 417.334154][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.361457][ T5902] usb 6-1: config 0 has no interfaces? [ 417.383907][ T5902] usb 6-1: New USB device found, idVendor=05da, idProduct=80a3, bcdDevice=4c.7a [ 417.394447][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.411021][ T5902] usb 6-1: Product: syz [ 417.426231][ T5902] usb 6-1: Manufacturer: syz [ 417.446551][ T5902] usb 6-1: SerialNumber: syz [ 417.464224][ T5902] usb 6-1: config 0 descriptor?? [ 417.477856][ T5948] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 417.618583][ T5948] usb 4-1: device descriptor read/64, error -71 [ 417.706159][ T5902] usb 6-1: USB disconnect, device number 4 [ 417.877907][ T5948] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 418.037804][ T5948] usb 4-1: device descriptor read/64, error -71 [ 418.223896][ T5948] usb usb4-port1: attempt power cycle [ 418.374274][T12271] netlink: 'syz.2.1659': attribute type 5 has an invalid length. [ 418.577896][ T5948] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 418.638266][ T5948] usb 4-1: device descriptor read/8, error -71 [ 418.713893][ T30] audit: type=1400 audit(1751984728.259:1241): avc: denied { accept } for pid=12282 comm="syz.2.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 418.839106][T12284] overlayfs: missing 'lowerdir' [ 418.991961][ T5948] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 419.378441][ T5948] usb 4-1: device descriptor read/8, error -71 [ 419.602031][ T5948] usb usb4-port1: unable to enumerate USB device [ 419.686355][T12294] 9pnet_virtio: no channels available for device syz [ 420.027965][ C1] ================================================================== [ 420.036126][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x45a/0x4d0 [ 420.044049][ C1] Read of size 2 at addr ffff888057ba9c2a by task swapper/1/0 [ 420.051513][ C1] [ 420.053823][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 420.053836][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.053843][ C1] Call Trace: [ 420.053848][ C1] [ 420.053853][ C1] dump_stack_lvl+0x116/0x1f0 [ 420.053874][ C1] print_report+0xcd/0x680 [ 420.053889][ C1] ? __virt_addr_valid+0x81/0x610 [ 420.053902][ C1] ? __phys_addr+0xe8/0x180 [ 420.053913][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 420.053927][ C1] kasan_report+0xe0/0x110 [ 420.053940][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 420.053954][ C1] rose_timer_expiry+0x45a/0x4d0 [ 420.053967][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 420.053980][ C1] call_timer_fn+0x197/0x620 [ 420.053995][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 420.054011][ C1] ? rcu_is_watching+0x12/0xc0 [ 420.054025][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 420.054038][ C1] __run_timers+0x6ef/0x960 [ 420.054054][ C1] ? __pfx___run_timers+0x10/0x10 [ 420.054073][ C1] run_timer_base+0x114/0x190 [ 420.054087][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 420.054102][ C1] ? rcu_is_watching+0x12/0xc0 [ 420.054114][ C1] run_timer_softirq+0x1a/0x40 [ 420.054129][ C1] handle_softirqs+0x219/0x8e0 [ 420.054144][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 420.054157][ C1] __irq_exit_rcu+0x109/0x170 [ 420.054169][ C1] irq_exit_rcu+0x9/0x30 [ 420.054180][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 420.054193][ C1] [ 420.054197][ C1] [ 420.054200][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.054212][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 420.054225][ C1] Code: eb 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 f0 21 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 420.054236][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 420.054245][ C1] RAX: 0000000001099e8f RBX: 0000000000000001 RCX: ffffffff8b881c69 [ 420.054252][ C1] RDX: 0000000000000000 RSI: ffffffff8de3106c RDI: ffffffff8c158660 [ 420.054259][ C1] RBP: ffffed1003c5c488 R08: 0000000000000001 R09: ffffed10170a6645 [ 420.054265][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 420.054271][ C1] R13: ffff88801e2e2440 R14: ffffffff90a97350 R15: 0000000000000000 [ 420.054280][ C1] ? ct_kernel_exit+0x139/0x190 [ 420.054296][ C1] default_idle+0x13/0x20 [ 420.054310][ C1] default_idle_call+0x6d/0xb0 [ 420.054325][ C1] do_idle+0x391/0x510 [ 420.054338][ C1] ? __pfx_do_idle+0x10/0x10 [ 420.054350][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 420.054368][ C1] cpu_startup_entry+0x4f/0x60 [ 420.054381][ C1] start_secondary+0x21d/0x2b0 [ 420.054399][ C1] ? __pfx_start_secondary+0x10/0x10 [ 420.054423][ C1] common_startup_64+0x13e/0x148 [ 420.054438][ C1] [ 420.054441][ C1] [ 420.332030][ C1] Allocated by task 12024: [ 420.336423][ C1] kasan_save_stack+0x33/0x60 [ 420.341101][ C1] kasan_save_track+0x14/0x30 [ 420.345757][ C1] __kasan_kmalloc+0xaa/0xb0 [ 420.350334][ C1] __kmalloc_noprof+0x223/0x510 [ 420.355165][ C1] tnode_new+0x25a/0x340 [ 420.359390][ C1] resize+0x3af/0x22a0 [ 420.363452][ C1] fib_insert_alias+0x9b9/0xe30 [ 420.368280][ C1] fib_trie_unmerge+0x2f9/0xcb0 [ 420.373112][ C1] fib_unmerge+0xf8/0x520 [ 420.377420][ C1] fib4_rule_configure+0x383/0x10c0 [ 420.382599][ C1] fib_newrule+0x359/0x1e60 [ 420.387085][ C1] rtnetlink_rcv_msg+0x95e/0xe90 [ 420.392000][ C1] netlink_rcv_skb+0x155/0x420 [ 420.396823][ C1] netlink_unicast+0x53a/0x7f0 [ 420.401735][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 420.406477][ C1] ____sys_sendmsg+0xa95/0xc70 [ 420.411304][ C1] ___sys_sendmsg+0x134/0x1d0 [ 420.415959][ C1] __sys_sendmsg+0x16d/0x220 [ 420.420528][ C1] do_syscall_64+0xcd/0x4c0 [ 420.425031][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.430921][ C1] [ 420.433236][ C1] Freed by task 12023: [ 420.437280][ C1] kasan_save_stack+0x33/0x60 [ 420.441955][ C1] kasan_save_track+0x14/0x30 [ 420.446613][ C1] kasan_save_free_info+0x3b/0x60 [ 420.451617][ C1] __kasan_slab_free+0x51/0x70 [ 420.456363][ C1] kfree+0x2b4/0x4d0 [ 420.460238][ C1] __node_free_rcu+0x6f/0x80 [ 420.464807][ C1] rcu_core+0x79c/0x14e0 [ 420.469028][ C1] handle_softirqs+0x219/0x8e0 [ 420.473773][ C1] __irq_exit_rcu+0x109/0x170 [ 420.478454][ C1] irq_exit_rcu+0x9/0x30 [ 420.482672][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 420.488284][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.494247][ C1] [ 420.496553][ C1] Last potentially related work creation: [ 420.502243][ C1] kasan_save_stack+0x33/0x60 [ 420.506901][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 420.512088][ C1] __call_rcu_common.constprop.0+0xa5/0xa10 [ 420.517967][ C1] tnode_free+0xb5/0x120 [ 420.522190][ C1] replace+0x149/0x4f0 [ 420.526248][ C1] resize+0x105a/0x22a0 [ 420.530386][ C1] fib_insert_alias+0x9b9/0xe30 [ 420.535230][ C1] fib_trie_unmerge+0x2f9/0xcb0 [ 420.540060][ C1] fib_unmerge+0xf8/0x520 [ 420.544371][ C1] fib4_rule_configure+0x383/0x10c0 [ 420.549559][ C1] fib_newrule+0x359/0x1e60 [ 420.554039][ C1] rtnetlink_rcv_msg+0x95e/0xe90 [ 420.558987][ C1] netlink_rcv_skb+0x155/0x420 [ 420.563727][ C1] netlink_unicast+0x53a/0x7f0 [ 420.568478][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 420.573216][ C1] ____sys_sendmsg+0xa95/0xc70 [ 420.577973][ C1] ___sys_sendmsg+0x134/0x1d0 [ 420.582641][ C1] __sys_sendmsg+0x16d/0x220 [ 420.587208][ C1] do_syscall_64+0xcd/0x4c0 [ 420.591690][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.597559][ C1] [ 420.599857][ C1] The buggy address belongs to the object at ffff888057ba9c00 [ 420.599857][ C1] which belongs to the cache kmalloc-512 of size 512 [ 420.613884][ C1] The buggy address is located 42 bytes inside of [ 420.613884][ C1] freed 512-byte region [ffff888057ba9c00, ffff888057ba9e00) [ 420.627583][ C1] [ 420.629887][ C1] The buggy address belongs to the physical page: [ 420.636277][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57ba8 [ 420.645017][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 420.653488][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 420.661445][ C1] page_type: f5(slab) [ 420.665417][ C1] raw: 00fff00000000040 ffff88801b841c80 0000000000000000 dead000000000001 [ 420.673980][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 420.682539][ C1] head: 00fff00000000040 ffff88801b841c80 0000000000000000 dead000000000001 [ 420.691186][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 420.699836][ C1] head: 00fff00000000002 ffffea00015eea01 00000000ffffffff 00000000ffffffff [ 420.708488][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 420.717139][ C1] page dumped because: kasan: bad access detected [ 420.723529][ C1] page_owner tracks the page as allocated [ 420.729232][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5830, tgid 5830 (syz-executor), ts 75446672758, free_ts 22103148282 [ 420.750577][ C1] post_alloc_hook+0x1c0/0x230 [ 420.755338][ C1] get_page_from_freelist+0x1321/0x3890 [ 420.760869][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 420.766758][ C1] alloc_pages_mpol+0x1fb/0x550 [ 420.771588][ C1] new_slab+0x23b/0x330 [ 420.775719][ C1] ___slab_alloc+0xd9c/0x1940 [ 420.780374][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 420.785740][ C1] __kmalloc_noprof+0x2f2/0x510 [ 420.790581][ C1] fib6_info_alloc+0x40/0x160 [ 420.795241][ C1] ip6_route_info_create+0x14c/0x870 [ 420.800519][ C1] ip6_route_add.part.0+0x22/0x1d0 [ 420.805722][ C1] ip6_route_add+0x45/0x60 [ 420.810146][ C1] addrconf_add_mroute+0x1dd/0x350 [ 420.815268][ C1] addrconf_add_dev+0x14e/0x1c0 [ 420.820128][ C1] inet6_addr_add+0xfe/0x960 [ 420.824698][ C1] inet6_rtm_newaddr+0x1619/0x1c70 [ 420.829785][ C1] page last free pid 1 tgid 1 stack trace: [ 420.835573][ C1] __free_frozen_pages+0x7fe/0x1180 [ 420.840759][ C1] free_contig_range+0x183/0x4b0 [ 420.845672][ C1] destroy_args+0x7f6/0xa60 [ 420.850160][ C1] debug_vm_pgtable+0x13b8/0x2d00 [ 420.855249][ C1] do_one_initcall+0x120/0x6e0 [ 420.859988][ C1] kernel_init_freeable+0x5c2/0x900 [ 420.865168][ C1] kernel_init+0x1c/0x2b0 [ 420.869476][ C1] ret_from_fork+0x5d4/0x6f0 [ 420.875527][ C1] ret_from_fork_asm+0x1a/0x30 [ 420.880363][ C1] [ 420.882685][ C1] Memory state around the buggy address: [ 420.888303][ C1] ffff888057ba9b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 420.896343][ C1] ffff888057ba9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 420.904382][ C1] >ffff888057ba9c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.912435][ C1] ^ [ 420.917784][ C1] ffff888057ba9c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.925825][ C1] ffff888057ba9d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.933890][ C1] ================================================================== [ 420.941978][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 420.949172][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 420.959169][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.969229][ C1] Call Trace: [ 420.972488][ C1] [ 420.975317][ C1] dump_stack_lvl+0x3d/0x1f0 [ 420.979897][ C1] panic+0x71c/0x800 [ 420.983779][ C1] ? __pfx_panic+0x10/0x10 [ 420.988178][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.994402][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 421.000381][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 421.005492][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 421.010588][ C1] check_panic_on_warn+0xab/0xb0 [ 421.015511][ C1] end_report+0x107/0x170 [ 421.019824][ C1] kasan_report+0xee/0x110 [ 421.024223][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 421.029329][ C1] rose_timer_expiry+0x45a/0x4d0 [ 421.034249][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 421.039697][ C1] call_timer_fn+0x197/0x620 [ 421.044273][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 421.049376][ C1] ? rcu_is_watching+0x12/0xc0 [ 421.054148][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 421.059591][ C1] __run_timers+0x6ef/0x960 [ 421.064087][ C1] ? __pfx___run_timers+0x10/0x10 [ 421.069105][ C1] run_timer_base+0x114/0x190 [ 421.073769][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 421.078951][ C1] ? rcu_is_watching+0x12/0xc0 [ 421.083694][ C1] run_timer_softirq+0x1a/0x40 [ 421.088438][ C1] handle_softirqs+0x219/0x8e0 [ 421.093185][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 421.098449][ C1] __irq_exit_rcu+0x109/0x170 [ 421.103116][ C1] irq_exit_rcu+0x9/0x30 [ 421.107337][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 421.112952][ C1] [ 421.115863][ C1] [ 421.118780][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.124742][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 421.130373][ C1] Code: eb 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 f0 21 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 421.149972][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 421.156015][ C1] RAX: 0000000001099e8f RBX: 0000000000000001 RCX: ffffffff8b881c69 [ 421.163963][ C1] RDX: 0000000000000000 RSI: ffffffff8de3106c RDI: ffffffff8c158660 [ 421.171915][ C1] RBP: ffffed1003c5c488 R08: 0000000000000001 R09: ffffed10170a6645 [ 421.179865][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 421.187816][ C1] R13: ffff88801e2e2440 R14: ffffffff90a97350 R15: 0000000000000000 [ 421.195765][ C1] ? ct_kernel_exit+0x139/0x190 [ 421.200603][ C1] default_idle+0x13/0x20 [ 421.204912][ C1] default_idle_call+0x6d/0xb0 [ 421.209654][ C1] do_idle+0x391/0x510 [ 421.213719][ C1] ? __pfx_do_idle+0x10/0x10 [ 421.218289][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 421.223488][ C1] cpu_startup_entry+0x4f/0x60 [ 421.228237][ C1] start_secondary+0x21d/0x2b0 [ 421.232984][ C1] ? __pfx_start_secondary+0x10/0x10 [ 421.238252][ C1] common_startup_64+0x13e/0x148 [ 421.243173][ C1] [ 421.246443][ C1] Kernel Offset: disabled [ 421.250766][ C1] Rebooting in 86400 seconds..