last executing test programs: 7m28.931263879s ago: executing program 4 (id=38): keyctl$set_timeout(0xf, 0x0, 0xfffffffffffffffd) clock_adjtime(0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0xbf87, 0x2, 0x2, 0x2a0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x46}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) gettid() r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup3(r2, r3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0, 0xfffffdf9, r6, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r8, 0xc01c64ad, &(0x7f00000003c0)={r7}) 7m26.321092902s ago: executing program 4 (id=46): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000200, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) (fail_nth: 1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 7m25.218938957s ago: executing program 4 (id=49): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) 7m25.093627433s ago: executing program 4 (id=51): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) recvfrom$inet_nvme(r0, &(0x7f0000000240)=""/174, 0xae, 0x40, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000001c0)={@remote, @multicast1, r1}, 0xc) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x53, 0x40c, 0x1, 0x6, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r3, 0x0, 0x800, 0x674, 0x0, 0x401}, &(0x7f0000000180)=0x14) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0xd10, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r1, {0xfff2, 0x3}, {0x10, 0x8}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x8f}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xdb}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xefb}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048001}, 0x4008000) 7m24.463594341s ago: executing program 4 (id=53): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f00000001c0), 0x4d, 0x34000, 0x0) 7m24.129788276s ago: executing program 4 (id=54): r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000040)) 7m23.561261171s ago: executing program 32 (id=54): r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000040)) 2m56.800571015s ago: executing program 1 (id=638): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, &(0x7f0000000600), 0x0, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="0413"], 0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x3d58, 0x0) io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x7, 0xc1, 0x0, r6}) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x11000, 0x2, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r7, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2m54.660711832s ago: executing program 1 (id=641): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(0xffffffffffffffff, &(0x7f000001c400)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)=[{&(0x7f0000000500)={0xac, 0x34, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x14, 0xa3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x126, 0x0, 0x0, @uid}, @generic="2ed13d3bd97765119b33fc025530b51f9ea23e6a162eb0a905c127adac2917590633f0d1b62b3e153d0d6491d57006189beeee2c0db52a6380bd5bc588c9ade4115abaffb998dd2d327fb3bdc0bb567ba70949d1ca34b9a1d3fc6ae6b1010eec64f3ecebd940e1b23875013b7dde11aca78cdea4534de66b00a5287956da76"]}, 0xac}, {&(0x7f000001c440)={0x18ec, 0x36, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@generic="1e70e25a96d15ed8503f5cbbf39454067afe360c819dade46e59046cc53988659c1b0437315043401a25684f79571162654be9c513f9e6306f89de16f2224894c2437da5d5472f78c8fa22c04975c8a5ba6dc6b919a36e8e7df40fe6b5710d628cdcf677ebbf4eed5753fc338088f608db464f78039cc05c", @typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@local}, @nested={0x1d0, 0xa0, 0x0, 0x1, [@nested={0x4, 0x48}, @typed={0xa5, 0x26, 0x0, 0x0, @binary="22b7d54c785dd4c7b07dd5fe8bc4fad17f98994461d1f790ff123920732868538e8497df6baa343c82ab6d4075aa55859583d1a2951bb7363fef6a7763e6992093fabcb4c726bf2ed32aa3960ac7e743f7b598313fc95d48ae0879f1177c2ef26a749db5640f9616610b9774a3e063585273c34a0ce9fdf61008fcedbcdd49d00cba6801008137bb987730407fd0e7d79449e80966a3caa53765dcb2fff9dfbc68"}, @generic="c7f39d1dd075e01283c0dab5a131a9dc7e820dd96a0cd5c8655f863ff4fcf3c761b320ca5ba918c4d757c6ef8079ea9fb4ecc9bedbb11c10ff3e564229984c63aba51354bcefbafda402e8d382ca92f9534135eb6c6ee217da089575ed66156e43cc96e7df646dff09d09a7fd06e39a74a8f563743c445dd9e400d168e544887689d619f1517eb1427a27cdceadb9f2bbd328a87b390edadf245f17671775f741777cfa20025615e168ea5e6fc8db0515d21d61c4f5e77e2fdae37b44f981c9533bde055b9728b6fb2bb490eb1b48d1113b265456852c3634bf6f9068ad18d094fbf4901", @typed={0x8, 0xfc, 0x0, 0x0, @u32=0x40}, @nested={0x4, 0xaa}, @generic="3a504b2cc600d39cc212f168318ddd04ae41439bf10653c75729dee3d23e3d7126f8ec7f2340b0d1f6a00f2aa99fda9e"]}, @typed={0x4, 0xd8, 0x0, 0x0, @binary}, @generic="1a83c4b1a5fb32e9ec67f26d004f7461bc39d083e6e8438a43ee9670d0893f8e25a2d40747187f09af0eefb75da50c6b66eda711b8af7d8fd26a8e6cd147d226d64f710fa1f62cc66535213f4d22e16caabce0ffde2069d7cffe43530fa4b7720f13f7a97a74ec97e3763d13b66b2ae70380cd64f25f59627702dbf7d4a71359496196477c1621", @generic="45f701c9e2dadffe375228795be9c993be1fa5ba12a849f8cfc89b9ca688c4483f2ac164b3f24d5b38874c9d075846ce84ced5ba07e3c7aa14fc9437a653f0e83faa2c67c75ab96a473a787700fe48efe99b23e524ff4a58c78ba135c7e1c94f456d13b5cac8f44c6a39f8a19061643852cf483491ea778f1e326857b937b3adc3e073235d4d4382f62f4c6d0b16b0e0040f3e76", @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x1408, 0xd2, 0x0, 0x1, [@nested={0x4, 0xc1}, @nested={0x131a, 0x4f, 0x0, 0x1, [@typed={0x11, 0xa2, 0x0, 0x0, @str='/dev/net/tun\x00'}, @nested={0xc7, 0x11d, 0x0, 0x1, [@generic="e56dc0963ba3102f7b8a4f90c08eb249e402f2", @nested={0x4, 0xee}, @typed={0xc, 0x149, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x3e, 0x0, 0x0, @fd=r0}, @generic="7506b9ab056d5995aea557056f152233998a6dbf845ea5b3242f9993beca07efee6c6835709e378c9c95066bf0276bad6292f3066ae48eb3168405e2a6a563f36c82d32cdcc3254a9d9d9cf96af3e50d16055eedd1817a7240ee7ad2d2a533f5e794bf6c256f05378e109d496d3456613cd113eb1d03108e6288fa37dd677ece2260ea4f648810d1e2104f76bf936a39", @typed={0x8, 0x6c, 0x0, 0x0, @fd=r1}]}, @typed={0x8, 0x2a, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x4, 0x83}, @nested={0x138, 0x60, 0x0, 0x1, [@nested={0x4, 0x112}, @nested={0x4, 0xfb}, @generic="c5b6cb2801ba48a1850ad982c2ff89471f4f6a087978426c2eba207a5bb711f64754ba50777317fabfba67d7e9f7c74d7ff77477e107482e50ad85127e3640e01d0ab832187c3a9e8d21bad205b78fc78303ce1a67cf8bbebdc1a40652aa1a88cf0627e7b0cb23f32998c9c856e8b8532b54255d45ccdf9219e36cc208f8b928b61f08f29637e3b05dd436909998b18eec78cc4d307d24d2cf01c02ce75d8d8a1a21e672e8b4faf94fadbad94b75bce82252758d00b2cf7ff40bfe74ad4ea09fde58cbfdb1be99ade6cd5623c2", @typed={0x4, 0x8a}, @typed={0x8, 0x5c, 0x0, 0x0, @u32=0x8}, @generic="6ab2f45019e4b45c3eb51333199801647424df46caae47b948373a424c332a70350263e42144d81ebff08395c4eb307ee593c90802fbe1", @nested={0x4, 0x79}, @typed={0x5, 0xf2, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x1b, 0x0, 0x0, @uid}, @typed={0x8, 0x134, 0x0, 0x0, @ipv4=@remote}]}, @generic="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", @generic="04bf4c600409bda1147f7b44fafb980b19db47dc0809fa25d8edb99b864523c4771bef3ef7b3e01bf9a5a13f8863f8466b302393b8980c9d636c34958338afdea29f71935293d4c318868a371dc7e7947cc7de690d23bce1da13341a60709f7ea06cc685b77abb9db06da0f11eb3f65809ee3094cf363c5732d5da909fb99264b37bbeff741fed131dec7371ba6fa005426486ebab9adba644e394c44095a0e7b058fccbf858c87fa8b093807d058fb766db1ecabad84efdd6755ebd10311a0d34840da2b0035464a1f5e1a4dbd13e9562845c85725e530e4b04279586908b7e2d60b1fca07c1ae5b1b05fa3e638"]}, @typed={0x8, 0x2a, 0x0, 0x0, @str=']\'{\x00'}, @nested={0x4, 0xfb}, @typed={0xd7, 0x96, 0x0, 0x0, @binary="f7896facd6d05fa8f84af6e40c18b4f602827a133d041986a7fc1d46d336a8c09a8fea453912fb1aa03b18e22ae7c61109db011e83d94d59b568a5a01d3332eae175e2c94c2c533c86aec895639ef3370d74b455eb2d041111fa542f0375a9874a4151cd1573c2d0318899463a6ce29106c0e4401b90b98cbb9077020f44b84549daf1160f5ffff26ee3e7142c9fe95e20e0450920b49f98f4b48e4653da6736daacd33d6409ead05c79ebf45d5b009fb8c57cc82226edab22096ae37a16a6b8a58c1da4abfe3f107a487f58b0b40a7e65eac6"}]}, @generic="6769ca00863f1798e5d3fdb2f06b6b3a732a5a0cbfc341689910a30296c4dd19894307ee845fb2e2815833a7dbe884ea4f2cea8ba8b8d4913864ba26aadf91dd4fcf4d55cfc991d640f37edd3cc55b915f7a48318c7b4c77bd5fdf6dbcffd0cca5c95f4579d33544c7dccf4717cda5d019faea161ef2801909ed6abbfb861970b25aaaee5f2fed3f4831dd23e8ff5b405e4cbc17287ff05dd7854db6b3f0daae8e147bf3faa3c8681bbe8020b2e787de50b12c78d9b18fa13875722cebb41fa2e7ffa92724f5eb23fe74", @generic="52e474d8b2170c001e47c3bf86fc6435f2bd3e29f27b0e024d015c1912b9ba82d210fc73b7c0f6f684152d6856a32de43bbb4d305de21709ff3299351d35915d549b99837a7088d0c9feca2e770597cf34299f87bbadbfefe4d8e71cd24ae79108cf268f8480e3cd960d58960401e60a05f9b81910aa715af5d07dfece454481858e9d0242eb25"]}, 0x18ec}], 0x2, &(0x7f000001c2c0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, r0, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x118, 0x4000080}, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=0x0], 0x34}}, 0x800) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) write$tun(r7, &(0x7f0000000400)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @generic="2a6ad5fde1b6554242ac10fef9878574f7e568ff42b7b7151d6986161da58b840d7a6e0eb304946c4b948e98ec852cd40c1b51c39a1487d8b9912cf4e3091607d53f02f0954c89d08eec9bb780ff23d2f0e347d88d0edf4ca5d5c4f8b2ed6a9e836bccb2c65020578c56730534689dc1cbb21044dc8cd15b50f1ed31887ebf8de493e0364362eec95799088df4f44503e509d0fc2c7867d80f8fdd6bdc48cab8187e71a8ff8f05285679ca69809a7b7d04e80a81a9e75924162806c973348c57c81c5ba24fde98d8006dafb1e0a6096257ced6ef5ff20b62e6e5042b0ebd20a4a1d845b4b3ca9750aba8758bcf"}}, 0xfb) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) ioctl$VT_ACTIVATE(r6, 0x5606, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 2m52.425853028s ago: executing program 1 (id=647): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x400000, 0x4200) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb2960100, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7f8000, 0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@release], 0x0, 0x0, 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x101081, 0x0) dup3(r6, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 2m50.605173306s ago: executing program 1 (id=650): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) epoll_create(0x3ff) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x3000) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000188000/0x1000)=nil, 0x1000, 0x2, 0x430d070, 0xffffffffffffffff, 0xf76b1000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) copy_file_range(r6, 0x0, r6, 0x0, 0x9, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000180)={0x0, 0x3, 0x7fffffffffffffff, 0x84}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="4023a0", @ANYRES64=r2, @ANYRES8=r0, @ANYRESOCT=r3, @ANYRES8], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) 2m45.681976027s ago: executing program 1 (id=658): rseq(&(0x7f0000000280), 0x20, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x670}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0xa}}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x42, 0x6, 0x8, 0x4, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) 2m41.890830137s ago: executing program 1 (id=665): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x6cc842, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x207) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x9, 0xdffffffe, 0x80, 0x27e9, 0x9, "8100e1c8e80b598c36ff000800"}) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) r9 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000000040)={&(0x7f00000006c0)=[{0x0, 0x210, 0x0, 0x0}, {0x40, 0x10, 0x0, 0x0}], 0x2}) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r8, &(0x7f0000000140)={0x1000001d}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 2m37.445704138s ago: executing program 3 (id=677): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r6, &(0x7f0000000240)=""/157, 0x9d) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRESOCT=r2, @ANYRES32=r4, @ANYRESHEX=r0, @ANYRES8=r0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) syz_io_uring_setup(0x6af9, &(0x7f0000000080)={0x0, 0xe04f, 0xa40, 0x1, 0x272}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 2m35.63961381s ago: executing program 3 (id=681): inotify_init1(0x0) mknod$loop(0x0, 0xfff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @loopback, @private}}}}}}, 0x0) r1 = add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x0, 0x1012) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket(0x10, 0x803, 0x0) io_uring_setup(0x2b35, &(0x7f0000000080)={0x0, 0x17a3, 0x800, 0x1, 0x337}) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) bind$inet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m34.679404478s ago: executing program 3 (id=683): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbfs(0x0, 0x200, 0x80102) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_xfrm(r1, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000104000140600fe880000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00000000a78800004a4bf860045650f88118ae750f660723b88f6a39b4a7ed50f44bff2022984af49e675c1a0017a9f31e85b177a7117bdaace08b18d2855ad4c55f655a2e31116737bfdac546e50a66f78c4a25c85070a515ec2e2e53e8149943e9779d9a0ef5220853d186ba2f457698904f60b1a10c266c491159be8deebef2f961515a21cf90874e37f79eab7d95e33456bfebaf094c7d751b5d0500000000000000000000b6f420c3c3d5740d282ae41d8f6f2c8cfffc7752f8d5fffa43c5db048e67246dc86499321acd1da7bcc6643bfe233e6995d978a4f9acd801ceb254f34b80f3adab3fef745ab62f8feed4f308000000489c1096e5ac7aa3deb7a89989d63cba764eff4ddb3131fd80cb9c0526e6ec3f97d916cea8e67ccbb0a6de7891ad68d7cc2fbe10dd59026331620bd5867cdcc747"], 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x3}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x1, 0x4000001, 0x206, 0x6}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x24040084) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001c483c310480b0320bc35010203010902240001008170030904400202058f380409050410ff030708030905fd"], 0x0) 2m31.427840681s ago: executing program 3 (id=689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000400)="4f0f38f90af040ff41eab8010000000f01c12666460fc6b000900000bd263e66660fc730c42295a9fff264470f2005366646d9fc470fc061030f01c8", 0x3c}], 0xaaaaaaaaaaaac6c, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r5, @ANYBLOB="08000a008a"], 0x58}, 0x1, 0x0, 0x0, 0xc}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000003c0)={0x2, 0x0, @empty}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r9 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, 0x0, 0x0, 0x0, r9) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0xe, 0x0, 0xee01}, {0x0, 0xfffffffffffffffb, 0x1}, {}, 0x0, 0x6e6bb6, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x4, 0x1, 0xb7, 0x0, 0x7ffffff}}, 0xe8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000200)=[@wr_drn={0x68, 0x20, {0x7, 0x2000002000}}], 0x20}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, 0x0) r10 = add_key$fscrypt_provisioning(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000440)=ANY=[@ANYBLOB="02010000000000001c12393a"], 0xc, 0xfffffffffffffffb) keyctl$instantiate(0xc, r10, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6577206465666175827420747275737465643a73797a20303030303030303030303030303030303430393300"], 0x2d, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=@newtfilter={0x478, 0x2c, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x9, 0xfff1}, {0x3, 0x6}, {0xffe0, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x1ff}, @TCA_CHAIN={0x8, 0xb, 0x55}, @filter_kind_options=@f_fw={{0x7}, {0x424, 0x2, [@TCA_FW_POLICE={0x410, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8, 0x0, 0x7fff, 0x5, 0x4, 0xfffffff7, 0xf0, 0x7, 0xd4, 0xfffffff7, 0x2, 0x1800000, 0x9, 0x3d9, 0x10000, 0xef, 0x6, 0x7, 0xc, 0x101, 0xcea, 0x10, 0x3, 0x8, 0x7, 0x6, 0x5, 0xb, 0x1, 0xa2c, 0x5, 0x8001, 0x1, 0x3, 0x5, 0x8, 0x3, 0xae7, 0x9, 0xc710, 0x40000, 0x1, 0x0, 0xa9, 0x4, 0x37d3, 0x2, 0xffffffff, 0x4, 0x5, 0x2, 0x0, 0x2d0, 0xe3f, 0x4, 0x4, 0x3, 0x2, 0x6, 0x37f, 0x8, 0x6, 0x4, 0xebc3, 0xffff, 0x7f, 0x8, 0x7, 0x8d, 0x10, 0x3fe0000, 0x0, 0x9, 0x10, 0x9, 0xffff, 0x2, 0x9, 0x9, 0x9, 0x0, 0x401, 0x6, 0x2, 0xffffffff, 0x59, 0x6, 0x6, 0x3, 0x4, 0x3, 0x3, 0xa5, 0x90, 0x1, 0x1, 0x66, 0x7, 0x80, 0xf, 0x1000, 0x1, 0x0, 0x10000, 0xd, 0x7ff, 0x8, 0x8, 0x3, 0x5, 0x2, 0x6, 0x6, 0x8, 0xf, 0x6, 0x10, 0x80, 0x5, 0x1d3, 0x7f, 0x1, 0x1, 0x100, 0x2dad, 0x800, 0x3, 0x1, 0x6, 0x7, 0x8, 0x2, 0x3, 0x5, 0x1, 0x9b77, 0x2, 0x9, 0x5, 0x0, 0x3, 0x4b, 0x9, 0xd1, 0xb03, 0xfff, 0x1, 0x2, 0x7, 0x8, 0xffffff61, 0x2, 0x5, 0x9, 0x3, 0x5, 0x401, 0xffffffff, 0x9, 0x9, 0x3, 0x80000001, 0x3ff, 0x7d, 0x0, 0x5, 0xfffffbff, 0x83, 0x7, 0x8, 0x6, 0x401, 0x5, 0x3, 0x4, 0xf730, 0x0, 0x9, 0xffff, 0x980, 0x2, 0x1, 0x10001, 0x3, 0x7f, 0x1, 0x9, 0x432b, 0x8, 0xfffffff4, 0x7, 0x6, 0x111, 0x0, 0x0, 0x3, 0x100, 0x43, 0x8001, 0x5, 0x7, 0x492e, 0x200, 0x9, 0x4, 0xffff8000, 0x0, 0x4, 0x3, 0x7, 0x10000, 0x10000, 0x9, 0x5b5f676a, 0x5, 0x5, 0x80000001, 0x400, 0x8, 0x1, 0xfffffff8, 0xf, 0x0, 0x5, 0x3, 0x5f93, 0x1, 0x80, 0xe4f, 0x8, 0x5, 0x1, 0x80000003, 0x6, 0x9, 0xc942, 0x7, 0x198, 0x2, 0x3, 0x6, 0xf, 0xfffffff9, 0xffffff01, 0x7, 0x1000, 0x977d, 0x7fffffff, 0xce8, 0x80, 0x3, 0x18000000, 0x3, 0x64, 0x8]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xfff3}}, @TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x478}, 0x1, 0x0, 0x0, 0x1}, 0x404c001) 2m27.9383372s ago: executing program 3 (id=694): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_usbip_server_init(0x5) writev(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffc38c5162, 0x0, 0x40, 0x8, 0x3, 0x0, 0x0, 0x4, 0x8}}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000040000100fcff0700fedbdf2501000000100024800c009100ad00000000000000140001801000078008000200", @ANYRES32=0x0, @ANYBLOB="000000e6ffffff00", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x200480c4) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000280)={'netdevsim0\x00', @remote}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 2m26.283355251s ago: executing program 33 (id=665): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x6cc842, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x207) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x9, 0xdffffffe, 0x80, 0x27e9, 0x9, "8100e1c8e80b598c36ff000800"}) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) r9 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000000040)={&(0x7f00000006c0)=[{0x0, 0x210, 0x0, 0x0}, {0x40, 0x10, 0x0, 0x0}], 0x2}) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r8, &(0x7f0000000140)={0x1000001d}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 2m25.374841788s ago: executing program 3 (id=703): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x6cc842, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x207) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0), 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x9, 0xdffffffe, 0x80, 0x27e9, 0x9, "8100e1c8e80b598c36ff000800"}) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) r9 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000000040)={&(0x7f00000006c0)=[{0x0, 0x210, 0x0, 0x0}, {0x40, 0x10, 0x0, 0x0}], 0x2}) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r8, &(0x7f0000000140)={0x1000001d}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 2m10.164236918s ago: executing program 34 (id=703): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x6cc842, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x207) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0), 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x9, 0xdffffffe, 0x80, 0x27e9, 0x9, "8100e1c8e80b598c36ff000800"}) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) r9 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000000040)={&(0x7f00000006c0)=[{0x0, 0x210, 0x0, 0x0}, {0x40, 0x10, 0x0, 0x0}], 0x2}) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r8, &(0x7f0000000140)={0x1000001d}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 1m39.035741596s ago: executing program 7 (id=793): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180080001"], 0x64}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) dup2(r3, r1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r6, &(0x7f00000010c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xb77c, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000001180)="47ab", 0x2}, {&(0x7f0000000680)="d15503f12eecc8919666b96e612e72057cfa369a3923be", 0x17}], 0x2}}], 0x1, 0x4400c800) 1m38.030058635s ago: executing program 7 (id=795): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="1501000000000000140012800a00010069706f69620000000400028008000500", @ANYRES16=r1, @ANYBLOB="1dd97c09dd8e50f204b13039c0fc8b338d08c64f3c1341250cb2de07673dd8e350626472226e0c4c111fe13c93d16756a1042f35e5483181ff0dbac76288419c1ad979821dc385d700b71e466b8e0cb8bbe5274025ed6aebdd263ea13870f32e642040743b954c28270f3cee21a18cb28056cdc0bcb84eabf353e31d6142b85394317ef7a6a035a489b0"], 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYRESOCT=r3, @ANYRES32=r5, @ANYRESHEX=r0, @ANYRES8=r0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) syz_io_uring_setup(0x6af9, &(0x7f0000000080)={0x0, 0xe04f, 0xa40, 0x1, 0x272}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 1m36.833763469s ago: executing program 7 (id=796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x470}, 0x1, 0x0, 0x0, 0x4040010}, 0x20004084) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) fcntl$getown(r0, 0x9) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$mouse(0x0, 0x0, 0x2042) r2 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064d2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) syz_clone3(&(0x7f000000dd80)={0x240000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) acct(&(0x7f0000000040)='./file0\x00') openat$mice(0xffffff9c, &(0x7f0000000040), 0x167342) 1m35.991985356s ago: executing program 7 (id=798): r0 = gettid() r1 = getpid() openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0xfffffffc) socket$nl_route(0x10, 0x3, 0x0) dup(r3) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000940)={0x0, 0xfffff42f, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x140, 0x65, 0x2, 0x4070bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x5}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xdc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc4, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x88, 0x15, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x20000000, 0x3, 0xffff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x1, 0x40c62a3c, 0xfffd}, 0x15}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x2, 0xb, 0x1}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r1, 0xd, &(0x7f0000000140)={0x4, 0x8b}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) 1m33.797674504s ago: executing program 7 (id=805): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a80000000c0a01010000000000000000070000090900020073797a31000000000900010073797a30000000007c0003807800008008000340000000026c000b80200001800a00010071756f7461000000100002800c0001400000020000000000340001800a0001006c696d6974000000240002800c00024000000000000000000c000140"], 0x12c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x400000, 0x4200) gettid() r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb2960100, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7f8000, 0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@release], 0x0, 0x0, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x101081, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 1m31.630704722s ago: executing program 7 (id=808): keyctl$set_timeout(0xf, 0x0, 0xfffffffffffffffd) clock_adjtime(0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0xbf87, 0x2, 0x2, 0x2a0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) gettid() r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup3(r2, r3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0, 0xfffffdf9, r7, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f00000003c0)={r8}) 1m16.253286662s ago: executing program 35 (id=808): keyctl$set_timeout(0xf, 0x0, 0xfffffffffffffffd) clock_adjtime(0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) io_uring_setup(0x19be, &(0x7f0000000000)={0x0, 0xbf87, 0x2, 0x2, 0x2a0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) gettid() r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) dup3(r2, r3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0, 0xfffffdf9, r7, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f00000003c0)={r8}) 22.172974896s ago: executing program 6 (id=955): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setpriority(0x2, r1, 0x6) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) pidfd_getfd(r5, r4, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) gettid() r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 18.328426612s ago: executing program 6 (id=963): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xc0}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x1) r5 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) syz_usb_connect(0x5, 0x2d, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xb5, 0x13, 0x4f, 0x20, 0x3f0, 0x4e1d, 0xf7ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x1, 0x2, 0x70, 0x5, "", [{{0x9, 0x4, 0xb7, 0xd, 0x0, 0xe5, 0xa8, 0x6c, 0x3}}, {{0x9, 0x4, 0xbd, 0x6, 0x0, 0xff, 0x5, 0x78, 0x6}}]}}]}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40400) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x959081) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf25fe88000000000000000000000000010100000000000000000000000000000001000000004e2300000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000000021000000000000000000000000000000000000000000000008000000000000000000000000000000ffffffff00000000ffffffffffffffff0000000000000000faffffffffffffff0000000000000000000000000000000004000000b56b6e000001030300000000"], 0xb8}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f00000000c0)=""/58, 0x3a) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000940)={0x20, 0x11, 0x3, "dbb891"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r9, 0x0, 0x0) 13.901829569s ago: executing program 6 (id=973): prlimit64(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000280)=""/59, 0x5e) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x0, &(0x7f0000000100)}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12.834097392s ago: executing program 2 (id=975): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180080001"], 0x64}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) dup2(r3, r1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r6, &(0x7f00000010c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xb77c, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000001180)="47ab", 0x2}, {&(0x7f0000000680)="d15503f12eecc8919666b96e612e72057cfa369a3923be", 0x17}], 0x2}}], 0x1, 0x4400c800) 12.29302665s ago: executing program 8 (id=977): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) syz_open_dev$usbfs(0x0, 0x200, 0x80102) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000104000140600fe880000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x3}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x1, 0x4000001, 0x206, 0x6}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x24040084) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001c483c310480b0320bc35010203010902240001008170030904400202058f380409050410ff030708030905fd"], 0x0) 12.292129308s ago: executing program 2 (id=978): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34", @ANYRES16, @ANYRES16], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x800, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x0, 0x8, 0xb, 0x8, "77f15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) 11.097345311s ago: executing program 5 (id=981): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x6, 0x2, 0x7, 0x8000000000000001, 0x1, 0x0}) fcntl$setown(r1, 0x8, r3) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000880)={0x2020}, 0x2020) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0xffffff64, 0x100000, 0x81, {}, {0x5, 0x8, 0x8, 0x3, 0x29, 0x9}, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x4084) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 10.038965912s ago: executing program 2 (id=982): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) fcntl$setown(r1, 0x8, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0xffffff64, 0x100000, 0x81, {}, {0x5, 0x8, 0x8, 0x3, 0x29, 0x9}, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x4084) syz_pidfd_open(r4, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 9.989740207s ago: executing program 6 (id=983): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xc0}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x1) r5 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) syz_usb_connect(0x5, 0x2d, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xb5, 0x13, 0x4f, 0x20, 0x3f0, 0x4e1d, 0xf7ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x1, 0x2, 0x70, 0x5, "", [{{0x9, 0x4, 0xb7, 0xd, 0x0, 0xe5, 0xa8, 0x6c, 0x3}}, {{0x9, 0x4, 0xbd, 0x6, 0x0, 0xff, 0x5, 0x78, 0x6}}]}}]}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40400) syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x959081) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf25fe88000000000000000000000000010100000000000000000000000000000001000000004e2300000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000000021000000000000000000000000000000000000000000000008000000000000000000000000000000ffffffff00000000ffffffffffffffff0000000000000000faffffffffffffff0000000000000000000000000000000004000000b56b6e000001030300000000"], 0xb8}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f00000000c0)=""/58, 0x3a) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000940)={0x20, 0x11, 0x3, "dbb891"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r9, 0x0, 0x0) 9.568092761s ago: executing program 5 (id=984): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x6, 0x2, 0x7, 0x8000000000000001, 0x1, 0x0}) fcntl$setown(r1, 0x8, r3) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000880)={0x2020}, 0x2020) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0xffffff64, 0x100000, 0x81, {}, {0x5, 0x8, 0x8, 0x3, 0x29, 0x9}, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x4084) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 8.223956686s ago: executing program 8 (id=985): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)=0x40) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f00000000c0)=0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) clock_gettime(0x1, &(0x7f0000000000)) 8.115918368s ago: executing program 0 (id=986): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_setup(0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000010c0)=0xffffffffffffffff, 0x4) recvmmsg(r6, &(0x7f00000039c0)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/221, 0xdd}, {&(0x7f0000000580)=""/190, 0xffffffffffffffe4}, {&(0x7f0000000640)=""/236, 0xec}], 0x3, &(0x7f0000001c00)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002c00)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000002c80)=""/62, 0x3e}, {&(0x7f0000002cc0)=""/170, 0xaa}, {&(0x7f0000002d80)=""/187, 0xbb}, {&(0x7f0000002e40)=""/212, 0xd4}, {&(0x7f0000002f40)=""/242, 0xf2}, {&(0x7f0000003040)=""/148, 0x94}, {&(0x7f0000003100)=""/39, 0x27}, {&(0x7f0000000800)=""/132, 0x84}], 0x8, &(0x7f00000031c0)=""/214, 0xd6}, 0x1}, {{&(0x7f00000032c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003340)=""/61, 0x3d}, {&(0x7f0000003380)=""/197, 0xc5}, {&(0x7f0000003480)=""/135, 0x87}, {&(0x7f0000003540)=""/147, 0x93}, {&(0x7f0000003600)=""/132, 0x84}, {&(0x7f00000036c0)=""/109, 0x6d}, {&(0x7f0000003740)=""/101, 0x65}, {&(0x7f00000002c0)=""/188, 0xb1}], 0x8, &(0x7f0000003900)=""/130, 0x82}}], 0x3, 0x2120, 0x0) r8 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 6.69085962s ago: executing program 8 (id=987): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420d", 0x9a, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7", 0x12, 0x100, 0x9}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb0, 0x117, 0x2, 0x9b, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xc8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681", 0xb0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.241562116s ago: executing program 0 (id=988): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r4, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000ba"}, 0x3a) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="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"}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ftruncate(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x60b17f360213d71e, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.077036032s ago: executing program 2 (id=989): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='DrPd', @ANYRES16, @ANYBLOB="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"], 0x44}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000600)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 6.035522179s ago: executing program 5 (id=990): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_setup(0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000010c0)=0xffffffffffffffff, 0x4) recvmmsg(r6, &(0x7f00000039c0)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/221, 0xdd}, {&(0x7f0000000580)=""/190, 0xffffffffffffffe4}, {&(0x7f0000000640)=""/236, 0xec}], 0x3, &(0x7f0000001c00)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002c00)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000002c80)=""/62, 0x3e}, {&(0x7f0000002cc0)=""/170, 0xaa}, {&(0x7f0000002d80)=""/187, 0xbb}, {&(0x7f0000002e40)=""/212, 0xd4}, {&(0x7f0000002f40)=""/242, 0xf2}, {&(0x7f0000003040)=""/148, 0x94}, {&(0x7f0000003100)=""/39, 0x27}, {&(0x7f0000000800)=""/132, 0x84}], 0x8, &(0x7f00000031c0)=""/214, 0xd6}, 0x1}, {{&(0x7f00000032c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003340)=""/61, 0x3d}, {&(0x7f0000003380)=""/197, 0xc5}, {&(0x7f0000003480)=""/135, 0x87}, {&(0x7f0000003540)=""/147, 0x93}, {&(0x7f0000003600)=""/132, 0x84}, {&(0x7f00000036c0)=""/109, 0x6d}, {&(0x7f0000003740)=""/101, 0x65}, {&(0x7f00000002c0)=""/188, 0xb1}], 0x8, &(0x7f0000003900)=""/130, 0x82}}], 0x3, 0x2120, 0x0) r8 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 5.217262435s ago: executing program 2 (id=991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) fcntl$getown(r0, 0x9) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x11) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000002002cbd7000ffdbdf25020480020300000212000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc088) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) fallocate(r3, 0x1, 0x200000000000004, 0x1) r4 = syz_open_dev$mouse(0x0, 0x0, 0x2042) syz_open_dev$dri(0x0, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000400)="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") write$binfmt_register(r7, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0) syz_clone3(&(0x7f000000dd80)={0x240000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) acct(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) io_setup(0x80004, &(0x7f0000000180)) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) write$UHID_INPUT(r8, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20008b}, 0x0) 4.659210216s ago: executing program 6 (id=992): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) syz_open_dev$usbfs(0x0, 0x200, 0x80102) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000104000140600fe880000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x3}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x1, 0x4000001, 0x206, 0x6}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x24040084) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001c483c310480b0320bc35010203010902240001008170030904400202058f380409050410ff030708030905fd"], 0x0) 4.293504762s ago: executing program 0 (id=993): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680)) sigaltstack(0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x140000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) syz_usb_connect(0x0, 0x371, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) fcntl$getownex(r1, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x9) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x40010, 0xffffffffffffffff, 0xe5225000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x44000044) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000280)='tyN\x02\x00}\x00\x00\x00\x00\xe7i7\n\xb0\xae\x94\xdf6 \x8a\xecG\xa3\x16\xa6\x9bO[\xff\x85/\xc6\xc1\xae]|\xe5\x81\x12\x8b\x84\xe1E\\\xfd}\x12\f\xf8\xe70\xac\x05m\x144:\xfb\x1e\xce\r\xe0k\xa4:\xc4', 0x0, 0xffffffffffffff9c) r5 = fsopen(&(0x7f0000000240)='ext2\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) 4.022481951s ago: executing program 5 (id=994): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0xf, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x60, 0xe, 0x2, "c423"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.448992558s ago: executing program 2 (id=995): gettid() r0 = getpid() openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xfffffffc) socket$nl_route(0x10, 0x3, 0x0) dup(r2) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x140, 0x65, 0x2, 0x4070bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x5}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xdc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc4, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x88, 0x15, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x20000000, 0x3, 0xffff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x1, 0x40c62a3c, 0xfffd}, 0x15}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x2, 0xb, 0x1}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r0, 0xd, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) 3.287494364s ago: executing program 8 (id=996): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x400000, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x7e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) move_mount(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x66) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) close(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000500)={0x8, [[0x8001, 0x8001, 0x0, 0x2, 0x3, 0x1, 0x6, 0x5], [0xfffffffa, 0x6, 0x6, 0x10001, 0x4, 0x4, 0xb1, 0x3], [0x1, 0xd, 0x2, 0x4dfb, 0x7106, 0x0, 0x7, 0x9]], '\x00', [{0xd4, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xdc, 0x3, 0x0, 0x1, 0x1}, {0x9, 0x80, 0x0, 0x1}, {0x0, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x4, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x1, 0xc, 0x1, 0x1}, {0x7, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x1a, 0x1, 0x1}, {0x1, 0x3, 0x0, 0x1}], '\x00', 0x81}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 2.230734511s ago: executing program 8 (id=997): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x40) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) clock_gettime(0x1, &(0x7f0000000000)) 1.208672932s ago: executing program 8 (id=998): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_xfrm(r1, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000104000140600fe880000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x3}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x1, 0x4000001, 0x206, 0x6}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x24040084) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001c483c310480b0320bc35010203010902240001008170030904400202058f380409050410ff030708030905fd"], 0x0) 1.148528035s ago: executing program 0 (id=999): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x280000d, 0x12, r0, 0x7f5d5000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) 1.059294314s ago: executing program 6 (id=1000): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) fcntl$setown(r1, 0x8, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0xffffff64, 0x100000, 0x81, {}, {0x5, 0x8, 0x8, 0x3, 0x29, 0x9}, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x4084) syz_pidfd_open(r4, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 997.933615ms ago: executing program 0 (id=1001): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='DrPd', @ANYRES16, @ANYBLOB="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"], 0x44}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000600)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 479.075714ms ago: executing program 5 (id=1002): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0x9f, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4", 0x91}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9", 0xe2}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 396.65572ms ago: executing program 0 (id=1003): rseq(&(0x7f0000000280), 0x20, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x670}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) prlimit64(0x0, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x42, 0x6, 0x8, 0x4, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) 0s ago: executing program 5 (id=1004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) fcntl$getown(r0, 0x9) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x11) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000002002cbd7000ffdbdf25020480020300000212000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc088) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) fallocate(r3, 0x1, 0x200000000000004, 0x1) r4 = syz_open_dev$mouse(0x0, 0x0, 0x2042) syz_open_dev$dri(0x0, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000400)="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") write$binfmt_register(r7, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0) syz_clone3(&(0x7f000000dd80)={0x240000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) acct(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) io_setup(0x80004, &(0x7f0000000180)) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) write$UHID_INPUT(r8, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20008b}, 0x0) kernel console output (not intermixed with test programs): 7 [ 311.335725][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 311.335744][ T30] audit: type=1326 audit(1781305744.909:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.2.526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7ffc0000 [ 311.935773][ T30] audit: type=1326 audit(1781305744.909:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.2.526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7ffc0000 [ 312.744224][ T30] audit: type=1326 audit(1781305744.919:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.2.526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7ffc0000 [ 313.465712][ T30] audit: type=1326 audit(1781305744.919:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.2.526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f966cf9ce59 code=0x7ffc0000 [ 313.498684][ T30] audit: type=1326 audit(1781305744.919:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.2.526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7ffc0000 [ 313.816032][ T30] audit: type=1326 audit(1781305744.919:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.2.526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7ffc0000 [ 313.880450][ T30] audit: type=1326 audit(1781305744.919:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.2.526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7ffc0000 [ 313.951997][ T30] audit: type=1326 audit(1781305744.919:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.2.526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7ffc0000 [ 313.995691][ T30] audit: type=1326 audit(1781305744.919:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.2.526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f966cf9ce59 code=0x7ffc0000 [ 314.206597][ T30] audit: type=1326 audit(1781305744.979:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.2.526" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7ffc0000 [ 314.716908][ T8167] sctp: [Deprecated]: syz.5.534 (pid 8167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.716908][ T8167] Use struct sctp_sack_info instead [ 317.396268][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.404343][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.755877][ T5737] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 317.853777][ T5810] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 317.936657][ T5737] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 317.949657][ T5737] usb 1-1: config 0 has no interface number 0 [ 317.960620][ T5737] usb 1-1: config 0 interface 64 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 317.974887][ T5737] usb 1-1: config 0 interface 64 altsetting 2 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 317.989760][ T5737] usb 1-1: config 0 interface 64 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 318.002395][ T5737] usb 1-1: config 0 interface 64 has no altsetting 0 [ 318.028006][ T5737] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=35.bc [ 318.038746][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 318.044237][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.083133][ T5737] usb 1-1: Product: syz [ 318.087969][ T5810] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 318.102512][ T5737] usb 1-1: Manufacturer: syz [ 318.113463][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.122461][ T5737] usb 1-1: SerialNumber: syz [ 318.130321][ T5810] usb 3-1: Product: syz [ 318.160902][ T5810] usb 3-1: Manufacturer: syz [ 318.198885][ T5810] usb 3-1: SerialNumber: syz [ 318.212299][ T5737] usb 1-1: config 0 descriptor?? [ 318.229415][ T5810] usb 3-1: config 0 descriptor?? [ 318.635607][ T5737] ttusbir 1-1:0.64: cannot find expected altsetting [ 318.860023][ T5737] usb 1-1: USB disconnect, device number 16 [ 318.882401][ T5810] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 318.943276][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 318.978075][ T5810] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 318.997101][ T5810] usb 3-1: media controller created [ 319.058749][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.079163][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 319.079212][ T30] audit: type=1400 audit(1781305752.659:1206): avc: denied { append } for pid=8194 comm="syz.2.543" name="i2c-1" dev="devtmpfs" ino=2972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 319.167716][ T8195] dtv5100: wlen = 0, aborting. [ 319.425498][ T5737] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 319.839649][ T30] audit: type=1326 audit(1781305752.819:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649719ce59 code=0x7ffc0000 [ 320.195501][ T4933] Bluetooth: hci4: command 0x0405 tx timeout [ 320.204788][ T30] audit: type=1326 audit(1781305752.829:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649719ce59 code=0x7ffc0000 [ 320.572627][ T30] audit: type=1326 audit(1781305752.829:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649719ce59 code=0x7ffc0000 [ 320.887612][ T30] audit: type=1326 audit(1781305752.829:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f649719ce59 code=0x7ffc0000 [ 321.258610][ T5810] zl10353_read_register: readreg error (reg=127, ret==0) [ 321.394296][ T5810] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 321.402958][ T30] audit: type=1326 audit(1781305752.829:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649719ce59 code=0x7ffc0000 [ 321.403079][ T5810] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 322.154544][ T30] audit: type=1326 audit(1781305752.829:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649719ce59 code=0x7ffc0000 [ 322.300165][ T30] audit: type=1326 audit(1781305752.829:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649719ce59 code=0x7ffc0000 [ 322.351000][ T30] audit: type=1326 audit(1781305752.839:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f649719ce59 code=0x7ffc0000 [ 322.491246][ T8225] syz.0.549 (8225): drop_caches: 2 [ 322.816175][ T10] usb 3-1: USB disconnect, device number 18 [ 322.886979][ T30] audit: type=1326 audit(1781305752.839:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.546" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649719ce59 code=0x7ffc0000 [ 322.974759][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 323.461875][ T8230] FAULT_INJECTION: forcing a failure. [ 323.461875][ T8230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.505553][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 323.513206][ T8230] CPU: 0 UID: 0 PID: 8230 Comm: syz.1.553 Not tainted syzkaller #0 PREEMPT(full) [ 323.513234][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.513254][ T8230] Call Trace: [ 323.513262][ T8230] [ 323.513269][ T8230] dump_stack_lvl+0x100/0x190 [ 323.513299][ T8230] should_fail_ex.cold+0x5/0xa [ 323.513328][ T8230] _copy_from_iter+0x1f4/0x1690 [ 323.513362][ T8230] ? __pfx__copy_from_iter+0x10/0x10 [ 323.513388][ T8230] ? _parse_integer_limit+0x17f/0x1d0 [ 323.513424][ T8230] ? _kstrtoull+0x13c/0x1f0 [ 323.513453][ T8230] ? __pfx__kstrtoull+0x10/0x10 [ 323.513487][ T8230] tun_get_user+0x3ba/0x3c20 [ 323.513532][ T8230] ? __pfx_tun_get_user+0x10/0x10 [ 323.513565][ T8230] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 323.513605][ T8230] ? find_held_lock+0x2b/0x80 [ 323.513625][ T8230] ? tun_get+0x191/0x370 [ 323.513652][ T8230] ? tun_get+0x191/0x370 [ 323.513688][ T8230] tun_chr_write_iter+0xdc/0x200 [ 323.513723][ T8230] vfs_write+0x6ac/0x1070 [ 323.513747][ T8230] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 323.513782][ T8230] ? __pfx_vfs_write+0x10/0x10 [ 323.513804][ T8230] ? find_held_lock+0x2b/0x80 [ 323.513842][ T8230] ksys_write+0x12a/0x250 [ 323.513865][ T8230] ? __pfx_ksys_write+0x10/0x10 [ 323.513892][ T8230] ? rcu_is_watching+0x12/0xc0 [ 323.513926][ T8230] do_syscall_64+0x115/0x870 [ 323.513954][ T8230] ? clear_bhb_loop+0x40/0x90 [ 323.513980][ T8230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.514009][ T8230] RIP: 0033:0x7f649719ce59 [ 323.514028][ T8230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.514048][ T8230] RSP: 002b:00007f6498073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.514070][ T8230] RAX: ffffffffffffffda RBX: 00007f6497415fa0 RCX: 00007f649719ce59 [ 323.514085][ T8230] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000006 [ 323.514098][ T8230] RBP: 00007f6498073090 R08: 0000000000000000 R09: 0000000000000000 [ 323.514111][ T8230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.514123][ T8230] R13: 00007f6497416038 R14: 00007f6497415fa0 R15: 00007ffe9728c148 [ 323.514152][ T8230] [ 323.795614][ T5810] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 323.967290][ T5810] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.991112][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 324.014398][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 324.053147][ T5810] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 324.066928][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.085526][ T5810] usb 6-1: Product: syz [ 324.089743][ T5810] usb 6-1: Manufacturer: syz [ 324.094807][ T5810] usb 6-1: SerialNumber: syz [ 324.110428][ T5737] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 324.115760][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 324.135262][ T5810] usb 6-1: config 0 descriptor?? [ 324.142206][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 324.151727][ T8233] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 324.159675][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.182695][ T10] usb 3-1: config 0 descriptor?? [ 324.201079][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 324.251170][ T5810] rc_core: IR keymap rc-streamzap not found [ 324.257393][ T5810] Registered IR keymap rc-empty [ 324.263817][ T5810] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 324.276685][ T5737] usb 1-1: Using ep0 maxpacket: 16 [ 324.311236][ T5737] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 324.320568][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.339083][ T5737] usb 1-1: Product: syz [ 324.343304][ T5737] usb 1-1: Manufacturer: syz [ 324.358353][ T5737] usb 1-1: SerialNumber: syz [ 324.375864][ T5810] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 324.389137][ T5737] usb 1-1: config 0 descriptor?? [ 324.827934][ T5737] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 324.854066][ T5737] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 324.864635][ T5737] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 324.872940][ T5737] usb 1-1: media controller created [ 324.899371][ T5737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.248741][ T8227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.258974][ T8227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.269711][ T3108] usb 3-1: USB disconnect, device number 19 [ 325.502746][ T8239] dtv5100: wlen = 0, aborting. [ 325.503780][ T5737] zl10353_read_register: readreg error (reg=127, ret==0) [ 325.517695][ T5737] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 325.526075][ T5737] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 325.549217][ T5737] usb 1-1: USB disconnect, device number 17 [ 325.622711][ T5737] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 326.117485][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 326.287866][ T10] usb 3-1: config 42 has an invalid interface number: 66 but max is 0 [ 326.296925][ T10] usb 3-1: config 42 has an invalid interface number: 65 but max is 0 [ 326.305149][ T10] usb 3-1: config 42 has 2 interfaces, different from the descriptor's value: 1 [ 326.317165][ T10] usb 3-1: config 42 has no interface number 0 [ 326.323387][ T10] usb 3-1: config 42 has no interface number 1 [ 326.329794][ T10] usb 3-1: config 42 interface 66 altsetting 9 endpoint 0x9 has an invalid bInterval 76, changing to 10 [ 326.341208][ T10] usb 3-1: config 42 interface 66 altsetting 9 endpoint 0x9 has invalid maxpacket 25772, setting to 1024 [ 326.353879][ T10] usb 3-1: config 42 interface 66 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.367616][ T10] usb 3-1: too many endpoints for config 42 interface 65 altsetting 65: 226, using maximum allowed: 30 [ 326.379561][ T10] usb 3-1: config 42 interface 65 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 226 [ 326.403163][ T10] usb 3-1: config 42 interface 66 has no altsetting 0 [ 326.410959][ T10] usb 3-1: config 42 interface 65 has no altsetting 0 [ 326.441179][ T10] usb 3-1: New USB device found, idVendor=0ace, idProduct=1608, bcdDevice=bb.f6 [ 326.462152][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.470363][ T10] usb 3-1: Product: І [ 326.474724][ T10] usb 3-1: Manufacturer: ⹸䳬䗺羺껉槅ਸⓎ宻輭䏱㷺堔ꃀꒌ踀轠㓀沣䧟툹譹表 [ 326.488118][ T10] usb 3-1: SerialNumber: ъ [ 326.518345][ T8245] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.801104][ T10] usb 3-1: USB disconnect, device number 20 [ 327.238929][ T5736] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 327.412175][ T5736] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 327.426219][ T5736] usb 1-1: config 0 has no interface number 0 [ 327.490270][ T5736] usb 1-1: config 0 interface 64 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 327.568112][ T5736] usb 1-1: config 0 interface 64 altsetting 2 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 327.679548][ T5736] usb 1-1: config 0 interface 64 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 327.722555][ T5736] usb 1-1: config 0 interface 64 has no altsetting 0 [ 327.759911][ T5736] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=35.bc [ 327.794778][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.822399][ T5736] usb 1-1: Product: syz [ 327.840010][ T5736] usb 1-1: Manufacturer: syz [ 327.845288][ T5736] usb 1-1: SerialNumber: syz [ 327.858029][ T5736] usb 1-1: config 0 descriptor?? [ 328.997022][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 328.997075][ T30] audit: type=1326 audit(1781305762.229:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.2.561" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966cf9ce59 code=0x0 [ 333.016002][ T5736] ttusbir 1-1:0.64: cannot find expected altsetting [ 334.128527][ T10] usb 6-1: USB disconnect, device number 10 [ 334.310837][ T8282] netlink: 44 bytes leftover after parsing attributes in process `syz.2.566'. [ 334.457434][ T5627] usb 1-1: USB disconnect, device number 18 [ 336.003997][ T8288] netlink: 'syz.5.569': attribute type 1 has an invalid length. [ 336.373722][ T30] audit: type=1326 audit(1781305769.719:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8291 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc596d9ce59 code=0x0 [ 338.164260][ T30] audit: type=1326 audit(1781305771.729:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.3.574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43db9ce59 code=0x7fc00000 [ 340.917117][ T30] audit: type=1326 audit(1781305774.509:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.0.580" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc596d9ce59 code=0x0 [ 341.630891][ T30] audit: type=1326 audit(1781305774.799:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.1.584" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f649719ce59 code=0x0 [ 342.561755][ T8361] syz.0.585 (8361): drop_caches: 2 [ 346.010652][ T8375] syz.5.582 (8375): drop_caches: 2 [ 347.802764][ T30] audit: type=1326 audit(1781305781.239:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.1.591" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f649719ce59 code=0x0 [ 347.946855][ T30] audit: type=1400 audit(1781305781.529:1284): avc: denied { nlmsg_write } for pid=8391 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 347.969200][ T8393] FAULT_INJECTION: forcing a failure. [ 347.969200][ T8393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.996941][ T8393] CPU: 0 UID: 0 PID: 8393 Comm: syz.3.594 Not tainted syzkaller #0 PREEMPT(full) [ 347.996972][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 347.996986][ T8393] Call Trace: [ 347.996994][ T8393] [ 347.997002][ T8393] dump_stack_lvl+0x100/0x190 [ 347.997031][ T8393] should_fail_ex.cold+0x5/0xa [ 347.997059][ T8393] _copy_from_user+0x2e/0xd0 [ 347.997097][ T8393] copy_msghdr_from_user+0x9f/0x4f0 [ 347.997126][ T8393] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 347.997149][ T8393] ___sys_sendmsg+0x106/0x1e0 [ 347.997166][ T8393] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.997199][ T8393] __sys_sendmsg+0x170/0x220 [ 347.997218][ T8393] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.997244][ T8393] ? rcu_is_watching+0x12/0xc0 [ 347.997265][ T8393] do_syscall_64+0x115/0x870 [ 347.997281][ T8393] ? clear_bhb_loop+0x40/0x90 [ 347.997297][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.997309][ T8393] RIP: 0033:0x7fb43db9ce59 [ 347.997321][ T8393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.997333][ T8393] RSP: 002b:00007fb43e9d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.997345][ T8393] RAX: ffffffffffffffda RBX: 00007fb43de15fa0 RCX: 00007fb43db9ce59 [ 347.997353][ T8393] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 347.997360][ T8393] RBP: 00007fb43e9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.997367][ T8393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.997374][ T8393] R13: 00007fb43de16038 R14: 00007fb43de15fa0 R15: 00007ffddf3cc658 [ 347.997393][ T8393] [ 348.250493][ T8394] siw: device registration error -23 [ 348.271626][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 349.374714][ T5627] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 349.826446][ T5627] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.847148][ T5627] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 349.860034][ T5627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.022883][ T5627] usb 4-1: config 0 descriptor?? [ 350.048424][ T5627] pwc: Askey VC010 type 2 USB webcam detected. [ 350.173404][ T8410] syz.0.598 (8410): drop_caches: 2 [ 350.542478][ T5627] pwc: send_video_command error -71 [ 350.563949][ T5627] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 350.578191][ T5627] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 350.603987][ T5627] usb 4-1: USB disconnect, device number 18 [ 353.161512][ T8428] FAULT_INJECTION: forcing a failure. [ 353.161512][ T8428] name failslab, interval 1, probability 0, space 0, times 0 [ 353.174438][ T8428] CPU: 0 UID: 0 PID: 8428 Comm: syz.3.606 Not tainted syzkaller #0 PREEMPT(full) [ 353.174467][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.174480][ T8428] Call Trace: [ 353.174486][ T8428] [ 353.174494][ T8428] dump_stack_lvl+0x100/0x190 [ 353.174525][ T8428] should_fail_ex.cold+0x5/0xa [ 353.174556][ T8428] should_failslab+0xc2/0x120 [ 353.174581][ T8428] __kmalloc_cache_noprof+0x7a/0x6f0 [ 353.174609][ T8428] ? alloc_pipe_info+0x10e/0x590 [ 353.174642][ T8428] alloc_pipe_info+0x10e/0x590 [ 353.174673][ T8428] splice_direct_to_actor+0x78f/0xa30 [ 353.174706][ T8428] ? __lock_acquire+0x4a5/0x2630 [ 353.174730][ T8428] ? __pfx_direct_splice_actor+0x10/0x10 [ 353.174765][ T8428] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 353.174803][ T8428] do_splice_direct+0x174/0x240 [ 353.174840][ T8428] ? __pfx_do_splice_direct+0x10/0x10 [ 353.174867][ T8428] ? avc_policy_seqno+0x9/0x20 [ 353.174891][ T8428] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 353.174921][ T8428] ? bpf_lsm_file_permission+0x9/0x10 [ 353.174953][ T8428] ? security_file_permission+0x76/0x210 [ 353.174987][ T8428] ? rw_verify_area+0xce/0x6d0 [ 353.175010][ T8428] do_sendfile+0xadc/0xe20 [ 353.175038][ T8428] ? __pfx_do_sendfile+0x10/0x10 [ 353.175061][ T8428] ? __fget_files+0x21f/0x3d0 [ 353.175095][ T8428] __x64_sys_sendfile64+0x1d8/0x220 [ 353.175123][ T8428] ? ksys_write+0x1ac/0x250 [ 353.175146][ T8428] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 353.175178][ T8428] ? rcu_is_watching+0x12/0xc0 [ 353.175213][ T8428] do_syscall_64+0x115/0x870 [ 353.175240][ T8428] ? clear_bhb_loop+0x40/0x90 [ 353.175266][ T8428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.175289][ T8428] RIP: 0033:0x7fb43db9ce59 [ 353.175308][ T8428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.175328][ T8428] RSP: 002b:00007fb43e9b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 353.175349][ T8428] RAX: ffffffffffffffda RBX: 00007fb43de16090 RCX: 00007fb43db9ce59 [ 353.175363][ T8428] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 353.175376][ T8428] RBP: 00007fb43e9b5090 R08: 0000000000000000 R09: 0000000000000000 [ 353.175391][ T8428] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 353.175403][ T8428] R13: 00007fb43de16128 R14: 00007fb43de16090 R15: 00007ffddf3cc658 [ 353.175430][ T8428] [ 354.579939][ T30] audit: type=1400 audit(1781305788.169:1285): avc: denied { mounton } for pid=8432 comm="syz.2.608" path="/110/file0" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 354.995306][ T5627] kernel read not supported for file /video9 (pid: 5627 comm: kworker/0:4) [ 355.097457][ T10] kernel write not supported for file /bus/input/handlers (pid: 10 comm: kworker/0:1) [ 355.290137][ T5627] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 355.565732][ T5627] usb 4-1: Using ep0 maxpacket: 32 [ 355.671757][ T5627] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 356.182343][ T5627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.273035][ T5627] usb 4-1: Product: syz [ 356.312929][ T5627] usb 4-1: Manufacturer: syz [ 356.359932][ T5627] usb 4-1: SerialNumber: syz [ 356.820271][ T30] audit: type=1400 audit(1781305788.309:1286): avc: denied { watch watch_reads } for pid=8433 comm="syz.3.607" path="/138" dev="tmpfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 356.844861][ T30] audit: type=1800 audit(1781305789.819:1287): pid=8439 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.608" name="/" dev="fuse" ino=2 res=0 errno=0 [ 356.884255][ T5627] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 357.279819][ T30] audit: type=1326 audit(1781305790.859:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.0.611" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc596d9ce59 code=0x0 [ 358.111211][ T8453] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 358.117751][ T8453] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 358.125851][ T8453] vhci_hcd vhci_hcd.0: Device attached [ 359.258286][ T30] audit: type=1326 audit(1781305792.039:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8450 comm="syz.2.612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966cf9ce59 code=0x0 [ 359.359343][ T8460] syz.5.614 (8460): drop_caches: 2 [ 359.607437][ T3108] usb 34-1: SetAddress Request (10) to port 0 [ 359.638469][ T3108] usb 34-1: new SuperSpeed USB device number 10 using vhci_hcd [ 360.289529][ T8474] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 360.307396][ T5627] usb 4-1: USB disconnect, device number 19 [ 360.322126][ T8454] vhci_hcd: connection reset by peer [ 360.444206][ T5855] vhci_hcd vhci_hcd.0: stop threads [ 360.450916][ T5855] vhci_hcd vhci_hcd.0: release socket [ 360.459775][ T5855] vhci_hcd vhci_hcd.0: disconnect device [ 360.620805][ T30] audit: type=1326 audit(1781305794.209:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8475 comm="syz.2.618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966cf9ce59 code=0x0 [ 364.755589][ T3108] usb 34-1: device descriptor read/8, error -110 [ 365.678720][ T30] audit: type=1326 audit(1781305798.989:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.3.623" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb43db9ce59 code=0x0 [ 366.048818][ T3108] usb usb34-port1: attempt power cycle [ 367.948076][ T3108] usb usb34-port1: unable to enumerate USB device [ 368.290398][ T8535] syz.0.628 (8535): drop_caches: 2 [ 369.345615][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 370.659137][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.635'. [ 370.708085][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 370.723460][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 371.587627][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.598857][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.609702][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 371.623241][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 371.633521][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.674863][ T9] usb 1-1: config 0 descriptor?? [ 372.365153][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 372.387672][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 373.400811][ T9] usb 1-1: USB disconnect, device number 19 [ 373.965481][ T30] audit: type=1326 audit(1781305807.549:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.2.637" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966cf9ce59 code=0x0 [ 375.239480][ T8591] syz.5.643 (8591): drop_caches: 2 [ 376.497391][ T8608] FAULT_INJECTION: forcing a failure. [ 376.497391][ T8608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.510891][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.0.646 Not tainted syzkaller #0 PREEMPT(full) [ 376.510919][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 376.510937][ T8608] Call Trace: [ 376.510946][ T8608] [ 376.510955][ T8608] dump_stack_lvl+0x100/0x190 [ 376.510988][ T8608] should_fail_ex.cold+0x5/0xa [ 376.511018][ T8608] _copy_from_user+0x2e/0xd0 [ 376.511047][ T8608] core_sys_select+0x2d0/0xbb0 [ 376.511078][ T8608] ? __pfx_core_sys_select+0x10/0x10 [ 376.511102][ T8608] ? find_held_lock+0x2b/0x80 [ 376.511130][ T8608] ? get_pid_task+0xfc/0x250 [ 376.511183][ T8608] ? __pfx_set_user_sigmask+0x10/0x10 [ 376.511209][ T8608] ? kernel_write+0x6b3/0x6c0 [ 376.511233][ T8608] ? __fget_files+0x215/0x3d0 [ 376.511264][ T8608] do_pselect.constprop.0+0x238/0x270 [ 376.511295][ T8608] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 376.511328][ T8608] ? ksys_write+0x1ac/0x250 [ 376.511356][ T8608] __x64_sys_pselect6+0x149/0x1c0 [ 376.511387][ T8608] do_syscall_64+0x115/0x870 [ 376.511414][ T8608] ? clear_bhb_loop+0x40/0x90 [ 376.511441][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.511463][ T8608] RIP: 0033:0x7fc596d9ce59 [ 376.511482][ T8608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.511503][ T8608] RSP: 002b:00007fc597ccb028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 376.511528][ T8608] RAX: ffffffffffffffda RBX: 00007fc597016090 RCX: 00007fc596d9ce59 [ 376.511543][ T8608] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000040 [ 376.511556][ T8608] RBP: 00007fc597ccb090 R08: 0000000000000000 R09: 0000000000000000 [ 376.511569][ T8608] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 376.511582][ T8608] R13: 00007fc597016128 R14: 00007fc597016090 R15: 00007ffd2f3ff8f8 [ 376.511612][ T8608] [ 378.135570][ T5627] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 378.305782][ T5627] usb 1-1: Using ep0 maxpacket: 16 [ 378.323376][ T5627] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 378.347053][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.384048][ T5627] usb 1-1: Product: syz [ 378.389471][ T5627] usb 1-1: Manufacturer: syz [ 378.395239][ T5627] usb 1-1: SerialNumber: syz [ 378.410588][ T5627] usb 1-1: config 0 descriptor?? [ 379.314638][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.341297][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.382086][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 379.616824][ T5627] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 379.642903][ T5627] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 379.698585][ T5627] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 379.707243][ T5627] usb 1-1: media controller created [ 379.713752][ T8617] dtv5100: wlen = 0, aborting. [ 379.735696][ T5627] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.785661][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 379.806948][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 379.824269][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.836028][ T5627] zl10353_read_register: readreg error (reg=127, ret==0) [ 379.843278][ T5627] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 379.857175][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.914878][ T5627] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 379.926971][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 380.161581][ T5627] usb 1-1: USB disconnect, device number 20 [ 380.207767][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 380.260773][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.274085][ T5627] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 380.586387][ T9] usb 2-1: config 0 descriptor?? [ 381.557737][ T8643] syz.0.654 (8643): drop_caches: 2 [ 382.046657][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 382.057070][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 382.189781][ T9] usb 2-1: USB disconnect, device number 18 [ 383.134322][ T30] audit: type=1326 audit(1781305816.269:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.3.655" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb43db9ce59 code=0x0 [ 383.555739][ T5736] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 383.929285][ T5736] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 383.945647][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.953908][ T5736] usb 3-1: Product: syz [ 383.958715][ T5736] usb 3-1: Manufacturer: syz [ 383.963361][ T5736] usb 3-1: SerialNumber: syz [ 384.000595][ T5736] usb 3-1: config 0 descriptor?? [ 385.004623][ T5810] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 385.437698][ T8652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.657'. [ 385.510717][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.544127][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.633265][ T5736] usb 3-1: USB disconnect, device number 21 [ 386.857953][ T5810] usb 1-1: device descriptor read/all, error -71 [ 387.206086][ T29] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 387.321319][ T8693] syz.0.666 (8693): drop_caches: 2 [ 387.763440][ T30] audit: type=1326 audit(1781305821.349:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8673 comm="syz.3.662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43db9ce59 code=0x7fc00000 [ 387.765564][ T3108] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 388.127040][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 388.149350][ T29] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 388.162882][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.184534][ T29] usb 6-1: Product: syz [ 388.196502][ T3108] usb 2-1: Using ep0 maxpacket: 16 [ 388.210597][ T3108] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 388.220343][ T29] usb 6-1: Manufacturer: syz [ 388.237604][ T29] usb 6-1: SerialNumber: syz [ 388.251030][ T3108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.279613][ T29] usb 6-1: config 0 descriptor?? [ 388.295739][ T3108] usb 2-1: Product: syz [ 388.300556][ T3108] usb 2-1: Manufacturer: syz [ 388.307630][ T3108] usb 2-1: SerialNumber: syz [ 388.368562][ T3108] usb 2-1: config 0 descriptor?? [ 388.636852][ T8707] befs: (nullb0): invalid magic header [ 388.766854][ T29] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 388.781752][ T30] audit: type=1400 audit(1781305822.209:1295): avc: denied { mounton } for pid=8699 comm="syz.3.669" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 388.822417][ T8708] SELinux: policydb version 772014099 does not match my version range 15-35 [ 388.831824][ T8708] SELinux: failed to load policy [ 388.922223][ T3108] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 388.977819][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 388.990145][ T8683] dtv5100: wlen = 0, aborting. [ 389.011517][ T29] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 389.044418][ T29] usb 6-1: media controller created [ 389.067564][ T5752] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 389.108020][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.245482][ T5752] usb 4-1: Using ep0 maxpacket: 16 [ 389.255805][ T5752] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 389.268492][ T5752] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 389.304666][ T5752] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.347149][ T5752] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.366118][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.445182][ T5752] usb 4-1: Product: syz [ 389.455739][ T5752] usb 4-1: Manufacturer: syz [ 389.465574][ T5752] usb 4-1: SerialNumber: syz [ 389.498726][ T5752] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 389.516128][ T5752] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 389.532902][ T5752] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 389.654491][ T8716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.668385][ T29] zl10353_read_register: readreg error (reg=127, ret==0) [ 389.683325][ T29] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 389.730430][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 389.760196][ T29] usb 6-1: USB disconnect, device number 11 [ 389.769531][ T8715] dtv5100: wlen = 0, aborting. [ 390.392088][ T30] audit: type=1326 audit(1781305823.979:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8713 comm="syz.2.673" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x0 [ 391.457370][ T5752] usb 4-1: USB disconnect, device number 20 [ 392.648057][ T8742] syz.5.678 (8742): drop_caches: 2 [ 392.708048][ T30] audit: type=1326 audit(1781305826.179:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.3.677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb43db9ce59 code=0x0 [ 394.375541][ T9] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 394.537294][ T9] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 394.547039][ T9] usb 1-1: config 0 has no interface number 0 [ 394.554636][ T9] usb 1-1: config 0 interface 64 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 394.576781][ T9] usb 1-1: config 0 interface 64 altsetting 2 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 394.607899][ T9] usb 1-1: config 0 interface 64 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 394.633416][ T9] usb 1-1: config 0 interface 64 has no altsetting 0 [ 394.655916][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=35.bc [ 394.678270][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.698599][ T9] usb 1-1: Product: syz [ 394.714983][ T9] usb 1-1: Manufacturer: syz [ 394.724651][ T9] usb 1-1: SerialNumber: syz [ 394.735602][ T5627] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 394.760215][ T9] usb 1-1: config 0 descriptor?? [ 395.157231][ T5627] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 395.175238][ T9] ttusbir 1-1:0.64: cannot find expected altsetting [ 395.187412][ T5627] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 395.204023][ T9] usb 1-1: USB disconnect, device number 23 [ 395.221677][ T5627] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 395.240211][ T5627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.269495][ T8761] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 395.300867][ T5627] hub 3-1:4.0: USB hub found [ 395.526365][ T5627] hub 3-1:4.0: 2 ports detected [ 395.531310][ T5627] usb 3-1: selecting invalid altsetting 1 [ 395.537228][ T5627] hub 3-1:4.0: Using single TT (err -22) [ 395.625587][ T5737] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 395.732860][ T5627] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 395.753489][ T5627] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 395.797914][ T5627] usb 3-1: USB disconnect, device number 22 [ 395.887585][ T5737] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 395.898015][ T5737] usb 4-1: config 0 has no interface number 0 [ 395.905672][ T5737] usb 4-1: config 0 interface 64 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 395.916935][ T5737] usb 4-1: config 0 interface 64 altsetting 2 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 395.928986][ T5737] usb 4-1: config 0 interface 64 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 395.939218][ T5737] usb 4-1: config 0 interface 64 has no altsetting 0 [ 395.957212][ T5737] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=35.bc [ 395.968456][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.978898][ T5737] usb 4-1: Product: syz [ 395.983330][ T5737] usb 4-1: Manufacturer: syz [ 395.990737][ T5737] usb 4-1: SerialNumber: syz [ 396.140210][ T30] audit: type=1326 audit(1781305829.709:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.0.686" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc596d9ce59 code=0x0 [ 396.218344][ T5737] usb 4-1: config 0 descriptor?? [ 396.444411][ T5737] ttusbir 4-1:0.64: cannot find expected altsetting [ 396.456697][ T5737] usb 4-1: USB disconnect, device number 21 [ 397.088955][ T30] audit: type=1326 audit(1781305830.679:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8772 comm="syz.0.687" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc596d9ce59 code=0x0 [ 397.805991][ T8787] syz.2.690 (8787): drop_caches: 2 [ 400.989775][ T30] audit: type=1326 audit(1781305834.479:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8788 comm="syz.0.691" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc596d9ce59 code=0x7fc00000 [ 401.178947][ T8837] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 401.187259][ T8837] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 401.196454][ T8837] vhci_hcd vhci_hcd.0: Device attached [ 401.545965][ T5737] usb 40-1: SetAddress Request (6) to port 0 [ 401.558176][ T5737] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 401.722875][ T8839] vhci_hcd: connection reset by peer [ 401.740163][ T8817] vhci_hcd vhci_hcd.3: stop threads [ 401.758751][ T8817] vhci_hcd vhci_hcd.3: release socket [ 401.781387][ T8817] vhci_hcd vhci_hcd.3: disconnect device [ 402.265721][ T30] audit: type=1326 audit(1781305835.829:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.0.699" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc596d9ce59 code=0x0 [ 403.048392][ T8875] syz.0.702 (8875): drop_caches: 2 [ 403.489199][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 403.502288][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 403.520764][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 403.533755][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 403.550466][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 403.845933][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 404.085619][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 404.228904][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 404.311251][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.359097][ T9] usb 4-1: Product: syz [ 404.394784][ T9] usb 4-1: Manufacturer: syz [ 404.425571][ T9] usb 4-1: SerialNumber: syz [ 404.558048][ T9] usb 4-1: config 0 descriptor?? [ 404.803836][ T8885] pim6reg: entered allmulticast mode [ 404.923769][ T8886] team0: entered allmulticast mode [ 404.929949][ T8886] team_slave_0: entered allmulticast mode [ 404.937809][ T8886] team_slave_1: entered allmulticast mode [ 405.079388][ T30] audit: type=1400 audit(1781305838.509:1302): avc: denied { ioctl } for pid=8882 comm="syz.0.704" path="socket:[22294]" dev="sockfs" ino=22294 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 405.238789][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 405.534639][ T8885] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 405.550955][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 405.610200][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 405.622233][ T9] usb 4-1: media controller created [ 405.634149][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.651154][ T4933] Bluetooth: hci5: command tx timeout [ 405.753148][ T30] audit: type=1400 audit(1781305839.339:1303): avc: denied { create } for pid=8898 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 405.849585][ T30] audit: type=1400 audit(1781305839.439:1304): avc: denied { create } for pid=8898 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 406.468303][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 406.600107][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 406.604212][ T5737] usb 40-1: device descriptor read/8, error -110 [ 406.622584][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 407.121996][ T5737] usb usb40-port1: attempt power cycle [ 407.719827][ T4933] Bluetooth: hci5: command tx timeout [ 407.731942][ T30] audit: type=1326 audit(1781305841.309:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.0.712" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc596d9ce59 code=0x0 [ 407.796578][ T5737] usb usb40-port1: unable to enumerate USB device [ 407.944178][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.951515][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.959031][ T8876] bridge_slave_0: entered allmulticast mode [ 407.967295][ T8876] bridge_slave_0: entered promiscuous mode [ 408.005045][ T8876] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.033502][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.140718][ T8876] bridge_slave_1: entered allmulticast mode [ 408.149257][ T8876] bridge_slave_1: entered promiscuous mode [ 408.186819][ T8876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.204799][ T8876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.300677][ T8939] syz.2.713 (8939): drop_caches: 2 [ 408.821235][ T8876] team0: Port device team_slave_0 added [ 408.923611][ T8876] team0: Port device team_slave_1 added [ 409.278141][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.289328][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.318903][ T8876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.468395][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.479881][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.737765][ T8951] FAULT_INJECTION: forcing a failure. [ 409.737765][ T8951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.777430][ T8876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.777464][ T8951] CPU: 0 UID: 0 PID: 8951 Comm: syz.2.716 Not tainted syzkaller #0 PREEMPT(full) [ 409.777491][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.777504][ T8951] Call Trace: [ 409.777511][ T8951] [ 409.777520][ T8951] dump_stack_lvl+0x100/0x190 [ 409.777551][ T8951] should_fail_ex.cold+0x5/0xa [ 409.777582][ T8951] _copy_from_user+0x2e/0xd0 [ 409.777609][ T8951] core_sys_select+0x2d0/0xbb0 [ 409.777643][ T8951] ? __pfx_core_sys_select+0x10/0x10 [ 409.777668][ T8951] ? find_held_lock+0x2b/0x80 [ 409.777688][ T8951] ? get_pid_task+0xfc/0x250 [ 409.777747][ T8951] ? __pfx_set_user_sigmask+0x10/0x10 [ 409.777774][ T8951] ? kernel_write+0x6b3/0x6c0 [ 409.777797][ T8951] ? __fget_files+0x215/0x3d0 [ 409.777830][ T8951] do_pselect.constprop.0+0x238/0x270 [ 409.777861][ T8951] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 409.777893][ T8951] ? ksys_write+0x1ac/0x250 [ 409.777921][ T8951] __x64_sys_pselect6+0x149/0x1c0 [ 409.777953][ T8951] do_syscall_64+0x115/0x870 [ 409.777980][ T8951] ? clear_bhb_loop+0x40/0x90 [ 409.778007][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.778030][ T8951] RIP: 0033:0x7f966cf9ce59 [ 409.778048][ T8951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.778068][ T8951] RSP: 002b:00007f966ddb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 409.778089][ T8951] RAX: ffffffffffffffda RBX: 00007f966d216090 RCX: 00007f966cf9ce59 [ 409.778104][ T8951] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000040 [ 409.778117][ T8951] RBP: 00007f966ddb1090 R08: 0000000000000000 R09: 0000000000000000 [ 409.778130][ T8951] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 409.778144][ T8951] R13: 00007f966d216128 R14: 00007f966d216090 R15: 00007ffd2b8a7bf8 [ 409.778173][ T8951] [ 409.805859][ T4933] Bluetooth: hci5: command tx timeout [ 410.328612][ T8876] hsr_slave_0: entered promiscuous mode [ 410.335374][ T8876] hsr_slave_1: entered promiscuous mode [ 410.343654][ T8876] debugfs: 'hsr0' already exists in 'hsr' [ 410.351983][ T8876] Cannot create hsr debugfs directory [ 410.472276][ T8960] SELinux: policydb version 772014099 does not match my version range 15-35 [ 410.482132][ T8960] SELinux: failed to load policy [ 411.175513][ T5737] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 411.345654][ T5737] usb 3-1: Using ep0 maxpacket: 16 [ 411.358769][ T5737] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 411.379269][ T5737] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.405689][ T5737] usb 3-1: config 0 has no interface number 0 [ 411.429866][ T5737] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 411.450567][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.485859][ T5737] usb 3-1: Product: syz [ 411.499922][ T5737] usb 3-1: Manufacturer: syz [ 411.510411][ T5737] usb 3-1: SerialNumber: syz [ 411.541528][ T5737] usb 3-1: config 0 descriptor?? [ 411.570035][ T5737] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 411.578355][ T8876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 411.587409][ T5737] uvcvideo 3-1:0.105: No valid video chain found. [ 411.645180][ T8876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.666193][ T8876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 411.695154][ T8876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.713126][ T8876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 411.715420][ T30] audit: type=1400 audit(1781305845.299:1306): avc: denied { create } for pid=8968 comm="syz.0.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 411.801547][ T8876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.839413][ T8876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 411.868609][ T8876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.020533][ T5627] usb 3-1: USB disconnect, device number 23 [ 412.035641][ T4933] Bluetooth: hci5: command tx timeout [ 412.702766][ T8876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.724362][ T8876] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.742714][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.752701][ T8821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.770636][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.780327][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.178083][ T30] audit: type=1400 audit(1781305846.769:1307): avc: denied { name_bind } for pid=9006 comm="syz.2.727" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 413.957362][ T30] audit: type=1326 audit(1781305846.999:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8998 comm="syz.0.726" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc596d9ce59 code=0x0 [ 414.374486][ T8876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.471239][ T8876] veth0_vlan: entered promiscuous mode [ 415.660175][ T30] audit: type=1326 audit(1781305849.249:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.2.731" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966cf9ce59 code=0x0 [ 415.970216][ T8876] veth1_vlan: entered promiscuous mode [ 416.104677][ T8876] veth0_macvtap: entered promiscuous mode [ 416.155899][ T8876] veth1_macvtap: entered promiscuous mode [ 416.241055][ T8876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.140146][ T30] audit: type=1326 audit(1781305850.369:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.5.733" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3f799ce59 code=0x0 [ 417.253246][ T8876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.398242][ T8825] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.415601][ T8825] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.445121][ T8825] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.585108][ T8825] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.872216][ T8819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.897271][ T8819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.995349][ T8825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.004720][ T8825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.128434][ T30] audit: type=1400 audit(1781305851.719:1311): avc: denied { mounton } for pid=8876 comm="syz-executor" path="/root/syzkaller.UqU8hN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 418.172595][ T3108] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 418.572484][ T30] audit: type=1326 audit(1781305851.909:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9057 comm="syz.0.735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc596d9ce59 code=0x0 [ 418.767194][ T3108] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 418.789315][ T3108] usb 3-1: config 0 has no interface number 0 [ 418.805894][ T3108] usb 3-1: config 0 interface 64 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 418.817566][ T3108] usb 3-1: config 0 interface 64 altsetting 2 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 418.891533][ T3108] usb 3-1: config 0 interface 64 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 418.902381][ T3108] usb 3-1: config 0 interface 64 has no altsetting 0 [ 418.912089][ T3108] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=35.bc [ 418.923358][ T3108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.950442][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 418.970592][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 418.976770][ T3108] usb 3-1: Product: syz [ 419.060678][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 419.069278][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 419.082849][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 419.122015][ T3108] usb 3-1: Manufacturer: syz [ 419.153618][ T3108] usb 3-1: SerialNumber: syz [ 419.229781][ T9074] SELinux: failed to load policy [ 419.744191][ T3108] usb 3-1: config 0 descriptor?? [ 419.787628][ T3108] usb 3-1: can't set config #0, error -71 [ 419.899666][ T3108] usb 3-1: USB disconnect, device number 24 [ 420.268183][ T5737] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 420.466954][ T5737] usb 1-1: Using ep0 maxpacket: 16 [ 420.535005][ T5737] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 420.601437][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.655758][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.714152][ T5737] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 420.820357][ T5737] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 420.866459][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.967249][ T5737] usb 1-1: config 0 descriptor?? [ 421.171575][ T5615] Bluetooth: hci6: command tx timeout [ 422.660114][ T30] audit: type=1400 audit(1781305855.729:1313): avc: denied { bind } for pid=9094 comm="syz.6.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 423.219178][ T30] audit: type=1800 audit(1781305855.929:1314): pid=9102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.743" name="file0" dev="overlay" ino=36 res=0 errno=0 [ 423.275874][ T5615] Bluetooth: hci6: command tx timeout [ 424.704535][ T30] audit: type=1326 audit(1781305858.119:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.6.744" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf4ab9ce59 code=0x0 [ 425.834983][ T5615] Bluetooth: hci6: command tx timeout [ 427.750383][ T9120] SELinux: failed to load policy [ 427.875661][ T5615] Bluetooth: hci6: command tx timeout [ 429.271547][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.279527][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.289281][ T9066] bridge_slave_0: entered allmulticast mode [ 429.300442][ T9066] bridge_slave_0: entered promiscuous mode [ 429.311064][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.325599][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.333030][ T9066] bridge_slave_1: entered allmulticast mode [ 429.343691][ T9066] bridge_slave_1: entered promiscuous mode [ 429.387462][ T9066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.402871][ T9066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.447539][ T9066] team0: Port device team_slave_0 added [ 429.471632][ T9066] team0: Port device team_slave_1 added [ 429.549364][ T9066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.565648][ T9066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.641927][ T9066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.672866][ T9066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.695724][ T9066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.791387][ T9066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.388897][ T9066] hsr_slave_0: entered promiscuous mode [ 431.399281][ T9066] hsr_slave_1: entered promiscuous mode [ 431.414669][ T9066] debugfs: 'hsr0' already exists in 'hsr' [ 431.444004][ T9066] Cannot create hsr debugfs directory [ 431.824170][ T9151] SELinux: failed to load policy [ 432.677414][ T5737] usbhid 1-1:0.0: can't add hid device: -32 [ 433.523014][ T5737] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 434.523712][ T9156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.756'. [ 434.885854][ T30] audit: type=1400 audit(1781305868.469:1316): avc: denied { create } for pid=9165 comm="syz.5.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 434.930564][ T9166] netlink: 24 bytes leftover after parsing attributes in process `syz.6.758'. [ 434.959563][ T30] audit: type=1400 audit(1781305868.509:1317): avc: denied { ioctl } for pid=9165 comm="syz.5.759" path="socket:[24999]" dev="sockfs" ino=24999 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 435.044195][ T9066] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 435.066628][ T30] audit: type=1400 audit(1781305868.649:1318): avc: denied { map } for pid=9165 comm="syz.5.759" path="/proc/439/mountinfo" dev="proc" ino=24422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 435.108921][ T9066] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.121758][ T9066] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 435.197132][ T30] audit: type=1400 audit(1781305868.649:1319): avc: denied { execute } for pid=9165 comm="syz.5.759" path="/proc/439/mountinfo" dev="proc" ino=24422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 435.225526][ T30] audit: type=1400 audit(1781305868.689:1320): avc: denied { append } for pid=9165 comm="syz.5.759" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 435.272600][ T9066] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.307055][ T9066] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 435.328045][ T9066] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.343443][ T9066] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 435.370792][ T9066] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.556186][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 435.987394][ T9] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 435.996160][ T9] usb 7-1: config 0 has no interface number 0 [ 436.074038][ T9] usb 7-1: config 0 interface 4 has no altsetting 0 [ 436.103343][ T9] usb 7-1: New USB device found, idVendor=05a9, idProduct=7670, bcdDevice=7d.f5 [ 436.178916][ T9187] SELinux: failed to load policy [ 436.642623][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.651603][ T9] usb 7-1: Product: syz [ 436.656108][ T9] usb 7-1: Manufacturer: syz [ 436.660983][ T9] usb 7-1: SerialNumber: syz [ 436.672719][ T9] usb 7-1: config 0 descriptor?? [ 436.680774][ T9066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.740069][ T9066] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.888423][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.897300][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.194463][ T9] uvcvideo 7-1:0.4: probe with driver uvcvideo failed with error -22 [ 438.205326][ T9] usb 7-1: USB disconnect, device number 2 [ 438.213903][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.221129][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.552841][ T10] usb 1-1: USB disconnect, device number 24 [ 439.561244][ T5624] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 439.654106][ T30] audit: type=1400 audit(1781305873.239:1321): avc: denied { mount } for pid=9218 comm="syz.6.768" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 440.202178][ T5624] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 440.206848][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.214759][ T5624] usb 3-1: config 1 has no interface number 0 [ 440.214817][ T5624] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 440.214846][ T5624] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 440.214870][ T5624] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 440.214894][ T5624] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 440.217947][ T5624] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=10.40 [ 440.231378][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.234322][ T5624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.393756][ T30] audit: type=1400 audit(1781305873.919:1322): avc: denied { getopt } for pid=9214 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 440.474939][ T5624] usb 3-1: Product: syz [ 440.480891][ T5624] usb 3-1: Manufacturer: syz [ 440.494719][ T5624] usb 3-1: SerialNumber: syz [ 440.506891][ T9211] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 440.589925][ T30] audit: type=1400 audit(1781305874.179:1323): avc: denied { unmount } for pid=8876 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 440.762080][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.801021][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.833435][ T9211] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 440.873927][ T9211] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 441.018684][ T9232] PID 9232 killed due to inadequate hugepage pool [ 441.096334][ T9066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.134307][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.179845][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.215144][ T9211] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 441.692430][ T9211] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 441.806715][ T9211] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 442.372497][ T5624] cdc_ncm 3-1:1.1: bind() failure [ 442.403044][ T5624] usb 3-1: USB disconnect, device number 25 [ 442.549050][ T9066] veth0_vlan: entered promiscuous mode [ 442.574304][ T9066] veth1_vlan: entered promiscuous mode [ 442.660360][ T9066] veth0_macvtap: entered promiscuous mode [ 442.692868][ T9066] veth1_macvtap: entered promiscuous mode [ 442.743402][ T9066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.767672][ T9066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.784232][ T5861] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.824048][ T5861] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.842088][ T5861] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.911840][ T5861] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.374171][ T5865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.421667][ T5865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.564923][ T8817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.571739][ T9288] netlink: 24 bytes leftover after parsing attributes in process `syz.5.779'. [ 445.617499][ T8817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.079861][ T30] audit: type=1326 audit(1781305879.659:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9291 comm="syz.2.781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966cf9ce59 code=0x0 [ 447.029992][ T30] audit: type=1326 audit(1781305880.609:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9306 comm="syz.7.736" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f889679ce59 code=0x0 [ 447.312762][ T30] audit: type=1400 audit(1781305880.849:1326): avc: denied { connect } for pid=9308 comm="syz.5.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 447.673693][ T30] audit: type=1400 audit(1781305881.259:1327): avc: denied { write } for pid=9319 comm="syz.7.785" path="socket:[26650]" dev="sockfs" ino=26650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 447.767983][ T30] audit: type=1400 audit(1781305881.319:1328): avc: denied { setattr } for pid=9308 comm="syz.5.783" name="NETLINK" dev="sockfs" ino=26658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 448.132612][ T9327] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 448.139172][ T9327] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 448.147262][ T9327] vhci_hcd vhci_hcd.0: Device attached [ 448.885045][ T9] usb 34-1: SetAddress Request (14) to port 0 [ 448.891868][ T9] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd [ 449.207836][ T9329] vhci_hcd: connection reset by peer [ 449.223950][ T1118] vhci_hcd vhci_hcd.0: stop threads [ 449.249704][ T1118] vhci_hcd vhci_hcd.0: release socket [ 449.591908][ T1118] vhci_hcd vhci_hcd.0: disconnect device [ 451.695616][ T30] audit: type=1326 audit(1781305885.189:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.7.795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f889679ce59 code=0x0 [ 452.169025][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.7.796'. [ 452.180862][ T9370] netlink: 44 bytes leftover after parsing attributes in process `syz.7.796'. [ 452.865497][ T5737] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 453.955817][ T9] usb 34-1: device descriptor read/8, error -110 [ 454.368700][ T9] usb usb34-port1: attempt power cycle [ 454.966415][ T5715] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 455.012439][ T9] usb usb34-port1: unable to enumerate USB device [ 455.246217][ T9407] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 455.253663][ T9407] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 455.263554][ T9407] vhci_hcd vhci_hcd.0: Device attached [ 455.416026][ T5715] usb 1-1: config 42 has an invalid interface number: 66 but max is 0 [ 455.546524][ T5715] usb 1-1: config 42 has no interface number 0 [ 455.664296][ T5715] usb 1-1: config 42 interface 66 has no altsetting 0 [ 455.744714][ T3108] usb 38-1: SetAddress Request (6) to port 0 [ 455.894446][ T3108] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 456.079074][ T5715] usb 1-1: New USB device found, idVendor=0ace, idProduct=1608, bcdDevice=bb.f6 [ 456.137627][ T9408] vhci_hcd: connection closed [ 456.164958][ T8819] vhci_hcd vhci_hcd.2: stop threads [ 456.335485][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.350857][ T8819] vhci_hcd vhci_hcd.2: release socket [ 456.498458][ T8819] vhci_hcd vhci_hcd.2: disconnect device [ 456.536651][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.805'. [ 456.546074][ T5715] usb 1-1: Product: І [ 456.584539][ T5715] usb 1-1: Manufacturer: ⹸䳬䗺羺껉槅ਸⓎ宻輭䏱㷺堔ꃀꒌ踀轠㓀沣䧟툹譹表 [ 456.677885][ T5715] usb 1-1: SerialNumber: ъ [ 456.839417][ T5737] usb 7-1: device descriptor read/all, error -71 [ 456.970912][ T5715] usb 1-1: USB disconnect, device number 25 [ 457.525726][ T5715] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 457.679779][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 457.698390][ T5715] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 457.714176][ T5715] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 457.746950][ T5715] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.791867][ T5715] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 457.938865][ T9440] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 457.955617][ T9440] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 457.976166][ T9440] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 458.140109][ T9440] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 458.630493][ T30] audit: type=1400 audit(1781305892.119:1330): avc: denied { unmount } for pid=9432 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 459.348050][ T5715] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 459.357277][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.366259][ T5715] usb 3-1: Product: syz [ 459.370491][ T5715] usb 3-1: Manufacturer: syz [ 459.387600][ T5715] usb 3-1: SerialNumber: syz [ 459.411161][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 459.492509][ T5715] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input23 [ 459.671175][ T5715] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 459.696729][ T5715] (id 0x00) [ 459.815655][ T5715] rc_core: IR keymap rc-imon-pad not found [ 459.850223][ T5715] Registered IR keymap rc-empty [ 459.865994][ T5715] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 459.900624][ T5715] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 459.977158][ T5715] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 460.073789][ T5715] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input24 [ 460.159529][ T5715] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:26> initialized [ 460.257872][ T9452] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 460.437228][ T9457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=9457 comm=syz.0.814 [ 461.077731][ T3108] usb 38-1: device descriptor read/8, error -110 [ 461.477194][ T3108] usb usb38-port1: attempt power cycle [ 461.681218][ T5715] usb 3-1: USB disconnect, device number 26 [ 461.697134][ T9467] 9p: Bad value for 'wfdno' [ 461.909113][ T9470] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 461.916061][ T9470] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 461.927418][ T9470] vhci_hcd vhci_hcd.0: Device attached [ 462.205815][ T3108] usb 38-1: SetAddress Request (9) to port 0 [ 462.309216][ T3108] usb 38-1: new SuperSpeed USB device number 9 using vhci_hcd [ 462.843757][ T9471] vhci_hcd: connection reset by peer [ 463.006947][ T5865] vhci_hcd vhci_hcd.2: stop threads [ 463.089617][ T5865] vhci_hcd vhci_hcd.2: release socket [ 463.210354][ T5865] vhci_hcd vhci_hcd.2: disconnect device [ 463.695534][ T24] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 464.446926][ T24] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 464.483309][ T24] usb 1-1: config 0 has no interface number 0 [ 464.509094][ T24] usb 1-1: config 0 interface 64 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 464.548877][ T24] usb 1-1: config 0 interface 64 altsetting 2 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 464.603388][ T24] usb 1-1: config 0 interface 64 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 464.651380][ T24] usb 1-1: config 0 interface 64 has no altsetting 0 [ 466.063416][ T24] usb 1-1: string descriptor 0 read error: -71 [ 466.080458][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=35.bc [ 466.224877][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.262128][ T24] usb 1-1: config 0 descriptor?? [ 466.289938][ T24] usb 1-1: can't set config #0, error -71 [ 466.314958][ T24] usb 1-1: USB disconnect, device number 26 [ 467.385635][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 467.476222][ T3108] usb 38-1: device descriptor read/8, error -110 [ 467.627879][ T3108] usb usb38-port1: unable to enumerate USB device [ 467.645747][ T9412] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 467.682515][ T24] usb 1-1: config 42 has an invalid interface number: 66 but max is 0 [ 467.700085][ T24] usb 1-1: config 42 has no interface number 0 [ 467.712030][ T24] usb 1-1: config 42 interface 66 altsetting 9 endpoint 0x9 has an invalid bInterval 76, changing to 10 [ 467.937230][ T24] usb 1-1: config 42 interface 66 altsetting 9 endpoint 0x9 has invalid maxpacket 25772, setting to 1024 [ 467.994092][ T24] usb 1-1: config 42 interface 66 has no altsetting 0 [ 468.014580][ T24] usb 1-1: New USB device found, idVendor=0ace, idProduct=1608, bcdDevice=bb.f6 [ 468.027245][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.045783][ T24] usb 1-1: Product: І [ 468.050113][ T24] usb 1-1: Manufacturer: ⹸䳬䗺羺껉槅ਸⓎ宻輭䏱㷺堔ꃀꒌ踀轠㓀沣䧟툹譹表 [ 468.067390][ T24] usb 1-1: SerialNumber: ъ [ 468.080295][ T9520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 468.137318][ T9412] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 468.146638][ T9412] usb 7-1: config 0 has no interface number 0 [ 468.158909][ T9412] usb 7-1: config 0 interface 64 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 468.186648][ T9412] usb 7-1: config 0 interface 64 altsetting 2 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 468.198937][ T9412] usb 7-1: config 0 interface 64 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 468.211989][ T9412] usb 7-1: config 0 interface 64 has no altsetting 0 [ 468.260964][ T9412] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=35.bc [ 468.276652][ T9412] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.287907][ T9412] usb 7-1: Product: syz [ 468.302029][ T9412] usb 7-1: Manufacturer: syz [ 468.309213][ T9412] usb 7-1: SerialNumber: syz [ 468.326205][ T24] usb 1-1: USB disconnect, device number 27 [ 468.358957][ T9412] usb 7-1: config 0 descriptor?? [ 468.595562][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 468.688090][ T9412] ttusbir 7-1:0.64: cannot find expected altsetting [ 468.714198][ T9412] usb 7-1: USB disconnect, device number 5 [ 468.787142][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 468.794562][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.815363][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 468.851664][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 468.873255][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.902992][ T9] usb 3-1: config 0 descriptor?? [ 469.230853][ T9] usb 3-1: USB disconnect, device number 27 [ 469.946313][ T9412] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 470.075486][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 470.105617][ T9412] usb 7-1: Using ep0 maxpacket: 8 [ 470.120822][ T9412] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 470.144808][ T9412] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.169578][ T9412] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 470.194985][ T9412] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 470.221869][ T9412] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.240462][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 470.257007][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 470.269033][ T9412] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 470.282718][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.301775][ T9412] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.321065][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 470.353957][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 470.393701][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.429627][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 470.462520][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.547816][ T9412] usb 7-1: GET_CAPABILITIES returned 0 [ 470.559222][ T9412] usbtmc 7-1:16.0: can't read capabilities [ 470.717730][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 470.725755][ T24] usbtmc 3-1:16.0: can't read capabilities [ 470.760847][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.771103][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.780363][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.789880][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.799077][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.808448][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.818853][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.829004][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.950194][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.959816][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.969007][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.978952][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 470.988186][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.017103][ T24] usb 3-1: USB disconnect, device number 28 [ 471.081950][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.091539][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.100784][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.112385][ T9412] usb 7-1: USB disconnect, device number 6 [ 472.832214][ T30] audit: type=1326 audit(1781305906.419:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9558 comm="syz.0.839" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc596d9ce59 code=0x0 [ 475.150701][ T4933] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 475.167045][ T4933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 475.179291][ T4933] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 475.191348][ T4933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 475.204748][ T4933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 475.804711][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.847'. [ 477.239898][ T4933] Bluetooth: hci7: command tx timeout [ 479.280750][ T30] audit: type=1400 audit(1781305912.869:1332): avc: denied { create } for pid=9623 comm="syz.6.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 479.315712][ T4933] Bluetooth: hci7: command tx timeout [ 479.476891][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 480.637349][ T9576] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.648248][ T9576] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.660036][ T9576] bridge_slave_0: entered allmulticast mode [ 480.705950][ T9576] bridge_slave_0: entered promiscuous mode [ 480.734826][ T9576] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.745707][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.756748][ T9576] bridge_slave_1: entered allmulticast mode [ 480.765676][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 480.766938][ T9576] bridge_slave_1: entered promiscuous mode [ 480.791249][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 480.816265][ T9636] lapbether: lapb_data_request error - 4 [ 480.819721][ T30] audit: type=1400 audit(1781305914.409:1333): avc: denied { write } for pid=9635 comm="syz.2.856" path="socket:[26552]" dev="sockfs" ino=26552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 480.828310][ T9576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.879460][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 480.904863][ T9576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.947083][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 480.979923][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 481.029611][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.040088][ T9576] team0: Port device team_slave_0 added [ 481.060745][ T9576] team0: Port device team_slave_1 added [ 481.077107][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 481.105649][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.157181][ T9576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.175569][ T9576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.210555][ T9576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.505616][ T4933] Bluetooth: hci7: command tx timeout [ 481.539468][ T30] audit: type=1400 audit(1781305915.119:1334): avc: denied { setopt } for pid=9623 comm="syz.6.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 482.175131][ T5624] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 482.188663][ T9576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.198132][ T9576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.423192][ T24] usb 1-1: usb_control_msg returned -71 [ 482.453745][ T24] usbtmc 1-1:16.0: can't read capabilities [ 482.538909][ T24] usb 1-1: USB disconnect, device number 28 [ 482.684337][ T9576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.801595][ T5624] usb 3-1: device descriptor read/64, error -71 [ 483.405541][ T5624] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 483.644996][ T4933] Bluetooth: hci7: command tx timeout [ 483.995523][ T5624] usb 3-1: device descriptor read/64, error -71 [ 484.234790][ T9656] overlayfs: failed to resolve './file0': -2 [ 484.374272][ T30] audit: type=1326 audit(1781305917.929:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.5.855" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3f799ce59 code=0x0 [ 484.623755][ T5624] usb usb3-port1: attempt power cycle [ 484.890112][ T9662] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 484.898645][ T9662] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 484.966301][ T9576] hsr_slave_0: entered promiscuous mode [ 485.052710][ T9662] vhci_hcd vhci_hcd.0: Device attached [ 485.937532][ T9576] hsr_slave_1: entered promiscuous mode [ 486.042377][ T9576] debugfs: 'hsr0' already exists in 'hsr' [ 486.082434][ T9576] Cannot create hsr debugfs directory [ 486.115731][ T24] usb 38-1: SetAddress Request (10) to port 0 [ 486.142546][ T9673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=9673 comm=syz.5.861 [ 486.518431][ T9663] vhci_hcd: connection closed [ 486.644791][ T5877] vhci_hcd vhci_hcd.2: stop threads [ 486.715200][ T5877] vhci_hcd vhci_hcd.2: release socket [ 486.750854][ T5877] vhci_hcd vhci_hcd.2: disconnect device [ 486.810350][ T9678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=9678 comm=syz.5.863 [ 488.502336][ T24] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 488.562941][ T24] usb 38-1: enqueue for inactive port 0 [ 489.159616][ T9689] syz.2.866 (9689): drop_caches: 2 [ 489.663833][ T24] usb usb38-port1: attempt power cycle [ 490.280943][ T9576] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 490.300587][ T9576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.318980][ T9576] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 490.386647][ T9576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.410823][ T9576] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 490.466422][ T24] usb usb38-port1: unable to enumerate USB device [ 490.474212][ T9576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.497686][ T9576] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 490.544962][ T9576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 491.760480][ T9576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.893476][ T9576] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.991746][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.001412][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.041066][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.049601][ T8817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.516989][ T9101] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 492.927312][ T9101] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.940225][ T9101] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 492.953327][ T9101] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.979756][ T9101] usb 7-1: config 0 descriptor?? [ 493.008181][ T9101] pwc: Askey VC010 type 2 USB webcam detected. [ 493.282680][ T9717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.395376][ T9730] syz.0.875 (9730): drop_caches: 2 [ 493.905711][ T9717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.311948][ T9101] pwc: recv_control_msg error -32 req 02 val 2b00 [ 494.332458][ T9101] pwc: recv_control_msg error -32 req 02 val 2700 [ 494.379003][ T9101] pwc: recv_control_msg error -32 req 02 val 2c00 [ 494.655535][ T9722] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 494.761425][ T9576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.798122][ T9101] pwc: recv_control_msg error -71 req 04 val 1300 [ 494.817691][ T9722] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 494.840434][ T9101] pwc: recv_control_msg error -71 req 04 val 1400 [ 494.841454][ T9722] usb 3-1: config 0 has no interface number 0 [ 494.863312][ T9722] usb 3-1: config 0 interface 64 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 494.869579][ T9101] pwc: recv_control_msg error -71 req 02 val 2000 [ 494.875581][ T9722] usb 3-1: config 0 interface 64 altsetting 2 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 494.902680][ T9101] pwc: recv_control_msg error -71 req 02 val 2100 [ 494.920467][ T9722] usb 3-1: config 0 interface 64 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 494.920824][ T9101] pwc: recv_control_msg error -71 req 04 val 1500 [ 494.939685][ T9101] pwc: recv_control_msg error -71 req 02 val 2500 [ 494.947183][ T9101] pwc: recv_control_msg error -71 req 02 val 2400 [ 494.953778][ T9722] usb 3-1: config 0 interface 64 has no altsetting 0 [ 494.961682][ T9101] pwc: recv_control_msg error -71 req 02 val 2600 [ 494.977290][ T9722] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=35.bc [ 494.987084][ T9722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.014856][ T9722] usb 3-1: Product: syz [ 495.026030][ T9722] usb 3-1: Manufacturer: syz [ 495.045015][ T9722] usb 3-1: SerialNumber: syz [ 495.076607][ T9101] pwc: recv_control_msg error -71 req 02 val 2900 [ 495.083507][ T9722] usb 3-1: config 0 descriptor?? [ 495.084060][ T9101] pwc: recv_control_msg error -71 req 02 val 2800 [ 495.096147][ T9101] pwc: recv_control_msg error -71 req 04 val 1100 [ 495.103901][ T9101] pwc: recv_control_msg error -71 req 04 val 1200 [ 495.182822][ T9101] pwc: Registered as video103. [ 495.209010][ T9101] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26 [ 495.223264][ T9722] usb 3-1: can't set config #0, error -71 [ 495.232759][ T30] audit: type=1400 audit(1781305928.819:1336): avc: denied { read } for pid=4969 comm="acpid" name="event4" dev="devtmpfs" ino=3122 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 495.245651][ T9101] usb 7-1: USB disconnect, device number 7 [ 495.368444][ T9722] usb 3-1: USB disconnect, device number 32 [ 495.384068][ T30] audit: type=1400 audit(1781305928.819:1337): avc: denied { open } for pid=4969 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3122 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 495.455336][ T30] audit: type=1400 audit(1781305928.819:1338): avc: denied { ioctl } for pid=4969 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3122 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 495.669984][ T9760] overlayfs: failed to resolve './file0': -2 [ 496.066856][ T30] audit: type=1326 audit(1781305929.349:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9756 comm="syz.0.880" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc596d9ce59 code=0x0 [ 496.676189][ T9576] veth0_vlan: entered promiscuous mode [ 496.699748][ T9576] veth1_vlan: entered promiscuous mode [ 496.751626][ T9576] veth0_macvtap: entered promiscuous mode [ 496.768919][ T9576] veth1_macvtap: entered promiscuous mode [ 496.826285][ T9576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.855535][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 497.063692][ T9576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.771920][ T5861] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.804886][ T5861] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.858707][ T5861] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.006767][ T5861] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.036599][ T9783] netlink: 24 bytes leftover after parsing attributes in process `syz.5.886'. [ 498.145696][ T10] usb 7-1: device descriptor read/64, error -71 [ 498.301480][ T8821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.315264][ T8821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.395608][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 498.408491][ T8817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.423056][ T8817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.473305][ T30] audit: type=1400 audit(1781305932.059:1340): avc: denied { mounton } for pid=9576 comm="syz-executor" path="/root/syzkaller.nGP0OH/syz-tmp" dev="sda1" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 498.660838][ T10] usb 7-1: device descriptor read/64, error -71 [ 498.816102][ T10] usb usb7-port1: attempt power cycle [ 498.824010][ T30] audit: type=1400 audit(1781305932.089:1341): avc: denied { mounton } for pid=9576 comm="syz-executor" path="/root/syzkaller.nGP0OH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 498.944045][ T30] audit: type=1400 audit(1781305932.269:1342): avc: denied { mounton } for pid=9576 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 499.439767][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 499.769953][ T10] usb 7-1: device not accepting address 10, error -71 [ 501.647758][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.657427][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.516624][ T9829] netlink: 24 bytes leftover after parsing attributes in process `syz.5.897'. [ 503.556804][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 503.596410][ T9841] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 503.603136][ T9841] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 503.612258][ T9841] vhci_hcd vhci_hcd.0: Device attached [ 503.781079][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 503.835146][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.906323][ T9101] usb 38-1: SetAddress Request (14) to port 0 [ 503.929418][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 503.972633][ T9101] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 504.048031][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 504.144134][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.461189][ T9] usb 1-1: config 0 descriptor?? [ 504.676228][ T9842] vhci_hcd: connection reset by peer [ 504.902265][ T1118] vhci_hcd vhci_hcd.2: stop threads [ 505.021774][ T1118] vhci_hcd vhci_hcd.2: release socket [ 505.110065][ T1118] vhci_hcd vhci_hcd.2: disconnect device [ 505.151535][ T9412] usb 1-1: USB disconnect, device number 29 [ 506.572104][ T9871] 9p: Bad value for 'wfdno' [ 506.885614][ T9722] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 507.244477][ T30] audit: type=1326 audit(1781305940.829:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9876 comm="syz.5.910" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3f799ce59 code=0x0 [ 507.247665][ T9722] usb 1-1: Using ep0 maxpacket: 32 [ 507.283087][ T9875] netlink: 24 bytes leftover after parsing attributes in process `syz.6.909'. [ 507.408817][ T9722] usb 1-1: config 1 has an invalid interface number: 183 but max is 1 [ 507.426744][ T9722] usb 1-1: config 1 has an invalid interface number: 189 but max is 1 [ 507.450395][ T9882] tipc: Started in network mode [ 507.455877][ T30] audit: type=1400 audit(1781305941.039:1344): avc: denied { read } for pid=9881 comm="syz.8.911" path="socket:[28442]" dev="sockfs" ino=28442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 507.487207][ T9882] tipc: Node identity 2007ff, cluster identity 4711 [ 507.499604][ T9722] usb 1-1: config 1 has no interface number 0 [ 507.515592][ T9722] usb 1-1: config 1 has no interface number 1 [ 507.523173][ T9722] usb 1-1: config 1 interface 183 has no altsetting 0 [ 507.531215][ T9722] usb 1-1: config 1 interface 189 has no altsetting 0 [ 507.541793][ T9722] usb 1-1: New USB device found, idVendor=03f0, idProduct=4e1d, bcdDevice=f7.ee [ 507.551691][ T9882] tipc: Node number set to 2099199 [ 508.624333][ T9722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.632853][ T9722] usb 1-1: Product: syz [ 508.637220][ T9722] usb 1-1: Manufacturer: syz [ 508.642104][ T9722] usb 1-1: SerialNumber: syz [ 509.156586][ T9101] usb 38-1: device descriptor read/8, error -110 [ 509.266370][ T9871] netlink: 68 bytes leftover after parsing attributes in process `syz.0.907'. [ 509.279612][ T30] audit: type=1400 audit(1781305942.849:1345): avc: denied { connect } for pid=9881 comm="syz.8.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 509.353112][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.384840][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.494399][ T9722] usb 1-1: USB disconnect, device number 30 [ 509.561834][ T9101] usb usb38-port1: attempt power cycle [ 509.815625][ T30] audit: type=1400 audit(1781305943.339:1346): avc: denied { create } for pid=9904 comm="syz.6.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.124000][ T30] audit: type=1400 audit(1781305943.349:1347): avc: denied { ioctl } for pid=9904 comm="syz.6.917" path="socket:[28654]" dev="sockfs" ino=28654 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.156400][ T5810] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 510.172217][ T30] audit: type=1400 audit(1781305943.349:1348): avc: denied { bind } for pid=9904 comm="syz.6.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.195699][ T30] audit: type=1400 audit(1781305943.349:1349): avc: denied { write } for pid=9904 comm="syz.6.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.223234][ T30] audit: type=1400 audit(1781305943.349:1350): avc: denied { read } for pid=9904 comm="syz.6.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.316080][ T5810] usb 3-1: device descriptor read/64, error -71 [ 510.376256][ T9101] usb usb38-port1: unable to enumerate USB device [ 510.578223][ T5810] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 510.790303][ T5810] usb 3-1: device descriptor read/64, error -71 [ 510.907464][ T5810] usb usb3-port1: attempt power cycle [ 511.355774][ T5810] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 511.546488][ T5810] usb 3-1: device descriptor read/8, error -71 [ 511.959248][ T5810] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 512.166254][ T5810] usb 3-1: device descriptor read/8, error -71 [ 512.357177][ T5810] usb usb3-port1: unable to enumerate USB device [ 513.447062][ T9944] netlink: 44 bytes leftover after parsing attributes in process `syz.6.925'. [ 513.457855][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.467052][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.528460][ T30] audit: type=1326 audit(1781305946.889:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.2.924" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966cf9ce59 code=0x0 [ 516.265535][ T9101] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 516.514110][ T9101] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 516.539656][ T9101] usb 3-1: config 0 has no interface number 0 [ 517.048997][ T9101] usb 3-1: config 0 interface 64 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 517.099491][ T9101] usb 3-1: config 0 interface 64 altsetting 2 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 517.166274][ T9101] usb 3-1: config 0 interface 64 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 517.273784][ T9101] usb 3-1: config 0 interface 64 has no altsetting 0 [ 517.341279][ T9101] usb 3-1: string descriptor 0 read error: -71 [ 517.566880][ T9101] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=35.bc [ 517.599651][ T9101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.986563][ T9101] usb 3-1: config 0 descriptor?? [ 518.000288][ T9978] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 518.021390][ T9101] usb 3-1: can't set config #0, error -71 [ 518.097681][ T9101] usb 3-1: USB disconnect, device number 37 [ 518.685585][ T5736] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 518.760109][ T9985] syz.2.937 (9985): drop_caches: 2 [ 518.999473][ T9989] overlayfs: failed to resolve './file1': -2 [ 519.410113][ T5736] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 519.423571][ T30] audit: type=1326 audit(1781305952.689:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9986 comm="syz.6.938" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf4ab9ce59 code=0x0 [ 519.466656][ T5736] usb 1-1: config 0 has no interface number 0 [ 519.475737][ T5736] usb 1-1: config 0 interface 64 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 519.521135][ T5736] usb 1-1: config 0 interface 64 altsetting 2 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 519.676083][ T5736] usb 1-1: config 0 interface 64 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 519.723395][ T5736] usb 1-1: config 0 interface 64 has no altsetting 0 [ 520.947386][ T5736] usb 1-1: string descriptor 0 read error: -71 [ 520.958365][ T5736] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=35.bc [ 520.973158][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.006774][ T5736] usb 1-1: config 0 descriptor?? [ 521.023700][ T5736] usb 1-1: can't set config #0, error -71 [ 521.036646][ T5736] usb 1-1: USB disconnect, device number 31 [ 521.548491][T10001] 9p: Bad value for 'wfdno' [ 521.805525][ T9412] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 521.985497][ T9412] usb 1-1: Using ep0 maxpacket: 32 [ 522.004898][ T9412] usb 1-1: config 1 has an invalid interface number: 183 but max is 1 [ 522.025902][ T9412] usb 1-1: config 1 has an invalid interface number: 189 but max is 1 [ 522.055673][ T9412] usb 1-1: config 1 has no interface number 0 [ 522.064259][ T9412] usb 1-1: config 1 has no interface number 1 [ 522.072558][ T9412] usb 1-1: config 1 interface 183 has no altsetting 0 [ 522.132337][ T9412] usb 1-1: config 1 interface 189 has no altsetting 0 [ 522.188166][ T9412] usb 1-1: New USB device found, idVendor=03f0, idProduct=4e1d, bcdDevice=f7.ee [ 522.214583][ T9412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.347905][ T9412] usb 1-1: Product: syz [ 522.353943][ T9412] usb 1-1: Manufacturer: syz [ 522.360130][ T9412] usb 1-1: SerialNumber: syz [ 523.829665][T10001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.345286][T10001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.014043][T10027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.197458][T10027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.421869][ T9412] usb 1-1: USB disconnect, device number 32 [ 526.431791][ T30] audit: type=1326 audit(1781305959.829:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="syz.2.949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966cf9ce59 code=0x0 [ 528.940068][ T30] audit: type=1326 audit(1781305962.529:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10045 comm="syz.2.953" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966cf9ce59 code=0x0 [ 529.121493][T10057] syz.6.955 (10057): drop_caches: 2 [ 529.318206][ T5615] Bluetooth: hci5: command 0x0406 tx timeout [ 529.923433][T10070] FAULT_INJECTION: forcing a failure. [ 529.923433][T10070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 529.959158][T10070] CPU: 0 UID: 0 PID: 10070 Comm: syz.2.960 Not tainted syzkaller #0 PREEMPT(full) [ 529.959190][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.959203][T10070] Call Trace: [ 529.959210][T10070] [ 529.959219][T10070] dump_stack_lvl+0x100/0x190 [ 529.959250][T10070] should_fail_ex.cold+0x5/0xa [ 529.959276][T10070] ? prepare_alloc_pages+0x16d/0x5f0 [ 529.959306][T10070] should_fail_alloc_page+0xeb/0x140 [ 529.959333][T10070] prepare_alloc_pages+0x1f0/0x5f0 [ 529.959393][T10070] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 529.959434][T10070] ? __mmap_region+0xc85/0x2dd0 [ 529.959472][T10070] ? __pfx___mmap_region+0x10/0x10 [ 529.959504][T10070] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 529.959546][T10070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 529.959584][T10070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 529.959611][T10070] ? policy_nodemask+0xed/0x4f0 [ 529.959638][T10070] alloc_pages_mpol+0x1fb/0x540 [ 529.959664][T10070] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 529.959697][T10070] alloc_pages_noprof+0x1a/0x160 [ 529.959725][T10070] __pud_alloc+0x3b/0x690 [ 529.959754][T10070] __handle_mm_fault+0x13ea/0x2a00 [ 529.959790][T10070] ? mt_find+0x45e/0x8e0 [ 529.959821][T10070] ? __pfx___handle_mm_fault+0x10/0x10 [ 529.959849][T10070] ? __pfx_mt_find+0x10/0x10 [ 529.959902][T10070] handle_mm_fault+0x37b/0xa30 [ 529.959938][T10070] __get_user_pages+0x1178/0x32a0 [ 529.959976][T10070] ? __pfx___get_user_pages+0x10/0x10 [ 529.960011][T10070] populate_vma_page_range+0x267/0x3f0 [ 529.960041][T10070] ? __pfx_populate_vma_page_range+0x10/0x10 [ 529.960067][T10070] ? __pfx_find_vma_intersection+0x10/0x10 [ 529.960095][T10070] ? do_mmap+0x93f/0x12f0 [ 529.960124][T10070] __mm_populate+0x107/0x3a0 [ 529.960153][T10070] ? __pfx___mm_populate+0x10/0x10 [ 529.960182][T10070] ? up_write+0x28c/0x4f0 [ 529.960216][T10070] vm_mmap_pgoff+0x37f/0x470 [ 529.960249][T10070] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 529.960275][T10070] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 529.960306][T10070] ? __fget_files+0x215/0x3d0 [ 529.960334][T10070] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 529.960375][T10070] ksys_mmap_pgoff+0xe4/0x610 [ 529.960404][T10070] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 529.960426][T10070] ? fput+0x79/0x100 [ 529.960455][T10070] ? ksys_write+0x1ac/0x250 [ 529.960479][T10070] ? __pfx_ksys_write+0x10/0x10 [ 529.960506][T10070] __x64_sys_mmap+0x125/0x190 [ 529.960538][T10070] do_syscall_64+0x115/0x870 [ 529.960565][T10070] ? clear_bhb_loop+0x40/0x90 [ 529.960593][T10070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.960616][T10070] RIP: 0033:0x7f966cf9ce59 [ 529.960636][T10070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.960658][T10070] RSP: 002b:00007f966ddd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 529.960680][T10070] RAX: ffffffffffffffda RBX: 00007f966d215fa0 RCX: 00007f966cf9ce59 [ 529.960694][T10070] RDX: 0000000002000009 RSI: 0000000000004000 RDI: 0000200000002000 [ 529.960709][T10070] RBP: 00007f966ddd2090 R08: ffffffffffffffff R09: 0000000060f4b000 [ 529.960723][T10070] R10: 0000000000002172 R11: 0000000000000246 R12: 0000000000000001 [ 529.960737][T10070] R13: 00007f966d216038 R14: 00007f966d215fa0 R15: 00007ffd2b8a7bf8 [ 529.960768][T10070] [ 530.944511][T10075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=10075 comm=syz.8.962 [ 531.136039][T10079] 9p: Bad value for 'wfdno' [ 531.396061][ T3108] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 531.426967][T10084] netlink: 'syz.5.965': attribute type 1 has an invalid length. [ 531.563705][ T3108] usb 7-1: Using ep0 maxpacket: 32 [ 531.628985][ T3108] usb 7-1: config 1 has an invalid interface number: 183 but max is 1 [ 531.729375][ T3108] usb 7-1: config 1 has an invalid interface number: 189 but max is 1 [ 531.759106][ T3108] usb 7-1: config 1 has no interface number 0 [ 531.775745][ T9412] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 531.809184][ T3108] usb 7-1: config 1 has no interface number 1 [ 531.849328][ T3108] usb 7-1: config 1 interface 183 has no altsetting 0 [ 531.895209][ T3108] usb 7-1: config 1 interface 189 has no altsetting 0 [ 531.916330][ T3108] usb 7-1: New USB device found, idVendor=03f0, idProduct=4e1d, bcdDevice=f7.ee [ 531.931720][ T3108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.970617][ T9412] usb 3-1: Using ep0 maxpacket: 16 [ 532.006043][ T3108] usb 7-1: Product: syz [ 532.013746][ T9412] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 532.042655][ T3108] usb 7-1: Manufacturer: syz [ 532.065477][ T3108] usb 7-1: SerialNumber: syz [ 532.079739][ T9412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.152191][ T9412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.253658][ T9412] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 532.564609][ T9412] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 532.767833][ T9412] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.873734][T10095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.933755][ T9412] usb 3-1: config 0 descriptor?? [ 532.954905][T10095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.787549][ T9412] usbhid 3-1:0.0: can't add hid device: -71 [ 534.799798][ T3108] usb 7-1: USB disconnect, device number 12 [ 534.817006][ T9412] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 534.857394][ T9412] usb 3-1: USB disconnect, device number 38 [ 535.447161][T10115] SELinux: ebitmap: map size 1919247470 does not match my size 64 (high bit was 29542) [ 535.505837][T10115] SELinux: failed to load policy [ 536.876776][ T5736] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 537.056937][ T5736] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 537.083502][ T5736] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.122625][ T5736] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 537.141957][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.152953][ T5736] usb 3-1: Product: syz [ 537.159129][ T5736] usb 3-1: Manufacturer: syz [ 537.183232][ T5736] usb 3-1: SerialNumber: syz [ 537.204192][ T5736] usb 3-1: config 0 descriptor?? [ 537.962556][ T5736] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 537.981590][ T5736] usb 3-1: USB disconnect, device number 39 [ 538.862065][T10146] 9p: Bad value for 'wfdno' [ 539.315476][ T5736] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 539.385581][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 540.025491][ T30] audit: type=1326 audit(1781305973.569:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10144 comm="syz.2.982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7fc00000 [ 540.220628][ T30] audit: type=1326 audit(1781305973.569:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10144 comm="syz.2.982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f966cf9ce59 code=0x7fc00000 [ 540.597798][ T30] audit: type=1326 audit(1781305973.569:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10144 comm="syz.2.982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7fc00000 [ 540.707457][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 540.717587][ T30] audit: type=1326 audit(1781305973.569:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10144 comm="syz.2.982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7fc00000 [ 540.723855][ T9] usb 7-1: config 1 has an invalid interface number: 183 but max is 1 [ 540.760886][ T30] audit: type=1326 audit(1781305973.569:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10144 comm="syz.2.982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7fc00000 [ 541.935461][ T30] audit: type=1326 audit(1781305973.569:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10144 comm="syz.2.982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7fc00000 [ 542.105481][ T9] usb 7-1: config 1 has an invalid interface number: 189 but max is 1 [ 542.115198][ T9] usb 7-1: config 1 has no interface number 0 [ 542.122839][ T9] usb 7-1: config 1 has no interface number 1 [ 542.126888][T10169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.133128][ T30] audit: type=1326 audit(1781305973.569:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10144 comm="syz.2.982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7fc00000 [ 542.177838][ T9] usb 7-1: config 1 interface 183 has no altsetting 0 [ 542.193818][ T9] usb 7-1: config 1 interface 189 has no altsetting 0 [ 542.203872][ T30] audit: type=1326 audit(1781305973.569:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10144 comm="syz.2.982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7fc00000 [ 542.416419][T10169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.519603][ T30] audit: type=1326 audit(1781305973.569:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10144 comm="syz.2.982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7fc00000 [ 542.584444][ T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=4e1d, bcdDevice=f7.ee [ 542.616986][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.628031][ T9] usb 7-1: Product: syz [ 542.632703][ T9] usb 7-1: Manufacturer: syz [ 542.639909][ T30] audit: type=1326 audit(1781305973.569:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10144 comm="syz.2.982" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966cf9ce59 code=0x7fc00000 [ 542.672338][ T9] usb 7-1: SerialNumber: syz [ 542.936084][T10176] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 542.952935][T10176] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 542.975808][T10176] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 543.059506][T10176] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 543.640386][ T9] usb 7-1: USB disconnect, device number 13 [ 543.677057][T10185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=10185 comm=syz.2.991 [ 544.675659][ T4933] Bluetooth: hci6: command 0x0406 tx timeout [ 546.625484][ T3108] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 547.748685][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 547.748705][ T30] audit: type=1400 audit(1781305981.339:1421): avc: denied { read append } for pid=10214 comm="syz.0.999" name="sg0" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 547.835117][ T30] audit: type=1400 audit(1781305981.369:1422): avc: denied { open } for pid=10214 comm="syz.0.999" path="/dev/sg0" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 547.855489][ T3108] usb 7-1: device not accepting address 14, error -71 [ 547.980193][ T30] audit: type=1400 audit(1781305981.379:1423): avc: denied { map } for pid=10214 comm="syz.0.999" path="/dev/sg0" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 548.005464][ T30] audit: type=1400 audit(1781305981.379:1424): avc: denied { execute } for pid=10214 comm="syz.0.999" path="/dev/sg0" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 548.866799][T10236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=10236 comm=syz.5.1004 [ 548.996251][ T31] INFO: task kworker/1:1:29 blocked for more than 144 seconds. [ 549.209211][ T31] Not tainted syzkaller #0 [ 549.214806][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.223828][ T31] task:kworker/1:1 state:D stack:23552 pid:29 tgid:29 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 549.236298][ T31] Workqueue: usb_hub_wq hub_event [ 549.241558][ T31] Call Trace: [ 549.245030][ T31] [ 549.248117][ T31] __schedule+0x1295/0x67a0 [ 549.252895][ T31] ? __pfx___schedule+0x10/0x10 [ 549.263136][ T31] ? find_held_lock+0x2b/0x80 [ 549.273703][ T31] ? schedule+0x2bf/0x390 [ 549.278526][ T30] audit: type=1326 audit(1781305982.769:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.6.1000" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4ab9ce59 code=0x7fc00000 [ 549.325522][ T31] schedule+0xdd/0x390 [ 549.353274][ T31] schedule_timeout+0x1b2/0x280 [ 549.382610][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 549.394081][ T31] ? mark_held_locks+0x40/0x70 [ 549.412723][ T31] __wait_for_common+0x2e7/0x4c0 [ 549.561752][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 549.574774][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 549.611553][ T31] ? __pfx_device_del+0x10/0x10 [ 549.635261][ T31] ? kobject_put+0xb9/0x640 [ 549.662634][ T31] i2c_del_adapter+0x62d/0x820 [ 549.688647][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 549.722999][ T31] ? dvb_usb_device_exit+0x29a/0x520 [ 549.752720][ T31] ? rcu_is_watching+0x12/0xc0 [ 549.775697][ T31] dvb_usb_i2c_exit+0x9f/0xf0 [ 549.794507][ T31] dvb_usb_device_exit+0x313/0x520 [ 549.819535][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 549.849350][ T31] ? find_held_lock+0x2b/0x80 [ 549.903153][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 549.935887][ T31] ? usb_disable_interface+0x211/0x4c0 [ 549.983123][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 550.004929][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 550.027143][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 550.069621][ T31] device_remove+0x12a/0x180 [ 550.094223][ T31] device_release_driver_internal+0x44e/0x620 [ 550.117345][ T31] bus_remove_device+0x2bc/0x560 [ 550.137325][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 550.154984][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 550.165301][ T31] device_del+0x376/0x9b0 [ 550.171119][ T31] ? __pfx_device_del+0x10/0x10 [ 550.178881][ T31] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 550.189549][ T31] usb_disable_device+0x367/0x810 [ 550.199771][ T31] ? mark_held_locks+0x40/0x70 [ 550.205972][ T31] usb_disconnect+0x2e2/0x9a0 [ 550.213047][ T31] hub_event+0x1d0c/0x4af0 [ 550.218925][ T31] ? __lock_acquire+0x4a5/0x2630 [ 550.224028][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 550.239144][ T31] ? __pfx_hub_event+0x10/0x10 [ 550.249292][ T31] ? assoc_array_insert+0xab0/0x32c0 [ 550.259942][ T31] ? rcu_is_watching+0x12/0xc0 [ 550.270504][ T31] process_one_work+0xa0e/0x1980 [ 550.283398][ T31] ? __pfx_process_one_work+0x10/0x10 [ 550.308577][ T31] ? __pfx_hub_event+0x10/0x10 [ 550.326896][ T31] worker_thread+0x5ef/0xe50 [ 550.339747][ T31] ? kthread+0x13a/0x450 [ 550.349816][ T31] ? __pfx_worker_thread+0x10/0x10 [ 550.364803][ T31] kthread+0x370/0x450 [ 550.375750][ T31] ? __pfx_kthread+0x10/0x10 [ 550.388805][ T31] ret_from_fork+0x72b/0xd50 [ 550.408461][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 550.424665][ T31] ? __switch_to+0x800/0x1100 [ 550.434402][ T31] ? __pfx_kthread+0x10/0x10 [ 550.453465][ T31] ret_from_fork_asm+0x1a/0x30 [ 550.467985][ T31] [ 550.488463][ T31] INFO: task syz.1.665:8715 blocked for more than 146 seconds. [ 550.510394][ T31] Not tainted syzkaller #0 [ 550.522694][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.534899][ T31] task:syz.1.665 state:D stack:28808 pid:8715 tgid:8684 ppid:5620 task_flags:0x400040 flags:0x00080002 [ 550.547245][ T31] Call Trace: [ 550.550819][ T31] [ 550.554199][ T31] __schedule+0x1295/0x67a0 [ 550.559172][ T31] ? __pfx___schedule+0x10/0x10 [ 550.564098][ T31] ? find_held_lock+0x2b/0x80 [ 550.569571][ T31] ? schedule+0x2bf/0x390 [ 550.573931][ T31] schedule+0xdd/0x390 [ 550.578519][ T31] schedule_preempt_disabled+0x13/0x30 [ 550.584364][ T31] __mutex_lock+0xced/0x1b10 [ 550.589245][ T31] ? usbdev_open+0x1b6/0x870 [ 550.594034][ T31] ? klist_put+0xcb/0x1d0 [ 550.599019][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 550.604834][ T31] ? _raw_spin_unlock+0x28/0x50 [ 550.610078][ T31] ? kobject_put+0xb9/0x640 [ 550.615658][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 550.621074][ T31] ? usbdev_open+0x1b6/0x870 [ 550.629695][ T31] usbdev_open+0x1b6/0x870 [ 550.634711][ T31] ? kobject_get_unless_zero+0x156/0x200 [ 550.643867][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 550.649702][ T31] ? chrdev_open+0x10b/0x6a0 [ 550.656722][ T31] ? chrdev_open+0x10b/0x6a0 [ 550.662375][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 550.668890][ T31] chrdev_open+0x234/0x6a0 [ 550.673475][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 550.684136][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 550.697411][ T31] do_dentry_open+0x6ab/0x14d0 [ 550.707707][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 550.817558][ T31] vfs_open+0x82/0x3f0 [ 550.837609][ T31] path_openat+0x208c/0x31a0 [ 550.851638][ T31] ? __pfx_path_openat+0x10/0x10 [ 550.856873][ T31] do_file_open+0x20e/0x430 [ 550.861672][ T31] ? __pfx_do_file_open+0x10/0x10 [ 550.973373][ T31] ? alloc_fd+0x476/0x790 [ 551.067755][ T31] ? do_getname+0x191/0x390 [ 551.072335][ T31] do_sys_openat2+0x10d/0x1e0 [ 551.078640][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 551.090584][ T31] __x64_sys_openat+0x12d/0x210 [ 551.095834][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 551.101793][ T31] ? rcu_is_watching+0x12/0xc0 [ 551.109381][ T31] do_syscall_64+0x115/0x870 [ 551.114452][ T31] ? clear_bhb_loop+0x40/0x90 [ 551.120970][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.128292][ T31] RIP: 0033:0x7f649715d68e [ 551.133093][ T31] RSP: 002b:00007f6498030b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 551.142031][ T31] RAX: ffffffffffffffda RBX: 00007f64980316c0 RCX: 00007f649715d68e [ 551.150241][ T31] RDX: 0000000000080100 RSI: 00007f6498030c00 RDI: ffffffffffffff9c [ 551.160100][ T31] RBP: 00007f6498030c00 R08: 0000000000000000 R09: 0000000000000000 [ 551.172478][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 551.182794][ T31] R13: 00007f6497416218 R14: 00007f6497416180 R15: 00007ffe9728c148 [ 551.191232][ T31] [ 551.195669][ T31] [ 551.195669][ T31] Showing all locks held in the system: [ 551.206121][ T31] no locks held by rcu_preempt/16. [ 551.212151][ T31] 5 locks held by kworker/1:1/29: [ 551.243344][ T31] #0: ffff8880232e2140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 551.269558][ T31] #1: ffffc90000a47d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 551.295043][ T31] #2: ffff88802b9311d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 551.311516][ T31] #3: ffff88802e0331d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 551.333889][ T31] #4: ffff8880343b41a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 551.345243][ T31] 1 lock held by khungtaskd/31: [ 551.350269][ T31] #0: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 551.360318][ T31] 2 locks held by getty/5369: [ 551.365048][ T31] #0: ffff8880378500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 551.374978][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 551.385651][ T31] 6 locks held by kworker/u8:12/5861: [ 551.391233][ T31] #0: ffff8880b843b4e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 551.401339][ T31] #1: ffffc9000553fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 551.419022][ T31] #2: ffffffff8e67c630 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 551.430163][ T31] #3: ffffffff8e929500 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xb5/0x270 [ 551.447816][ T31] #4: ffffffff8e69bac0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 551.458632][ T31] #5: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 551.468574][ T31] 4 locks held by udevd/6932: [ 551.473243][ T31] #0: ffff88802a7a42d8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 551.482261][ T31] #1: ffff88807c10b080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 551.491938][ T31] #2: ffff88805900bd28 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 551.501891][ T31] #3: ffff88802e0331d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 551.511333][ T31] 1 lock held by syz.1.665/8715: [ 551.517159][ T31] #0: ffff88802b9311d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 551.526989][ T31] 2 locks held by kworker/u8:4/8819: [ 551.532444][ T31] #0: ffff88801f315140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 551.543764][ T31] #1: ffffc9000353fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 551.556688][ T31] 1 lock held by syz.3.703/8879: [ 551.561981][ T31] #0: ffff88802b9311d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 551.571256][ T31] 1 lock held by syz.7.808/9426: [ 551.576254][ T31] #0: ffff88802b9311d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 551.585374][ T31] [ 551.587754][ T31] ============================================= [ 551.587754][ T31] [ 551.597202][ T31] NMI backtrace for cpu 0 [ 551.597233][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 551.597247][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 551.597255][ T31] Call Trace: [ 551.597259][ T31] [ 551.597264][ T31] dump_stack_lvl+0x100/0x190 [ 551.597283][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 551.597299][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 551.597314][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 551.597336][ T31] sys_info+0x141/0x190 [ 551.597353][ T31] watchdog+0xcb1/0x1030 [ 551.597370][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 551.597385][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.597399][ T31] ? __kthread_parkme+0x18c/0x230 [ 551.597419][ T31] ? kthread+0x13a/0x450 [ 551.597432][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.597443][ T31] kthread+0x370/0x450 [ 551.597456][ T31] ? __pfx_kthread+0x10/0x10 [ 551.597470][ T31] ret_from_fork+0x72b/0xd50 [ 551.597487][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 551.597502][ T31] ? __switch_to+0x800/0x1100 [ 551.597520][ T31] ? __pfx_kthread+0x10/0x10 [ 551.597534][ T31] ret_from_fork_asm+0x1a/0x30 [ 551.597572][ T31] [ 551.597584][ T31] Sending NMI from CPU 0 to CPUs 1: [ 551.732736][ C1] NMI backtrace for cpu 1 [ 551.732755][ C1] CPU: 1 UID: 0 PID: 3108 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 551.732779][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 551.732793][ C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 551.732821][ C1] RIP: 0010:check_preemption_disabled+0x2c/0xe0 [ 551.732866][ C1] Code: 55 53 48 83 ec 08 65 8b 1d 85 e6 7f 08 65 f7 05 76 e6 7f 08 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c e9 d5 22 03 00 9c <58> f6 c4 02 74 ea 65 4c 8b 25 3e e6 7f 08 48 89 fd 41 f6 44 24 2f [ 551.732885][ C1] RSP: 0018:ffffc9000ef67b10 EFLAGS: 00000046 [ 551.732899][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 551.732911][ C1] RDX: 0000000000000000 RSI: ffffffff8deea8b5 RDI: ffffffff8c1c4780 [ 551.732924][ C1] RBP: ffff888032bd2540 R08: 0000000000000000 R09: fffffbfff1f2e1a0 [ 551.732943][ C1] R10: ffffffff8f970d03 R11: 0000000000000000 R12: 00000000ffffffff [ 551.732963][ C1] R13: 0000000000000246 R14: ffff888032bd3120 R15: 0000000000000002 [ 551.732975][ C1] FS: 0000000000000000(0000) GS:ffff888124487000(0000) knlGS:0000000000000000 [ 551.732994][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.733008][ C1] CR2: 00007fcf187f4fd0 CR3: 000000003363e000 CR4: 00000000003526f0 [ 551.733021][ C1] Call Trace: [ 551.733026][ C1] [ 551.733035][ C1] lock_is_held_type+0xca/0x140 [ 551.733063][ C1] __might_resched+0x29f/0x330 [ 551.733091][ C1] ? __pfx___might_resched+0x10/0x10 [ 551.733120][ C1] wg_ratelimiter_gc_entries+0x43e/0x510 [ 551.733144][ C1] process_one_work+0xa0e/0x1980 [ 551.733174][ C1] ? __pfx_process_one_work+0x10/0x10 [ 551.733201][ C1] ? __pfx_wg_ratelimiter_gc_entries+0x10/0x10 [ 551.733224][ C1] worker_thread+0x5ef/0xe50 [ 551.733251][ C1] ? __pfx_worker_thread+0x10/0x10 [ 551.733275][ C1] ? kthread+0x13a/0x450 [ 551.733299][ C1] ? __pfx_worker_thread+0x10/0x10 [ 551.733326][ C1] kthread+0x370/0x450 [ 551.733347][ C1] ? __pfx_kthread+0x10/0x10 [ 551.733369][ C1] ret_from_fork+0x72b/0xd50 [ 551.733393][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 551.733425][ C1] ? __switch_to+0x800/0x1100 [ 551.733452][ C1] ? __pfx_kthread+0x10/0x10 [ 551.733474][ C1] ret_from_fork_asm+0x1a/0x30 [ 551.733508][ C1] [ 551.971173][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 551.978114][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 551.989118][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 552.000667][ T31] Call Trace: [ 552.004320][ T31] [ 552.007327][ T31] dump_stack_lvl+0x100/0x190 [ 552.012082][ T31] vpanic+0x552/0x970 [ 552.016047][ T31] ? __pfx_vpanic+0x10/0x10 [ 552.020798][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 552.027564][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 552.033930][ T31] panic+0xd1/0xe0 [ 552.038081][ T31] ? __pfx_panic+0x10/0x10 [ 552.042662][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 552.048919][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 552.055253][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 552.061949][ T31] ? watchdog.cold+0x1ec/0x234 [ 552.066699][ T31] ? watchdog+0xcc1/0x1030 [ 552.071180][ T31] watchdog.cold+0x1fd/0x234 [ 552.075772][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 552.081834][ T31] ? __pfx_watchdog+0x10/0x10 [ 552.086580][ T31] ? __kthread_parkme+0x18c/0x230 [ 552.092112][ T31] ? kthread+0x13a/0x450 [ 552.096339][ T31] ? __pfx_watchdog+0x10/0x10 [ 552.101010][ T31] kthread+0x370/0x450 [ 552.105075][ T31] ? __pfx_kthread+0x10/0x10 [ 552.109653][ T31] ret_from_fork+0x72b/0xd50 [ 552.114238][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 552.119347][ T31] ? __switch_to+0x800/0x1100 [ 552.124020][ T31] ? __pfx_kthread+0x10/0x10 [ 552.128610][ T31] ret_from_fork_asm+0x1a/0x30 [ 552.133409][ T31] [ 552.136759][ T31] Kernel Offset: disabled [ 552.141081][ T31] Rebooting in 86400 seconds..