last executing test programs: 5m35.084382812s ago: executing program 3 (id=862): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m34.993168817s ago: executing program 3 (id=864): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x20}}, 0x24, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x1) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x101401, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f00000002c0)={0x2a, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) kcmp(r0, r0, 0x1, r3, r2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) lsm_get_self_attr(0x67, &(0x7f0000000600)={0x0, 0x0, 0xc2, 0xa2, ""/162}, &(0x7f0000000440)=0xc2, 0x0) 5m34.032148973s ago: executing program 3 (id=870): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x10000000, 0xfffffffc, 0x3ff}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) pivot_root(&(0x7f0000000340)='./file1\x00', &(0x7f00000003c0)='./file1\x00') mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r0, 0x7bcbe000) 5m34.006019752s ago: executing program 3 (id=871): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='syzkaller\x00', 0x100000, 0xffffffffffffff7a, 0x0, 0x41100, 0x17, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x84000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) personality(0x4000000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x13f, 0xa}}, 0xffffffffffffffa3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000000)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r3) 5m33.527135346s ago: executing program 3 (id=875): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000407d1e502d0000000000010902240001f82fe2470904000002030002000921a5e8dd738593697a7f593d5bf31aa93fd2000122e500090581031000f600007de7b3785ce602e8aaef6d988992c827289033c61755738ca0011934f0ef100e6f7c3228bec246bb76626e053c9e8d891fd41a9c365e1944f188a87537e492a8b974b4cf5979241dd0186990a7648f4c4747a9979416a9e265902b70e8b71c3656930d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000314230c2abd7000ffdbdf250900020073797a310000000008004100727865001400330073797a5f74756e0000000000000000006e08fec29f5bfb1e26fc91699c63f9051b665f780a337d"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514e5b8000000002000000008000100000000000800030001"], 0x20}, 0x1, 0x0, 0x0, 0xd0ff3f28}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xd, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4044090}, 0x40005) preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x16) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 5m31.962067455s ago: executing program 3 (id=884): r0 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09d0200fb0a010000000000f5ffff0200", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c7f00", [0x4, 0x5]}}) r2 = syz_open_dev$loop(&(0x7f0000000480), 0x4, 0x105000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x200, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000003, 0x0, 0x0, 0x3, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f964000000000000000000000100", [0x5, 0x4]}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x2}, 0x10) (fail_nth: 1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000355172398e45cee508000300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x891d, &(0x7f0000000700)={'ip6_vti0\x00', @ifru_map={0xc, 0xc, 0x5, 0x7, 0x25, 0x1}}) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r8, 0x0, 0xffffffff000) recvmmsg(r4, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0x2}, {0x6, 0x0, 0x4}]}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x404100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000886}, 0x20004004) ioctl$VIDIOC_S_AUDIO(r8, 0x40345622, &(0x7f00000000c0)={0xa, "0473aedad902971014f648a030bf75f9015799f2c282892bf1b65bb709e8f537", 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmmsg(r9, &(0x7f0000001c00), 0x400000000000159, 0x40840) 5m31.781753032s ago: executing program 32 (id=884): r0 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09d0200fb0a010000000000f5ffff0200", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c7f00", [0x4, 0x5]}}) r2 = syz_open_dev$loop(&(0x7f0000000480), 0x4, 0x105000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x200, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000003, 0x0, 0x0, 0x3, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f964000000000000000000000100", [0x5, 0x4]}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x2}, 0x10) (fail_nth: 1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000355172398e45cee508000300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x891d, &(0x7f0000000700)={'ip6_vti0\x00', @ifru_map={0xc, 0xc, 0x5, 0x7, 0x25, 0x1}}) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r8, 0x0, 0xffffffff000) recvmmsg(r4, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0x2}, {0x6, 0x0, 0x4}]}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x404100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000886}, 0x20004004) ioctl$VIDIOC_S_AUDIO(r8, 0x40345622, &(0x7f00000000c0)={0xa, "0473aedad902971014f648a030bf75f9015799f2c282892bf1b65bb709e8f537", 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmmsg(r9, &(0x7f0000001c00), 0x400000000000159, 0x40840) 5m18.851468836s ago: executing program 2 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = dup(r3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\v\x00', @ANYRES16=r6, @ANYBLOB="010800040000040000000100000008000300", @ANYRES32=r8], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f0000000300)={0x10dc, r5, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x69}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xf8, 0x80, [@cf={0x4, 0x6, {0x9, 0xfa, 0xa46d, 0x2}}, @measure_req={0x26, 0x77, {0x7, 0x48, 0x4, "6791d8d6697fbe54062ead2fe8476846caf542fbb8bc9ee17bb6668fb8f1f414fbe30db8ce13abde56e2efb21f3e2bbf561cbd20d2e33058c4f599edfb5073ece3a7cde696e85775c03aefaa517398478f5f697cbba89b975675a760d5219bed02cdd80046f04f5a7c0179169d44d61e8d566ae5"}}, @fast_bss_trans={0x37, 0x52, {0x9, 0x0, "790e79aa8decbb779ff519ed5a025d25", "7526dde0cc850fc06543ab9b0c55040497953e22cd9909544026b8d670bd716f", "5901fd1c4576a4b7cdd711746ffa3e4d366cea0e3f1af0b2356b51a2615707e2"}}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x2, 0x0, @device_b, 0x4, 0x5, 0x3}}, @cf={0x4, 0x6, {0x74, 0x27, 0x8, 0x7}}]}, @NL80211_ATTR_FTM_RESPONDER={0xf98, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xf84, 0x2, "92b1f5e51627eda4dee9d3f9b4030b3309bd349d9096fa6a25048241538994b9a7c64ffd2ebb05669604797b71ff9815b9b3cfb7618fb485ba91065455e566043eba2733b76d07fedfbb212d7a2241951d8d86b43f222989893efeb515fd50ac36bfd4f419b5aab9f6c2b48c6e2f373bf549cb13d97fedd5bec34bf1af2fc9bde1a7e364bd6465d6dd5479d42ebd1f676d3323710ba38a3a88e609a2ad98ab6c356d781890e72274f0013b3cc3899cd0ac643a3440d2a992a8e3d1eac68a12e11e8088ccbe5ffe4d3545f27fdc79db1a1a7c73df686a549f2b6fa3eb2581d0d668de3f1b92ada864d268ab9e064e298eb63cb1ba25114738da65e4cf496877d64c8ec7d1254fa7e4691686dd60232241ea01c55f4e5e22735c2e21d5a0ca694815c05a5197fee74ad3783ac6fb53b967a2b4e984790e924bb79f89320dde061e39fb04b32314fdf57c61db978e4ec1b16a6bdf590c6068e3190b5c795a58490e179be0f0f0522b71ebf9ad58f209af7d0e379e1c0d9ca5e14cdb4b5cafc3aefb605b37c280cfda165f587095c05df7db843f3db57eb97648f6c4de4dba47d934d6832d6f7c08d65e53e1b7623f179b5225d48c78d13a6bb4b06df6c1e512c36dfdcb25ccc71334476e0efe8a8da68bed40737e87eee9a14671056f180905c441a48234d643eb1cc9eb5badb5df6f5d3c516329b09a50d0d28d99bc39fb89c421dedc3d6a730584bfb722ca17da47967d64d81001eb014e070847ebb34376af07817f43b952ab7b0f2685882c073c156f44b4f8f89f501ed9f026454acc76f7fdffbec739d27157fb6ade108daaf4533a538b259d00d591617970c0e1c8abc354636051f580f90547cced05107c668c53cc4c387086eabd51766d3b01e186c257435d35ccd812033ce5c557bc5c47d968af30139852355495a765adc57a27623596ac73f42286b7560418f15870fbdcf6c15d386c92a691609c5197cc5f8fc4d112f9c8a62d7cf4617664fa65f11d4eb9b7c8deff4bb4e9f30bbaffaeb956646d9424d73bec53bf7e9aebda9ed5296c3174c8f44079ce26a4aff5fe5a4e8bdc92aaca7cb997bdc5c0d3c9d57fc2985a708618107d3c1c982da3880c91a2ed29b5feeda5cf61e94e844dfac7c72c1e90ca84f55fac23a64ba67fca71adaed8137d4d83d08aa647b5f1419cc44c98f504ad3ab178ec4a19a931604eae59f622cb9fc91a5d4beca7b9fa77ff4d2105eaecae5528bf9f54a36d6176edc3a6dbe6aea113269ed06f6d3490c9b03336559bee650b2de2aedb6b5dbadb6ef8659a62661263b4e436ac4f2bd1f683fc3c143bd9cda1750580558b69d16261914cb1ba0af491a14d28bfbe177d594aaa89d60f0cd209b016d542d35d403dc1c1aa289f18af14ee8b5fce26ca484b7c4fc00bb132e9add2d956f4629cb642783894e5af5e43b5a13770494f2c798667573d71eadd016637424df40271752eca8abb928605573babe4d7917164063ba2139a372dda69287c7593b80230c08abc12d1ccf15f354db9cba3983f7036022c80501c0c1465e177346ada7619428afed5c0d65c17e289771becf1cfd961542b6588a18da03078da1c484c3aafc24263b29097b4f26e2e99e2114bcfb293e7fe1acbe2f155f3550b1f3d218d4625b60ffa00ad4c99ed23d267b4203266c799ecfca25aee9dba9e8851e40c3db0a441b664c5e7d78f3d2df26b86795bd336be67710db23d0dd741ca12d4127d0f8deb954c8c10996750303e7ceee8460f4305957d1ef10208c8df2887dd9423bc72adf841c9e76de6c89520c6fcdcacb9a1ce34d1a890c2a51fa0ed0eca16dbb0c8cb1e33b7cd35bceffa2edd70cae864e7da282f7bd9e03fbd201aab308c7b6470c03a50ccf09c9b6f8e00b861e77780caac645ae8fb3923d3fd41fa4571bee4202b0086cedcf99ebf2f5e31cb27a037ed0c607e985831cd9dfb99f5580989fc7dea61bc0776cb429e1d1da97d329abefcbc0a2bdfaf277e77638d4605b89675315d58acc9a3f66ea3762596c584d67e88c17b5c92f5b2f9d39f9cbfb2ceca64c7164745f2c5258d67d5fcd33d8cc53828a38fd769afd386e566ec91bf29e6bc4923820d4cf361de21fddf9a8141470dd93d1ecca127fefe727e12ed57594600eab2fefa188058156b7cc45e342dbff5b2f5aa345505c13a883e9ba01c87467d1b025f8082629bb637c1ed15ce882e58091375a809c7da07c59f100420432829a2a89bd2581af29054acab7a7a5757c3b0ed0ffb5c7e238548416756acc4832ec343e4f84097597cd87535b143959d386b87833ef7b8b9fa04f672ac25ce981565b8961c101f5e890948df7187c96d90371ffdfbf43550356b1b93b06280625b49b8cfdcf8d10f5dcb312f30de4529cd775ddea9c9d5b85b501aaa90713c9d190987973b33ef0d95834bba88b181a72cb9f27cd0e77f65550541f1441f783b877b8c56206f1ea241b47f48fedd8edb7aa4483e4df03d4954342c1c1cbc0f886dc4e9381e79eec0ec2145e6c70e8abf0e9ad6afa054061d13b3f3cda86a72de6436695a6f1c2d95fe687aaa211a775a7c3c82736d32c06f72f801d4c1274b98bb439f5f01b9a32e2b38041bffed66536b2e3725bac45b22ba707d33880f9d13ca71a92ed9e2c964eb1a69086433587d24fcf7158d89023d791dc584ffc81e45660389bb3a0c2d75a9f533d4e2760e337fef8de811f5f15f1ba924f410fe022dde517270caec90d0bfc36bd3f598d9012d07ad13b7d731f4e35a0d2b74a19d2a49f877e3ac85c273778aae4b76b711738b256a05309364bdaa901d4012913b7d25161aaf8446b3c2037323eb6f77ba37374486b736cf969d1aa541c54db773040dd8fcf408f1e6acecca5ac3e2a1928e112f3f46cb142be8948bbd059895d8ef8724e11ca1667a9484e8afc70a3430ab0708c641c41fefb37b64540c694a0134a4a0be90c060939e9070d79c55036f5971f9626b0129b7a1a1a94af2735833673e1e2c323e3a1d708e3634db67b6ce92c6c01bde84dea304ec2ab50a24eb79d698265c7798ef24b9743a0ada5287f6764f797932c501e6353a480538f4269e37d5288b60402ce781b3c7549e6e6855c6decb606dcc480f1519012bc27fb91b08c471eca5544f31aecc598fbe6e0a3fd595d17cb6db653fbc786efd5a71454f27d843bb87164ff1edc6f3708ec7dcffcbb5441416a3b996e82d1e07d44df0da1680f01362af07dff4694bd472a493e0407b6bb6a6bdddaa41fd0775ea341e3fab9898c77b79bb21c16bdf4645b6193d05a879a0b20421cbd099c6daf4e78370b826935ee6b0e3c23168faac53e9f8267cd8edde0c81fea9e7d3bd8df458648bdd1d5b3281e4efe9a4c2e78f1201fd18410114cdcd87445830248204dc46d99433c92f1a8bfab273a26c67d4d7249b46f5121b9ac9aa585f97b1760ecc029d1fb1baeed97beb6830116d3f6405255a790a650d4d45249c4fa2f230faddad0b7b203787fa395095adfb3082098ff5d8373f05bc87792e568caacb91dd8f868d4fa5d91f8db6c208dae8b1ac42dfd17f78cf17662bcc7d08af0d96eae7808cca0add1c27b4de02338a56ab98f2fc6c27f1071e2d04ca3ae0fbc24e7677491441bd2939f34f632c7f5122ccac52eca24691cad0029ef70fde78cc51881f58d7f197621bc22924f8b7e4cf44bdb1496ca2baa7fcad4a95b64780dcd6aac0fa0a5dfc3354d5e1e7fe68aa96b22e816f95eaf39d0c5da1fd9510d77d3080ec28a7daec9f66e3316f3401d8dd18d4490f1177849b3b8f71dfabe966ee06c1733d2126cfeb95d1ac5a2a3df7f007891264d072f691ab1c59daa4a309d1bbb832d75d59c2b729923f8b80420cddd9260c62937c9e42e053657f18f49a9a25e68c2d7b6eaed06661341f69531000e5d56c2f177c039f1f525152b8a83d1531b7e5370670b64ef7a2c66cf9658962d4eb8855e8e290e8a97d9580271249a457d65a72b6872fb6780ad2581a6c8ec81bde35e653531653fbb5a92ac96b3cca90c907c331f26d6a0d8c8ab44700cb3ebfc117e735d6bd4ca72fd8ccde8f9f11ee4b91fe3a46b93a980f0ff99c953be928aa1c658dea9e789f0b7b9fc4a8aaa89d2818b68ed4968b35d4d91ab8b7d1435c76c6a241e5df941906953691ffd172a3f2c83192812fab2e9a7521c26d1acee9b3155d3648a2a8d874dd2e58d425cbae947d6ac95c4f14ecdd9d3ec98e47ccb94bca33d5759ac3ccf660c6d0d872305fdd03533c28af6772fade5f328b960701fabeb1c9c164c1ec002bde78c8eac176f4a26ecd362ebe8ef8ce3cbbe8baab5596bc0b92807a1c5b45e8eb0848077c93cfc936616402c76fa4b7e516d40d7a266165504aeec73472ff8301afa6165959f86ebb73a3f9f073886c6c33a454ee77d3a9d843a9c184d0395907bcf60e6229a642a4b13fb4d9735c0edb0069e64baae048fe252b4dd7679cda4ada98588a5f9ff330a64b14d76bee6ea71e15ca7754f014bbfc209f678dd4cce8f8308323cb7ccf9d94d848fa57422b8eee75ce162f553c35d44c292b58792f2c69424af078a9ae1fba327cf77db95bdc96036ad8f92f041355bcf95c728ddb334fa10c774da573710dc11501a7fe6694c8a8b58a04a9ed15cac1c4eaf7e3da8a49987a9dc97537dfd899acf992995a561c70b8f14b895972e0c4c8dadae8d272e0c4ba7563876d1a645438a3af9bd1682d1426e0a2a0315cb2ffa7e21bd523cfdab16f3361b38ee0bef9bf2d96a61fec55bfa7fc2fc528853877421842c5da251571ba86a55c0ab048f9f8b92796a5526c4659e24eb2fc2b8641275d5709dd35ed4a0d3e210552ff8555e2c6e23af4f4b66960736994854784bd9f0f8d151837135be05b405bb346ad6a8aacf3178813e9c46f43e4e36404745124ef2a2f0e0a1e8d87bd62c154767b8d87c13b6873ccc1a42b729b950e3c0a59aa1b02f858208441ab080012e592e8ec472f304ba893ea21e469ee1448b457ec562e073d34f7949a1b597dcddb7f97fa6cf2846d059cf763676351ded36d287b41856e70c7b32b423b6786c8f422ce30d9b4b777269c01279173c02dba4290ff18049a1062a1419f4585bea5f46e85626719ddfa34565b70b8702d1f6558a223baab2dc28598b53f801ef1d234f6bb6735d0111002950dcf1c0f1c62679d30c31554fe1082ad9a74c2edb217e85d8f890997020eeff30afbc4349f86559dee4d8954c6653ca39acdc3ba6cd750f9ea7dad1297fa824cdc6849572fea34f7f06eef5be64c1f450af72798ea26871543282b984c390b0f7305d8319daabf79a2c964ee5e15b34d641a2f8b128fc6b5871e30160970a077364fb800f815cde2b28753d503fc33a1c46e44b0e5bdb1dc8d9fe7ad7033cc226d63b04aaeb903afccc025c56cb4996ede4154e00cfffe8ea0a472be3eca4c5eb6961a35968adb4adec88c4b4293aa763d0d9fdf18349fc704a500c00300a42b49f72a4a2fabbbbe2f494d5efdb7847eeed50e82e665ff3ef14f1d4c458818a1086e31cba74a4515bb84410fb8e483e25ac8457f968a7dccf16867c5efcf79afc2c055658ee4"}, @NL80211_FTM_RESP_ATTR_LCI={0xd, 0x2, "dd7f3debb0f420120c"}]}, @NL80211_ATTR_IE={0x22, 0x2a, [@cf={0x4, 0x6, {0x8, 0x2, 0xf000, 0x5}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x81, 0x41}}, @erp={0x2a, 0x1, {0x1}}, @peer_mgmt={0x75, 0x4, {0x1, 0x43c0, @void, @void, @void}}, @ibss={0x6, 0x2, 0x91}]}]}, 0x10dc}, 0x1, 0x0, 0x0, 0xa91eb959537eaf63}, 0x20000000) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) 5m17.489789798s ago: executing program 2 (id=957): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) 5m16.564070265s ago: executing program 2 (id=963): setfsgid(0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private1, 0x10100, 0x0, 0x1, 0x3, 0xfc65, 0x1}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@remote, 0x10100, 0x2, 0x0, 0x0, 0xfc65, 0xd6a9, 0x2000000}, 0x20) syz_open_procfs(0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0xe, 0x6, 0x200, &(0x7f0000000880)="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"}) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x800000, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @none}, 0x8) connect$bt_sco(r2, &(0x7f00000008c0)={0x1f, @none}, 0x8) 5m16.466528938s ago: executing program 2 (id=966): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff0300"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xffe, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10128, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x5, &(0x7f0000000080)=[{0x9, 0x0, 0x0, 0x4}, {0x8001, 0x40, 0x7, 0x4}, {0x2, 0x10, 0x7e, 0xfffff800}, {0x5, 0x7f, 0x2, 0x2}, {0xe1, 0x5, 0x62, 0x8}]}, 0x10) 5m13.279997451s ago: executing program 2 (id=983): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05130000030000004200000040000000c2"], 0x50) 5m13.166103239s ago: executing program 2 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d3970323030302e752c003a3624a10617f884622732ae066359bb5490709b57458f09db54404ec4d774ca10614c0094d1e6bc2e863c79b168557e2360e73eac0ebe94a94f8e11e425498441452a7ac71825e0f78773caf90616abcf6145c1d783187e338204ca9edb16f42ba2e54c1d4674dca2cf982d77a1d9426ab83f413ee2af5996be11d8f85e75276540fa10c5a9941b398456c373b2b95e7da31d75fb372cd348ce212518f140f8e36ebf"]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d3970323030302e752c003a3624a10617f884622732ae066359bb5490709b57458f09db54404ec4d774ca10614c0094d1e6bc2e863c79b168557e2360e73eac0ebe94a94f8e11e425498441452a7ac71825e0f78773caf90616abcf6145c1d783187e338204ca9edb16f42ba2e54c1d4674dca2cf982d77a1d9426ab83f413ee2af5996be11d8f85e75276540fa10c5a9941b398456c373b2b95e7da31d75fb372cd348ce212518f140f8e36ebf"]) 4m57.243540496s ago: executing program 33 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d3970323030302e752c003a3624a10617f884622732ae066359bb5490709b57458f09db54404ec4d774ca10614c0094d1e6bc2e863c79b168557e2360e73eac0ebe94a94f8e11e425498441452a7ac71825e0f78773caf90616abcf6145c1d783187e338204ca9edb16f42ba2e54c1d4674dca2cf982d77a1d9426ab83f413ee2af5996be11d8f85e75276540fa10c5a9941b398456c373b2b95e7da31d75fb372cd348ce212518f140f8e36ebf"]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d3970323030302e752c003a3624a10617f884622732ae066359bb5490709b57458f09db54404ec4d774ca10614c0094d1e6bc2e863c79b168557e2360e73eac0ebe94a94f8e11e425498441452a7ac71825e0f78773caf90616abcf6145c1d783187e338204ca9edb16f42ba2e54c1d4674dca2cf982d77a1d9426ab83f413ee2af5996be11d8f85e75276540fa10c5a9941b398456c373b2b95e7da31d75fb372cd348ce212518f140f8e36ebf"]) 8.556341005s ago: executing program 5 (id=2316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffe, 0x4, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 8.432267015s ago: executing program 6 (id=2318): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x6a040000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18001500000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b700000000007b8af8ff00000000bfa20000000000fea705a8a3e912460fb703000008000000b70400000000000085000000010000009594a599617285320d766d24927a9fb59886ac77e742fd743f7f0436d34acc964b472afb27e03bde9ed598ac57ea1af223c34e8051eb6c1173bd922cdc1b8356d8853830f4802e1c3107f948f9d0e70efe"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x43f7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$uac2(0x0, 0x87, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x21c) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4, 0x8}}, './cgroup/../file0\x00'}) ioctl$DVB_DVR_DMX_EXPBUF(r8, 0xc00c6f3e, &(0x7f00000002c0)={0x9, 0x80000, r0}) write$cgroup_int(r7, &(0x7f0000000080)=0x4, 0x12) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f00000000c0)={{0x9, 0x4}, 'port0\x00', 0x4, 0x6, 0x200104, 0x1, 0x9, 0x401, 0x800003, 0x0, 0x1, 0xd0}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, 0x0, 0x40) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r7, 0x0, 0x0, 0x40840) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0xb0a, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 8.382481186s ago: executing program 5 (id=2320): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x2eb, @mcast1, 0x7}, 0x1c) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$FUSE_INIT(r3, &(0x7f0000002680)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0x9, 0x1, 0x7fff, 0x400, 0x8, 0x6, 0x0, 0x0, 0x40, 0x231}}, 0x50) copy_file_range(r3, 0x0, r2, 0x0, 0xfffffffffffffff8, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f010203010902120001000110040904"], 0x0) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000140)="131441bf07ba11555d0d92e76cce7876c2545a0f77a40d47a7c0ce2c2103b2e77fd18791ebee513b415622696290b2e2b8df14e2a65ef4fc4c4325b8dc6baeb459f0ef994f79b8a019948c795294fdd9faaa6912af4c7aa809112b5f6918c5a9b8c7b5ec39599395add923ae8b37d1ccc8eacd883f3c122647b518d4f8203f46ed881506ec") ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000000)={0x2, 0x8, "1e78b3", 0x7b, 0x80}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x4, 0x0, {0xa, 0x4e23, 0xfffffffe, @loopback, 0x2000}}}, 0x32) r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r5, &(0x7f00000002c0)=""/73, 0xffffffeb, 0x936) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000140)={0x3, 0x980001, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)='h', 0x1}], 0x1) 7.995051741s ago: executing program 4 (id=2321): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.52331486s ago: executing program 4 (id=2322): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/228, 0xe4}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="30010002", @ANYRES16=r3, @ANYBLOB="010025bd7001ffdbdf2528000000060006000300000005002b00000000000a0001007770616e31000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20040040) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040), 0xffffffffffffff4e}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') sendto$inet(r1, &(0x7f0000000300)="eb", 0x1, 0x44815, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r2], &(0x7f0000000480)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000540)=""/209, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b40500cd8eaba391ad00fdff7f006110580000000000c600000000000000950000000041d2af5b677e64026e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f042a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910020023d24195405f2e76ccb7b37b41215c0200731fb19e9bc7a2b72c8c379d02d30e7f0b1fa922a0c1915d6ecae95806007464110b6010ffc3d61ace52c27097fa8d6c"], &(0x7f00000002c0)='GPL\x00', 0x4, 0xc5, &(0x7f0000000780)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20005}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10, 0xffffffffffffffff}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000005879e19e0000000000000000000d0000000000000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="0ce9138bb183805f74083a7b67aeeb365e7eb4261be0982ea08e0ad01c166111ada0c54dbacbc5df5d8efe3dfdcbd5851cd405dcb69712543bdb7057cdd5c2ad49af816da38f01dba783a9659cadb0e5e8907a42a43a4dc96571ac35f4751be41cc1690c13c8e1f7adb5c612c365eb67e5265206ff851c8ecede5b", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/179, 0xb3}, {&(0x7f00000006c0)=""/144, 0x25}], 0x2}, 0x12) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) 7.256006815s ago: executing program 6 (id=2325): io_setup(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x4000000000000007, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x4008, 0x0, 0x3, 0x7ed53619, 0x5, 0x2, 0x9644, 0x800004, 0x7f, 0x85a, 0x3ff, 0x46, 0x2, 0x2, 0x0, 0x80000001, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x5, 0x5b1f, 0x7b0, 0x6, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x7, 0x7, 0x7ffffffe, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0xfffffffe, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x3, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffd, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0x6, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2000002, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0x1de16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x3fd, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x82, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x6, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x2, 0x487, 0x103, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f9, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0x0, 0x3, 0x10000, 0x1000, 0x5, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x2, 0x1000, 0x8, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x7, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x7, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x4, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5fc2, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x9d, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x7f5, 0x5, 0x0, 0xff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x63, 0x0, 0xd3bed341, 0x691f, 0x0, 0x3, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x3, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0xc, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xbfffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0x38000000, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xfffffffb, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.165049236s ago: executing program 6 (id=2326): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000004700)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x85}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@hopopts={{0x18, 0x29, 0x36, {0x3b}}}, @hopopts={{0x18, 0x29, 0x36, {0x3c}}}], 0x30}}], 0x1, 0x24040000) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x14, 0x2c, {0x2c, 0xd, "e75bcf47a88a34d2dd23ee248c3610da0300000000000000697103bd4f114ece0513e8bec3cd466f0000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f00000001c0), 0x380000, 0x84000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r3 = syz_ublk_setup_io_uring(0x1e8b, &(0x7f0000002b00)={0x0, 0x881a, 0x0, 0x2, 0x10a}, &(0x7f0000002b80), &(0x7f0000002bc0), &(0x7f0000002c00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe8) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2040009, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}, {@nodevmap}], [{@smackfsdef={'smackfsdef', 0x3d, '\x01^\'!:@'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@euid_eq={'euid', 0x3d, r4}}]}}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, 0x0, 0x1) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="23c8bbbeabd01a94b7c1e9834811e577e3fcd83d4d06d2ccf0e0384d7f5f5604e1", @ANYRES16=r8, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) write$nci(r6, &(0x7f0000000380)=ANY=[], 0x13) r10 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000540)={&(0x7f0000000500)=[{0x4, 0x200, 0x2, &(0x7f00000000c0)="9f06"}]}) syz_usb_control_io$uac3(r10, &(0x7f0000000680)={0x14, &(0x7f0000000480)={0x40, 0x6, 0x53, {0x53, 0x23, "108c453ce6b69e83b8737ea87fc82c54bd721ccb2db7f7129ec733766402d3b2d19b82bc6c75dfd10c915dded40fc2aa0de5debd83a22b398c6e4ab69b137eb405f6f5158f6afa6ef225abe83ced888694"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x20, 0x16, 0x67, "f6f44737e858b7feec6743ac217d48d2e2b3f1c0809576fecd3e45b4458a20539036125751f3782610c4023f9e6989924753574dc9b801c54dc235558254beae1faa24d50d9265972bece555867f6c0232b21583629ebf3786567676d168d7db2798ee0c109b12"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "8eef"}, &(0x7f0000000800)={0x20, 0x82, 0x2, "15d4"}, &(0x7f0000000840)={0x20, 0x83, 0x1, 'x'}, &(0x7f0000000880)={0x20, 0x84, 0x3, '0P\f'}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "2934b6"}}) 6.822909237s ago: executing program 5 (id=2328): io_setup(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x4000000000000007, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x4008, 0x0, 0x3, 0x7ed53619, 0x5, 0x2, 0x9644, 0x800004, 0x7f, 0x85a, 0x3ff, 0x46, 0x2, 0x2, 0x0, 0x80000001, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x5, 0x5b1f, 0x7b0, 0x6, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x7, 0x7, 0x7ffffffe, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0xfffffffe, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x3, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffd, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0x6, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2000002, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0x1de16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x3fd, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x82, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x6, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x2, 0x487, 0x103, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f9, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0x0, 0x3, 0x10000, 0x1000, 0x5, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x2, 0x1000, 0x8, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x7, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x7, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x4, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5fc2, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x9d, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x7f5, 0x5, 0x0, 0xff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x63, 0x0, 0xd3bed341, 0x691f, 0x0, 0x3, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x3, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0xc, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xbfffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0x38000000, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xfffffffb, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.286258122s ago: executing program 4 (id=2331): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.275204589s ago: executing program 5 (id=2332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/16, 0x10}], 0x1) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 5.953755531s ago: executing program 0 (id=2333): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000000000000ff77000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x24) 5.857139764s ago: executing program 1 (id=2334): syz_emit_ethernet(0x11b6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0xbd, 0x3}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.072259207s ago: executing program 0 (id=2335): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 4.586995124s ago: executing program 4 (id=2336): io_setup(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x4000000000000007, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x4008, 0x0, 0x3, 0x7ed53619, 0x5, 0x2, 0x9644, 0x800004, 0x7f, 0x85a, 0x3ff, 0x46, 0x2, 0x2, 0x0, 0x80000001, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x5, 0x5b1f, 0x7b0, 0x6, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x7, 0x7, 0x7ffffffe, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0xfffffffe, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x3, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffd, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0x6, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2000002, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0x1de16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x3fd, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x82, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x6, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x2, 0x487, 0x103, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f9, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0x0, 0x3, 0x10000, 0x1000, 0x5, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x2, 0x1000, 0x8, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x7, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x7, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x4, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5fc2, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x9d, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x7f5, 0x5, 0x0, 0xff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x63, 0x0, 0xd3bed341, 0x691f, 0x0, 0x3, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x3, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0xc, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xbfffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0x38000000, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xfffffffb, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.529875914s ago: executing program 0 (id=2337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/16, 0x10}], 0x1) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 4.529360356s ago: executing program 1 (id=2338): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x42, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x0, 0x4, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0x70, 0x4, 0x0, 0x6, 0x4, 0x9, 0x8, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x7, 0x1e, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x1000, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x294, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x3, 0x0, 0x6, 0x401, 0xc, 0x7, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x3, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x10001, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0xeb5, 0x5, 0x200003, 0x4000002, 0x5, 0xffff, 0x9, 0x8001, 0x6, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x0, 0x2000006, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x10002005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x200, 0x3, 0xa, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x403, 0x5, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0xffffffde, 0x6, 0x63, 0x3fd, 0x2000001, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff5, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0xa]}, 0x45c) 4.310367126s ago: executing program 1 (id=2339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/16, 0x10}], 0x1) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 4.106404288s ago: executing program 4 (id=2340): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffe, 0x4, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 4.076200677s ago: executing program 5 (id=2341): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x200, 0x2, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}, 0x2}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2.504062985s ago: executing program 0 (id=2342): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000003c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x40, 0x0, {}, {0x0, 0xc, 0x0, 0x0, 0x2, 0x0, "fafc4000"}, 0x0, 0x1, {0x0}}) close_range(r5, r6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) socket$packet(0x11, 0x3, 0x300) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x4e20, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x0, 0x12}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x3, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000000080), 0x0, 0x400c) 2.205334366s ago: executing program 4 (id=2343): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x20, 0x2}, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r4 = dup2(r3, r3) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x24}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000001100), 0x0) read$msr(r5, &(0x7f0000019c80)=""/102400, 0x19000) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e01}, 0x6e, &(0x7f0000001200), 0x0, &(0x7f0000001240)=[@rights={{0x18, 0x1, 0x1, [r4, r0]}}], 0x18, 0x4}}], 0x1, 0x810) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 2.134032027s ago: executing program 6 (id=2344): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x9, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.170169304s ago: executing program 0 (id=2345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000000000000ff77000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x24) 1.0401307s ago: executing program 1 (id=2346): ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c0007800800064000000000050005000200000005000400000000001600"], 0x5c}}, 0x0) 1.037297284s ago: executing program 6 (id=2347): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 969.643824ms ago: executing program 1 (id=2348): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x6, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000003, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x4000000009, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) 920.007184ms ago: executing program 6 (id=2349): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x7, 0x18}, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000340)=""/32, 0x28, 0x20, 0x0, 0x1, 0x10000}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0xc215, 0x6, 0x200, r0, 0xfff, '\x00', 0x0, r1, 0x5, 0x4, 0x2, 0xd}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000de02000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x28) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x7, 0x18}, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000340)=""/32, 0x28, 0x20, 0x0, 0x1, 0x10000}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0xc215, 0x6, 0x200, r0, 0xfff, '\x00', 0x0, r1, 0x5, 0x4, 0x2, 0xd}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000de02000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x28) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) 158.822205ms ago: executing program 0 (id=2350): io_setup(0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x4000000000000007, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x4008, 0x0, 0x3, 0x7ed53619, 0x5, 0x2, 0x9644, 0x800004, 0x7f, 0x85a, 0x3ff, 0x46, 0x2, 0x2, 0x0, 0x80000001, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x5, 0x5b1f, 0x7b0, 0x6, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x7, 0x7, 0x7ffffffe, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0xfffffffe, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x3, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffd, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0x6, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2000002, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0x1de16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x3fd, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x82, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x6, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x2, 0x487, 0x103, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f9, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0x0, 0x3, 0x10000, 0x1000, 0x5, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x2, 0x1000, 0x8, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x7, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x7, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x4, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5fc2, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x9d, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x7f5, 0x5, 0x0, 0xff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x63, 0x0, 0xd3bed341, 0x691f, 0x0, 0x3, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x3, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0xc, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xbfffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0x38000000, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xfffffffb, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 124.355231ms ago: executing program 5 (id=2351): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x29, 0xa0, 0x3, 0x0, 0x8, @rand_addr=' \x01\x00', @empty, 0x80, 0x1, 0x3, 0xffff}}) connect$packet(r0, &(0x7f0000000700)={0x11, 0xc, r1, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x4e, "7eed5100000080000000400000010000000000000000000000b100"}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f00000002c0)=0x3) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x1010, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) migrate_pages(0x0, 0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) socket$inet(0xa, 0x801, 0x84) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x5, 0x37fffd, 0x6794, 0x80000002, 0xffffffffbfbffff7, 0x9, 0x0, 0x1, 0x6, 0x2000000b, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x7, 0x100, 0x6, 0x4, 0x5, 0x3, 0x34, 0x8}) clock_adjtime(0x0, &(0x7f0000000740)={0x6, 0x20000000e, 0x8b, 0x6, 0x4, 0x8000000000000000, 0x9, 0x20002, 0x8, 0x4, 0x5, 0x8000000040000000, 0xc, 0x4, 0x7, 0x4, 0x8, 0x3, 0x7, 0x80000000, 0xffffffffffbffffe, 0x8, 0xffff, 0x7, 0x3, 0x6}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r6) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xc8, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0xfffffffffffffef4, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x20024040) lsm_get_self_attr(0x65, 0x0, &(0x7f00000002c0)=0x3000, 0x0) 0s ago: executing program 1 (id=2352): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x6, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000003, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x4000000009, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) kernel console output (not intermixed with test programs): permissive=1 [ 366.551951][ T30] audit: type=1400 audit(1782159979.085:1006): avc: denied { map } for pid=12151 comm="syz.4.1621" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 366.597669][ T30] audit: type=1400 audit(1782159979.085:1007): avc: denied { write } for pid=12151 comm="syz.4.1621" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 366.661298][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 366.689085][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.721370][ T10] usb 6-1: config 0 descriptor?? [ 366.753859][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 367.292137][ T837] usb 6-1: USB disconnect, device number 27 [ 368.126009][ T5742] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 368.149244][ T837] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 368.871436][ T5742] usb 5-1: Using ep0 maxpacket: 16 [ 368.878805][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 368.888834][ T837] usb 1-1: unable to get BOS descriptor or descriptor too short [ 368.897223][ T837] usb 1-1: not running at top speed; connect to a high speed hub [ 368.907439][ T837] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 368.918587][ T5742] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 368.927863][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.936384][ T5742] usb 5-1: Product: syz [ 368.940626][ T5742] usb 5-1: Manufacturer: syz [ 368.945996][ T5742] usb 5-1: SerialNumber: syz [ 368.952170][ T837] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 368.962001][ T5742] usb 5-1: config 0 descriptor?? [ 368.971156][ T5742] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 368.980789][ T837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.995952][ T837] usb 1-1: Product: syz [ 369.001538][ T5705] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 369.009744][ T5742] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 369.017409][ T837] usb 1-1: Manufacturer: syz [ 369.022821][ T837] usb 1-1: SerialNumber: syz [ 369.119070][T12198] netlink: 'syz.6.1634': attribute type 1 has an invalid length. [ 369.138551][T12198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.155174][T12198] bond1: (slave veth0_to_bond): making interface the new active one [ 369.166414][T12198] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 369.171781][ T5705] usb 6-1: Using ep0 maxpacket: 16 [ 369.182960][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 369.197493][ T5705] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 369.206994][T12198] bond1: entered promiscuous mode [ 369.207074][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.212470][T12198] veth0_to_bond: entered promiscuous mode [ 369.222088][ T5705] usb 6-1: Product: syz [ 369.228059][T12198] bond1: entered allmulticast mode [ 369.230418][ T5705] usb 6-1: Manufacturer: syz [ 369.230434][ T5705] usb 6-1: SerialNumber: syz [ 369.240529][ T837] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 369.240576][ T837] usb 1-1: 1:1 : sample bitwidth 253 in over sample bytes 16 [ 369.240595][ T837] usb 1-1: 1:1 : unsupported sample bitwidth 253 in 16 bytes [ 369.241060][ T837] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 369.245793][T12198] veth0_to_bond: entered allmulticast mode [ 369.260043][ T5705] usb 6-1: config 0 descriptor?? [ 369.296786][ T5705] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 369.314621][T12200] macvlan2: entered promiscuous mode [ 369.320638][ T5705] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 369.330961][T12200] macvlan2: entered allmulticast mode [ 369.350065][T12200] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 369.361016][ T837] usb 1-1: USB disconnect, device number 62 [ 369.382792][T12200] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 369.543973][ T30] audit: type=1400 audit(1782159982.225:1008): avc: denied { write } for pid=12201 comm="syz.1.1635" path="socket:[37578]" dev="sockfs" ino=37578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 369.583465][ T5742] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 369.995463][ T5705] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 370.003302][ T5742] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 370.011415][ T5742] em28xx 5-1:0.0: board has no eeprom [ 370.130997][T12208] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1637'. [ 370.321658][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 370.351598][ T5742] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 370.359540][ T5742] em28xx 5-1:0.0: dvb set to bulk mode. [ 370.365907][ T5740] em28xx 5-1:0.0: Binding DVB extension [ 370.406421][ T5705] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 370.414762][ T5705] em28xx 6-1:0.0: board has no eeprom [ 370.461594][ T10] usb 1-1: device descriptor read/64, error -71 [ 370.721608][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 370.851692][ T10] usb 1-1: device descriptor read/64, error -71 [ 370.961780][ T10] usb usb1-port1: attempt power cycle [ 371.727418][ T804] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 371.783209][T12177] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 371.792077][ T5705] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 371.804709][ T5742] usb 5-1: USB disconnect, device number 54 [ 371.810670][T12192] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 371.823389][ T5740] em28xx 5-1:0.0: Registering input extension [ 371.832479][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 371.833548][ T5705] em28xx 6-1:0.0: dvb set to bulk mode. [ 371.846394][ T5742] em28xx 5-1:0.0: Disconnecting em28xx [ 371.864814][ T5742] em28xx 5-1:0.0: Closing input extension [ 371.872980][ T10] usb 1-1: device descriptor read/8, error -71 [ 371.877941][ T5740] em28xx 6-1:0.0: Binding DVB extension [ 371.893337][ T5742] em28xx 5-1:0.0: Freeing device [ 371.900563][ T5705] usb 6-1: USB disconnect, device number 28 [ 371.931693][ T804] usb 7-1: Using ep0 maxpacket: 16 [ 371.945336][ T5705] em28xx 6-1:0.0: Disconnecting em28xx [ 371.948896][ T804] usb 7-1: unable to get BOS descriptor or descriptor too short [ 371.954777][ T5740] em28xx 6-1:0.0: Registering input extension [ 371.960894][ T804] usb 7-1: config 8 has an invalid interface number: 137 but max is 0 [ 371.982938][ T5705] em28xx 6-1:0.0: Closing input extension [ 372.115326][ T804] usb 7-1: config 8 has no interface number 0 [ 372.117796][ T5705] em28xx 6-1:0.0: Freeing device [ 372.121732][ T804] usb 7-1: config 8 interface 137 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.242544][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 372.268859][ T804] usb 7-1: config 8 interface 137 has no altsetting 0 [ 372.280425][ T804] usb 7-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice= 2.f3 [ 372.294448][ T10] usb 1-1: device descriptor read/8, error -71 [ 372.305425][ T804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.325374][ T804] usb 7-1: Product: syz [ 372.333646][ T804] usb 7-1: Manufacturer: syz [ 372.345044][ T804] usb 7-1: SerialNumber: syz [ 372.425037][ T10] usb usb1-port1: unable to enumerate USB device [ 372.467142][T12231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.562198][ T804] option 7-1:8.137: GSM modem (1-port) converter detected [ 372.575190][ T804] usb 7-1: USB disconnect, device number 16 [ 372.581030][T12238] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:0 [ 372.582462][ T804] option 7-1:8.137: device disconnected [ 372.635170][T12240] fuse: Bad value for 'fd' [ 372.642552][T12240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1648'. [ 372.721616][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 372.882446][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 372.889200][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.900613][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.910697][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 372.920004][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.929173][ T10] usb 5-1: config 0 descriptor?? [ 372.936746][ T10] hub 5-1:0.0: USB hub found [ 373.043203][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.049708][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.312968][ T10] hub 5-1:0.0: 9 ports detected [ 373.335887][ T10] hub 5-1:0.0: insufficient power available to use all downstream ports [ 373.469959][T12257] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:0 [ 373.477866][T12254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=12254 comm=syz.1.1652 [ 373.494119][T12254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=12254 comm=syz.1.1652 [ 373.983858][ T10] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 373.992103][ T10] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 374.003058][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 374.009421][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 374.057031][ T10] usb 5-1: USB disconnect, device number 55 [ 375.861834][ T5742] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 376.017948][T12284] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1662'. [ 376.076416][T12291] 9p: Bad value for 'rfdno' [ 376.159154][T12294] fuse: Bad value for 'fd' [ 376.191875][ T5742] usb 5-1: Using ep0 maxpacket: 16 [ 376.975242][ T5742] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 377.060530][ T5742] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 377.069367][ T5742] usb 5-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 377.079708][ T5742] usb 5-1: config 166 has no interface number 0 [ 377.080596][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'. [ 377.085997][ T5742] usb 5-1: config 166 has no interface number 1 [ 377.086035][ T5742] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 377.086055][ T5742] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 377.086081][ T5742] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 377.086102][ T5742] usb 5-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 377.086126][ T5742] usb 5-1: config 166 interface 177 has no altsetting 0 [ 377.086143][ T5742] usb 5-1: config 166 interface 34 has no altsetting 0 [ 377.087872][ T5742] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 377.119479][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'. [ 377.124734][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.286285][T12304] /dev/nbd1: Can't lookup blockdev [ 377.344268][ T5742] usb 5-1: Product: syz [ 377.358385][ T5742] usb 5-1: Manufacturer: syz [ 377.400321][ T5742] usb 5-1: SerialNumber: syz [ 378.551089][ T5725] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 378.560245][ T30] audit: type=1326 audit(1782159990.465:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.4.1661" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d09b9ce59 code=0x7ffc0000 [ 379.863203][ T5725] usb 6-1: Using ep0 maxpacket: 8 [ 379.890217][ T5742] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 379.890997][ T5725] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 379.909516][ T5725] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 379.921862][ T5725] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 379.932827][ T5725] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 379.950981][ T30] audit: type=1326 audit(1782159990.465:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.4.1661" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d09b9ce59 code=0x7ffc0000 [ 380.012793][ T5725] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 380.055088][ T5725] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.074844][ T5742] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 380.101110][ T30] audit: type=1326 audit(1782159990.465:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.4.1661" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f8d09b9ce59 code=0x7ffc0000 [ 380.139611][ T5725] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 380.173359][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.201763][ T30] audit: type=1326 audit(1782159990.465:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.4.1661" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d09b9ce59 code=0x7ffc0000 [ 380.254238][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1680'. [ 380.273103][ T5725] usb 6-1: usb_control_msg returned -71 [ 380.284407][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1680'. [ 380.305055][ T5725] usbtmc 6-1:16.0: can't read capabilities [ 380.332172][ T5742] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 380.332559][ T30] audit: type=1326 audit(1782159990.465:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.4.1661" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d09b9ce59 code=0x7ffc0000 [ 380.339613][ T5742] uvcvideo 5-1:166.34: No valid video chain found. [ 380.346190][ T5742] usb 5-1: USB disconnect, device number 56 [ 380.409058][ T30] audit: type=1326 audit(1782159990.465:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.4.1661" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d09b9ce59 code=0x7ffc0000 [ 380.439899][ T5725] usb 6-1: USB disconnect, device number 29 [ 380.592775][T12352] /dev/nullb0: Can't open blockdev [ 380.664746][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'. [ 380.673807][T12352] netlink: 'syz.0.1683': attribute type 18 has an invalid length. [ 380.682058][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 381.398201][ T30] audit: type=1326 audit(1782159990.475:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.4.1661" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d09b9ce59 code=0x7ffc0000 [ 381.434926][ T30] audit: type=1326 audit(1782159990.475:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.4.1661" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d09b9ce59 code=0x7ffc0000 [ 381.464092][ T30] audit: type=1326 audit(1782159990.475:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.4.1661" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d09b9ce59 code=0x7ffc0000 [ 381.491580][ T30] audit: type=1326 audit(1782159990.475:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.4.1661" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d09b9ce59 code=0x7ffc0000 [ 381.673265][ T5705] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 381.719188][ T5742] kernel write not supported for file /uhid (pid: 5742 comm: kworker/1:6) [ 381.792238][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 382.252155][ T5705] usb 7-1: Using ep0 maxpacket: 16 [ 382.263716][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 382.351523][ T10] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 382.369958][ T5705] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 382.379400][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.387461][ T5705] usb 7-1: Product: syz [ 382.392273][ T5705] usb 7-1: Manufacturer: syz [ 382.396914][ T5705] usb 7-1: SerialNumber: syz [ 382.510148][T12383] ip6erspan0: entered promiscuous mode [ 382.638102][ T5705] usb 7-1: config 0 descriptor?? [ 382.832950][ T10] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 382.834632][ T5705] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 382.905876][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 382.917573][ T5705] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 382.917982][ T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 382.935231][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.936800][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 382.943936][ T10] usb 5-1: Product: syz [ 382.958926][ T10] usb 5-1: Manufacturer: syz [ 382.971409][ T10] usb 5-1: SerialNumber: syz [ 383.007232][T12389] syzkaller0: entered promiscuous mode [ 383.008692][ T10] ch9200 5-1:2.0: probe with driver ch9200 failed with error -22 [ 383.016802][T12389] syzkaller0: entered allmulticast mode [ 383.055659][T12389] tipc: Started in network mode [ 383.060732][T12389] tipc: Node identity 26e0d6f2a2f1, cluster identity 4711 [ 383.079940][T12389] tipc: Enabled bearer , priority 0 [ 383.114080][T12388] tipc: Resetting bearer [ 383.123947][T12388] tipc: Disabling bearer [ 383.436206][ T5705] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 383.542380][T12398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1696'. [ 383.727197][ T10] usb 5-1: USB disconnect, device number 57 [ 384.350853][ T5705] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 384.359460][ T5705] em28xx 7-1:0.0: board has no eeprom [ 384.841578][ T5705] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 384.876137][ T5705] em28xx 7-1:0.0: dvb set to bulk mode. [ 384.916544][ T5740] em28xx 7-1:0.0: Binding DVB extension [ 385.623439][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 385.685814][T12439] netlink: 'syz.4.1708': attribute type 10 has an invalid length. [ 385.694160][T12439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1708'. [ 385.816609][T12439] team0: Port device geneve1 added [ 385.835215][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 385.845988][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.871536][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 385.871599][ T30] audit: type=1400 audit(1782159998.595:1040): avc: denied { connect } for pid=12443 comm="syz.5.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 385.899113][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.921599][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 385.941620][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.965372][ T10] usb 1-1: config 0 descriptor?? [ 385.992209][T12363] em28xx 7-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 386.006763][ T10] hub 1-1:0.0: USB hub found [ 386.042033][ T804] usb 7-1: USB disconnect, device number 17 [ 386.048552][ T804] em28xx 7-1:0.0: Disconnecting em28xx [ 386.058835][ T5740] em28xx 7-1:0.0: Registering input extension [ 386.083480][ T804] em28xx 7-1:0.0: Closing input extension [ 386.102900][ T804] em28xx 7-1:0.0: Freeing device [ 386.214583][ T10] hub 1-1:0.0: 9 ports detected [ 386.228257][ T10] hub 1-1:0.0: insufficient power available to use all downstream ports [ 386.291773][T12459] overlayfs: failed to clone upperpath [ 386.400633][ T5740] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 386.608748][ T5740] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.652924][ T5740] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 386.685767][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.726437][ T5740] usb 5-1: config 0 descriptor?? [ 386.775151][ T5740] pwc: Askey VC010 type 2 USB webcam detected. [ 386.959681][ T10] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 387.174298][ T10] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 387.185182][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 387.191846][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 387.213818][ T10] usb 1-1: USB disconnect, device number 67 [ 387.346017][ T837] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 387.700095][ T5740] pwc: recv_control_msg error -32 req 02 val 2b00 [ 387.712105][ T5740] pwc: recv_control_msg error -32 req 02 val 2700 [ 387.725281][ T5740] pwc: recv_control_msg error -32 req 02 val 2c00 [ 387.751749][ T837] usb 6-1: Using ep0 maxpacket: 8 [ 387.764898][ T837] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 387.773507][ T837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 387.785216][ T837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 387.800398][ T837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 387.816776][ T837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 387.827774][ T837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.842334][ T837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 387.852679][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.215080][ T837] usb 6-1: usb_control_msg returned -71 [ 388.228534][ T837] usbtmc 6-1:16.0: can't read capabilities [ 388.247740][ T837] usb 6-1: USB disconnect, device number 30 [ 389.024051][T12500] lo speed is unknown, defaulting to 1000 [ 390.350619][T12504] SELinux: syz.1.1728 (12504) wrote to user. This is no longer supported. [ 390.968542][ T5740] pwc: recv_control_msg error -71 req 04 val 1000 [ 391.106491][ T5740] pwc: recv_control_msg error -71 req 04 val 1300 [ 391.178019][ T5704] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 391.335443][ T5740] pwc: recv_control_msg error -71 req 04 val 1400 [ 391.413347][ T5704] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.470047][ T5704] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.684117][ T5704] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 391.848989][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.269282][ T5704] usb 7-1: config 0 descriptor?? [ 392.373347][ T5740] pwc: recv_control_msg error -71 req 02 val 2000 [ 392.377517][T12523] fuse: Bad value for 'fd' [ 392.490671][ T5704] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 392.802325][ T5740] pwc: recv_control_msg error -71 req 02 val 2100 [ 392.809511][ T5740] pwc: recv_control_msg error -71 req 04 val 1500 [ 392.816799][ T5740] pwc: recv_control_msg error -71 req 02 val 2500 [ 392.824142][ T5740] pwc: recv_control_msg error -71 req 02 val 2400 [ 392.831261][ T5740] pwc: recv_control_msg error -71 req 02 val 2600 [ 392.838538][ T5740] pwc: recv_control_msg error -71 req 02 val 2900 [ 392.847302][ T5740] pwc: recv_control_msg error -71 req 02 val 2800 [ 392.855118][ T5740] pwc: recv_control_msg error -71 req 04 val 1100 [ 393.010716][ T5740] pwc: recv_control_msg error -71 req 04 val 1200 [ 393.027911][ T5740] pwc: Registered as video103. [ 393.040261][ T5740] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input51 [ 393.065926][ T5740] usb 5-1: USB disconnect, device number 58 [ 393.254319][ T10] usb 7-1: USB disconnect, device number 18 [ 393.575276][T12519] SET target dimension over the limit! [ 393.621575][ T5740] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 393.935208][ T5740] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 393.950814][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.966290][ T5740] usb 5-1: Product: syz [ 393.975269][ T5740] usb 5-1: Manufacturer: syz [ 393.986326][ T5740] usb 5-1: SerialNumber: syz [ 395.085487][ T30] audit: type=1400 audit(1782160007.815:1041): avc: denied { mounton } for pid=12547 comm="syz.1.1739" path="/proc/1333/task" dev="proc" ino=39382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 395.209141][ T5740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 395.229719][T12561] fuse: Bad value for 'fd' [ 395.244922][ T5740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 395.272599][ T5740] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 395.299144][ T5740] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 395.320019][ T5740] usb 5-1: USB disconnect, device number 59 [ 395.548169][T12575] lo speed is unknown, defaulting to 1000 [ 395.823224][ T10] kernel read not supported for file /486/net/ip6_flowlabel (pid: 10 comm: kworker/0:1) [ 396.041538][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1752'. [ 396.113622][T12598] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1753'. [ 396.970454][T12603] fuse: Bad value for 'fd' [ 397.222760][T12615] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 398.348454][T12650] syzkaller0: entered promiscuous mode [ 398.376170][T12650] syzkaller0: entered allmulticast mode [ 398.457047][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1764'. [ 398.496968][ T30] audit: type=1400 audit(1782160011.225:1042): avc: denied { setopt } for pid=12656 comm="syz.1.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 398.527202][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1764'. [ 399.902262][ T30] audit: type=1400 audit(1782160012.635:1043): avc: denied { map } for pid=12668 comm="syz.0.1769" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 399.941274][T12673] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 400.012163][T12673] SELinux: failed to load policy [ 400.388777][ T30] audit: type=1400 audit(1782160012.935:1044): avc: denied { setopt } for pid=12674 comm="syz.6.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 402.123507][T12701] syzkaller0: entered promiscuous mode [ 402.149597][T12701] syzkaller0: entered allmulticast mode [ 402.452655][T12711] lo speed is unknown, defaulting to 1000 [ 402.532252][T12712] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1778'. [ 405.218116][T12750] FAULT_INJECTION: forcing a failure. [ 405.218116][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 405.270082][T12750] CPU: 0 UID: 0 PID: 12750 Comm: syz.0.1792 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.270103][T12750] Tainted: [L]=SOFTLOCKUP [ 405.270106][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 405.270112][T12750] Call Trace: [ 405.270116][T12750] [ 405.270122][T12750] dump_stack_lvl+0x100/0x190 [ 405.270146][T12750] should_fail_ex.cold+0x5/0xa [ 405.270164][T12750] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 405.270182][T12750] should_failslab+0xc2/0x120 [ 405.270194][T12750] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 405.270210][T12750] ? copy_process+0x69a/0x7ff0 [ 405.270222][T12750] ? rcu_is_watching+0x12/0xc0 [ 405.270237][T12750] copy_process+0x69a/0x7ff0 [ 405.270248][T12750] ? _kstrtoull+0x13c/0x1f0 [ 405.270258][T12750] ? __pfx__kstrtoull+0x10/0x10 [ 405.270268][T12750] ? putname+0xb1/0x110 [ 405.270276][T12750] ? rcu_is_watching+0x12/0xc0 [ 405.270291][T12750] ? __pfx_copy_process+0x10/0x10 [ 405.270303][T12750] ? lock_release+0x24d/0x310 [ 405.270315][T12750] ? _copy_from_user+0x59/0xd0 [ 405.270329][T12750] kernel_clone+0x176/0x9d0 [ 405.270341][T12750] ? rcu_is_watching+0x12/0xc0 [ 405.270354][T12750] ? lock_release+0x24d/0x310 [ 405.270365][T12750] ? __pfx_kernel_clone+0x10/0x10 [ 405.270378][T12750] ? ksys_write+0x12a/0x250 [ 405.270391][T12750] ? rcu_is_watching+0x12/0xc0 [ 405.270404][T12750] ? ksys_write+0x12a/0x250 [ 405.270416][T12750] ? lock_release+0x24d/0x310 [ 405.270427][T12750] __do_sys_clone3+0x214/0x290 [ 405.270439][T12750] ? __pfx___do_sys_clone3+0x10/0x10 [ 405.270452][T12750] ? ksys_write+0x190/0x250 [ 405.270464][T12750] ? lock_release+0x24d/0x310 [ 405.270476][T12750] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 405.270494][T12750] ? __fget_files+0x21f/0x3d0 [ 405.270511][T12750] ? rcu_is_watching+0x12/0xc0 [ 405.270525][T12750] do_syscall_64+0x115/0x870 [ 405.270534][T12750] ? clear_bhb_loop+0x40/0x90 [ 405.270545][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.270555][T12750] RIP: 0033:0x7fa6c179ce59 [ 405.270563][T12750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.270573][T12750] RSP: 002b:00007fa6c2614ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 405.270585][T12750] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa6c179ce59 [ 405.270591][T12750] RDX: 00007fa6c2614f10 RSI: 0000000000000058 RDI: 00007fa6c2614f10 [ 405.270597][T12750] RBP: 00007fa6c2615090 R08: 0000000000000000 R09: 0000000000000058 [ 405.270603][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.270609][T12750] R13: 00007fa6c1a16038 R14: 00007fa6c1a15fa0 R15: 00007ffdf3e320f8 [ 405.270622][T12750] [ 405.652414][T12751] Option 'D' to dns_resolver key: bad/missing value [ 406.208557][T12759] tipc: Enabled bearer , priority 0 [ 406.251092][T12747] tipc: Disabling bearer [ 406.471851][T12773] lo speed is unknown, defaulting to 1000 [ 406.550727][T12774] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1794'. [ 407.522055][T12780] comedi comedi0: pcl816: I/O base address not correctly aligned [ 408.599577][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'. [ 409.306037][T12819] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1808'. [ 410.141929][T12817] lo speed is unknown, defaulting to 1000 [ 410.520787][T12825] tipc: Started in network mode [ 410.611694][T12825] tipc: Node identity e64af881be5a, cluster identity 4711 [ 410.651733][T12825] tipc: Enabled bearer , priority 0 [ 410.673739][T12823] tipc: Disabling bearer [ 411.157352][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 411.249474][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1810'. [ 411.722292][ T5740] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 411.790677][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'. [ 411.881746][ T5740] usb 6-1: Using ep0 maxpacket: 32 [ 412.080967][ T5740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.106532][ T5740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.276048][ T5740] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 412.289325][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.307721][ T5740] usb 6-1: config 0 descriptor?? [ 412.335611][ T5740] hub 6-1:0.0: USB hub found [ 412.415447][T12865] lo speed is unknown, defaulting to 1000 [ 412.511037][T12866] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1821'. [ 413.462588][ T5740] hub 6-1:0.0: 9 ports detected [ 413.490861][ T5740] hub 6-1:0.0: insufficient power available to use all downstream ports [ 413.629390][T12869] tipc: Started in network mode [ 413.641368][T12869] tipc: Node identity 6a633fc526f3, cluster identity 4711 [ 413.662651][T12869] tipc: Enabled bearer , priority 0 [ 413.766080][ T5740] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 414.145873][T12868] tipc: Disabling bearer [ 414.154816][ T5740] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 414.183679][ T5740] usbhid 6-1:0.0: can't add hid device: -71 [ 414.190642][ T5740] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 414.232695][ T5740] usb 6-1: USB disconnect, device number 31 [ 414.295902][T12873] comedi comedi0: pcl816: I/O base address not correctly aligned [ 415.841545][ T5704] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 416.523730][ T5704] usb 6-1: Using ep0 maxpacket: 32 [ 416.550415][ T5704] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 416.599929][ T5704] usb 6-1: config 0 has no interface number 0 [ 416.638753][ T5704] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 416.666809][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.695370][ T5704] usb 6-1: Product: syz [ 416.710366][ T5704] usb 6-1: Manufacturer: syz [ 416.727162][ T5704] usb 6-1: SerialNumber: syz [ 416.744798][ T5704] usb 6-1: config 0 descriptor?? [ 416.809025][ T30] audit: type=1400 audit(1782160029.535:1045): avc: denied { map } for pid=12904 comm="syz.6.1837" path="/proc/440/net/route" dev="proc" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 416.939712][ T30] audit: type=1400 audit(1782160029.545:1046): avc: denied { mmap_zero } for pid=12904 comm="syz.6.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 417.011258][T12911] nvme_fabrics: missing parameter 'transport=%s' [ 417.117015][T12911] nvme_fabrics: missing parameter 'nqn=%s' [ 417.275032][T12915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1839'. [ 417.284127][T12915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1839'. [ 417.472790][T12924] IPv6: NLM_F_CREATE should be specified when creating new route [ 417.503891][T12924] bridge2: entered promiscuous mode [ 417.575894][T12924] bridge2: entered allmulticast mode [ 417.631758][ T804] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 417.813029][ T804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.840984][ T804] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.864179][ T5704] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 417.887081][ T804] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 417.901538][ T5704] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 417.919930][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.949691][ T804] usb 5-1: config 0 descriptor?? [ 417.964719][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'. [ 417.979074][ T804] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 418.137153][ T5704] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 418.166404][ T5704] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 418.242457][ T29] usb 5-1: USB disconnect, device number 60 [ 418.426993][ T29] IPVS: starting estimator thread 0... [ 418.541551][T12938] IPVS: using max 62 ests per chain, 148800 per kthread [ 418.649366][T12939] fuse: Unknown parameter 'gra9aÐQ-€éoup_id' [ 419.038778][T12947] lo speed is unknown, defaulting to 1000 [ 419.133609][T12947] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1849'. [ 420.098286][ T29] usb 6-1: USB disconnect, device number 32 [ 420.371568][ T5704] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 420.481731][ T30] audit: type=1400 audit(1782160033.185:1047): avc: denied { bind } for pid=12956 comm="syz.4.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.392085][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 421.496820][ T5704] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 421.789461][ T5704] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 421.800390][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.810820][ T5704] usb 1-1: Product: syz [ 421.831193][ T5704] usb 1-1: Manufacturer: syz [ 421.843023][ T5704] usb 1-1: SerialNumber: syz [ 421.877725][ T5704] usb 1-1: config 0 descriptor?? [ 421.899196][ T5704] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 421.911621][ T5704] usb 1-1: Detected FT232B [ 422.858842][T12972] netlink: 'syz.1.1858': attribute type 10 has an invalid length. [ 422.870591][T12972] veth0_vlan: left promiscuous mode [ 422.876728][T12972] veth0_vlan: entered promiscuous mode [ 422.883847][T12972] team0: Device veth0_vlan failed to register rx_handler [ 423.291675][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 423.363033][ T30] audit: type=1400 audit(1782160036.095:1048): avc: denied { execute } for pid=12982 comm="syz.4.1862" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 423.471539][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 423.480665][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.493668][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.505442][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 423.539355][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 423.549409][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.590102][ T10] usb 7-1: config 0 descriptor?? [ 423.614582][ T10] hub 7-1:0.0: USB hub found [ 423.879744][ T10] hub 7-1:0.0: 9 ports detected [ 424.422631][ T10] hub 7-1:0.0: insufficient power available to use all downstream ports [ 424.567012][ T10] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 424.576166][ T10] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 425.189489][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 425.195762][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 425.286090][ T10] usb 7-1: USB disconnect, device number 19 [ 425.318903][ T5704] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 425.332731][ T5704] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 425.357183][ T5704] usb 1-1: USB disconnect, device number 68 [ 425.378823][ T5704] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 425.413372][ T5704] ftdi_sio 1-1:0.0: device disconnected [ 426.151724][ T5740] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 426.451515][ T5740] usb 5-1: Using ep0 maxpacket: 32 [ 426.583039][ T5740] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 426.756901][ T5740] usb 5-1: config 0 has no interface number 0 [ 426.779767][ T5740] usb 5-1: config 0 interface 184 has no altsetting 0 [ 426.824985][ T5740] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 426.836316][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.846631][ T5740] usb 5-1: Product: syz [ 426.864336][ T5740] usb 5-1: Manufacturer: syz [ 426.882020][ T5740] usb 5-1: SerialNumber: syz [ 426.900343][ T5740] usb 5-1: config 0 descriptor?? [ 427.002220][ T30] audit: type=1400 audit(1782160039.715:1049): avc: denied { map } for pid=13016 comm="syz.0.1872" path="pipe:[41743]" dev="pipefs" ino=41743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 427.763772][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1867'. [ 427.999897][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1876'. [ 428.411119][T13040] lo speed is unknown, defaulting to 1000 [ 428.526298][T13041] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1877'. [ 429.346741][ T5740] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 429.373516][ T5740] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 429.385162][ T5740] usb 5-1: USB disconnect, device number 61 [ 430.808498][ T30] audit: type=1400 audit(1782160043.535:1050): avc: denied { append } for pid=13064 comm="syz.5.1882" name="usbmon8" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 431.021138][T13067] xt_hashlimit: max too large, truncated to 1048576 [ 431.127735][T13067] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1882'. [ 431.533674][ T30] audit: type=1326 audit(1782160044.255:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13068 comm="syz.4.1884" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d09b9ce59 code=0x0 [ 431.741586][ T5740] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 431.903322][ T5740] usb 7-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 431.936607][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.026155][ T5740] usb 7-1: config 0 descriptor?? [ 432.048009][ T5740] pwc: Creative Labs Webcam 5 detected. [ 432.795475][T13089] lo speed is unknown, defaulting to 1000 [ 432.907348][T13090] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1888'. [ 434.362667][ T5740] pwc: recv_control_msg error -71 req 02 val 2b00 [ 434.505368][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.522340][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.529071][ T5740] pwc: recv_control_msg error -71 req 02 val 2700 [ 434.552481][ T5740] pwc: recv_control_msg error -71 req 04 val 1600 [ 434.571864][ T5740] pwc: recv_control_msg error -71 req 02 val 2c00 [ 434.667241][ T5740] pwc: recv_control_msg error -71 req 04 val 1000 [ 434.685134][ T5740] pwc: recv_control_msg error -71 req 04 val 1300 [ 434.707616][ T5740] pwc: recv_control_msg error -71 req 04 val 1400 [ 434.743125][ T5740] pwc: recv_control_msg error -71 req 02 val 2000 [ 434.766038][ T5740] pwc: recv_control_msg error -71 req 02 val 2100 [ 434.788557][ T5740] pwc: recv_control_msg error -71 req 06 val 0600 [ 434.818867][ T5740] pwc: recv_control_msg error -71 req 04 val 1500 [ 434.835213][ T5740] pwc: recv_control_msg error -71 req 02 val 2500 [ 434.852443][ T5740] pwc: recv_control_msg error -71 req 02 val 2400 [ 434.870850][ T5740] pwc: recv_control_msg error -71 req 02 val 2600 [ 434.882647][ T5740] pwc: recv_control_msg error -71 req 02 val 2900 [ 434.900934][ T5740] pwc: recv_control_msg error -71 req 02 val 2800 [ 434.916117][ T5740] pwc: recv_control_msg error -71 req 04 val 1100 [ 434.939921][ T5740] pwc: recv_control_msg error -71 req 04 val 1200 [ 434.953435][ T5740] pwc: Failed to power off camera (-71) [ 434.968721][ T5740] pwc: Registered as video103. [ 434.996807][ T5740] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input52 [ 435.035707][ T5740] usb 7-1: USB disconnect, device number 20 [ 435.087400][T13113] FAULT_INJECTION: forcing a failure. [ 435.087400][T13113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.400285][T13113] CPU: 0 UID: 0 PID: 13113 Comm: syz.4.1892 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.400318][T13113] Tainted: [L]=SOFTLOCKUP [ 435.400325][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 435.400335][T13113] Call Trace: [ 435.400340][T13113] [ 435.400347][T13113] dump_stack_lvl+0x100/0x190 [ 435.400372][T13113] should_fail_ex.cold+0x5/0xa [ 435.400394][T13113] _copy_from_user+0x2e/0xd0 [ 435.400419][T13113] copy_msghdr_from_user+0x9f/0x4c0 [ 435.400447][T13113] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 435.400476][T13113] ? kstrtouint_from_user+0x13c/0x1d0 [ 435.400493][T13113] ___sys_sendmsg+0x106/0x1e0 [ 435.400517][T13113] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.400540][T13113] ? get_pid_task+0x106/0x250 [ 435.400566][T13113] ? rcu_is_watching+0x12/0xc0 [ 435.400595][T13113] __sys_sendmsg+0x160/0x210 [ 435.400615][T13113] ? __pfx___sys_sendmsg+0x10/0x10 [ 435.400638][T13113] ? rcu_is_watching+0x12/0xc0 [ 435.400660][T13113] do_syscall_64+0x115/0x870 [ 435.400681][T13113] ? clear_bhb_loop+0x40/0x90 [ 435.400700][T13113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.400718][T13113] RIP: 0033:0x7f8d09b9ce59 [ 435.400731][T13113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.400747][T13113] RSP: 002b:00007f8d0a9e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.400764][T13113] RAX: ffffffffffffffda RBX: 00007f8d09e16180 RCX: 00007f8d09b9ce59 [ 435.400775][T13113] RDX: 0000000004000020 RSI: 0000200000000080 RDI: 0000000000000005 [ 435.400785][T13113] RBP: 00007f8d0a9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.400794][T13113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.400804][T13113] R13: 00007f8d09e16218 R14: 00007f8d09e16180 R15: 00007ffe3d2a23d8 [ 435.400821][T13113] [ 436.603458][T13128] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1898'. [ 437.808372][T13133] lo speed is unknown, defaulting to 1000 [ 437.904471][T13134] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1900'. [ 438.711587][ T5740] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 439.171503][ T5740] usb 7-1: Using ep0 maxpacket: 8 [ 439.180967][ T5740] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 439.198510][ T5740] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 439.220813][ T5740] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 439.237508][ T5740] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 439.250040][ T5740] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 439.265951][ T5740] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.280454][ T5740] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 439.291921][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.061507][ T837] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 441.228875][ T5740] usb 7-1: usb_control_msg returned -71 [ 441.253640][ T837] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.266801][ T5740] usbtmc 7-1:16.0: can't read capabilities [ 441.276790][ T837] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.291584][ T5740] usb 7-1: USB disconnect, device number 21 [ 441.298804][ T837] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 441.323711][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.336827][ T837] usb 6-1: config 0 descriptor?? [ 441.345962][ T837] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 441.644347][ T5740] usb 6-1: USB disconnect, device number 33 [ 441.731601][T13190] netlink: 'syz.4.1919': attribute type 29 has an invalid length. [ 441.751277][T13190] netlink: 'syz.4.1919': attribute type 29 has an invalid length. [ 441.766673][T13190] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1919'. [ 443.711584][ T10] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 444.089043][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.099455][ T10] usb 6-1: config 0 has no interfaces? [ 444.109533][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 444.127554][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 444.127601][ T10] usb 6-1: Manufacturer: syz [ 444.148790][ T10] usb 6-1: config 0 descriptor?? [ 444.228778][T13221] syzkaller0: entered promiscuous mode [ 444.228797][T13221] syzkaller0: entered allmulticast mode [ 444.231084][T13221] tipc: Enabled bearer , priority 0 [ 444.232361][T13220] tipc: Resetting bearer [ 444.244895][T13220] tipc: Disabling bearer [ 444.761771][ T837] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 444.922021][ T837] usb 7-1: Using ep0 maxpacket: 16 [ 444.928713][ T837] usb 7-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 444.939356][ T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.953736][ T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65473, setting to 1024 [ 444.966351][ T837] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 444.977574][ T837] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.074991][ T837] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 445.084520][ T837] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 445.093327][ T837] usb 7-1: Manufacturer: syz [ 445.100999][ T837] usb 7-1: config 0 descriptor?? [ 445.205309][T13238] lo speed is unknown, defaulting to 1000 [ 445.296407][T13239] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1933'. [ 446.241859][ T837] rc_core: IR keymap rc-hauppauge not found [ 446.250422][ T837] Registered IR keymap rc-empty [ 446.267578][ T837] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 446.302107][ T837] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 446.334292][ T837] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 446.358281][ T837] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input53 [ 446.425687][ T837] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 446.433794][ C1] mceusb 7-1:0.0: short-range (0x3a) receiver active [ 446.470969][ C1] rc rc0: IR event FIFO is full! [ 446.475942][ C1] rc rc0: IR event FIFO is full! [ 446.480877][ C1] rc rc0: IR event FIFO is full! [ 446.485809][ C1] rc rc0: IR event FIFO is full! [ 446.490738][ C1] rc rc0: IR event FIFO is full! [ 446.496506][ C1] rc rc0: IR event FIFO is full! [ 446.501467][ C1] rc rc0: IR event FIFO is full! [ 446.506407][ C1] rc rc0: IR event FIFO is full! [ 446.511332][ C1] rc rc0: IR event FIFO is full! [ 446.516340][ C1] rc rc0: IR event FIFO is full! [ 446.521257][ C1] rc rc0: IR event FIFO is full! [ 446.526176][ C1] rc rc0: IR event FIFO is full! [ 446.531097][ C1] rc rc0: IR event FIFO is full! [ 446.536022][ C1] rc rc0: IR event FIFO is full! [ 446.542050][ C1] rc rc0: IR event FIFO is full! [ 446.546988][ C1] rc rc0: IR event FIFO is full! [ 446.551927][ C1] rc rc0: IR event FIFO is full! [ 446.556860][ C1] rc rc0: IR event FIFO is full! [ 446.561779][ C1] rc rc0: IR event FIFO is full! [ 446.566699][ C1] rc rc0: IR event FIFO is full! [ 446.571615][ C1] rc rc0: IR event FIFO is full! [ 446.576552][ C1] rc rc0: IR event FIFO is full! [ 446.581471][ C1] rc rc0: IR event FIFO is full! [ 446.587429][ C1] rc rc0: IR event FIFO is full! [ 446.592360][ C1] rc rc0: IR event FIFO is full! [ 446.597303][ C1] rc rc0: IR event FIFO is full! [ 446.602229][ C1] rc rc0: IR event FIFO is full! [ 446.609136][T13251] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 446.617175][T13251] netlink: 'syz.4.1936': attribute type 2 has an invalid length. [ 446.821984][ T837] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 446.834431][T13252] bond7: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 446.855485][ T5740] usb 6-1: USB disconnect, device number 34 [ 446.939585][T13252] bond7 (unregistering): Released all slaves [ 446.968036][ T837] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 448.172011][ T837] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 448.202008][ T837] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 448.272664][ T837] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 448.304908][ T837] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 448.334985][ T837] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 448.342627][T13263] syzkaller0: entered promiscuous mode [ 448.351956][T13263] syzkaller0: entered allmulticast mode [ 448.391796][ T837] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 448.392814][T13263] tipc: Enabled bearer , priority 0 [ 448.423186][ T837] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 448.452476][ T837] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 448.463867][T13262] tipc: Resetting bearer [ 448.479559][ T837] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x3a active) [ 448.503265][T13262] tipc: Disabling bearer [ 448.510920][ T837] usb 7-1: USB disconnect, device number 22 [ 448.754534][ T30] audit: type=1400 audit(1782160061.485:1052): avc: denied { read } for pid=13275 comm="syz.0.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 449.969808][T13292] netlink: 'syz.5.1942': attribute type 4 has an invalid length. [ 449.978043][T13292] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1942'. [ 449.991581][ T5742] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 450.055515][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1942'. [ 450.090485][T13296] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 450.106321][T13296] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 450.112845][T13303] syz_tun: entered allmulticast mode [ 450.128883][T13301] syz_tun: left allmulticast mode [ 450.151766][ T5742] usb 5-1: Using ep0 maxpacket: 32 [ 450.158207][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.187636][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.200886][ T5742] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 450.217698][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.234946][ T5742] usb 5-1: config 0 descriptor?? [ 450.252981][ T5742] hub 5-1:0.0: USB hub found [ 450.301929][ T837] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 450.474903][ T837] usb 6-1: Using ep0 maxpacket: 32 [ 450.521391][ T837] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 450.538562][ T5742] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 450.573790][ T837] usb 6-1: config 0 has no interface number 0 [ 450.600288][ T837] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 450.611236][ T5742] usbhid 5-1:0.0: can't add hid device: -71 [ 450.629680][ T5742] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 450.641325][ T837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.679968][ T837] usb 6-1: Product: syz [ 450.696416][ T5742] usb 5-1: USB disconnect, device number 62 [ 450.705846][ T837] usb 6-1: Manufacturer: syz [ 450.720204][ T837] usb 6-1: SerialNumber: syz [ 450.731534][ T5740] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 450.788845][ T837] usb 6-1: config 0 descriptor?? [ 450.830025][ T837] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 450.941787][ T5740] usb 1-1: device descriptor read/64, error -71 [ 451.115578][ T837] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 451.432286][ T5740] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 451.512917][ T837] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 451.601979][ T5740] usb 1-1: device descriptor read/64, error -71 [ 451.742724][ T5740] usb usb1-port1: attempt power cycle [ 451.778728][T13299] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1942'. [ 452.076702][T13323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34084 sclass=netlink_route_socket pid=13323 comm=syz.5.1942 [ 452.362778][ T5740] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 452.576054][ T5740] usb 1-1: device descriptor read/8, error -71 [ 452.640875][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 452.641575][ T5704] usb 6-1: USB disconnect, device number 35 [ 452.659664][ T5704] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 452.707415][ T5704] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 452.730094][ T5704] quatech2 6-1:0.51: device disconnected [ 453.732408][ T5740] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 453.744744][T13344] lo speed is unknown, defaulting to 1000 [ 453.805771][T13344] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1963'. [ 455.802329][ T30] audit: type=1800 audit(1782160068.515:1053): pid=13348 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1964" name="file0" dev="overlay" ino=2084 res=0 errno=0 [ 456.347753][ T5740] usb 1-1: device descriptor read/8, error -71 [ 456.464814][ T5740] usb usb1-port1: unable to enumerate USB device [ 456.671563][ T837] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 456.911679][ T837] usb 6-1: Using ep0 maxpacket: 16 [ 456.988832][ T837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 457.021978][ T5740] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 457.145569][ T837] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 457.163666][ T837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.182508][ T837] usb 6-1: Product: syz [ 457.190959][ T837] usb 6-1: Manufacturer: syz [ 457.201793][ T837] usb 6-1: SerialNumber: syz [ 457.216460][ T837] usb 6-1: config 0 descriptor?? [ 457.242361][ T837] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 457.254407][ T837] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 457.311569][ T5740] usb 1-1: Using ep0 maxpacket: 16 [ 457.318301][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 457.330404][ T5740] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 457.339627][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.357038][ T5740] usb 1-1: Product: syz [ 457.373958][ T5740] usb 1-1: Manufacturer: syz [ 457.378921][ T5740] usb 1-1: SerialNumber: syz [ 457.390841][ T5740] usb 1-1: config 0 descriptor?? [ 457.399448][ T5740] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 457.409837][ T5740] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 457.416851][T13383] kvm: emulating exchange as write [ 457.447966][T13382] overlay: Bad value for 'redirect_dir' [ 457.853296][ T837] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 457.975382][T13400] lo speed is unknown, defaulting to 1000 [ 458.074964][T13401] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1978'. [ 458.380883][ T5740] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 458.601938][ T837] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 458.714236][ T837] em28xx 6-1:0.0: board has no eeprom [ 459.869946][ T5740] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 459.887726][ T5740] em28xx 1-1:0.0: board has no eeprom [ 459.931479][ T837] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 459.951816][ T837] em28xx 6-1:0.0: dvb set to bulk mode. [ 459.966242][ T29] em28xx 6-1:0.0: Binding DVB extension [ 460.037187][ T837] usb 6-1: USB disconnect, device number 36 [ 460.179843][ T837] em28xx 6-1:0.0: Disconnecting em28xx [ 460.379138][ T29] em28xx 6-1:0.0: Registering input extension [ 460.405778][ T837] em28xx 6-1:0.0: Closing input extension [ 460.411977][ T5740] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 460.435609][ T5740] em28xx 1-1:0.0: dvb set to bulk mode. [ 460.445332][T13421] fuse: Bad value for 'fd' [ 460.450877][ T5705] em28xx 1-1:0.0: Binding DVB extension [ 460.571011][T13438] netlink: 'syz.1.1991': attribute type 23 has an invalid length. [ 460.641768][ T29] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 460.763768][ T5704] usb 1-1: USB disconnect, device number 73 [ 460.765491][ T837] em28xx 6-1:0.0: Freeing device [ 460.771342][ T5704] em28xx 1-1:0.0: Disconnecting em28xx [ 460.801489][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 460.818692][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.842981][ T5705] em28xx 1-1:0.0: Registering input extension [ 460.857093][ T5704] em28xx 1-1:0.0: Closing input extension [ 460.857169][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.874574][ T29] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 460.886881][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.889871][ T5704] em28xx 1-1:0.0: Freeing device [ 460.896401][ T29] usb 7-1: config 0 descriptor?? [ 460.927610][ T29] hub 7-1:0.0: USB hub found [ 460.948396][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1993'. [ 460.985828][T13450] kAFS: unable to lookup cell 'ßñÏ(,c¾ûL' [ 461.012093][T13450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.022836][T13450] bond5 (unregistering): Released all slaves [ 461.224137][ T29] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 461.235123][ T29] usbhid 7-1:0.0: can't add hid device: -71 [ 461.241070][ T29] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 461.262634][ T29] usb 7-1: USB disconnect, device number 23 [ 461.344205][T13462] lo speed is unknown, defaulting to 1000 [ 461.419865][T13463] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1995'. [ 463.939986][ T30] audit: type=1800 audit(1782160076.665:1054): pid=13480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2000" name="file0" dev="overlay" ino=2149 res=0 errno=0 [ 464.025690][T13487] tipc: Enabling of bearer rejected, failed to enable media [ 464.146500][ T30] audit: type=1326 audit(1782160076.875:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2004" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384b79ce59 code=0x7ffc0000 [ 464.201724][ T30] audit: type=1326 audit(1782160076.915:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2004" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384b79ce59 code=0x7ffc0000 [ 464.229623][ T30] audit: type=1326 audit(1782160076.915:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2004" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384b79ce59 code=0x7ffc0000 [ 464.289103][ T30] audit: type=1326 audit(1782160076.915:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2004" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384b79ce59 code=0x7ffc0000 [ 464.346923][ T30] audit: type=1326 audit(1782160076.915:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2004" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384b79ce59 code=0x7ffc0000 [ 464.395395][ T30] audit: type=1326 audit(1782160076.915:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2004" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f384b79ce59 code=0x7ffc0000 [ 464.501604][ T30] audit: type=1326 audit(1782160076.915:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2004" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384b79ce59 code=0x7ffc0000 [ 464.600466][T13500] comedi comedi0: pcl711: I/O base address not correctly aligned [ 465.039722][ T30] audit: type=1326 audit(1782160076.915:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2004" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384b79ce59 code=0x7ffc0000 [ 465.067624][ T30] audit: type=1326 audit(1782160076.915:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2004" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384b79ce59 code=0x7ffc0000 [ 465.095210][ T5704] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 465.544122][ T5704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.935237][ T5704] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 466.768795][ T5704] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.786451][ T5704] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 466.865975][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.892127][ T5704] usb 5-1: Product: syz [ 466.900445][ T5704] usb 5-1: Manufacturer: syz [ 466.910421][ T5704] usb 5-1: SerialNumber: syz [ 466.929005][ T5704] usb 5-1: config 0 descriptor?? [ 466.939979][T13496] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 466.955643][ T5704] usb 5-1: ucan: probing device on interface #0 [ 466.966188][ T5704] usb 5-1: ucan: invalid EP count (1) [ 466.972801][ T5704] usb 5-1: ucan: probe failed; try to update the device firmware [ 467.446140][T13524] lo speed is unknown, defaulting to 1000 [ 467.526298][T13526] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2013'. [ 468.611718][ T837] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 468.699567][ T5705] usb 5-1: USB disconnect, device number 63 [ 468.781496][ T837] usb 7-1: Using ep0 maxpacket: 16 [ 468.794613][ T837] usb 7-1: config 166 has an invalid interface number: 177 but max is 1 [ 468.816130][ T837] usb 7-1: config 166 has an invalid interface number: 34 but max is 1 [ 468.828153][ T837] usb 7-1: config 166 has no interface number 0 [ 468.835712][ T837] usb 7-1: config 166 has no interface number 1 [ 468.844740][ T837] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 468.856354][ T837] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 468.871825][ T5704] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 468.873403][ T837] usb 7-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 468.909921][ T837] usb 7-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 468.930911][ T837] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 468.956534][ T837] usb 7-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 468.979386][ T837] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 468.990935][ T837] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 469.000968][ T837] usb 7-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 469.016243][ T837] usb 7-1: config 166 interface 177 has no altsetting 0 [ 469.024241][ T837] usb 7-1: config 166 interface 34 has no altsetting 0 [ 469.031585][ T10] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 469.033932][ T837] usb 7-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 469.048824][ T837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.058104][ T837] usb 7-1: Product: syz [ 469.062853][ T837] usb 7-1: Manufacturer: syz [ 469.064523][ T5704] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 469.067466][ T837] usb 7-1: SerialNumber: syz [ 469.101474][ T5704] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 469.203292][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 469.217264][ T10] usb 1-1: config 6 has an invalid interface number: 136 but max is 2 [ 469.226133][ T10] usb 1-1: config 6 has an invalid interface number: 130 but max is 2 [ 469.235829][ T10] usb 1-1: config 6 has an invalid interface number: 178 but max is 2 [ 469.246487][ T10] usb 1-1: config 6 has no interface number 0 [ 469.252878][ T10] usb 1-1: config 6 has no interface number 1 [ 469.259296][ T10] usb 1-1: config 6 has no interface number 2 [ 469.266705][ T10] usb 1-1: config 6 interface 136 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.278542][ T10] usb 1-1: config 6 interface 136 altsetting 0 endpoint 0xB has invalid maxpacket 47864, setting to 64 [ 469.290199][ T10] usb 1-1: config 6 interface 136 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 469.304456][ T10] usb 1-1: config 6 interface 136 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 469.338240][ T10] usb 1-1: config 6 interface 136 altsetting 0 endpoint 0x7 has an invalid bInterval 17, changing to 4 [ 469.371986][ T10] usb 1-1: config 6 interface 136 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 469.403719][ T10] usb 1-1: config 6 interface 136 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 469.434807][ T10] usb 1-1: config 6 interface 136 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 469.462638][ T10] usb 1-1: config 6 interface 136 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.488919][ T10] usb 1-1: config 6 interface 136 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 469.513512][ T10] usb 1-1: config 6 interface 136 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 469.542652][ T10] usb 1-1: config 6 interface 136 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 469.591572][ T10] usb 1-1: config 6 interface 130 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 469.610752][ T10] usb 1-1: config 6 interface 130 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 469.697277][T13567] lo speed is unknown, defaulting to 1000 [ 469.781691][T13568] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2026'. [ 470.574320][ T10] usb 1-1: config 6 interface 130 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 470.589750][ T10] usb 1-1: config 6 interface 130 altsetting 5 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 470.602342][ T10] usb 1-1: config 6 interface 130 altsetting 5 endpoint 0x82 has an invalid bInterval 46, changing to 4 [ 470.614106][ T10] usb 1-1: config 6 interface 130 altsetting 5 endpoint 0x82 has invalid maxpacket 44668, setting to 1023 [ 471.984945][ T10] usb 1-1: config 6 interface 130 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 472.034143][ T837] ums-realtek 7-1:166.177: USB Mass Storage device detected [ 472.194062][ T10] usb 1-1: config 6 interface 130 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 472.278985][ T837] ums-realtek 7-1:166.34: USB Mass Storage device detected [ 472.496267][ T837] ums-realtek 7-1:166.34: probe with driver ums-realtek failed with error -5 [ 472.663984][ T837] uvcvideo 7-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 472.692603][ T10] usb 1-1: config 6 interface 130 altsetting 5 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 472.704389][ T10] usb 1-1: config 6 interface 130 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 472.704519][ T5704] usb 6-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 472.723136][ T837] uvcvideo 7-1:166.34: No valid video chain found. [ 472.731511][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.735461][T13586] hfs: unable to load iocharset "io#harset" [ 472.739855][ T10] usb 1-1: config 6 interface 130 altsetting 5 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 472.760539][ T10] usb 1-1: config 6 interface 178 altsetting 179 has an endpoint descriptor with address 0x11, changing to 0x1 [ 472.777758][ T5704] usb 6-1: can't set config #1, error -71 [ 472.802403][ T837] usb 7-1: USB disconnect, device number 24 [ 472.805160][ T5704] usb 6-1: USB disconnect, device number 37 [ 472.819099][ T10] usb 1-1: config 6 interface 178 altsetting 179 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 472.959870][ T10] usb 1-1: config 6 interface 178 altsetting 179 has a duplicate endpoint with address 0x9, skipping [ 472.971295][ T10] usb 1-1: config 6 interface 178 altsetting 179 has a duplicate endpoint with address 0x7, skipping [ 472.982616][ T10] usb 1-1: config 6 interface 178 altsetting 179 has a duplicate endpoint with address 0x9, skipping [ 472.994667][ T10] usb 1-1: config 6 interface 178 altsetting 179 has a duplicate endpoint with address 0x7, skipping [ 473.009574][ T10] usb 1-1: config 6 interface 178 altsetting 179 has a duplicate endpoint with address 0xB, skipping [ 473.024776][ T10] usb 1-1: config 6 interface 178 altsetting 179 has a duplicate endpoint with address 0x7, skipping [ 473.055576][ T10] usb 1-1: config 6 interface 178 altsetting 179 has an invalid descriptor for endpoint zero, skipping [ 473.090946][T13597] netlink: 'syz.0.2033': attribute type 10 has an invalid length. [ 473.099257][T13597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2033'. [ 473.113187][ T10] usb 1-1: config 6 interface 178 altsetting 179 has a duplicate endpoint with address 0x2, skipping [ 473.125064][ T10] usb 1-1: config 6 interface 178 altsetting 179 has a duplicate endpoint with address 0x6, skipping [ 473.137765][ T10] usb 1-1: config 6 interface 130 has no altsetting 0 [ 473.144938][ T10] usb 1-1: config 6 interface 178 has no altsetting 0 [ 473.156568][ T10] usb 1-1: string descriptor 0 read error: -71 [ 473.165322][ T10] usb 1-1: New USB device found, idVendor=0d8e, idProduct=3762, bcdDevice=ee.17 [ 473.175352][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.339566][ T10] usb 1-1: can't set config #6, error -71 [ 473.348378][ T10] usb 1-1: USB disconnect, device number 74 [ 473.392364][ T5704] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 473.455236][T13607] openvswitch: netlink: IP tunnel dst address not specified [ 473.741507][ T5704] usb 6-1: Using ep0 maxpacket: 16 [ 473.897911][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 474.047077][ T5704] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 474.047118][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.047148][ T5704] usb 6-1: Product: syz [ 474.047173][ T5704] usb 6-1: Manufacturer: syz [ 474.047198][ T5704] usb 6-1: SerialNumber: syz [ 474.248983][ T5704] usb 6-1: config 0 descriptor?? [ 474.335839][ T5704] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 474.335870][ T5704] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 474.621026][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 474.621052][ T30] audit: type=1800 audit(1782160087.345:1131): pid=13623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.2040" name="/" dev="sysfs" ino=1 res=0 errno=0 [ 474.883527][ T30] audit: type=1400 audit(1782160087.605:1132): avc: denied { map } for pid=13633 comm="syz.4.2043" path="socket:[44665]" dev="sockfs" ino=44665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 475.861660][ T5704] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 475.985061][ T5704] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 475.995820][ T5704] em28xx 6-1:0.0: board has no eeprom [ 476.351559][ T5704] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 476.360243][ T5704] em28xx 6-1:0.0: dvb set to bulk mode. [ 476.369177][ T10] em28xx 6-1:0.0: Binding DVB extension [ 477.285661][T13680] comedi comedi0: pcl711: I/O base address not correctly aligned [ 477.810635][T13682] openvswitch: netlink: IP tunnel dst address not specified [ 478.082975][T13582] em28xx 6-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 478.230073][ T30] audit: type=1400 audit(1782160090.955:1133): avc: denied { read } for pid=13686 comm="syz.0.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 478.257038][T13685] netlink: 'syz.4.2062': attribute type 1 has an invalid length. [ 478.273559][ T5725] usb 6-1: USB disconnect, device number 38 [ 478.281333][T13689] tipc: Enabled bearer , priority 0 [ 478.290975][T13689] syzkaller0: entered promiscuous mode [ 478.297328][T13689] syzkaller0: entered allmulticast mode [ 478.305118][ T5725] em28xx 6-1:0.0: Disconnecting em28xx [ 478.312023][ T10] em28xx 6-1:0.0: Registering input extension [ 478.336034][ T5725] em28xx 6-1:0.0: Closing input extension [ 478.357777][T13685] 8021q: adding VLAN 0 to HW filter on device bond7 [ 478.366321][ T5725] em28xx 6-1:0.0: Freeing device [ 478.386506][T13689] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2065'. [ 478.414058][T13695] tipc: Resetting bearer [ 478.479432][T13688] tipc: Resetting bearer [ 478.490667][T13688] tipc: Disabling bearer [ 478.538777][ T30] audit: type=1400 audit(1782160091.265:1134): avc: denied { unmount } for pid=9336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 478.561766][ T5705] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 478.701497][ T837] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 478.721533][ T5705] usb 5-1: Invalid ep0 maxpacket: 64 [ 478.831674][ T5725] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 478.917951][ T5705] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 478.932591][ T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.943614][ T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.954296][ T837] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 478.963441][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.972757][ T837] usb 7-1: config 0 descriptor?? [ 479.082416][ T5705] usb 5-1: Invalid ep0 maxpacket: 64 [ 479.089782][ T5705] usb usb5-port1: attempt power cycle [ 479.412497][ T5725] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.425253][ T5725] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40 [ 479.431860][T13697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.443684][ T5705] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 479.465722][T13697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.475532][ T5705] usb 5-1: Invalid ep0 maxpacket: 64 [ 479.545175][ T837] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x1 [ 479.558482][ T837] cp2112 0003:10C4:EA90.0011: unknown global tag 0xc [ 479.572140][ T837] cp2112 0003:10C4:EA90.0011: item 0 2 1 12 parsing failed [ 479.598064][ T837] cp2112 0003:10C4:EA90.0011: parse failed [ 479.619795][ T837] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -22 [ 479.628877][ T5705] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 479.725740][ T5705] usb 5-1: Invalid ep0 maxpacket: 64 [ 479.730931][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 479.739742][ T5725] usb 6-1: SerialNumber: syz [ 479.759474][ T5725] cdc_ether 6-1:1.0: skipping garbage [ 479.765362][ T5725] cdc_ether 6-1:1.0: missing cdc ether descriptor [ 480.409334][T13697] bond3: option resend_igmp: invalid value (2878) [ 480.441526][T13697] bond3: option resend_igmp: allowed values 0 - 255 [ 480.486417][T13714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2070'. [ 480.679683][T13697] bond3 (unregistering): Released all slaves [ 480.686105][ T5705] usb usb5-port1: unable to enumerate USB device [ 480.855724][ T10] usb 6-1: USB disconnect, device number 39 [ 481.058220][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 481.339497][T13720] netlink: 'syz.1.2071': attribute type 20 has an invalid length. [ 481.353337][T13720] netlink: 'syz.1.2071': attribute type 22 has an invalid length. [ 481.363283][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 481.389433][T13720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=13720 comm=syz.1.2071 [ 481.458876][ T5705] usb 7-1: USB disconnect, device number 25 [ 481.727644][T13729] SELinux: failed to load policy [ 483.814797][T13749] siw: device registration error -23 [ 483.988358][T13762] comedi comedi0: pcl711: I/O base address not correctly aligned [ 484.781707][T13760] lo speed is unknown, defaulting to 1000 [ 485.913329][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2090'. [ 485.922751][T13781] netlink: 'syz.6.2090': attribute type 30 has an invalid length. [ 485.942072][ T459] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.942185][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2090'. [ 485.960499][T13781] netlink: 'syz.6.2090': attribute type 30 has an invalid length. [ 486.161544][ T459] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.212409][ T459] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.221186][ T459] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.283643][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2082'. [ 486.387752][T13787] lo speed is unknown, defaulting to 1000 [ 487.626151][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'. [ 487.663629][ T30] audit: type=1400 audit(1782160100.395:1135): avc: denied { create } for pid=13794 comm="syz.6.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 487.913899][T13805] syzkaller0: entered allmulticast mode [ 488.002576][ T5718] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 488.103566][ T30] audit: type=1400 audit(1782160100.825:1136): avc: denied { create } for pid=13815 comm="syz.4.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 488.161704][ T30] audit: type=1400 audit(1782160100.885:1137): avc: denied { setattr } for pid=13815 comm="syz.4.2096" name="XDP" dev="sockfs" ino=45352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 488.200830][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2093'. [ 488.200860][ T30] audit: type=1400 audit(1782160100.895:1138): avc: denied { ioctl } for pid=13815 comm="syz.4.2096" path="socket:[45352]" dev="sockfs" ino=45352 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 488.236041][ T5718] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.247309][ T5718] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 488.256664][ T5718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.266592][ T5718] usb 7-1: config 0 descriptor?? [ 488.337510][T13819] netlink: 'syz.4.2097': attribute type 1 has an invalid length. [ 488.355491][T13819] 8021q: adding VLAN 0 to HW filter on device bond8 [ 488.373594][T13819] bond1: (slave dummy0): Releasing active interface [ 488.386166][T13819] bond8: (slave dummy0): making interface the new active one [ 488.397746][T13819] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 488.414169][ T5705] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 488.477787][ T5718] usbhid 7-1:0.0: can't add hid device: -71 [ 488.485804][ T5718] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 488.498255][ T5718] usb 7-1: USB disconnect, device number 26 [ 488.591519][ T5705] usb 1-1: Using ep0 maxpacket: 16 [ 489.047206][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 489.112265][ T5718] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 489.700671][ T30] audit: type=1400 audit(1782160102.315:1139): avc: denied { allowed } for pid=13829 comm="syz.4.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 489.723007][ T5705] usb 1-1: config 1 has an invalid interface number: 78 but max is 0 [ 489.731269][ T5705] usb 1-1: config 1 has no interface number 0 [ 489.737696][ T5705] usb 1-1: config 1 interface 78 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 489.745416][ T5718] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.759701][ T5718] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 489.778173][ T5705] usb 1-1: config 1 interface 78 altsetting 93 endpoint 0x83 has invalid wMaxPacketSize 0 [ 489.778916][ T5718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.801685][ T5705] usb 1-1: config 1 interface 78 altsetting 93 bulk endpoint 0x83 has invalid maxpacket 0 [ 490.000110][ T5718] usb 7-1: config 0 descriptor?? [ 490.050451][ T5705] usb 1-1: config 1 interface 78 has no altsetting 0 [ 490.058958][ T5705] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=df.57 [ 490.150705][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.159418][ T5705] usb 1-1: Product: syz [ 490.163837][ T5705] usb 1-1: Manufacturer: syz [ 490.168623][ T5705] usb 1-1: SerialNumber: syz [ 490.179907][T13814] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 490.278408][T13846] lo speed is unknown, defaulting to 1000 [ 490.364354][T13847] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2106'. [ 491.369262][ T30] audit: type=1400 audit(1782160104.095:1140): avc: denied { cmd } for pid=13794 comm="syz.6.2092" path="socket:[43665]" dev="sockfs" ino=43665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 491.521745][ T5705] spcp8x5 1-1:1.78: SPCP8x5 converter detected [ 491.555217][ T5705] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 491.629682][ T5705] usb 1-1: USB disconnect, device number 75 [ 491.919616][ T5705] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 492.076265][ T5705] spcp8x5 1-1:1.78: device disconnected [ 492.644601][ T5718] usbhid 7-1:0.0: can't add hid device: -71 [ 492.815029][ T5718] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 492.827058][ T5718] usb 7-1: USB disconnect, device number 27 [ 493.216210][T13881] lo speed is unknown, defaulting to 1000 [ 493.306508][T13882] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2113'. [ 494.235823][T13887] fuse: Bad value for 'fd' [ 494.565576][ T30] audit: type=1400 audit(1782160107.295:1141): avc: denied { read } for pid=13890 comm="syz.4.2119" dev="nsfs" ino=4026533345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 494.589590][ T30] audit: type=1400 audit(1782160107.325:1142): avc: denied { open } for pid=13890 comm="syz.4.2119" path="net:[4026533345]" dev="nsfs" ino=4026533345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 494.873673][T13912] syzkaller0: entered promiscuous mode [ 494.883639][T13912] syzkaller0: entered allmulticast mode [ 495.912641][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.958877][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.215441][T13898] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 496.232823][T13898] SELinux: failed to load policy [ 496.335121][T13915] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2122'. [ 496.478510][T13924] lo speed is unknown, defaulting to 1000 [ 496.656556][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 496.692768][T13925] 8021q: adding VLAN 0 to HW filter on device eth0 [ 496.704644][T13925] 8021q: adding VLAN 0 to HW filter on device eth1 [ 496.714636][T13925] 8021q: adding VLAN 0 to HW filter on device eth2 [ 496.724632][T13925] 8021q: adding VLAN 0 to HW filter on device eth3 [ 497.161514][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 497.311523][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 497.324394][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.344942][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.367889][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 497.378399][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.390093][ T10] usb 6-1: config 0 descriptor?? [ 497.399234][ T10] hub 6-1:0.0: USB hub found [ 497.553443][T13891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.624653][ T10] hub 6-1:0.0: 1 port detected [ 497.758678][T13955] ntfs3(nullb0): Primary boot signature is not NTFS. [ 497.766161][T13955] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 497.933640][T13960] openvswitch: netlink: IP tunnel dst address not specified [ 498.813116][ T10] hub 6-1:0.0: activate --> -90 [ 498.839901][T13965] futex_wake_op: syz.1.2136 tries to shift op by 144; fix this program [ 498.873969][ T30] audit: type=1400 audit(1782160111.605:1143): avc: denied { validate_trans } for pid=13964 comm="syz.1.2136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 499.224064][ T837] usb 6-1: USB disconnect, device number 40 [ 499.294210][T13974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13974 comm=syz.4.2138 [ 499.308843][T13974] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 499.322830][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 500.064492][T13983] siw: device registration error -23 [ 501.166325][T13991] comedi comedi0: pcl711: I/O base address not correctly aligned [ 501.339131][T13993] tipc: Enabling of bearer rejected, failed to enable media [ 501.659033][T14001] tipc: Enabled bearer , priority 0 [ 501.674989][T14001] syzkaller0: entered promiscuous mode [ 501.684816][T14001] syzkaller0: entered allmulticast mode [ 501.878136][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2139'. [ 502.761665][ T837] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 502.787041][T14006] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2143'. [ 502.798841][ T5705] tipc: Node number set to 1477507201 [ 502.808324][T14001] tipc: Resetting bearer [ 502.830141][T13999] tipc: Resetting bearer [ 502.868703][T13999] tipc: Disabling bearer [ 502.935417][ T837] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 502.947128][ T837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 502.971645][ T837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 502.999626][ T837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 503.036609][ T837] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 503.071678][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.170629][ T837] usb 6-1: config 0 descriptor?? [ 503.946600][ T837] usbhid 6-1:0.0: can't add hid device: -71 [ 503.974322][ T837] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 504.006650][ T837] usb 6-1: USB disconnect, device number 41 [ 504.144406][T14014] SELinux: failed to load policy [ 504.214868][T14023] netlink: 'syz.4.2145': attribute type 23 has an invalid length. [ 504.634340][T14036] netlink: 'syz.5.2153': attribute type 1 has an invalid length. [ 504.958842][T14040] comedi comedi0: pcl711: I/O base address not correctly aligned [ 505.159243][T14036] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 505.695157][T14062] openvswitch: netlink: IP tunnel dst address not specified [ 506.221542][ T5718] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 506.604713][ T5718] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 506.621125][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 506.645238][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 506.657992][ T5718] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 506.679395][T14074] openvswitch: netlink: IP tunnel dst address not specified [ 506.698553][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2157'. [ 506.727949][ T5718] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 506.751901][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.840875][ T5718] usb 6-1: config 0 descriptor?? [ 507.307562][ T5718] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 507.315440][ T5718] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 507.332173][ T5718] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 507.343970][ T5718] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 507.352783][ T5718] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 507.360498][ T5718] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 507.369366][ T5718] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 507.377689][ T5718] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 507.412274][ T5718] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 507.442517][ T5718] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 507.454673][ T5718] plantronics 0003:047F:FFFF.0012: item fetching failed at offset 11/15 [ 507.472923][ T837] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 507.475104][ T5718] plantronics 0003:047F:FFFF.0012: parse failed [ 507.493129][ T5718] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 507.527602][ T5740] usb 6-1: USB disconnect, device number 42 [ 507.602645][T14098] comedi comedi0: pcl711: I/O base address not correctly aligned [ 508.072736][ T837] usb 5-1: Using ep0 maxpacket: 8 [ 508.079179][ T837] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 508.088102][ T837] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 508.099763][ T837] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 508.110168][ T837] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 23163, setting to 1024 [ 508.122136][ T837] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 508.132768][ T837] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.145829][ T837] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.155437][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.329909][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'. [ 508.421850][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'. [ 508.442641][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'. [ 508.466876][T14108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2176'. [ 508.761535][ T5705] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 508.913206][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 508.925552][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 508.941613][ T5705] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 508.950912][ T5705] usb 1-1: config 0 has no interface number 0 [ 508.960792][ T5705] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 508.979688][ T5705] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 508.995386][ T5705] usb 1-1: config 0 interface 88 has no altsetting 0 [ 509.009108][ T5705] usb 1-1: language id specifier not provided by device, defaulting to English [ 509.021263][ T5705] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 509.034658][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 509.047467][ T5705] usb 1-1: Product: syz [ 509.054476][ T5705] usb 1-1: SerialNumber: syz [ 509.063136][ T5705] usb 1-1: config 0 descriptor?? [ 509.298206][ T5705] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input58 [ 509.319557][ T5705] usb 1-1: USB disconnect, device number 76 [ 510.331211][ T837] usb 5-1: usb_control_msg returned -71 [ 510.378502][ T837] usbtmc 5-1:16.0: can't read capabilities [ 510.701384][ T837] usb 5-1: USB disconnect, device number 68 [ 510.819571][ T5630] udevd[5630]: setting mode of /dev/usbtmc0 to 020600 failed: No such file or directory [ 510.954998][ T5630] udevd[5630]: setting owner of /dev/usbtmc0 to uid=0, gid=0 failed: No such file or directory [ 512.057060][T14156] trusted_key: encrypted_key: insufficient parameters specified [ 512.100729][T14157] siw: device registration error -23 [ 512.695755][T14168] fuse: Bad value for 'user_id' [ 512.700699][T14168] fuse: Bad value for 'user_id' [ 512.712283][T14168] syzkaller0: entered promiscuous mode [ 512.717963][T14168] syzkaller0: entered allmulticast mode [ 512.726423][T14168] tipc: Enabled bearer , priority 0 [ 512.735545][T14167] tipc: Resetting bearer [ 512.759664][T14167] tipc: Disabling bearer [ 512.900437][ T10] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 513.513658][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.526931][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 513.540299][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 513.552677][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 513.563955][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 513.584462][ T10] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 513.594532][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 513.597298][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2200'. [ 513.603416][ T10] usb 5-1: Product: syz [ 513.617625][ T10] usb 5-1: Manufacturer: syz [ 513.623078][ T10] usb 5-1: SerialNumber: syz [ 513.632436][ T10] usb 5-1: config 0 descriptor?? [ 513.659574][T14178] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 513.776908][T14184] netlink: 'syz.5.2201': attribute type 9 has an invalid length. [ 513.852673][ T10] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 513.859848][ T10] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 513.943291][T14199] fuse: Bad value for 'fd' [ 514.089751][T14205] fuse: Bad value for 'fd' [ 514.763736][T14211] tipc: Enabling of bearer rejected, failed to enable media [ 515.034590][ T10] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 515.043799][ T10] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 515.056511][ T10] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 515.072839][ T10] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 515.104033][T14226] tracefs: Unknown parameter '(' [ 515.126117][ T30] audit: type=1400 audit(1782160127.855:1144): avc: denied { sqpoll } for pid=14224 comm="syz.1.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 515.441474][ T5705] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 515.601780][ T5705] usb 7-1: Using ep0 maxpacket: 32 [ 515.618573][ T5705] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 515.644952][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.668300][ T5705] usb 7-1: config 0 descriptor?? [ 515.692931][ T5705] as10x_usb: device has been detected [ 515.707792][ T5705] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 515.743008][ T5705] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 515.823793][ T5705] as10x_usb: error during firmware upload part1 [ 515.846243][ T5705] Registered device nBox DVB-T Dongle [ 515.895108][T14233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.932074][T14233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.965219][T14233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.986494][T14233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.014044][ T5725] usb 7-1: USB disconnect, device number 28 [ 516.040325][ T5725] Unregistered device nBox DVB-T Dongle [ 516.043065][ T5725] as10x_usb: device has been disconnected [ 516.181903][ T10] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 516.191542][ T10] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 516.297705][T14249] fuse: Bad value for 'fd' [ 516.559308][T14257] fuse: Bad value for 'user_id' [ 516.573023][T14257] fuse: Bad value for 'user_id' [ 516.595193][T14257] syzkaller0: entered promiscuous mode [ 516.602270][T14257] syzkaller0: entered allmulticast mode [ 516.613503][T14257] tipc: Enabled bearer , priority 0 [ 516.622137][T14259] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 516.637426][T14256] tipc: Resetting bearer [ 516.652465][T14259] overlayfs: failed lookup in lower (newroot/203, name='file0', err=-40): overlapping layers [ 516.667874][T14256] tipc: Disabling bearer [ 517.165103][ T5725] usb 5-1: USB disconnect, device number 69 [ 517.350743][T14281] fuse: Bad value for 'fd' [ 518.749194][T14300] fuse: Bad value for 'user_id' [ 518.771583][T14300] fuse: Bad value for 'user_id' [ 518.786243][T14300] syzkaller0: entered promiscuous mode [ 518.793341][T14300] syzkaller0: entered allmulticast mode [ 518.807814][T14300] tipc: Enabled bearer , priority 0 [ 518.829125][T14300] tipc: Resetting bearer [ 518.852330][T14300] tipc: Disabling bearer [ 519.273332][ T5740] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 519.587320][ T5740] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.650342][ T5740] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 519.688548][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 519.731252][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 519.769242][ T5740] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 519.810546][ T5740] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 519.837132][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 519.861478][ T5740] usb 5-1: Product: syz [ 519.873444][ T5740] usb 5-1: Manufacturer: syz [ 519.900117][ T5740] usb 5-1: SerialNumber: syz [ 520.114814][ T5740] usb 5-1: config 0 descriptor?? [ 520.319432][ T5740] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 520.319456][ T5740] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 520.822040][ T5740] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 520.822082][ T5740] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 520.822661][ T5740] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 521.307810][T14351] comedi comedi0: pcl711: I/O base address not correctly aligned [ 522.074511][ T5718] usb 5-1: USB disconnect, device number 70 [ 522.294944][T14364] fuse: Bad value for 'user_id' [ 522.360101][T14369] openvswitch: netlink: IP tunnel dst address not specified [ 522.416956][T14364] fuse: Bad value for 'user_id' [ 522.570706][T14364] syzkaller0: entered promiscuous mode [ 522.576709][T14364] syzkaller0: entered allmulticast mode [ 522.995623][T14364] tipc: Enabled bearer , priority 0 [ 523.457662][T14364] tipc: Resetting bearer [ 523.522669][T14364] tipc: Disabling bearer [ 523.548004][T14381] netlink: 'syz.4.2261': attribute type 1 has an invalid length. [ 523.581493][ T5740] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 523.743187][ T5740] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.748780][T14381] 8021q: adding VLAN 0 to HW filter on device bond10 [ 523.760697][ T5740] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 523.770941][ T5740] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.790289][ T5740] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 523.799810][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.807959][ T5740] usb 6-1: Product: syz [ 523.813654][ T5740] usb 6-1: Manufacturer: syz [ 523.818370][ T5740] usb 6-1: SerialNumber: syz [ 523.869153][ T5740] usb 6-1: config 0 descriptor?? [ 523.941520][T14373] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.014544][ T5740] usb 6-1: ucan: probing device on interface #0 [ 524.055029][ T5740] usb 6-1: ucan: invalid EP count (1) [ 524.069555][ T5740] usb 6-1: ucan: probe failed; try to update the device firmware [ 524.500695][T14395] lo speed is unknown, defaulting to 1000 [ 524.559720][T14397] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2264'. [ 525.291505][ T5718] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 525.482790][ T5718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.493542][ T5718] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 525.504295][ T5718] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.950010][T14404] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 526.037798][ T5718] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 526.048721][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.057919][ T5718] usb 1-1: Product: syz [ 526.063027][ T5718] usb 1-1: Manufacturer: syz [ 526.068077][ T5718] usb 1-1: SerialNumber: syz [ 526.343910][ T5740] usb 6-1: USB disconnect, device number 43 [ 526.398552][ T5718] usb 1-1: config 0 descriptor?? [ 526.406235][T14391] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 526.419820][ T5718] usb 1-1: ucan: probing device on interface #0 [ 526.431546][ T5718] usb 1-1: ucan: invalid EP count (1) [ 526.437273][ T5718] usb 1-1: ucan: probe failed; try to update the device firmware [ 526.539789][T14407] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2268'. [ 527.945924][ T5718] usb 1-1: USB disconnect, device number 77 [ 529.286292][T14441] siw: device registration error -23 [ 529.719398][T14444] siw: device registration error -23 [ 530.394729][T14446] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2280'. [ 530.538333][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2281'. [ 530.791504][ T5718] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 530.868956][T14459] tipc: Enabled bearer , priority 0 [ 530.985213][T14457] tipc: Disabling bearer [ 531.842428][T13349] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 531.852982][T13349] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 531.860846][T13349] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 532.773630][T13349] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 532.796254][T13349] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 533.051765][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.231837][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.241623][ T5718] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 533.250764][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.283360][ T5718] usb 5-1: config 0 descriptor?? [ 533.511640][T14483] lo speed is unknown, defaulting to 1000 [ 533.583504][T14484] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2291'. [ 534.580419][ T5718] usbhid 5-1:0.0: can't add hid device: -71 [ 534.587084][ T5718] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 534.612818][ T5718] usb 5-1: USB disconnect, device number 71 [ 534.698847][T14495] netlink: 'syz.4.2292': attribute type 1 has an invalid length. [ 534.734420][T14468] lo speed is unknown, defaulting to 1000 [ 534.798056][T14495] 8021q: adding VLAN 0 to HW filter on device bond11 [ 534.845095][T14499] netlink: 'syz.0.2294': attribute type 1 has an invalid length. [ 534.878846][T14499] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.885540][T13349] Bluetooth: hci6: command tx timeout [ 535.564082][T10577] smbdirect: ib_dev[syz1] removed [ 535.617206][ T837] syz1: Port: 1 Link DOWN [ 535.864279][T14468] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.868760][T14468] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.901770][T14468] bridge_slave_0: entered allmulticast mode [ 535.990992][T14468] bridge_slave_0: entered promiscuous mode [ 535.999501][T14468] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.999548][T14468] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.999653][T14468] bridge_slave_1: entered allmulticast mode [ 536.000262][T14468] bridge_slave_1: entered promiscuous mode [ 536.040421][T14468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.080115][T14468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.128172][T14468] team0: Port device team_slave_0 added [ 536.129489][T14468] team0: Port device team_slave_1 added [ 536.168140][T14468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.168155][T14468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.168175][T14468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.168877][T14468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.168887][T14468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.168906][T14468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.235262][T14468] hsr_slave_0: entered promiscuous mode [ 536.235861][T14468] hsr_slave_1: entered promiscuous mode [ 536.237700][T14468] debugfs: 'hsr0' already exists in 'hsr' [ 536.237714][T14468] Cannot create hsr debugfs directory [ 536.712849][T14468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.790578][T14468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.919131][T14468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.951475][T13349] Bluetooth: hci6: command tx timeout [ 538.830725][T14468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.941069][ T30] audit: type=1400 audit(1782160151.655:1145): avc: denied { execute } for pid=14536 comm="syz.0.2301" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=48416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 539.032575][T13349] Bluetooth: hci6: command tx timeout [ 539.139069][T14543] openvswitch: netlink: IP tunnel dst address not specified [ 539.386300][T14468] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 539.397113][T14468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.403347][T14468] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 539.406099][T14468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.409072][T14468] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 539.446428][T14468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 539.447023][T14468] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 539.454605][T14468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.486987][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'. [ 539.548975][T14549] batadv0: entered promiscuous mode [ 539.549246][T14549] macsec1: entered promiscuous mode [ 539.549340][T14549] macsec1: entered allmulticast mode [ 539.549353][T14549] batadv0: entered allmulticast mode [ 539.550814][T14549] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 539.551331][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'. [ 539.552591][T14549] batadv0: left allmulticast mode [ 539.552711][T14549] batadv0: left promiscuous mode [ 539.575644][T14553] batadv0: entered promiscuous mode [ 539.575745][T14553] macsec1: entered promiscuous mode [ 539.575846][T14553] macsec1: entered allmulticast mode [ 539.575859][T14553] batadv0: entered allmulticast mode [ 539.576434][T14553] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 539.576930][T14553] batadv0: left allmulticast mode [ 539.577018][T14553] batadv0: left promiscuous mode [ 539.665464][T14468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.696168][T14468] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.708072][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.708110][T10564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.725202][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.725245][T10564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.387818][T14576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.390525][T14576] futex_wake_op: syz.6.2308 tries to shift op by 144; fix this program [ 540.391133][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2308'. [ 540.391164][T14576] netlink: 'syz.6.2308': attribute type 2 has an invalid length. [ 540.399384][T14576] can0: slcan on ttyS3. [ 540.902095][T14568] can0 (unregistered): slcan off ttyS3. [ 541.045500][T14468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.123542][T13349] Bluetooth: hci6: command tx timeout [ 541.956677][T14468] veth0_vlan: entered promiscuous mode [ 541.959971][T14468] veth1_vlan: entered promiscuous mode [ 542.066386][T14468] veth0_macvtap: entered promiscuous mode [ 542.269118][T14600] netlink: 'syz.6.2314': attribute type 29 has an invalid length. [ 542.286807][T14468] veth1_macvtap: entered promiscuous mode [ 542.337388][T14468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.392437][T14608] fuse: Bad value for 'fd' [ 542.401005][T14468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.455068][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.483633][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.513070][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.529837][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.540858][T14610] lo speed is unknown, defaulting to 1000 [ 542.761820][ T5705] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 542.889062][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.907197][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.940259][T14617] tipc: Enabled bearer , priority 0 [ 542.950632][T10562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.963944][ T5705] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 542.973938][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.984815][T10562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.995775][T14619] syzkaller0: entered promiscuous mode [ 543.002714][ T5705] usb 6-1: Product: syz [ 543.007085][T14619] syzkaller0: entered allmulticast mode [ 543.013186][ T5705] usb 6-1: Manufacturer: syz [ 543.038229][ T5705] usb 6-1: SerialNumber: syz [ 543.061087][ T30] audit: type=1400 audit(1782160155.785:1146): avc: denied { mounton } for pid=14468 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 543.062037][T14617] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2321'. [ 543.095623][ T5705] usb 6-1: config 0 descriptor?? [ 543.188259][T14617] tipc: Resetting bearer [ 543.209635][T14616] tipc: Resetting bearer [ 543.225357][T14616] tipc: Disabling bearer [ 543.331229][ T5705] usb 6-1: selecting invalid altsetting 1 [ 543.342704][ T5705] comedi comedi5: could not switch to alternate setting 1 [ 543.350048][ T5705] usbduxfast 6-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 543.368629][ T5705] usb 6-1: USB disconnect, device number 44 [ 543.570950][T14634] syzkaller0: entered promiscuous mode [ 543.588487][T14634] syzkaller0: entered allmulticast mode [ 543.941846][ T5740] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 544.046294][T14643] fuse: Bad value for 'fd' [ 544.081315][T14641] syzkaller0: entered promiscuous mode [ 544.081347][T14641] syzkaller0: entered allmulticast mode [ 544.176832][ T5740] usb 7-1: Using ep0 maxpacket: 16 [ 544.178553][ T5740] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 544.178591][ T5740] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 544.178612][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.179679][ T5740] usb 7-1: config 0 descriptor?? [ 544.753088][T14649] tipc: Enabled bearer , priority 0 [ 544.827664][T14649] syzkaller0: entered promiscuous mode [ 544.843989][T14649] syzkaller0: entered allmulticast mode [ 545.422499][T14649] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2331'. [ 545.643148][T14648] tipc: Resetting bearer [ 545.770800][T14648] tipc: Disabling bearer [ 546.022174][ T5740] hid-led 0003:0FC5:B080.0013: reserved main item tag 0xd [ 546.041892][T14663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.094742][ T5718] tipc: Node number set to 2270298191 [ 546.169251][ T5740] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 546.169319][T14663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.176947][ T5740] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 546.191729][ T5740] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 546.198820][ T5740] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 546.206181][ T5740] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 546.213307][ T5740] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 546.289139][T14668] syzkaller0: entered promiscuous mode [ 546.327763][T14668] syzkaller0: entered allmulticast mode [ 546.394062][T14663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.478314][T14663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.623874][ T5705] usb 7-1: USB disconnect, device number 29 [ 547.646588][T14682] fuse: Bad value for 'fd' [ 548.716327][T14690] tipc: Enabled bearer , priority 0 [ 548.724747][T14690] syzkaller0: entered promiscuous mode [ 548.730297][T14690] syzkaller0: entered allmulticast mode [ 548.738480][T14690] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2344'. [ 548.763814][T14690] tipc: Resetting bearer [ 548.773499][T14688] fuse: Bad value for 'user_id' [ 548.780148][T14689] tipc: Resetting bearer [ 549.669714][T14688] fuse: Bad value for 'user_id' [ 549.690749][T14689] tipc: Disabling bearer [ 549.727621][T14688] syzkaller0: entered promiscuous mode [ 549.733237][T14688] syzkaller0: entered allmulticast mode [ 550.762753][T14715] syzkaller0: entered promiscuous mode [ 550.770070][T14715] syzkaller0: entered allmulticast mode [ 550.844506][T14717] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 550.853812][T14717] overlayfs: missing 'lowerdir' [ 655.911364][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 655.918319][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14702/1:b..l [ 655.926295][ C1] rcu: (detected by 1, t=10506 jiffies, g=69445, q=488 ncpus=2) [ 655.933993][ C1] task:syz.4.2343 state:R running task stack:25816 pid:14702 tgid:14691 ppid:5620 task_flags:0x40044c flags:0x00080001 [ 655.947466][ C1] Call Trace: [ 655.950731][ C1] [ 655.953649][ C1] __schedule+0x125c/0x6730 [ 655.958154][ C1] ? rcu_is_watching+0x12/0xc0 [ 655.962912][ C1] ? __pfx___schedule+0x10/0x10 [ 655.967753][ C1] ? rcu_is_watching+0x12/0xc0 [ 655.972510][ C1] preempt_schedule_irq+0x50/0x90 [ 655.977527][ C1] irqentry_exit+0x205/0xa00 [ 655.982113][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 655.988079][ C1] RIP: 0010:unwind_next_frame+0x1561/0x2090 [ 655.993976][ C1] Code: bf 69 02 ba 08 00 00 00 4c 89 ef 4d 8d 7d 34 4c 01 f5 48 89 ee e8 cf e8 ff ff 84 c0 0f 84 f3 ed ff ff 48 89 ef e8 9f e2 ff ff <49> 8d 7d 40 48 89 fa 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 656.013583][ C1] RSP: 0018:ffffc900054ceef0 EFLAGS: 00000202 [ 656.019642][ C1] RAX: ffffc900054cf670 RBX: 0000000000000001 RCX: ffffffff9185ba14 [ 656.027598][ C1] RDX: ffffc900054cf301 RSI: ffffc900054cf350 RDI: ffffc900054cf350 [ 656.035559][ C1] RBP: ffffc900054cf350 R08: 0000000000000001 R09: 0000000000000000 [ 656.043514][ C1] R10: ffffc900054cef60 R11: 0000000000014c11 R12: ffffc900054cefb0 [ 656.051468][ C1] R13: ffffc900054cef60 R14: ffffc900054cf380 R15: ffffc900054cef94 [ 656.059442][ C1] ? folios_put_refs+0x585/0xaa0 [ 656.064397][ C1] ? kasan_save_stack+0x30/0x50 [ 656.069244][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 656.075399][ C1] arch_stack_walk+0x94/0xf0 [ 656.079985][ C1] ? shmem_undo_range+0x5e5/0x1570 [ 656.085101][ C1] stack_trace_save+0x8e/0xc0 [ 656.089802][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 656.095170][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.099925][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 656.105982][ C1] save_stack+0x162/0x1e0 [ 656.110298][ C1] ? __pfx_save_stack+0x10/0x10 [ 656.115133][ C1] ? free_unref_folios+0xa44/0x1710 [ 656.120321][ C1] ? folios_put_refs+0x585/0xaa0 [ 656.125252][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.130008][ C1] ? page_ext_put+0x3e/0xd0 [ 656.134500][ C1] ? lock_release+0x24d/0x310 [ 656.139165][ C1] ? rcu_read_lock_held+0x9/0x50 [ 656.144100][ C1] __reset_page_owner+0x84/0x190 [ 656.149024][ C1] free_unref_folios+0xa44/0x1710 [ 656.154048][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.158805][ C1] ? folios_put_refs+0x51d/0xaa0 [ 656.163734][ C1] ? lock_release+0x24d/0x310 [ 656.168398][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 656.174456][ C1] folios_put_refs+0x585/0xaa0 [ 656.179211][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 656.184497][ C1] ? lock_release+0x24d/0x310 [ 656.189185][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 656.195527][ C1] shmem_undo_range+0x5e5/0x1570 [ 656.200484][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 656.205857][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.210614][ C1] ? unwind_next_frame+0x3be/0x2090 [ 656.215805][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.220565][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.225318][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 656.230505][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 656.236653][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.241407][ C1] ? percpu_counter_add_batch+0xb9/0x230 [ 656.247050][ C1] shmem_evict_inode+0x3a5/0xbe0 [ 656.251982][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 656.257174][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 656.262884][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 656.268336][ C1] ? arch_stack_walk+0xa6/0xf0 [ 656.273095][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 656.279158][ C1] ? evict+0x37e/0xad0 [ 656.283213][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.287977][ C1] ? evict+0x37e/0xad0 [ 656.292032][ C1] ? lock_release+0x24d/0x310 [ 656.296697][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 656.302152][ C1] evict+0x3c2/0xad0 [ 656.306045][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.310802][ C1] ? fsnotify_grab_connector+0x11f/0x290 [ 656.316444][ C1] ? __pfx_evict+0x10/0x10 [ 656.320848][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.325602][ C1] ? iput.part.0+0x981/0x1050 [ 656.330265][ C1] ? lock_release+0x24d/0x310 [ 656.334931][ C1] iput.part.0+0x989/0x1050 [ 656.339423][ C1] iput+0x35/0x40 [ 656.343043][ C1] dentry_unlink_inode+0x284/0x470 [ 656.348143][ C1] dentry_kill+0x25d/0xc20 [ 656.352570][ C1] dput.part.0+0xd7/0x240 [ 656.356888][ C1] dput+0x1f/0x30 [ 656.360514][ C1] __fput+0x519/0xb50 [ 656.364485][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 656.370544][ C1] task_work_run+0x150/0x240 [ 656.375122][ C1] ? __pfx_task_work_run+0x10/0x10 [ 656.380222][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 656.385412][ C1] do_exit+0x951/0x2ae0 [ 656.389562][ C1] ? __pfx___might_resched+0x10/0x10 [ 656.394946][ C1] ? __pfx_do_exit+0x10/0x10 [ 656.399531][ C1] ? do_raw_spin_lock+0x128/0x260 [ 656.404545][ C1] ? get_signal+0x7e0/0x21e0 [ 656.409128][ C1] do_group_exit+0xd5/0x2a0 [ 656.413626][ C1] get_signal+0x1ec7/0x21e0 [ 656.418122][ C1] ? kick_process+0xf0/0x1a0 [ 656.422702][ C1] ? __pfx_get_signal+0x10/0x10 [ 656.427542][ C1] ? __pfx_vfs_write+0x10/0x10 [ 656.432296][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 656.437831][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 656.443974][ C1] ? fput+0xd9/0x100 [ 656.447854][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.452610][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 656.457971][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.462727][ C1] do_syscall_64+0x666/0x870 [ 656.467304][ C1] ? clear_bhb_loop+0x40/0x90 [ 656.471969][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.477854][ C1] RIP: 0033:0x7f8d09b9ce59 [ 656.482255][ C1] RSP: 002b:00007f8d0aa07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 656.490760][ C1] RAX: 0000000000000800 RBX: 00007f8d09e16090 RCX: 00007f8d09b9ce59 [ 656.498719][ C1] RDX: 0000000000001006 RSI: 0000200000000080 RDI: 0000000000000009 [ 656.506677][ C1] RBP: 00007f8d09c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 656.514933][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.522893][ C1] R13: 00007f8d09e16128 R14: 00007f8d09e16090 R15: 00007ffe3d2a23d8 [ 656.530853][ C1] [ 656.533859][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g69445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 656.546162][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=28979 [ 656.554035][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g69445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 656.565384][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 656.575345][ C1] rcu: RCU grace-period kthread stack dump: [ 656.581217][ C1] task:rcu_preempt state:I stack:28360 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 656.593214][ C1] Call Trace: [ 656.596481][ C1] [ 656.599407][ C1] __schedule+0x125c/0x6730 [ 656.603907][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.608663][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 656.614746][ C1] ? __pfx___schedule+0x10/0x10 [ 656.619590][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.624346][ C1] ? schedule+0x2bf/0x390 [ 656.628667][ C1] ? lock_release+0x24d/0x310 [ 656.633337][ C1] schedule+0xdd/0x390 [ 656.637405][ C1] schedule_timeout+0x127/0x280 [ 656.642248][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 656.647610][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 656.653056][ C1] ? __pfx_process_timeout+0x10/0x10 [ 656.658338][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 656.664137][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 656.669583][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 656.674348][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 656.679624][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 656.684550][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 656.689738][ C1] ? rcu_is_watching+0x12/0xc0 [ 656.694495][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 656.700553][ C1] rcu_gp_kthread+0x179/0x230 [ 656.705218][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 656.710408][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 656.716466][ C1] ? __kthread_parkme+0x18c/0x230 [ 656.721489][ C1] ? kthread+0x13a/0x450 [ 656.725723][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 656.730906][ C1] kthread+0x370/0x450 [ 656.734970][ C1] ? __pfx_kthread+0x10/0x10 [ 656.739555][ C1] ret_from_fork+0x72b/0xd50 [ 656.744137][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 656.749240][ C1] ? __switch_to+0x800/0x10f0 [ 656.753911][ C1] ? __pfx_kthread+0x10/0x10 [ 656.758498][ C1] ret_from_fork_asm+0x1a/0x30 [ 656.763263][ C1] [ 656.766267][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 656.772574][ C1] Sending NMI from CPU 1 to CPUs 0: [ 656.777781][ C0] NMI backtrace for cpu 0 [ 656.777795][ C0] CPU: 0 UID: 0 PID: 14717 Comm: syz.5.2351 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.777814][ C0] Tainted: [L]=SOFTLOCKUP [ 656.777820][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 656.777828][ C0] RIP: 0010:__remove_hrtimer+0x239/0x440 [ 656.777848][ C0] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 e1 01 00 00 49 8b 47 28 48 89 44 24 08 e8 c0 6d 14 00 48 8d 7d 48 48 8b 44 24 08 <48> ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 11 00 0f [ 656.777861][ C0] RSP: 0018:ffffc90000007e50 EFLAGS: 00000046 [ 656.777873][ C0] RAX: 7fffffffffffffff RBX: ffff88802a2c4300 RCX: 0000000000000003 [ 656.777882][ C0] RDX: ffff88807d168000 RSI: ffffffff81f4f160 RDI: ffff8880b8428688 [ 656.777891][ C0] RBP: ffff8880b8428640 R08: 0000000000000005 R09: 000000000000001f [ 656.777900][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 656.777908][ C0] R13: ffff8880b8428400 R14: 0000000000000000 R15: 0000000000000000 [ 656.777917][ C0] FS: 00007fdc272a96c0(0000) GS:ffff888124316000(0000) knlGS:0000000000000000 [ 656.777932][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.777942][ C0] CR2: 0000200000751000 CR3: 0000000079a03000 CR4: 00000000003526f0 [ 656.777951][ C0] Call Trace: [ 656.777956][ C0] [ 656.777964][ C0] __hrtimer_run_queues+0x352/0x9c0 [ 656.777985][ C0] hrtimer_interrupt+0x3e5/0x940 [ 656.778007][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 656.778027][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 656.778047][ C0] [ 656.778051][ C0] [ 656.778056][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 656.778072][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x0/0x20 [ 656.778087][ C0] Code: 0c 24 48 89 f2 48 89 fe bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 40 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 [ 656.778099][ C0] RSP: 0018:ffffc900037e7a48 EFLAGS: 00000246 [ 656.778110][ C0] RAX: ffffc900037e7d78 RBX: 0000000000000001 RCX: ffffc9001d578000 [ 656.778119][ C0] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000000 [ 656.778127][ C0] RBP: ffff88807cd8844c R08: 0000000000000007 R09: 0000000000001000 [ 656.778136][ C0] R10: 0000000000001000 R11: 0000000000000000 R12: 0000000000001000 [ 656.778144][ C0] R13: ffffc900037e7ca8 R14: 1ffff920006fcf5c R15: 0000000000000100 [ 656.778158][ C0] copy_folio_from_iter_atomic+0x29d/0x2000 [ 656.778183][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 656.778205][ C0] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 656.778224][ C0] ? shmem_write_begin+0x1ba/0x420 [ 656.778242][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 656.778262][ C0] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 656.778285][ C0] generic_perform_write+0x4cb/0xa40 [ 656.778303][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 656.778320][ C0] ? file_update_time_flags+0x373/0x500 [ 656.778336][ C0] shmem_file_write_iter+0x10e/0x140 [ 656.778350][ C0] vfs_write+0x6ac/0x1050 [ 656.778367][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 656.778382][ C0] ? __pfx_vfs_write+0x10/0x10 [ 656.778403][ C0] ksys_write+0x12a/0x250 [ 656.778419][ C0] ? __pfx_ksys_write+0x10/0x10 [ 656.778436][ C0] ? rcu_is_watching+0x12/0xc0 [ 656.778454][ C0] do_syscall_64+0x115/0x870 [ 656.778466][ C0] ? clear_bhb_loop+0x40/0x90 [ 656.778481][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.778494][ C0] RIP: 0033:0x7fdc2639ce59 [ 656.778505][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.778518][ C0] RSP: 002b:00007fdc272a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 656.778530][ C0] RAX: ffffffffffffffda RBX: 00007fdc26615fa0 RCX: 00007fdc2639ce59 [ 656.778539][ C0] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000009 [ 656.778548][ C0] RBP: 00007fdc26432e6f R08: 0000000000000000 R09: 0000000000000000 [ 656.778556][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.778565][ C0] R13: 00007fdc26616038 R14: 00007fdc26615fa0 R15: 00007fff39c456e8 [ 656.778578][ C0]