last executing test programs: 14m47.807741336s ago: executing program 3 (id=1773): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103900, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 14m47.583676042s ago: executing program 3 (id=1776): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000200000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 14m47.486102043s ago: executing program 3 (id=1777): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_readahead}]}}) 14m47.372966753s ago: executing program 3 (id=1781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8a81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000010c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffc, 0x0, [{0x2, 0x84, 0x87, '\x00', 0x8}, {0x9, 0x80, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x4}, {0xca, 0x6, 0xf5, '\x00', 0xf}, {0x3, 0xd, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x6, 0xd5, 0x7, '\x00', 0x7f}, {0x6, 0x4, 0xc}, {0x7f, 0x5, 0xa, '\x00', 0x8}, {0xd7, 0xd, 0x6, '\x00', 0x6}, {0x0, 0x0, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x3, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x22, 0x8, '\x00', 0xf}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x1, 0xc, 0x5}, {0x7, 0x1, 0x3, '\x00', 0xf4}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0x9, 0x80, '\x00', 0x7f}, {0xff, 0x5, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x3}, {0x87, 0x6, 0x4, '\x00', 0x8}]}}) 14m46.320015163s ago: executing program 3 (id=1794): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000600)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0xb, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) 14m45.987511352s ago: executing program 3 (id=1799): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001a40)={r2, r0, 0x16, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000340)={0x1}, 0x8) 14m30.593261677s ago: executing program 32 (id=1799): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001a40)={r2, r0, 0x16, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000340)={0x1}, 0x8) 12m12.529964675s ago: executing program 5 (id=3050): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x161801) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000040)={&(0x7f0000000000), 0x1}) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000), 0x4) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400"], 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x24000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002020000082505a1a440000102030109025c0002010520800904000001020d000005240600010524000a000d240f010300000007007fe90606241a03002b0905810320004806060904010000020d00000904010909050302ff0304060a"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000600)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)='4[i', 0x3}, {&(0x7f0000000500)="d6ac991cfa9c2e25ab3167d51f97ed1de29d2607a0a0c20efff1c653640daf93de9dc73722019d64f957bc74d45ef4fafb990c3548bf4c18316fbadd1c45bf111bd637a4843a022a3c26fb0065f74f", 0x4f}], 0x2, &(0x7f0000000480)=[@rights={{0x30, 0x1, 0x1, [r5, r7, r1, r8, r3, r1, r3, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r7, r1, r5, r8, r2]}}], 0x58, 0x4804}}], 0x1, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 12m9.143719795s ago: executing program 5 (id=3060): io_uring_setup(0x1192, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0x541b, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000180)=0x8000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f00000000c0)=0x4) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x4000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x1e, 0x1, 0x0) splice(r7, 0x0, r6, 0x0, 0x4ff9c, 0x0) 12m8.020307438s ago: executing program 5 (id=3063): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000002000000f900000f0400000000005f"], 0x0, 0x28}, 0x20) 12m7.89700354s ago: executing program 5 (id=3064): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, r1, 0x309, 0x2, 0x25dfdbfc, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) mount$bind(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x324b0d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 12m5.332807542s ago: executing program 5 (id=3075): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x3, &(0x7f0000000040)={0x4, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x54, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBPRIO={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x4000080) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 12m1.495063532s ago: executing program 5 (id=3090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000005c010000030a01030000fffffff50000050000000900010073797a30000000000900030073797a3000000000080007006e617404280004800800024000000012080001"], 0x1a4}, 0x1, 0x0, 0x0, 0x20040060}, 0x0) 12m1.201681616s ago: executing program 33 (id=3090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000005c010000030a01030000fffffff50000050000000900010073797a30000000000900030073797a3000000000080007006e617404280004800800024000000012080001"], 0x1a4}, 0x1, 0x0, 0x0, 0x20040060}, 0x0) 6m40.033382095s ago: executing program 0 (id=4658): r0 = creat(0x0, 0xecf86c37d53049cc) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 64) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8010, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000180)=r4) (async, rerun: 32) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000000000000000000000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) (async) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r3}) (async) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r9 = syz_open_dev$media(&(0x7f0000000040), 0x7fdfffbe, 0x10800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r11 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r11, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r10, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r10, 0x7c80, 0x0) (async) write$6lowpan_control(r8, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 6m39.754562794s ago: executing program 0 (id=4661): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x4, 0x1ff}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x4) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_buf(r2, 0x1, 0x4a, 0x0, &(0x7f0000000080)) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) chroot(&(0x7f0000000a40)='./file0\x00') (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10008, &(0x7f00000003c0)={[], [], 0x2f}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getpeername$unix(r6, &(0x7f0000000240)=@abs, &(0x7f0000000340)=0x6e) (async, rerun: 64) getdents64(r6, &(0x7f0000000a80)=""/4113, 0x1011) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000540)=""/85) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 6m39.571854808s ago: executing program 0 (id=4665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0xffff, 0xc0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x2, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000006000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb702000008000000b704000000000000850000005900000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) 6m39.520863021s ago: executing program 0 (id=4667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffe}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20280, 0x0) mkdir(0x0, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x800005, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f00000000c0)='./file1\x00') chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0206e20302"], 0x10}}, 0x8090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) read$msr(r6, &(0x7f00000001c0)=""/48, 0x30) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000200), 0x4) 6m38.552096252s ago: executing program 0 (id=4675): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000001100000010"], 0x28}, 0xfc40) 6m38.309904423s ago: executing program 0 (id=4679): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4, 0xffe0}}], 0x30}], 0x1, 0x0) 6m37.834848941s ago: executing program 34 (id=4679): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4, 0xffe0}}], 0x30}], 0x1, 0x0) 2m38.451071962s ago: executing program 1 (id=5933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffea7, 0x0, 0x0, 0x72, 0x0, &(0x7f0000000440)="b3185d7bb56f70f003360fa85b96c67d86aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcfeea946e6e23ccba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52f9059313e17bdb7bd66e75cf8848a384a9f552b8887c8582998e64783d4a23790244369ef4df896ebc00000000000000"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002580)={0x4, 0x0, &(0x7f00000002c0)=[@enter_looper], 0x1000, 0x0, &(0x7f0000001580)="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"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@deltclass={0x98, 0x29, 0x800, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x1, 0xe}, {0x0, 0x2}, {0xf, 0xffff}}, [@tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0xdf}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xb}]}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xf4}}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_sfq={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x400dc}, 0x8080) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 2m37.441216841s ago: executing program 1 (id=5939): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x194}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x306, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x80ffff, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) 2m35.728454185s ago: executing program 1 (id=5944): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close(0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x800c0) fdatasync(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fddbdf250900000030000380080001000100000014000200627269646c6176655f30000008000356"], 0x44}}, 0x48040) 2m35.535745685s ago: executing program 1 (id=5945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000bbfe8000000000000000000004000000aa3a000003"], 0x0) 2m34.747307481s ago: executing program 1 (id=5947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a010100000000000000000100ffff0900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000005f000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000308000b40000000000900010073797a30"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x1f00) 2m34.555600553s ago: executing program 1 (id=5949): syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000fffffffa0000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000180)=0x8d) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) 2m19.403143269s ago: executing program 35 (id=5949): syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000fffffffa0000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000180)=0x8d) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) 1m46.253052184s ago: executing program 8 (id=6137): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) 1m45.761672116s ago: executing program 8 (id=6139): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) syz_usb_connect(0x1, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400891ae3c3584253190000000000000000000a58000000060a09040000000000000000020000202c0004802800018008000100647570001c000280080001400000000b080002400000001008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r3 = eventfd(0x1000) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x1, r3}) 1m43.114775775s ago: executing program 8 (id=6144): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000080)=""/187, 0xbb}, {&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/137, 0x89}], 0x6, 0x6, 0x9) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r0, &(0x7f0000000400)="8aab7adb2ef0f70dab7eebda701c36c4e53ee49336c327c7708595fc496a4fa8d3c77b0bb25a1536bd4d2105f90e1a5ecccb9839160c659f72b89553786e82b4629e5e2f"}, 0x20) execveat(r0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000600)={[&(0x7f0000000500)='/dev/vsock\x00', &(0x7f0000000540)='/dev/vsock\x00', &(0x7f0000000580)='/dev/vsock\x00', &(0x7f00000005c0)='\x00']}, &(0x7f0000000680)={[&(0x7f0000000640)='\'\x00']}, 0x1000) r1 = syz_usb_connect$uac2(0x2, 0xcc, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1604, 0x8001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x9, 0x0, 0x10, {0x8, 0xb, 0x0, 0x1, 0x1, 0x9, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff2c, 0x4, 0x3e, 0x6}, [@extension_unit={0x8, 0x24, 0x9, 0x4, 0xb4, 0x4, "16"}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x404, 0x3, 0x40, 0xf, 0x9, 0x40, 0x6, 0x30}, @source_unit={0x8, 0x24, 0xa, 0x8, 0x4, 0x0, 0x4}, @effect_unit={0xd, 0x24, 0x7, 0x3, 0x2, 0x1, [0x3, 0x3, 0x0]}, @source_unit={0x8, 0x24, 0xa, 0x2, 0x3, 0xf, 0x0, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0x7, 0x9, "537fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x7, 0x7, {0x8, 0x25, 0x1, 0x1, 0x30, 0x3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x4, 0xdc11, 0x0, "61ccda97e0b493a8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x2, 0x1, {0x8, 0x25, 0x1, 0x0, 0x30, 0x6, 0xc}}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x110, 0x18, 0x9, 0x6, 0x20, 0x3}, 0x19, &(0x7f0000000800)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "f4dda6a3b829dcf957f7219a82b3edba"}]}, 0x1, [{0xe6, &(0x7f0000000840)=@string={0xe6, 0x3, "66ee9ca919df64674e4b4060612d3e1a585a989da8aff5dae375e7d83fd563dc8de93bdee1452b89668957b859ffe27a19ec14c1ff14fca13ad0abdcfff461687d7d8b67b01bb0141be1888c95bf609efa85da9a181b9e7579a2a8df714207ab27f41d5ca25ebe826934c4b9092b4ea1798c797e1cfe0952b79cde09e247fc291cc5a2b55d7d39a70e27f563f652294442a0065ac9d011f0bbf113009a73ca5dbf3886fa7cf8704947405df125409a00d2c66555364b07b73ea7480c76d8054646873152c85d9c4b2c1afc73a3ac3e8ce01a432bf67cbdfd7aabcff56616c4ddefa0b2c6"}}]}) syz_usb_control_io$uac2(r1, &(0x7f0000000a00)={0x14, &(0x7f0000000980)={0x40, 0x2, 0x28, {0x28, 0x23, "c2e3f594057b46e28ef34d5829b3a25c070d705fdcc4b9a08fd0b6020c4a535195d1416a95dc"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000000c40)={0x44, &(0x7f0000000a40)={0x20, 0x13, 0x31, "f2ea55fd78171a332352fb29862101ba160c94f0b6fefe77bdde38bc520ebda14ecc18961b721b41789d1d18b709320fae"}, &(0x7f0000000a80)={0x0, 0xa, 0x1}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x59}, &(0x7f0000000b00)={0x20, 0x81, 0x1, '\t'}, &(0x7f0000000b40)={0x20, 0x82, 0x3, "75bcd4"}, &(0x7f0000000b80)={0x20, 0x83, 0x2, '#+'}, &(0x7f0000000bc0)={0x20, 0x84, 0x4, "89e97855"}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "7e7daf"}}) syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000cc0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x4, 0x10, 0x4, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xb0, 0x0, 0x4}, [@ncm={0x6, 0x24, 0x1a, 0x200, 0x3}, @ncm={0x6, 0x24, 0x1a, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x3, 0x78}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x61, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x3, 0xc7}}}}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x110, 0xfb, 0x0, 0x7e, 0x10, 0x9}, 0xd0, &(0x7f0000000d80)={0x5, 0xf, 0xd0, 0x6, [@generic={0x56, 0x10, 0x1, "62ae1db15d3808488b7df047924c45b1005837eea23300413828b6a0e22f66e86db67c84aa20e62dcbfc28e7301fee3c67be93d57a632359cf140060b6e34bc04fc625ae7826b8cafdecca43ffa2ae2c55fc00"}, @generic={0xd, 0x10, 0xb, "8b55f8712f37cf9f18f8"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x2, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb1, 0x8, 0xf4, 0x1, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "ed3319bbb7ad2a6af55a293419e84f48"}, @generic={0x42, 0x10, 0xb, "5710e9550f4b03ed98dfe7f59b64df02bedb0910e2e3143593162fd8b76ce1f61f056c0b6fadc373240720adb1880308e0f98bf95408c365b72910a689ea28"}]}, 0x4, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x2009}}, {0xa6, &(0x7f0000000ec0)=@string={0xa6, 0x3, "a1ffdece898322353a75d2eebfaa6779d553546074c335ba5845bca756e02ddda64bef39d6b9de877c9815bf02a23a2fb505dbab8d84953208437be3d669709700743a22d9de6c0a31def5bfd057a423e829b220353c7bdda6508552143e71c6433efc3397754f648c9e526dbf36d55b0627207d649eeb364b4822e006350e93521cbdc95186cff2fc65b7b01fe0f7a8ed2f8b738932c7e57a2a90d943705794c832198d"}}, {0x6f, &(0x7f0000000f80)=@string={0x6f, 0x3, "d2ddb0f153e735c95474dd90608557df130ed623861a1c7814b24448e3ea8b72388cbc0d550a627b7891d906cacaac11ad5f02c812f0f77a472c7d2fb944df9a378d9d82e9338041f8013a323c985676cdf13279157ff2cd35938f72c5440816d196b90b222c1e7c80bb04600e"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x421}}]}) r2 = syz_usb_connect$uac1(0x1, 0xc2, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x1, 0x50, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x27}, [@selector_unit={0x6, 0x24, 0x5, 0x5, 0x1, '~'}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x4, 0x8, 0x3, 0x8, 0x2}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x5, 0xd4, "ed2685ca"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x100, 0x9, "d2145120e66486ae"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0xb, 0x8, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0xfa, 0x0, 0x93, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x5, 0xf8, {0x7, 0x25, 0x1, 0xc, 0xc0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0xff, 0x1}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0xf, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x2, 0xe, {0x7, 0x25, 0x1, 0xc, 0x60, 0xae02}}}}}}}}]}}, &(0x7f0000001400)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x310, 0x1, 0xc, 0xf, 0x8, 0x40}, 0x45, &(0x7f0000001200)={0x5, 0xf, 0x45, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "f5d2949aa4145b1482acd487790ef8f1"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6b03dd9cca24437ce2ce609be2867d94"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xae, 0x5d, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x34, 0xff, 0x0, 0x2, 0x1}]}, 0x3, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x814}}, {0x6d, &(0x7f00000012c0)=@string={0x6d, 0x3, "811a72ebcc43acccb4ccb5e445e07e3540bf4642a47231adfc21d10d21d2a41ee2d95b4e85994cb966888ee8292174843e3f7705d6be0d3ac27f90685a20545a376397d9d22821c803d48fe2d3a8c1c8702fafb25c53a129e393c1a726f0fa81a1b25c8d1e7d8e284cbe7e"}}, {0x91, &(0x7f0000001340)=@string={0x91, 0x3, "4e0712d19de091c6fc04dff4e000c8ff0156b8c91e5e9bba838c6b42ad925268ef0b069d4b8d713e49a16c56eef190981fdea59d082e14f72bf4863c539da4d15c9390179d6d158fab629141fa1dc8f4451e454c22f9a29107ef602999f5d28d458a9e15f06306571d1d1a68bad2b8d75f2b061f43e529964bf064e813de5c86e5495136d056bd12924e91452ec08d"}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000001500)={0x14, &(0x7f0000001440)={0x20, 0x23, 0x69, {0x69, 0xd, "a06f80a54d8a717ee005ed9c49cc8e730c381ef499dc7c42230ab949856636eea9ebbc18ce96689a6ee851b06cfbaaf6eec8a49ee3e2bb35fb92c458bf6db01be5ed658611c14b8cf8913a5c5232c6faf3965b0d31c507e01065425bc088c57ed38cbc7e47ffdd"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000001780)={0x44, &(0x7f0000001540)={0x20, 0x15, 0x4d, "9fdda7bd7e7865af48f93eec6c527a19c91d7d2848821fcb95ba5827e20cc6407c7552ba26284f4d489ada5200a746729e9ec1f8b4b78e0720f6953d961bc3eb8218f4e0cd3d8dce9d194d669b"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000001640)={0x20, 0x81, 0x1, "94"}, &(0x7f0000001680)={0x20, 0x82, 0x1, "e9"}, &(0x7f00000016c0)={0x20, 0x83, 0x2, "1515"}, &(0x7f0000001700)={0x20, 0x84, 0x1, 'L'}, &(0x7f0000001740)={0x20, 0x85, 0x3, "e300f3"}}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000003e00)={0x14, &(0x7f0000003cc0)={0x20, 0xe, 0xe1, {0xe1, 0x22, "62baf63b97f8d0316b779556e3656081e8f2b2b8bfdd589f9aaaa1441b890f447d00b3fd46cc29bd7823ec64f15a90ac2b8fdf2adcc42d975b92b17dbfe3a5803ebfe6e13e697f0252a4308894d7728ca7372c7063abd1ce4d9ae859b9c228966e990f776121673886d8b0c1e54767b00e2335874ef4540654eca57074490cc48ed4f9408655b88ac7f835df774c93e1d58dcc19c7f6eaf6244b5be6c9e385ffd5be979bedce39eadd1212e961554b5668333f384371514aa5494f36b8ac9a866a5a45eee5cf3f96192d955c93ad1ed5c5616583190e773ce8fc0fda69825a"}}, &(0x7f0000003dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}}, &(0x7f0000004100)={0x44, &(0x7f0000003e40)={0x20, 0x14, 0xdc, "dc03164682ed9a3aec950a145e07061167d2d502ac938ffb4dbeb08bfd55338ef3feaab562a5c9e4edd4900cdc553f3aebaeb1909b9173e5cc5dd576a5c473b99a40aad4b4773abbc303eab3588abe763e2cfa7aaa24897de04a9f356992b620a5c759168fdaa4509ab2c8bf25042cbdc7ab7f4511d2773bbba32d3ac240a0bf463596cf9d97dad25da2002f59e56c3782d6bc684e7c5037c74701ad705357b27e911ed3aa36ff14519e4bbda90ac278ac04acbb151202815e8600a5262545e8cb696e100d68c31fc83123ea3891913253884bd2da3ec854fbc5c9ac"}, &(0x7f0000003f40)={0x0, 0xa, 0x1, 0x23}, &(0x7f0000003f80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000003fc0)={0x20, 0x81, 0x1, "d2"}, &(0x7f0000004000)={0x20, 0x82, 0x2, "0356"}, &(0x7f0000004040)={0x20, 0x83, 0x3, "913387"}, &(0x7f0000004080)={0x20, 0x84, 0x2, "f0fc"}, &(0x7f00000040c0)={0x20, 0x85, 0x3, "e5dc15"}}) sched_setaffinity(0x0, 0x8, &(0x7f0000004180)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000004200), r0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000043c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) 1m39.916371783s ago: executing program 8 (id=6152): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x194}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x306, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x60}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) 1m38.435809951s ago: executing program 8 (id=6156): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080)=0x10000a40, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 1m38.296530771s ago: executing program 8 (id=6157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd0c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10000}}]}, 0x40}}, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000180)={0xf, "22c437bc58face97ef560b3c81d6d3dbbc3a832aa5c52acb5ef7ba9247a74f63", 0xbf5e1b6ca074a155}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sync() sync() 1m23.260720916s ago: executing program 36 (id=6157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd0c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xa}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10000}}]}, 0x40}}, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f0000000180)={0xf, "22c437bc58face97ef560b3c81d6d3dbbc3a832aa5c52acb5ef7ba9247a74f63", 0xbf5e1b6ca074a155}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sync() sync() 10.52873172s ago: executing program 4 (id=6553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000090401130103000100092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="002213"], 0x0}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xcbb1, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 7.39774613s ago: executing program 4 (id=6565): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x7, 0xc) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x2a, 0x2f, 0x14, 0x6, 0x1, 0x9, 0x5, 0xe4, 0x5e5f9a22c4ee72b2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r3, 0x200, 0xfffffffc, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060001) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) 6.225600225s ago: executing program 4 (id=6573): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x23000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000440)=0xe7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x94982, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = gettid() r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r7, 0x0, 0x0}) sched_setparam(r5, &(0x7f0000000000)=0x1000) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000300)={0x48, 0xa, r8, 0x0, r9}) fcntl$setown(r1, 0x8, r5) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x5, 0x4}) sendfile(r1, r0, &(0x7f0000000240)=0x10001, 0x3) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(0x0, 0x3ced579240aba387, 0x20) r10 = open$dir(0x0, 0x1, 0x0) inotify_init1(0x0) sendfile(r10, 0xffffffffffffffff, 0x0, 0x6) 5.754120299s ago: executing program 4 (id=6574): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = getpid() r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r4, 0x3) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8800) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x7) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x440044, 0x141) readlinkat(r6, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/160, 0xa0) accept4(r4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r3, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r7, &(0x7f0000000300)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 5.740849564s ago: executing program 6 (id=6576): syz_emit_ethernet(0x359, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000018000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x19, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b10b0a64cfd671545e65eb2bce9ac946a3f0e2be27bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303"}, {0xe, 0x20000292, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 5.603647194s ago: executing program 6 (id=6577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000100001000000000000000000fff4000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a32ffffff3914000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a0001"], 0xcc}}, 0x0) 5.239530625s ago: executing program 9 (id=6578): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "9ac04fa103ef016f6193afbde49c4499a79ade5183d0680d273105eac21b48d67b12c612a19bcff8357099922b9575695bd4aa82c5cc641ac3c7a39d901c76a2", 0x23}, 0x48, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x8, 0x7, r1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) rmdir(0x0) r3 = getpgrp(0x0) sched_setscheduler(r3, 0x6, &(0x7f00000000c0)=0x5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x56544943, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 5.103369242s ago: executing program 6 (id=6579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000004940)={0x0, 0xf106, 0x40, 0x41, 0x114}, &(0x7f00000049c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4a33, 0x80, 0x0, 0x4c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8140, 0x8000, 0x0, 0x3d2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xea24, 0x80000, 0x1, 0xfb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6bdc, 0x10, 0x0, 0x19e}}], 0x4, &(0x7f0000005c40)={0x2e, 0x48, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1ff}, 0x0, 0x0, '\x00', {0x4, 0x796, 0x0, &(0x7f0000004c40)=@buf_512="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"}}, &(0x7f0000005cc0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, 0x0, &(0x7f00000003c0), 0x1048, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) pread64(r3, &(0x7f0000001140)=""/226, 0xe2, 0x88) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) close(0xffffffffffffffff) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000002c0)={0x3, 0x5, 0x72, &(0x7f0000000200)=""/114}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0xa2040, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0xfffffffe, 0x100, 0x0, 0x3, 0xfd, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) ioctl$TIOCGPTPEER(r5, 0x5441, 0x1000000000002185) fcntl$setstatus(r6, 0x4, 0x102800) close_range(r4, r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.420148634s ago: executing program 9 (id=6581): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010080ff0500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 3.418977289s ago: executing program 2 (id=6582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000b000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.231747415s ago: executing program 6 (id=6584): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x194}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x306, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x0, 0xc0107520, 0xa00}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) 3.172091448s ago: executing program 9 (id=6585): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x10}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4800) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) ioprio_get$pid(0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000002900), 0x5, 0x400001c3, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {}, 0x5, 0xe1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x3, 0x0}) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$USBDEVFS_REAPURB(r5, 0x4004550d, &(0x7f0000001080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getrlimit(0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000000f7ffffffffffffff000061190900000000009500000000000000efa0471c40a98559d7907c6f1f0b8cdbd5d02229b1fa0cec"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) 3.112468104s ago: executing program 2 (id=6586): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x1e0, 0x290, 0xffffffff, 0x1e0, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2a, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty=0x300, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 2.999450353s ago: executing program 7 (id=6587): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x9, 0xa5, 0x32315241, 0x4, 0xa, [{0x1, 0x1}, {0x7fffffff, 0x7}, {0x2, 0xa52}, {0x8, 0x1}, {0x6, 0x6ce22c19}, {0xe, 0x5c}, {0x1977, 0x5}, {0xfffffffb, 0x97}], 0x9a, 0x8, 0x8, 0x1}}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r3, 0x0, r2}) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd, 0x6e6bb5}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) (async, rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'geneve1\x00'}}, 0x1e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r8, &(0x7f00000001c0)=ANY=[], 0x47) (async, rerun: 64) splice(r7, 0x0, r6, 0x0, 0x5, 0x2) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r9, 0x6a98047402e98331, 0xfffffffd, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x406c810) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0x13c, 0x19, 0x10, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x80ffff, 0x0, 0xd, 0x0, 0xffffffffffffffff}, {0x0, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@local, 0x4d5, 0x32}, 0xa, @in=@loopback, 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x64010102, 0xfffffffc, 0x2b}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x2, 0x0, 0x7}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8014}, 0xc4000) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @dev, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xf, 0x9, 0x401b}}}}}}, 0x0) (rerun: 32) 2.901134455s ago: executing program 2 (id=6588): socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000700000000000001000100c1636e397c209b4b050000950000006cc400"/45], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 2.575265985s ago: executing program 7 (id=6589): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x1062200) 2.465625155s ago: executing program 4 (id=6590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x20}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000410001032bbd7000fddbdf2503"], 0x18}}, 0x840) 2.406488805s ago: executing program 7 (id=6591): setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async) r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffd) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x2041, 0x15001}, [@IFLA_MAP={0x24, 0xe, {0x5c, 0x200, 0x1, 0x4, 0x0, 0xc7}}, @IFLA_IFALIASn={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) (async, rerun: 64) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) (rerun: 64) 1.411444064s ago: executing program 9 (id=6592): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4dc05}, 0x0) 1.41108787s ago: executing program 2 (id=6593): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001b00)={0xe73, 0x20493859, 0x3, @discrete={0x2, 0x100}}) 1.410373699s ago: executing program 4 (id=6594): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a40)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000692000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000691000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffca7) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2750, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async, rerun: 32) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fddb9f2502005f94e4a7fd7cf9a408c1a831b7000008006a00030000000500590000000000f159d30c39700bd1d2702ed11b1a452a083c71cb58a597954c1a34a905bef0b772ed640ed83a7ed625fad7c295a6b616c757a571eec0990f2aff76a686966f22cff4028790c77a4b835f4f7c"], 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x4000040) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x9, 0x101, 0x5, 0xe, 0x2}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r6, 0x6}, 0x8) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="54020000", @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000700000006001600060000000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008850) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000100)={0x0, 0xffffffffffffff2b, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="7e7dca349d00"/15, @ANYRES16=r10, @ANYBLOB="01072cbd7000fedbdf250600000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x14, r10, 0x804, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4048004) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000ec0)={0x220, r7, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1000}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1b6, 0xa9, @random="083503131b50de23d9f234956980bd1b39e95511eeca2d07264d2b696f5253eff32d0e16265686bc12cf946af384099d9a597885306a3d31eec070fa2d30750b2269424ca109441239e3be5b9775aa435a76cb6a25ea79badd6501ea4b988000000000000000df42ea53c878745218b99bac43e968604eb2a9b2ad85e55dcfeb6a7072fbd48633442486027bbb2979718423ca83c9566e84b7789bbf4737d1f5a517ce69435698a95251cf43d5ba3dcf4b3d50eb0aeff8573a96c246cca2b101eb5dc20ab35a647f99cc5c8eefa69ec5b1a8ec00000000000000000000b22a7b3fb0d9b179b7678756a55a72416453ce32f8507c0f968f0b4c2349cca3e3bc73d981c591a541c9164f92dfa1e1786aca598c0a5abf06fc4f620067cb47928f917dd3b00bcb5acce707afdd2f8c358e64abd5e1eb25a34ae40953a2a8f7b2761501ac6cefab3999f2c188bb47e13261b8b60366bee6ab9530d9a13c2f9f584bd8085c44cab7ef78bd9834e960529eb3974fd951e320619f2c93cb540dd9c2c10e06ce075eb3dfc90709f0332450e5c9889bc7f968ee76b419ddccad736b8284fe50e5e753e77baf691beb6ab02c1c4f922e16"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x30}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100000000}]}, 0x220}, 0x1, 0x0, 0x0, 0x200480c5}, 0x20048884) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x1f4, r3, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfffffff7, 0x400004b}}}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_IE={0x14, 0x2a, [@mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0xff, 0x9, 0xc, 0x2}}]}, @NL80211_ATTR_IE={0x1a1, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x9, 0x60}}, @channel_switch={0x25, 0x3, {0x1, 0x68, 0xfd}}, @random={0x7, 0x54, "4077355f148a71e43fc06e9ba708f880220da03f9e8f55f14f0000001fa4d954576a74fa3987bdc087604058c05cb6e97336271757e7c717eb8f544ae6f39dfd81a5e0d79512edbad3e8ea7a1a369172ebc7415c"}, @sec_chan_ofs={0x3e, 0x1}, @perr={0x84, 0xc3, {0x4, 0xd, [{{}, @device_a, 0x5}, {{}, @device_a, 0x5, @void, 0x8}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x12}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x26}, {{}, @device_b, 0x8, @void, 0x1c}, {{}, @device_a, 0x1000, @void, 0x19}, {{}, @device_b, 0x2, @void, 0xb}, {{}, @broadcast, 0x5, @void, 0x4}, {{}, @device_a, 0x8004, @void, 0x1}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x1b}, {{0x0, 0x1}, @broadcast, 0x24d, @value=@broadcast, 0x1b}, {{}, @device_b, 0x4, @void, 0x26}, {{}, @broadcast, 0xc200000, @void, 0x14}]}}, @random={0x2c, 0x6f, "4631c3f089dd97ae872649c8eeb36331374ce6ae6a9deb3e9ee08a5aabd89c2a86fb47bb9fb4984c1bad96a29d3d1970c63fc9db92d93bc5278893c3a2b72de1d5e27d0531e3b53b09a19e9ac493874307ec84ab383da3cb3f0324a3c72203f45487fcedc434bb71b3897b32ed63c1"}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40000}, 0x2000004c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000a29e27920d88dc72ed800bf000100010000009500000000000000806d8ae3a446442aa0ec59a054"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x45, 0x10, 0x0, 0x23}, 0x90) (async) add_key(&(0x7f00000007c0)='user\x00', &(0x7f0000000880)={'syz', 0x2}, &(0x7f00000008c0)="e8a4f33babc164a26f43a11fa6d966483f24fec1b6d1472d", 0x18, 0xfffffffffffffffa) 1.267416496s ago: executing program 6 (id=6595): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, 0x0) 1.267208524s ago: executing program 2 (id=6596): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a3000000000050004000000000005f005000a00000014000780050015000200000008001240"], 0x64}}, 0x0) 1.220301256s ago: executing program 7 (id=6597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x4, 0x4a, 0x2, 0x7, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f00003d1000/0x1000)=nil, &(0x7f0000a30000/0x1000)=nil, &(0x7f0000b19000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f000090a000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000591000/0x4000)=nil, &(0x7f0000877000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff28}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r4, 0x1, 0xfffffffe, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) rmdir(0x0) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0xc1205531, &(0x7f0000002680)=""/4078) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {}, {0xf, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400880c}, 0x20004804) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x9, 0x10000, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x77, 0x1, {r0}, {0xee01}, 0xc, 0x90fc}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x3, 0xfffffe00, 0x2400, '\x00', 0x9}, 0x3, 0x10000000, 0x8, r8, 0x0, 0x10001, 'syz1\x00', &(0x7f00000000c0)}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 986.874551ms ago: executing program 6 (id=6598): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x74, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x8848}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r4, 0x25, 0x0, @void}, 0x10) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) cachestat(r0, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) 911.003738ms ago: executing program 2 (id=6599): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="19000000040000000400", @ANYRES32=0x1, @ANYBLOB="032000000000000000000000000000000da02f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000300000008732b1b00400001020301090269000301083004080b01010103200309040000000101200009240104000a090002b10401000001022000090401010101022000090501092000f33b45a596e4ef25aa10ed37b5020407082501810ff2090009040200000102200009040201010102200009058209000480000b0825018114070600"], 0x0) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000080)={r4, r5, 0x0, 0x0, 0x4}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) r7 = socket(0x2a, 0x80805, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) stat(&(0x7f0000000040)='.\x00', &(0x7f0000000080)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x844) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040410e414240000102030109026e0003017d0006080b0002012230090904000000010130000a2401100a00090000000904010000bf6b795fd14cc19101010230000905010960002503050a2525010400000500000904020000010230000904020101010230000905820900027706c00a2525ffffff7f01e10b"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xffffffffffffffcc, 0x0}]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000000)={r9, 0xfffb}, 0x8) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 683.310161ms ago: executing program 7 (id=6600): r0 = fanotify_init(0xef0, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x123, 0x200, 0x70bd28, 0x25dfdbfc, {0x15}, [@typed={0x8, 0x142, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x4004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}, 0x1, 0xd000000}, 0x0) 682.866148ms ago: executing program 9 (id=6601): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x23000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000440)=0xe7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x94982, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = gettid() r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r7, 0x0, 0x0}) sched_setparam(r5, &(0x7f0000000000)=0x1000) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) (fail_nth: 1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000300)={0x48, 0xa, r8, 0x0, r9}) fcntl$setown(r1, 0x8, r5) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x5, 0x4}) sendfile(r1, r0, &(0x7f0000000240)=0x10001, 0x3) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(0x0, 0x3ced579240aba387, 0x20) r10 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) inotify_init1(0x0) sendfile(r10, 0xffffffffffffffff, 0x0, 0x6) 529.816321ms ago: executing program 7 (id=6602): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) r2 = socket(0x1e, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4010) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r2, 0x0) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/113, 0x71}, 0x2730}], 0x1, 0x2, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x810}, 0x40801) 0s ago: executing program 9 (id=6603): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0x7, 0xe882, 0x1000, 0x5, 0x2, 0x7f, 0x800}, &(0x7f0000000140), &(0x7f00000001c0)={0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x8, 0x0, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, 0xffffffffffffffff, 0x19}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000d40), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) write$binfmt_elf32(r6, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x5, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}], "", ['\x00']}, 0x158) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ort [fe80::aa]:20002. Sending cookies. [ 1187.827324][ T5615] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1188.299375][T26518] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6076'. [ 1188.336606][T26518] netlink: 90 bytes leftover after parsing attributes in process `syz.8.6076'. [ 1188.349717][T26522] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6077'. [ 1188.390403][T26522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6077'. [ 1188.400808][T26518] netlink: 90 bytes leftover after parsing attributes in process `syz.8.6076'. [ 1188.454132][ T5615] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1188.478775][ T5615] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1188.955190][ T5615] usb 3-1: USB disconnect, device number 118 [ 1189.585182][T26535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.620044][T26535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.822378][ T5711] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1189.906299][ T30] audit: type=1400 audit(1783548968.322:2043): avc: denied { create } for pid=26543 comm="syz.2.6086" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1190.147017][ T5711] usb 8-1: Using ep0 maxpacket: 8 [ 1190.224663][ T5711] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1190.233943][ T5711] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.261037][ T5711] usb 8-1: config 0 has no interface number 0 [ 1190.308313][ T5711] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1190.333500][ T5711] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.348169][ T5711] usb 8-1: Product: syz [ 1190.353988][ T5711] usb 8-1: Manufacturer: syz [ 1190.358841][ T5711] usb 8-1: SerialNumber: syz [ 1190.421871][ T5711] usb 8-1: config 0 descriptor?? [ 1190.466690][ T5711] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1190.494656][ T5711] uvcvideo 8-1:0.31: No valid video chain found. [ 1190.555837][T26549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.563185][T26549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.128456][ T5615] usb 8-1: USB disconnect, device number 36 [ 1191.230069][T26549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1191.287158][T26549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1192.570827][ T143] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.596598][ T143] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.638147][T26594] veth1_to_team: entered promiscuous mode [ 1192.714538][T26594] macvlan2: entered promiscuous mode [ 1192.734311][T26594] veth1_to_team: left promiscuous mode [ 1192.802689][ T143] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.832774][ T143] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.875198][ T30] audit: type=1400 audit(1783548971.282:2044): avc: denied { map } for pid=26603 comm="syz.7.6102" path="socket:[93879]" dev="sockfs" ino=93879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1193.888570][ T5745] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1194.052542][ T190] usb 7-1: new full-speed USB device number 94 using dummy_hcd [ 1194.075456][ T5745] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1194.092778][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.112533][ T5745] usb 3-1: Product: syz [ 1194.116819][ T5745] usb 3-1: Manufacturer: syz [ 1194.123602][ T5745] usb 3-1: SerialNumber: syz [ 1194.137507][ T5745] usb 3-1: config 0 descriptor?? [ 1194.142372][ T5711] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1194.237164][ T190] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.258720][ T190] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1194.271648][ T190] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1194.281832][ T9] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1194.296868][ T190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.303441][ T5624] Bluetooth: hci5: command 0x0406 tx timeout [ 1194.359674][ T5711] usb 5-1: not running at top speed; connect to a high speed hub [ 1194.382791][ T190] usb 7-1: config 0 descriptor?? [ 1194.386215][ T5711] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 1194.401201][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.404203][ T5745] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1194.410385][ T5711] usb 5-1: Product: syz [ 1194.424325][ T5711] usb 5-1: Manufacturer: syz [ 1194.486734][ T190] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1194.517723][ T190] dvb-usb: bulk message failed: -22 (3/0) [ 1194.534567][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1194.548325][ T5711] usb 5-1: SerialNumber: syz [ 1194.583109][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1194.610749][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.697998][ T9] usb 8-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 1194.789349][ T190] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1194.799119][ T9] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1194.813215][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.821871][ T190] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1194.829094][ T9] usb 8-1: Product: syz [ 1194.833350][ T190] usb 7-1: media controller created [ 1194.839411][ T9] usb 8-1: Manufacturer: syz [ 1194.845514][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1194.854031][ T9] usb 8-1: SerialNumber: syz [ 1194.881839][ T190] dvb-usb: bulk message failed: -22 (6/0) [ 1194.888624][T26624] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1194.894612][ T190] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1194.919517][ T190] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input44 [ 1194.957958][ T190] dvb-usb: schedule remote query interval to 150 msecs. [ 1194.980778][ T190] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1195.074994][T26619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.084314][T26619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.103639][T26613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.124695][ T190] usb 7-1: USB disconnect, device number 94 [ 1195.132487][ T9] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 1195.145073][T26613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.159387][ T9] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1195.193147][T26613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.200123][T26631] __nla_validate_parse: 2 callbacks suppressed [ 1195.200141][T26631] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6109'. [ 1195.229148][T26613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.331014][ T30] audit: type=1326 audit(1783548973.742:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26629 comm="syz.8.6109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6075b9de59 code=0x0 [ 1195.607180][ T5711] usb 5-1: USB disconnect, device number 26 [ 1195.875910][ T9] usb 8-1: USB disconnect, device number 37 [ 1195.910637][ T190] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1196.093212][ T5745] usb 3-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1196.137253][ T5745] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1196.187800][ T5745] usb 3-1: media controller created [ 1196.238086][ T5745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1196.278867][T26651] vlan1: entered allmulticast mode [ 1197.161670][T26651] veth0_vlan: entered allmulticast mode [ 1197.200598][T25773] udevd[25773]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1197.222662][T19277] udevd[19277]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1197.249320][ T5745] dvb_usb_rtl28xxu 3-1:0.0: unknown tuner MT2063 [ 1197.558876][ T5745] usb 3-1: USB disconnect, device number 119 [ 1198.706222][T26677] netlink: 'syz.6.6123': attribute type 1 has an invalid length. [ 1198.732369][ T5745] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1198.887335][T26677] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1198.928455][ T5745] usb 5-1: Using ep0 maxpacket: 32 [ 1199.025296][ T5745] usb 5-1: config 10 has an invalid interface number: 180 but max is 1 [ 1199.111871][ T5745] usb 5-1: config 10 contains an unexpected descriptor of type 0x1, skipping [ 1199.171839][ T5745] usb 5-1: config 10 has an invalid interface number: 2 but max is 1 [ 1199.205226][ T5745] usb 5-1: config 10 has no interface number 0 [ 1199.220809][ T5745] usb 5-1: config 10 has no interface number 1 [ 1199.237309][ T5745] usb 5-1: config 10 interface 180 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1199.283001][ T5745] usb 5-1: config 10 interface 2 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 1199.313272][ T5745] usb 5-1: config 10 interface 2 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1199.337336][ T5745] usb 5-1: config 10 interface 2 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1199.363820][ T5745] usb 5-1: config 10 interface 2 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1199.398228][ T5745] usb 5-1: config 10 interface 2 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1199.436971][ T5745] usb 5-1: config 10 interface 180 has no altsetting 0 [ 1199.458132][ T5745] usb 5-1: config 10 interface 2 has no altsetting 0 [ 1199.481852][ T5745] usb 5-1: New USB device found, idVendor=0659, idProduct=0020, bcdDevice=10.b4 [ 1199.506778][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.524874][ T5745] usb 5-1: Product: Є [ 1199.532752][ T5745] usb 5-1: Manufacturer: ࠧ [ 1199.542514][ T5745] usb 5-1: SerialNumber: ⤻˽탡嶪ᾟꇋ滮䴟ø쨠ꏽ苃湟ᦍ쟶쑽皫巂멁镟髫쩪뭒㩾솆阒ެ겗㘂餢誙㟅䕩籃搓勌گ鲵柎⃬鑧㓳⧗ऌ⇨엤懏ꑿ駣丶≐튋옵㮔କ뱚젰ⱳ [ 1199.598333][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1199.618716][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1199.632624][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1199.644051][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1199.652172][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1199.833218][ T5745] cxacru 5-1:10.180: cxacru_bind: interface has incorrect endpoints [ 1199.847279][ T5745] cxacru 5-1:10.180: usbatm_usb_probe: bind failed: -19! [ 1199.877803][ T5745] cxacru 5-1:10.2: cxacru_bind: interface has incorrect endpoints [ 1199.886794][ T5745] cxacru 5-1:10.2: usbatm_usb_probe: bind failed: -19! [ 1199.912827][ T5745] usb 5-1: USB disconnect, device number 27 [ 1200.314510][T26689] lo speed is unknown, defaulting to 1000 [ 1200.757778][T26712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6128'. [ 1202.188289][ T4928] Bluetooth: hci7: command tx timeout [ 1202.324078][T26720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6132'. [ 1202.763577][ T5745] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1202.922399][ T5745] usb 8-1: Using ep0 maxpacket: 16 [ 1202.953629][ T5745] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1202.967141][ T5745] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1202.968094][ T143] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.976920][ T5745] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.995818][ T5745] usb 8-1: Product: syz [ 1203.002563][ T5745] usb 8-1: Manufacturer: syz [ 1203.009154][ T5745] usb 8-1: SerialNumber: syz [ 1203.028860][ T5745] usb 8-1: config 0 descriptor?? [ 1203.049083][ T5745] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1203.062002][ T5745] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1203.199489][T26689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.217447][T26689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.236545][T26689] bridge_slave_0: entered allmulticast mode [ 1203.286026][T26689] bridge_slave_0: entered promiscuous mode [ 1203.307879][T26689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.325247][T26689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.342988][T26689] bridge_slave_1: entered allmulticast mode [ 1203.412769][T26689] bridge_slave_1: entered promiscuous mode [ 1204.183745][T26085] block nbd1: Possible stuck request ffff8880288f5080: control (read@0,4096B). Runtime 120 seconds [ 1204.214222][ T4928] Bluetooth: hci7: command tx timeout [ 1204.262036][ T143] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.290503][ T5745] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1204.326453][T26689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.343710][T26689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.401139][T26689] team0: Port device team_slave_0 added [ 1204.439633][ T5745] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1204.457186][T26689] team0: Port device team_slave_1 added [ 1204.480087][ T5745] em28xx 8-1:0.0: board has no eeprom [ 1204.524370][ T143] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.572418][ T5745] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1204.593042][ T5745] em28xx 8-1:0.0: dvb set to bulk mode. [ 1204.602387][T26689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.611998][ T190] em28xx 8-1:0.0: Binding DVB extension [ 1204.632877][T26689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.666493][ T5745] usb 8-1: USB disconnect, device number 38 [ 1204.719917][ T5745] em28xx 8-1:0.0: Disconnecting em28xx [ 1204.741266][T26689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.993185][ T190] em28xx 8-1:0.0: Registering input extension [ 1204.994796][ T143] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.002876][ T5745] em28xx 8-1:0.0: Closing input extension [ 1205.097760][T26689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.108964][T26689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.136469][ T5745] em28xx 8-1:0.0: Freeing device [ 1205.146060][T26689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.126302][ T5711] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 1206.140716][T26689] hsr_slave_0: entered promiscuous mode [ 1206.160341][T26689] hsr_slave_1: entered promiscuous mode [ 1206.169572][T26689] debugfs: 'hsr0' already exists in 'hsr' [ 1206.182378][T26689] Cannot create hsr debugfs directory [ 1206.292948][ T4928] Bluetooth: hci7: command tx timeout [ 1206.293123][ T5745] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1206.324060][ T5711] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1206.335322][ T5711] usb 9-1: config 179 has no interface number 0 [ 1206.345485][ T5711] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1206.360004][ T5711] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1206.371288][ T5711] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1206.383282][ T5711] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1206.394877][ T5711] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1206.410350][ T5711] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1206.424521][ T5711] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.477254][T26761] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1206.490510][T26761] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1206.493682][ T5745] usb 8-1: Using ep0 maxpacket: 16 [ 1206.541151][ T5745] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1206.581360][ T5745] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1206.593129][T26769] sctp: [Deprecated]: syz.4.6142 (pid 26769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1206.593129][T26769] Use struct sctp_sack_info instead [ 1206.634496][ T5745] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.654450][ T5745] usb 8-1: Product: syz [ 1206.671149][ T5745] usb 8-1: Manufacturer: syz [ 1206.680300][T26770] netlink: 45 bytes leftover after parsing attributes in process `syz.4.6142'. [ 1206.686956][ T5745] usb 8-1: SerialNumber: syz [ 1206.721257][ T5745] usb 8-1: config 0 descriptor?? [ 1206.750905][ T5745] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1206.795120][ T5745] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1206.818094][ T5711] usb 9-1: USB disconnect, device number 2 [ 1206.824042][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1206.824086][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1206.917731][ T143] vlan0: left allmulticast mode [ 1206.943844][ T143] geneve0: left allmulticast mode [ 1206.983270][ T143] vlan0: left promiscuous mode [ 1206.991668][ T143] geneve0: left promiscuous mode [ 1207.005829][ T143] bridge0: port 3(vlan0) entered disabled state [ 1207.033520][ T143] bridge_slave_1: left allmulticast mode [ 1207.047109][ T143] bridge_slave_1: left promiscuous mode [ 1207.064091][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.088987][ T143] bridge_slave_0: left allmulticast mode [ 1207.108301][ T143] bridge_slave_0: left promiscuous mode [ 1207.130299][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.301268][T26789] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6138'. [ 1207.304911][ T30] audit: type=1400 audit(1783548985.712:2046): avc: denied { write } for pid=26771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1208.080818][ T30] audit: type=1400 audit(1783548986.492:2047): avc: denied { write } for pid=26793 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1208.112748][ T5745] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1208.200867][ T5745] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1208.221873][ T5745] em28xx 8-1:0.0: board has no eeprom [ 1208.360495][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.372822][ T5624] Bluetooth: hci7: command tx timeout [ 1208.378703][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.390423][ T143] bond0 (unregistering): Released all slaves [ 1208.409524][ T143] bond1 (unregistering): (slave lo): Releasing backup interface [ 1208.416459][ T9] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1208.425187][ T5745] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1208.433560][ T5745] em28xx 8-1:0.0: dvb set to bulk mode. [ 1208.440435][ T5344] em28xx 8-1:0.0: Binding DVB extension [ 1208.451012][ T143] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1208.467224][ T143] bond1 (unregistering): Released all slaves [ 1208.622011][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 1208.651906][ T9] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 1208.664273][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.673394][ T9] usb 9-1: Product: syz [ 1208.677938][ T9] usb 9-1: Manufacturer: syz [ 1208.684271][ T9] usb 9-1: SerialNumber: syz [ 1208.860469][ T143] bond2 (unregistering): Released all slaves [ 1208.874097][ T5344] em28xx 8-1:0.0: Registering input extension [ 1208.897615][ T143] bond3 (unregistering): Released all slaves [ 1208.911053][ T143] bond4 (unregistering): Released all slaves [ 1208.926388][ T143] bond5 (unregistering): Released all slaves [ 1208.941056][ T143] bond6 (unregistering): Released all slaves [ 1208.956543][ T143] bond7 (unregistering): Released all slaves [ 1208.977659][ T143] bond8 (unregistering): Released all slaves [ 1208.991268][ T143] bond9 (unregistering): Released all slaves [ 1209.005229][ T143] bond10 (unregistering): Released all slaves [ 1209.027980][ T143] bond11 (unregistering): Released all slaves [ 1209.043349][ T143] bond12 (unregistering): Released all slaves [ 1209.059472][ T143] bond13 (unregistering): Released all slaves [ 1209.224594][T26794] syzkaller1: entered promiscuous mode [ 1209.244704][T26798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.279790][T26794] syzkaller1: entered allmulticast mode [ 1209.311031][T26798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.312839][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1209.354000][T26798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.414373][T26798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.668546][T26818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6147'. [ 1209.872937][ T5711] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1210.010677][ T143] tipc: Left network mode [ 1210.042930][ T143] IPVS: stopping master sync thread 16242 ... [ 1210.092981][ T5745] usb 9-1: USB disconnect, device number 3 [ 1210.101989][ T5711] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1210.146258][ T5711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.163335][ T5711] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1210.176879][ T5615] usb 8-1: USB disconnect, device number 39 [ 1210.316216][ T5615] em28xx 8-1:0.0: Disconnecting em28xx [ 1210.322524][ T5615] em28xx 8-1:0.0: Closing input extension [ 1210.336413][ T5711] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1210.348492][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.359876][ T5711] usb 3-1: Product: syz [ 1210.389505][ T5711] usb 3-1: Manufacturer: syz [ 1210.401069][ T5711] usb 3-1: SerialNumber: syz [ 1210.568884][T26823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1210.628405][T26823] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6150'. [ 1210.674011][ T5711] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1210.808012][ T5615] em28xx 8-1:0.0: Freeing device [ 1210.875254][ T5711] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1210.887770][ T5711] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1210.897190][ T5711] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1211.289261][ T5711] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1211.468531][ T5711] usb 3-1: USB disconnect, device number 120 [ 1211.619613][T19851] udevd[19851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1211.687681][ T30] audit: type=1400 audit(1783548990.092:2048): avc: denied { write } for pid=26826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1212.004309][ T30] audit: type=1400 audit(1783548990.392:2049): avc: denied { write } for pid=26855 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1213.645802][ T30] audit: type=1400 audit(1783548992.062:2050): avc: denied { write } for pid=26870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1213.906385][ T30] audit: type=1400 audit(1783548992.322:2051): avc: denied { write } for pid=26893 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1213.951820][ T143] hsr_slave_0: left promiscuous mode [ 1213.973386][ T143] hsr_slave_1: left promiscuous mode [ 1214.006609][T26902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6161'. [ 1214.016599][ T143] veth1_macvtap: left promiscuous mode [ 1214.022730][ T143] veth0_macvtap: left promiscuous mode [ 1214.040099][ T143] veth1_vlan: left promiscuous mode [ 1214.058306][ T143] veth0_vlan: left promiscuous mode [ 1214.228742][ T5711] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 1214.388355][ T30] audit: type=1400 audit(1783548992.802:2052): avc: denied { write } for pid=26903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1214.467453][ T5711] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1214.480180][ T5711] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1214.524083][ T5711] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1214.533712][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.828430][T26923] input: syz1 as /devices/virtual/input/input47 [ 1214.846172][ T5711] usb 3-1: config 0 descriptor?? [ 1214.867997][T26901] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1214.939224][ T30] audit: type=1400 audit(1783548993.352:2053): avc: denied { write } for pid=26925 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1215.045414][ T143] team0 (unregistering): Port device team_slave_1 removed [ 1215.061603][ T143] team0 (unregistering): Port device team_slave_0 removed [ 1215.258155][T26689] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1215.270735][T26689] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1215.379645][T26689] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1215.404051][ T30] audit: type=1400 audit(1783548993.812:2054): avc: denied { write } for pid=26927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1215.441517][T26901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.454229][T26901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.470917][T26689] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1215.505581][T26689] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1215.519454][T26689] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1215.529175][T26689] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1215.545473][T26689] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1215.628572][ T5711] usbhid 3-1:0.0: can't add hid device: -71 [ 1215.646384][ T5711] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1215.680332][ T5711] usb 3-1: USB disconnect, device number 121 [ 1215.697783][ T30] audit: type=1400 audit(1783548994.102:2055): avc: denied { write } for pid=26959 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1215.783868][T26689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.809057][T26689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.821683][T26939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.828901][T26939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.862142][T26939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.869360][T26939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.804857][ T30] audit: type=1400 audit(1783548995.212:2056): avc: denied { write } for pid=26976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.122352][ T30] audit: type=1400 audit(1783548995.522:2057): avc: denied { write } for pid=27020 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.148061][T27023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6173'. [ 1217.157799][T27023] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6173'. [ 1217.167195][T27023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6173'. [ 1217.176249][T27023] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6173'. [ 1217.185364][T27023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6173'. [ 1217.298919][T26689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.343868][ T5344] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1217.452345][ T5814] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1217.533061][ T5344] usb 8-1: Using ep0 maxpacket: 32 [ 1217.545036][ T30] audit: type=1400 audit(1783548995.952:2058): avc: denied { write } for pid=27030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.546850][ T5344] usb 8-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1217.595041][T26689] veth0_vlan: entered promiscuous mode [ 1217.609958][ T5344] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1217.610062][T26689] veth1_vlan: entered promiscuous mode [ 1217.621977][ T5344] usb 8-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1217.625331][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 1217.631459][ T5344] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.639310][ T5814] usb 3-1: config 0 has no interfaces? [ 1217.674362][ T5344] usb 8-1: config 0 descriptor?? [ 1217.674472][ T5814] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1217.708446][ T30] audit: type=1400 audit(1783548996.112:2059): avc: denied { write } for pid=27047 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.733780][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.744621][ T5814] usb 3-1: config 0 descriptor?? [ 1217.755294][T26689] veth0_macvtap: entered promiscuous mode [ 1217.859413][T26689] veth1_macvtap: entered promiscuous mode [ 1217.886549][T26689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.905018][T26689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.930514][ T143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.944012][T27051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6176'. [ 1217.944012][T27053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6176'. [ 1217.971630][ T143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.993598][ T143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.010556][T27051] affs: No valid root block on device nullb0 [ 1218.014576][ T143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.039036][ T5745] usb 3-1: USB disconnect, device number 122 [ 1218.090915][ T5344] itetech 0003:048D:8595.0018: unknown main item tag 0x7 [ 1218.156124][ T5344] itetech 0003:048D:8595.0018: unknown main item tag 0x0 [ 1218.185169][ T5344] itetech 0003:048D:8595.0018: unknown main item tag 0x1 [ 1218.197933][ T5344] itetech 0003:048D:8595.0018: reserved main item tag 0xd [ 1218.221212][T26984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.224638][ T5344] itetech 0003:048D:8595.0018: hidraw0: USB HID v0.73 Device [HID 048d:8595] on usb-dummy_hcd.7-1/input0 [ 1218.258456][T26984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.275476][T27062] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6177'. [ 1218.290091][ T5344] usb 8-1: USB disconnect, device number 40 [ 1218.348627][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.366341][T27064] fido_id[27064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1218.394842][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.838582][T27079] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6125'. [ 1218.888548][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1218.888564][ T30] audit: type=1400 audit(1783548997.302:2061): avc: denied { write } for pid=27073 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1219.184252][ T5711] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1219.390614][ T5711] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1219.655599][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1219.668772][ T5711] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 1219.678713][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.689193][T27100] Bluetooth: MGMT ver 1.23 [ 1219.698356][ T5711] usb 5-1: config 0 descriptor?? [ 1219.768397][T27107] 9p: Bad value for 'msize' [ 1220.069976][T27116] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27116 comm=syz.7.6187 [ 1220.432025][ T30] audit: type=1400 audit(1783548998.842:2062): avc: denied { compute_member } for pid=27076 comm="syz.4.6179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1220.556642][ T5711] monterey 0003:0566:3004.0019: unknown main item tag 0x0 [ 1220.570555][ T5711] monterey 0003:0566:3004.0019: unknown main item tag 0x0 [ 1220.597505][ T5711] monterey 0003:0566:3004.0019: unknown main item tag 0x0 [ 1220.606554][ T5711] monterey 0003:0566:3004.0019: unknown main item tag 0x0 [ 1220.613782][ T5711] monterey 0003:0566:3004.0019: unknown main item tag 0x0 [ 1220.623035][ T5711] monterey 0003:0566:3004.0019: unknown main item tag 0x0 [ 1220.630498][ T5711] monterey 0003:0566:3004.0019: unknown main item tag 0x0 [ 1220.671389][T27119] random: crng reseeded on system resumption [ 1220.689359][ T5711] monterey 0003:0566:3004.0019: hidraw0: USB HID v0.04 Device [HID 0566:3004] on usb-dummy_hcd.4-1/input0 [ 1221.103311][ T5814] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1221.353249][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 1221.456820][ T5814] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1221.617495][ T5814] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1221.735196][ T5814] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1222.009865][ T5711] usb 5-1: USB disconnect, device number 28 [ 1222.157893][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.205621][ T30] audit: type=1400 audit(1783549000.622:2063): avc: denied { write } for pid=27086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.603060][ T5814] usb 3-1: config 0 descriptor?? [ 1222.661695][T27125] fido_id[27125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1222.745475][ T30] audit: type=1400 audit(1783549001.162:2064): avc: denied { write } for pid=27132 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.863387][ T5615] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1223.012867][ T5615] usb 8-1: Using ep0 maxpacket: 16 [ 1223.235274][ T5615] usb 8-1: config 0 has no interfaces? [ 1223.241345][ T5615] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1223.290090][ T5615] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.424852][T27146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1223.547174][ T5615] usb 8-1: config 0 descriptor?? [ 1223.688938][ T5814] corsair-cpro 0003:1B1C:0C10.001A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1223.720159][T27133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6192'. [ 1223.730970][T27133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6192'. [ 1223.875673][ T30] audit: type=1400 audit(1783549002.292:2065): avc: denied { write } for pid=27138 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1223.879473][ T9] usb 8-1: USB disconnect, device number 41 [ 1223.936458][ T5814] corsair-cpro 0003:1B1C:0C10.001A: probe with driver corsair-cpro failed with error -71 [ 1223.998418][ T30] audit: type=1400 audit(1783549002.412:2066): avc: denied { write } for pid=27159 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1224.114272][ T30] audit: type=1400 audit(1783549002.532:2067): avc: denied { read } for pid=27117 comm="syz.2.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1224.139000][T27118] netlink: 'syz.2.6188': attribute type 1 has an invalid length. [ 1224.162225][T27118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1224.173984][ T5814] usb 3-1: USB disconnect, device number 123 [ 1224.232841][T27057] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1224.247990][T27169] netlink: 252 bytes leftover after parsing attributes in process `syz.6.6196'. [ 1224.302941][T27171] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6197'. [ 1224.396864][ T30] audit: type=1400 audit(1783549002.812:2068): avc: denied { write } for pid=27161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1224.426977][T27057] usb 5-1: Using ep0 maxpacket: 8 [ 1224.451744][T27158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.485195][T27158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.508322][T27057] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1224.514588][ T30] audit: type=1400 audit(1783549002.932:2069): avc: denied { write } for pid=27180 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1224.528107][T27057] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1224.595649][T27057] usb 5-1: can't read configurations, error -71 [ 1225.643135][T27192] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1225.649689][T27192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1225.659313][T27192] vhci_hcd vhci_hcd.0: Device attached [ 1225.785630][T27198] syzkaller0: entered promiscuous mode [ 1225.802696][T27198] syzkaller0: entered allmulticast mode [ 1225.848087][T27198] tipc: Enabled bearer , priority 0 [ 1225.857748][T27197] tipc: Resetting bearer [ 1225.887469][T27197] tipc: Disabling bearer [ 1225.912837][ T9] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1225.920388][ T5745] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1226.072419][ T5745] usb 7-1: device descriptor read/64, error -71 [ 1226.080986][T27206] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6209'. [ 1226.091782][ T30] audit: type=1400 audit(1783549004.512:2070): avc: denied { setattr } for pid=27201 comm="syz.2.6208" name="NETLINK" dev="sockfs" ino=96404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1227.220842][ T5745] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1227.392749][ T5745] usb 7-1: device descriptor read/64, error -71 [ 1227.468944][T27057] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1227.481402][ T4928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1227.495723][ T4928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1227.514713][ T4928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1227.526616][ T4928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1227.537100][ T4928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1227.539411][ T5745] usb usb7-port1: attempt power cycle [ 1227.682742][T27057] usb 5-1: Using ep0 maxpacket: 8 [ 1227.727089][T27208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.762814][T27208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.810403][T27057] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1227.845828][T27057] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1227.850900][T27222] lo speed is unknown, defaulting to 1000 [ 1227.863585][T27057] usb 5-1: can't read configurations, error -71 [ 1227.922352][ T5745] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1227.952865][ T5745] usb 7-1: device descriptor read/8, error -71 [ 1228.017612][T27236] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1228.048199][T27236] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1228.202426][ T5745] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1228.224365][ T5745] usb 7-1: device descriptor read/8, error -71 [ 1228.335256][ T5745] usb usb7-port1: unable to enumerate USB device [ 1228.472551][T27222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.491092][T27222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.517702][T27222] bridge_slave_0: entered allmulticast mode [ 1228.545638][T27222] bridge_slave_0: entered promiscuous mode [ 1228.557415][T27257] syzkaller0: entered promiscuous mode [ 1228.566141][T27257] syzkaller0: entered allmulticast mode [ 1228.583712][T27222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.592232][T27222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.600660][T27222] bridge_slave_1: entered allmulticast mode [ 1228.631341][T27222] bridge_slave_1: entered promiscuous mode [ 1228.704230][T27193] vhci_hcd: connection reset by peer [ 1228.721880][T26981] vhci_hcd vhci_hcd.6: stop threads [ 1228.740270][T26981] vhci_hcd vhci_hcd.6: release socket [ 1228.762186][T26981] vhci_hcd vhci_hcd.6: disconnect device [ 1228.794672][T27263] tipc: Enabled bearer , priority 0 [ 1228.894226][T27222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.946378][T27256] tipc: Resetting bearer [ 1229.016533][T27256] tipc: Disabling bearer [ 1229.025800][ T30] audit: type=1400 audit(1783549007.442:2071): avc: denied { mount } for pid=27269 comm="syz.7.6227" name="/" dev="rpc_pipefs" ino=96695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1229.072613][T27222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.174592][T27222] team0: Port device team_slave_0 added [ 1229.262482][T27222] team0: Port device team_slave_1 added [ 1229.361407][T27222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.378647][T27222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.418933][T27222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.462091][T27222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.476907][T27222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.528876][T27222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.562594][ T805] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1229.573817][T27285] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1229.619099][T27283] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1229.663982][ T5624] Bluetooth: hci1: command tx timeout [ 1229.703515][T27222] hsr_slave_0: entered promiscuous mode [ 1229.710086][T27222] hsr_slave_1: entered promiscuous mode [ 1229.717272][T27222] debugfs: 'hsr0' already exists in 'hsr' [ 1229.724399][T27222] Cannot create hsr debugfs directory [ 1229.736400][ T805] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1229.774479][ T805] usb 5-1: not running at top speed; connect to a high speed hub [ 1229.816422][ T805] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.852028][ T805] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1230.048785][ T805] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1230.069321][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.179018][ T805] usb 5-1: Product: syz [ 1230.197481][ T805] usb 5-1: Manufacturer: syz [ 1230.295537][ T805] usb 5-1: SerialNumber: syz [ 1230.757927][T27222] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1230.779383][T27222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1230.791207][T27222] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1230.803716][T27222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1230.812064][T27222] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1230.821852][T27222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1230.839406][T27222] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1230.870804][T27222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1231.016106][T27222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.038424][T27222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.050952][T26989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.058200][T26989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.082425][ T9] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1231.103090][T26981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.110222][T26981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.138916][T27314] syzkaller0: entered promiscuous mode [ 1231.145892][T27314] syzkaller0: entered allmulticast mode [ 1231.181612][T27314] tipc: Started in network mode [ 1231.187254][T27314] tipc: Node identity 8ede7371112b, cluster identity 4711 [ 1231.196162][T27057] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1231.208608][T27314] tipc: Enabled bearer , priority 0 [ 1231.221001][T27313] tipc: Resetting bearer [ 1231.243001][T27313] tipc: Disabling bearer [ 1231.352558][T27057] usb 3-1: Using ep0 maxpacket: 32 [ 1231.380825][T27057] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1231.421865][T27057] usb 3-1: config 0 has no interface number 0 [ 1231.457470][T27057] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1232.073272][ T5624] Bluetooth: hci1: command tx timeout [ 1232.167532][T27057] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1232.183203][T27057] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1232.192667][T27057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.222409][T27057] usb 3-1: Product: syz [ 1232.231635][T27057] usb 3-1: Manufacturer: syz [ 1232.236504][T27057] usb 3-1: SerialNumber: syz [ 1232.249093][T27332] IPv6: addrconf: prefix option has invalid lifetime [ 1232.257916][T27275] FAULT_INJECTION: forcing a failure. [ 1232.257916][T27275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1232.274353][T27057] usb 3-1: config 0 descriptor?? [ 1232.302430][T27275] CPU: 0 UID: 0 PID: 27275 Comm: syz.4.6228 Tainted: G L syzkaller #0 PREEMPT(full) [ 1232.302461][T27275] Tainted: [L]=SOFTLOCKUP [ 1232.302467][T27275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1232.302477][T27275] Call Trace: [ 1232.302483][T27275] [ 1232.302490][T27275] dump_stack_lvl+0x100/0x190 [ 1232.302518][T27275] should_fail_ex.cold+0x5/0xa [ 1232.302541][T27275] _copy_to_user+0x32/0xd0 [ 1232.302564][T27275] drm_ioctl+0x608/0xc60 [ 1232.302585][T27275] ? __pfx_drm_wait_vblank_ioctl+0x10/0x10 [ 1232.302612][T27275] ? __pfx_drm_ioctl+0x10/0x10 [ 1232.302639][T27275] ? selinux_file_ioctl+0x13b/0x290 [ 1232.302663][T27275] ? selinux_file_ioctl+0xb6/0x290 [ 1232.302686][T27275] ? __pfx_drm_ioctl+0x10/0x10 [ 1232.302704][T27275] __x64_sys_ioctl+0x18e/0x210 [ 1232.302730][T27275] do_syscall_64+0x115/0x870 [ 1232.302755][T27275] ? clear_bhb_loop+0x40/0x90 [ 1232.302778][T27275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.302795][T27275] RIP: 0033:0x7f4914d9de59 [ 1232.302811][T27275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.302828][T27275] RSP: 002b:00007f4915d0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1232.302846][T27275] RAX: ffffffffffffffda RBX: 00007f4915025fa0 RCX: 00007f4914d9de59 [ 1232.302857][T27275] RDX: 0000200000000040 RSI: 00000000c018643a RDI: 0000000000000005 [ 1232.302868][T27275] RBP: 00007f4915d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.302879][T27275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.302890][T27275] R13: 00007f4915026038 R14: 00007f4915025fa0 R15: 00007ffc48d01e98 [ 1232.302913][T27275] [ 1232.557847][T27057] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1232.568399][T27057] cx231xx 3-1:0.1: Failed to read PCB config [ 1232.574559][T27057] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 1232.584417][T27057] usb 3-1: USB disconnect, device number 124 [ 1232.617526][ T805] usb 5-1: unit 3 not found! [ 1233.350742][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.390755][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.446467][T27341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27341 comm=syz.7.6243 [ 1233.543601][ T9] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1233.688667][T27057] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1234.152893][T27057] usb 3-1: Using ep0 maxpacket: 32 [ 1234.337134][ T5624] Bluetooth: hci1: command tx timeout [ 1234.435821][T27057] usb 3-1: device descriptor read/all, error -71 [ 1234.455639][T26085] block nbd1: Possible stuck request ffff8880288f5080: control (read@0,4096B). Runtime 150 seconds [ 1234.848669][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1234.886545][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.050881][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1235.201829][ T9] usb 7-1: string descriptor 0 read error: -22 [ 1235.291469][ T9] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1235.396174][ T805] usb 5-1: USB disconnect, device number 33 [ 1235.399599][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.431221][T27347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6246'. [ 1235.719574][T19851] udevd[19851]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.761053][ T9] usb 7-1: can't set config #1, error -71 [ 1236.038676][ T9] usb 7-1: USB disconnect, device number 99 [ 1236.209807][T27359] syzkaller0: entered promiscuous mode [ 1236.230146][T27359] syzkaller0: entered allmulticast mode [ 1236.279684][T27359] tipc: Enabled bearer , priority 10 [ 1236.293031][T27357] tipc: Resetting bearer [ 1236.356537][T27357] tipc: Disabling bearer [ 1236.375603][ T5624] Bluetooth: hci1: command tx timeout [ 1236.566771][T27370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6251'. [ 1236.655410][ T805] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1236.699235][T27374] IPv6: addrconf: prefix option has invalid lifetime [ 1236.722216][T27222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.884461][ T805] usb 3-1: Using ep0 maxpacket: 8 [ 1236.906361][T27360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.960969][T27360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.415863][ T805] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1237.445397][ T805] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1237.461303][ T805] usb 3-1: can't read configurations, error -71 [ 1237.682354][T27388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1238.161094][T27222] veth0_vlan: entered promiscuous mode [ 1238.187143][T27222] veth1_vlan: entered promiscuous mode [ 1238.237977][T27222] veth0_macvtap: entered promiscuous mode [ 1238.268057][T27222] veth1_macvtap: entered promiscuous mode [ 1238.315668][T27222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.407877][T27222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1238.568029][T27405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1238.781376][T26987] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.821268][T26987] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.855526][T26987] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.891518][T26987] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.165481][T27413] syzkaller0: entered promiscuous mode [ 1239.185558][T27413] syzkaller0: entered allmulticast mode [ 1239.231103][T26987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.251512][T26987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.415024][T27413] tipc: Enabled bearer , priority 10 [ 1239.440893][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.024107][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.031646][T27412] tipc: Resetting bearer [ 1240.105979][T27412] tipc: Disabling bearer [ 1240.142617][ T805] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1240.354489][ T805] usb 8-1: Using ep0 maxpacket: 16 [ 1240.377992][ T805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.431893][ T805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.498788][ T805] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1240.534843][ T805] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1240.560017][ T805] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.572999][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1240.597925][ T805] usb 8-1: config 0 descriptor?? [ 1240.872329][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1240.896515][T27432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.922940][T27432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.955149][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1240.975461][ T9] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1241.019956][ T9] usb 10-1: can't read configurations, error -71 [ 1241.043564][ T805] microsoft 0003:045E:07DA.001B: ignoring exceeding usage max [ 1241.081272][ T805] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.001B/input/input50 [ 1241.145639][ T805] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1241.511852][T27451] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6273'. [ 1241.521169][T27451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6273'. [ 1241.632935][ T190] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1241.792725][ T190] usb 5-1: Using ep0 maxpacket: 32 [ 1241.804519][T27460] syzkaller0: entered promiscuous mode [ 1241.814721][ T190] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1241.827350][T27460] syzkaller0: entered allmulticast mode [ 1241.836394][ T190] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1241.861486][ T190] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1241.893924][ T190] usb 5-1: config 1 has no interface number 0 [ 1241.906311][ T190] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1241.929985][ T190] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1241.965684][ T190] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1241.987907][ T190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.008504][T27463] tipc: Started in network mode [ 1242.024744][ T190] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1242.054434][T27463] tipc: Node identity 0a38ff236292, cluster identity 4711 [ 1242.093001][T27463] tipc: Enabled bearer , priority 0 [ 1242.125497][T27458] tipc: Resetting bearer [ 1242.171715][T27465] IPv6: addrconf: prefix option has invalid lifetime [ 1242.201775][T27458] tipc: Disabling bearer [ 1242.241923][ T190] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1242.399187][ T190] usb 8-1: USB disconnect, device number 42 [ 1242.635843][T27475] tmpfs: Bad value for 'size' [ 1243.102386][ T190] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1243.145957][ T5615] usb 5-1: USB disconnect, device number 34 [ 1243.170193][ T5615] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1243.241540][T27480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6282'. [ 1243.273715][ T190] usb 8-1: Using ep0 maxpacket: 8 [ 1243.296980][T27473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.326688][T27473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.383836][ T190] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1243.430199][ T190] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1243.447992][ T190] usb 8-1: can't read configurations, error -71 [ 1243.850905][T27489] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6285'. [ 1244.184822][T27493] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6286'. [ 1244.952000][ T30] audit: type=1400 audit(1783549023.362:2072): avc: denied { execute } for pid=27502 comm="syz.4.6289" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1245.194501][T27510] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6291'. [ 1246.156184][ T5814] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1246.614105][ T5615] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1246.849079][ T5615] usb 10-1: Using ep0 maxpacket: 8 [ 1246.970214][ T5745] IPVS: starting estimator thread 0... [ 1247.000187][T27526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.012848][T27526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.032818][ T24] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1247.055093][ T5615] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1247.080237][ T5615] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1247.088583][ T5615] usb 10-1: can't read configurations, error -71 [ 1247.095727][T27537] IPVS: using max 75 ests per chain, 180000 per kthread [ 1247.222342][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1247.233299][ T24] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.246522][ T24] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1247.666304][T27542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6301'. [ 1247.765656][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.779244][ T24] usb 8-1: Product: syz [ 1247.783796][ T24] usb 8-1: Manufacturer: syz [ 1247.788545][ T24] usb 8-1: SerialNumber: syz [ 1247.807190][ T24] ch9200 8-1:2.0: probe with driver ch9200 failed with error -22 [ 1248.267367][ T5711] usb 8-1: USB disconnect, device number 45 [ 1248.530544][ T30] audit: type=1400 audit(1783549026.942:2073): avc: denied { listen } for pid=27555 comm="syz.2.6306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1248.634057][ T30] audit: type=1400 audit(1783549027.052:2074): avc: denied { accept } for pid=27555 comm="syz.2.6306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1248.702880][T27564] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6306'. [ 1248.899103][T27568] kAFS: unable to lookup cell '' [ 1249.143205][ T5745] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 1249.341442][ T5745] usb 8-1: not running at top speed; connect to a high speed hub [ 1249.370280][ T143] Bluetooth: Error in BCSP hdr checksum [ 1249.385793][ T5745] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 1249.407876][ T5745] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.434074][ T5745] usb 8-1: Product: syz [ 1249.448550][ T5745] usb 8-1: Manufacturer: syz [ 1249.465842][ T5745] usb 8-1: SerialNumber: syz [ 1249.774703][T27585] netlink: 252 bytes leftover after parsing attributes in process `syz.6.6315'. [ 1249.925271][ T5745] usb 8-1: USB disconnect, device number 46 [ 1250.046219][T19293] udevd[19293]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1250.064187][T19851] udevd[19851]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1250.083662][T19321] udevd[19321]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1250.353273][T27591] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1250.802698][ T9] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1251.177531][ T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 1251.211323][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1251.238474][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1251.278509][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1251.303044][ T9] usb 5-1: Product: syz [ 1251.317080][ T9] usb 5-1: Manufacturer: syz [ 1251.330621][ T9] usb 5-1: SerialNumber: syz [ 1251.349723][ T9] usb 5-1: config 0 descriptor?? [ 1251.376475][ T9] usb 5-1: selecting invalid altsetting 0 [ 1251.422803][ T5624] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1251.753137][ T5745] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1251.865251][T27592] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1251.992407][ T5745] usb 8-1: Using ep0 maxpacket: 8 [ 1252.010929][T27616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.022999][T27592] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1252.043582][T27616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.654580][ T190] usb 5-1: USB disconnect, device number 35 [ 1252.686059][ T5745] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1252.779186][ T5745] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1252.788244][ T5745] usb 8-1: can't read configurations, error -71 [ 1253.161254][T27632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1253.258874][T27639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6333'. [ 1253.473458][T27646] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6336'. [ 1253.611020][T27648] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1255.948628][T27684] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6348'. [ 1256.053903][T27691] netlink: 252 bytes leftover after parsing attributes in process `syz.7.6351'. [ 1256.478198][T27699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6353'. [ 1256.773857][ T5615] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1256.905695][ T190] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1256.952405][ T5615] usb 10-1: Using ep0 maxpacket: 8 [ 1257.261724][T27700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.276016][ T190] usb 5-1: not running at top speed; connect to a high speed hub [ 1257.298210][ T190] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 1257.318324][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.344716][ T190] usb 5-1: Product: syz [ 1257.357796][ T190] usb 5-1: Manufacturer: syz [ 1257.365144][T27700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.375143][ T190] usb 5-1: SerialNumber: syz [ 1257.400295][T27719] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1257.440640][ T5615] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1257.457607][ T5615] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1257.476564][ T5615] usb 10-1: can't read configurations, error -71 [ 1257.687404][T27727] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6362'. [ 1257.706411][ T30] audit: type=1400 audit(1783549036.122:2075): avc: denied { connect } for pid=27728 comm="syz.2.6363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1257.800688][T27731] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6364'. [ 1257.845825][ T190] usb 5-1: USB disconnect, device number 36 [ 1258.020791][T27736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6366'. [ 1258.079650][T19283] udevd[19283]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1258.106967][T19321] udevd[19321]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1258.123401][ T24] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1258.332842][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1258.368198][ T24] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 1258.495120][ T24] usb 7-1: config 0 has an invalid interface number: 71 but max is 0 [ 1258.523398][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.562698][ T24] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1258.593305][ T24] usb 7-1: config 0 has no interface number 0 [ 1258.615712][ T24] usb 7-1: config 0 has no interface number 1 [ 1258.633426][ T24] usb 7-1: config 0 interface 200 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1258.670712][ T24] usb 7-1: config 0 interface 200 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 1259.286975][ T24] usb 7-1: too many endpoints for config 0 interface 71 altsetting 92: 57, using maximum allowed: 30 [ 1259.298467][ T24] usb 7-1: config 0 interface 71 altsetting 92 has an invalid descriptor for endpoint zero, skipping [ 1259.311267][ T24] usb 7-1: config 0 interface 71 altsetting 92 has an invalid descriptor for endpoint zero, skipping [ 1259.323315][ T24] usb 7-1: config 0 interface 71 altsetting 92 has an invalid descriptor for endpoint zero, skipping [ 1259.336188][ T24] usb 7-1: config 0 interface 71 altsetting 92 has an invalid descriptor for endpoint zero, skipping [ 1259.347204][ T24] usb 7-1: config 0 interface 71 altsetting 92 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1259.362601][ T24] usb 7-1: config 0 interface 71 altsetting 92 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1259.375371][ T24] usb 7-1: config 0 interface 71 altsetting 92 has a duplicate endpoint with address 0xC, skipping [ 1259.386449][ T24] usb 7-1: config 0 interface 71 altsetting 92 has 9 endpoint descriptors, different from the interface descriptor's value: 57 [ 1259.399926][ T24] usb 7-1: config 0 interface 71 has no altsetting 0 [ 1259.406787][ T24] usb 7-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=49.c3 [ 1259.417524][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.440802][ T24] usb 7-1: config 0 descriptor?? [ 1259.489841][T27750] lo speed is unknown, defaulting to 1000 [ 1259.626219][T27760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1259.666699][ T24] usb 7-1: string descriptor 0 read error: -71 [ 1259.853894][T27763] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1259.904851][ T24] usb 7-1: USB disconnect, device number 100 [ 1259.931948][ T30] audit: type=1400 audit(1783549038.342:2076): avc: denied { setattr } for pid=27756 comm="syz.2.6373" path="socket:[100438]" dev="sockfs" ino=100438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1260.019980][T27766] 9p: Bad value for 'rfdno' [ 1260.514824][ T30] audit: type=1400 audit(1783549038.922:2077): avc: denied { setopt } for pid=27770 comm="syz.6.6376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1260.642780][ T30] audit: type=1400 audit(1783549038.922:2078): avc: denied { write } for pid=27770 comm="syz.6.6376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1261.047275][T27778] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6378'. [ 1264.065066][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1264.169159][T27815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1264.213119][T27819] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6390'. [ 1264.594529][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1264.698386][ T30] audit: type=1400 audit(1783549043.062:2079): avc: denied { listen } for pid=27807 comm="syz.9.6388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1264.733629][T26085] block nbd1: Possible stuck request ffff8880288f5080: control (read@0,4096B). Runtime 180 seconds [ 1264.853768][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1264.871896][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1264.900773][ T24] usb 5-1: can't read configurations, error -71 [ 1264.927413][T27824] netlink: 'syz.2.6392': attribute type 1 has an invalid length. [ 1265.007606][T27824] bond2: entered promiscuous mode [ 1265.043990][T27824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1265.205722][T27829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1265.227400][T27829] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1265.264441][T27829] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1265.310171][T27829] bond2: (slave ip6gre1): making interface the new active one [ 1265.329650][T27829] ip6gre1: entered promiscuous mode [ 1265.350622][T27829] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 1265.663886][T27840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6395'. [ 1265.815652][ T5745] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1266.397567][ T5745] usb 7-1: device descriptor read/64, error -71 [ 1266.503316][ T30] audit: type=1326 audit(1783549044.882:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.4.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4914d9de59 code=0x7ffc0000 [ 1267.121634][ T5745] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1267.549504][ T30] audit: type=1326 audit(1783549044.882:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.4.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4914d9de59 code=0x7ffc0000 [ 1267.576770][ T30] audit: type=1326 audit(1783549044.882:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.4.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f4914d9de59 code=0x7ffc0000 [ 1267.605195][ T30] audit: type=1326 audit(1783549044.882:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.4.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4914d9de59 code=0x7ffc0000 [ 1267.632429][ T30] audit: type=1326 audit(1783549044.882:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.4.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4914d9de59 code=0x7ffc0000 [ 1267.664322][T27850] netlink: 'syz.9.6398': attribute type 1 has an invalid length. [ 1267.674563][ T30] audit: type=1326 audit(1783549044.882:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.4.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4914d9de59 code=0x7ffc0000 [ 1267.702937][ T5745] usb 7-1: device descriptor read/64, error -71 [ 1267.721786][ T30] audit: type=1326 audit(1783549044.882:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.4.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4914d9de59 code=0x7ffc0000 [ 1267.818191][ T30] audit: type=1326 audit(1783549044.882:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.4.6397" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4914d9de59 code=0x7ffc0000 [ 1267.848070][T27850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1267.857321][ T5745] usb usb7-port1: attempt power cycle [ 1268.753445][T27852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1268.783752][T27852] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 1268.823005][T27852] bond1: (slave ipip0): Error -95 calling set_mac_address [ 1269.206617][T27868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1269.372788][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1269.593098][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1269.634633][T27863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.699357][T27863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.984610][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1269.993627][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1270.002709][ T24] usb 3-1: can't read configurations, error -71 [ 1270.060745][T27874] syz.6.6405 (27874): /proc/27878/oom_adj is deprecated, please use /proc/27878/oom_score_adj instead. [ 1270.691816][T27890] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6409'. [ 1271.953750][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1272.376233][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 1272.397858][ T24] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 1272.408815][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.433703][ T24] usb 3-1: Product: syz [ 1272.460274][ T24] usb 3-1: Manufacturer: syz [ 1272.481320][ T24] usb 3-1: SerialNumber: syz [ 1272.987796][T27920] sd 0:0:1:0: device reset [ 1273.011088][T27920] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6419'. [ 1273.144661][T27920] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6419'. [ 1273.237340][ T24] usb 3-1: USB disconnect, device number 5 [ 1273.277298][T27930] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1273.758713][T19851] udevd[19851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1273.796995][T25235] udevd[25235]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1273.825343][T19283] udevd[19283]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1274.711355][ T190] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1274.743089][T27961] netlink: 'syz.6.6425': attribute type 10 has an invalid length. [ 1274.814959][T27960] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1274.862209][T27958] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1274.887500][T27958] block device autoloading is deprecated and will be removed. [ 1274.888006][ T190] usb 5-1: Using ep0 maxpacket: 8 [ 1274.901791][T27960] block device autoloading is deprecated and will be removed. [ 1275.000165][T27961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1275.025388][T27961] team0: Port device netdevsim1 added [ 1275.231020][T27962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.238629][T27962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.582430][ T5745] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1275.873895][T27975] netlink: 252 bytes leftover after parsing attributes in process `syz.7.6433'. [ 1275.995644][ T5745] usb 3-1: Using ep0 maxpacket: 16 [ 1276.019182][ T5745] usb 3-1: config 0 has no interfaces? [ 1276.030159][ T5745] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1276.060259][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.090432][ T5745] usb 3-1: config 0 descriptor?? [ 1276.392472][ T5615] usb 3-1: USB disconnect, device number 6 [ 1276.429997][T27962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.447487][T27962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.482366][ T24] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 1276.628818][T26981] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.639166][T26981] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.656512][ T24] usb 8-1: not running at top speed; connect to a high speed hub [ 1276.666526][T26981] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.668725][ T24] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 1276.686880][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.702333][ T24] usb 8-1: Product: syz [ 1276.703424][T26981] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.706971][ T24] usb 8-1: Manufacturer: syz [ 1276.738510][ T24] usb 8-1: SerialNumber: syz [ 1277.024620][T28005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6442'. [ 1277.136560][ T190] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1277.296286][ T24] usb 8-1: USB disconnect, device number 49 [ 1277.334993][ T190] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1277.571838][ T190] usb 5-1: can't read configurations, error -71 [ 1278.051267][T19851] udevd[19851]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1278.149778][T28020] netlink: 252 bytes leftover after parsing attributes in process `syz.6.6447'. [ 1278.205769][T25235] udevd[25235]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1278.269766][T19283] udevd[19283]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1278.300570][ T30] audit: type=1400 audit(1783549056.702:2088): avc: denied { read write } for pid=24592 comm="syz-executor" name="loop2" dev="devtmpfs" ino=3792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1278.334767][ T30] audit: type=1400 audit(1783549056.702:2089): avc: denied { open } for pid=24592 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=3792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1278.505772][T28018] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1278.762334][T28026] IPv6: addrconf: prefix option has invalid lifetime [ 1278.767209][ T30] audit: type=1400 audit(1783549056.702:2090): avc: denied { ioctl } for pid=24592 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=3792 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1278.840907][ T30] audit: type=1400 audit(1783549056.782:2091): avc: denied { read } for pid=28017 comm="syz.7.6448" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1278.893985][ T30] audit: type=1400 audit(1783549056.782:2092): avc: denied { open } for pid=28017 comm="syz.7.6448" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1278.930528][T28030] bpf: Bad value for 'uid' [ 1278.936641][ T30] audit: type=1400 audit(1783549056.882:2093): avc: denied { read write } for pid=28017 comm="syz.7.6448" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1278.992693][ T24] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 1279.005259][ T30] audit: type=1400 audit(1783549056.882:2094): avc: denied { open } for pid=28017 comm="syz.7.6448" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1279.032203][ T30] audit: type=1400 audit(1783549056.892:2095): avc: denied { mounton } for pid=28017 comm="syz.7.6448" path="/354/file0" dev="tmpfs" ino=1864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1279.057327][ T30] audit: type=1400 audit(1783549056.902:2096): avc: denied { mount } for pid=28017 comm="syz.7.6448" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1279.081699][ T30] audit: type=1400 audit(1783549056.912:2097): avc: denied { mounton } for pid=28017 comm="syz.7.6448" path="/354/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1279.104929][ T5615] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1279.153982][ T24] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1279.166112][ T24] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.194950][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1279.201894][ T24] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1279.211872][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.239936][ T24] usb 3-1: config 0 descriptor?? [ 1279.263378][ T5615] usb 5-1: Using ep0 maxpacket: 16 [ 1279.270548][ T5615] usb 5-1: config 0 has no interfaces? [ 1279.276707][ T5615] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1279.286435][ T5615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.299862][ T5615] usb 5-1: config 0 descriptor?? [ 1279.475241][ T190] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 1279.491268][T28041] syzkaller0: entered promiscuous mode [ 1279.497389][T28041] syzkaller0: entered allmulticast mode [ 1279.530997][T27057] usb 5-1: USB disconnect, device number 41 [ 1279.543722][T28041] tipc: Enabled bearer , priority 10 [ 1279.558360][T28040] tipc: Resetting bearer [ 1279.588741][T28040] tipc: Disabling bearer [ 1279.638298][ T190] usb 8-1: not running at top speed; connect to a high speed hub [ 1279.657744][ T190] usb 8-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 1279.668692][ T190] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.682312][ T190] usb 8-1: Product: І [ 1279.690923][T28025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.697185][ T190] usb 8-1: Manufacturer: 釹㽢짼䓁穂Შ朴 [ 1279.707337][T28025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.708346][ T190] usb 8-1: SerialNumber: ɢ⻄ጅ鐶轿Ǘ氩붺徥䏱샿ﳜ笐ꏲ遂퍲ṑ怨꭯잪䊚겟꨿⒴≁騭簎哭樒槕霮ƭ螈沀뺔䳫შ⻧櫆᥻어䖃뜖ꆪ膮ᒑ﵅⸅癸⿴嗎益済ۛ [ 1279.752076][ T190] usb 8-1: rejected 1 configuration due to insufficient available bus power [ 1279.760835][ T190] usb 8-1: no configuration chosen from 1 choice [ 1279.779482][ T24] hid_parser_main: 33 callbacks suppressed [ 1279.779504][ T24] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 1279.794567][ T24] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 1279.809867][ T24] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 1279.824437][ T24] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 1279.832894][ T24] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 1279.841975][ T24] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 1279.853393][ T24] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 1279.860813][ T24] hid-rmi 0003:06CB:81A7.001C: unknown main item tag 0x0 [ 1279.879531][ T24] hid-rmi 0003:06CB:81A7.001C: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 1280.409064][ T24] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1280.564778][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 1280.575892][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 1280.585899][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.594529][ T24] usb 5-1: Product: syz [ 1280.598996][ T24] usb 5-1: Manufacturer: syz [ 1280.604299][ T24] usb 5-1: SerialNumber: syz [ 1280.841426][T28062] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1281.087442][ T190] usb 5-1: USB disconnect, device number 42 [ 1281.392366][ T190] usb 3-1: USB disconnect, device number 7 [ 1281.752128][T28080] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1281.853230][ T190] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1282.032893][ T190] usb 3-1: Using ep0 maxpacket: 16 [ 1282.320676][ T5615] usb 8-1: USB disconnect, device number 50 [ 1282.593084][ T24] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1282.597066][T28098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1282.990283][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1283.006888][ T24] usb 7-1: string descriptor 0 read error: -22 [ 1283.018915][ T24] usb 7-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 1283.018943][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.454389][T28104] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1283.461852][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1283.461868][ T30] audit: type=1400 audit(1783549061.852:2158): avc: denied { read write } for pid=28103 comm="syz.7.6475" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1283.462946][T28104] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1283.469078][ T30] audit: type=1400 audit(1783549061.852:2159): avc: denied { open } for pid=28103 comm="syz.7.6475" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1283.567781][T28105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6472'. [ 1283.586759][T28105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6472'. [ 1283.594885][T28104] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1283.613604][ T30] audit: type=1400 audit(1783549061.862:2160): avc: denied { ioctl } for pid=28103 comm="syz.7.6475" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1283.671388][ T30] audit: type=1400 audit(1783549062.002:2161): avc: denied { read } for pid=28103 comm="syz.7.6475" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1283.848153][T28107] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1284.283965][ T24] usbhid 7-1:1.0: can't add hid device: -71 [ 1284.290015][ T24] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1284.519254][ T24] usb 7-1: USB disconnect, device number 104 [ 1284.549345][ T190] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1284.571952][ T190] usb 3-1: no configurations [ 1284.586272][ T190] usb 3-1: can't read configurations, error -22 [ 1284.609861][ T30] audit: type=1400 audit(1783549062.002:2162): avc: denied { open } for pid=28103 comm="syz.7.6475" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1284.660826][ T30] audit: type=1400 audit(1783549062.002:2163): avc: denied { firmware_load } for pid=28103 comm="syz.7.6475" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1284.684825][ T30] audit: type=1400 audit(1783549062.172:2164): avc: denied { append } for pid=28103 comm="syz.7.6475" name="nvme-fabrics" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1284.750924][ T30] audit: type=1400 audit(1783549062.172:2165): avc: denied { read write } for pid=28103 comm="syz.7.6475" name="video6" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1284.814619][ T30] audit: type=1400 audit(1783549062.172:2166): avc: denied { open } for pid=28103 comm="syz.7.6475" path="/dev/video6" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1284.900013][ T30] audit: type=1400 audit(1783549062.182:2167): avc: denied { ioctl } for pid=28103 comm="syz.7.6475" path="/dev/video6" dev="devtmpfs" ino=941 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1285.291457][T28132] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6482'. [ 1285.756816][T28152] lo speed is unknown, defaulting to 1000 [ 1285.763769][T28157] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1287.323931][T28152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6489'. [ 1287.507240][T28152] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1287.760996][T28182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58629 sclass=netlink_route_socket pid=28182 comm=syz.6.6494 [ 1288.158396][T28192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1288.651113][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1288.651129][ T30] audit: type=1400 audit(1783549067.062:2196): avc: denied { audit_write } for pid=28197 comm="syz.4.6499" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1288.702913][T28198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6499'. [ 1288.839993][ T30] audit: type=1400 audit(1783549067.252:2197): avc: denied { ioctl } for pid=28202 comm="syz.4.6502" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1288.968975][ T30] audit: type=1400 audit(1783549067.382:2198): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1289.023304][ T30] audit: type=1400 audit(1783549067.382:2199): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.057346][ T190] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1289.097653][ T30] audit: type=1400 audit(1783549067.382:2200): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.181793][ T30] audit: type=1400 audit(1783549067.382:2201): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.232142][ T30] audit: type=1400 audit(1783549067.382:2202): avc: denied { read } for pid=5272 comm="dhcpcd" name="n74" dev="tmpfs" ino=22468 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1289.260169][ T190] usb 10-1: Using ep0 maxpacket: 8 [ 1289.269057][ T30] audit: type=1400 audit(1783549067.382:2203): avc: denied { open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n74" dev="tmpfs" ino=22468 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1289.304816][ T190] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1289.320427][ T190] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.338498][ T190] usb 10-1: config 0 has no interface number 0 [ 1289.358652][ T190] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1289.369866][ T190] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.381115][ T30] audit: type=1400 audit(1783549067.382:2204): avc: denied { getattr } for pid=5272 comm="dhcpcd" path="/run/udev/data/n74" dev="tmpfs" ino=22468 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1289.407741][ T190] usb 10-1: Product: syz [ 1289.413811][ T190] usb 10-1: Manufacturer: syz [ 1289.415242][ T5615] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1289.418982][ T190] usb 10-1: SerialNumber: syz [ 1289.434573][ T30] audit: type=1400 audit(1783549067.512:2205): avc: denied { write } for pid=28213 comm="syz.4.6505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1289.482316][ T5814] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1289.600351][T28228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1289.646360][ T5615] usb 5-1: Using ep0 maxpacket: 32 [ 1289.647131][ T190] usb 10-1: config 0 descriptor?? [ 1289.682881][ T5814] usb 8-1: Using ep0 maxpacket: 8 [ 1289.692656][ T5615] usb 5-1: too many configurations: 92, using maximum allowed: 8 [ 1289.695477][ T190] uvcvideo 10-1:0.31: probe with driver uvcvideo failed with error -22 [ 1289.825645][ T5615] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1289.866001][ T5615] usb 5-1: can't read configurations, error -61 [ 1289.889643][ T5814] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1289.908711][ T5814] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1289.917355][ T5814] usb 8-1: can't read configurations, error -71 [ 1290.012597][ T5615] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1290.174422][ T5615] usb 5-1: Using ep0 maxpacket: 32 [ 1290.180358][ T5615] usb 5-1: too many configurations: 92, using maximum allowed: 8 [ 1290.194197][ T5615] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1290.202031][ T5615] usb 5-1: can't read configurations, error -61 [ 1290.209495][ T5615] usb usb5-port1: attempt power cycle [ 1290.323123][ T5711] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1290.952315][ T5711] usb 7-1: Using ep0 maxpacket: 16 [ 1290.961774][ T5711] usb 7-1: config 0 has no interfaces? [ 1290.978565][ T5711] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1290.991099][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.999579][ T5615] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1291.020035][ T5711] usb 7-1: config 0 descriptor?? [ 1291.035222][ T5615] usb 5-1: Using ep0 maxpacket: 32 [ 1291.051813][ T5615] usb 5-1: too many configurations: 92, using maximum allowed: 8 [ 1291.070424][ T5615] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1291.082155][ T5615] usb 5-1: can't read configurations, error -61 [ 1291.222605][ T5615] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1291.238999][ T5711] usb 7-1: USB disconnect, device number 105 [ 1291.353667][ T5615] usb 5-1: Using ep0 maxpacket: 32 [ 1291.359376][ T5615] usb 5-1: too many configurations: 92, using maximum allowed: 8 [ 1291.368593][ T5615] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1291.377225][ T5615] usb 5-1: can't read configurations, error -61 [ 1291.383928][ T5615] usb usb5-port1: unable to enumerate USB device [ 1291.413004][ T5814] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1291.702917][ T5814] usb 8-1: Using ep0 maxpacket: 32 [ 1291.721276][ T5814] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1291.732971][ T5814] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1291.741651][ T5814] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1291.751932][ T5814] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1291.762391][ T5814] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1291.776401][ T5814] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1291.787042][ T5814] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1291.796969][ T5814] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1291.810840][ T5814] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1291.819979][ T5814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.829634][ T5814] usb 8-1: config 0 descriptor?? [ 1291.999138][ T5711] usb 10-1: USB disconnect, device number 8 [ 1292.044561][T28258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.060035][T28258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.136425][ T5814] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1292.185664][ T5814] usb 8-1: USB disconnect, device number 52 [ 1292.213929][ T5814] usblp0: removed [ 1292.279768][T28286] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6519'. [ 1292.453533][ T5615] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1292.696781][ T5615] usb 3-1: Using ep0 maxpacket: 8 [ 1292.708263][T28282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.717436][T28282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.728252][ T5615] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1292.737124][ T5615] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1292.745384][ T5615] usb 3-1: can't read configurations, error -71 [ 1292.752570][ T190] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1292.762759][ T5814] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1292.770453][ T5711] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1292.932522][ T5711] usb 5-1: Using ep0 maxpacket: 8 [ 1293.025106][T28291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.047772][ T5814] usb 8-1: Using ep0 maxpacket: 16 [ 1293.130171][ T5814] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1293.141270][T28291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.151497][ T5814] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1293.162624][ T5814] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1293.174608][ T5814] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1293.185000][ T5711] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1293.194842][ T5814] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1293.205635][ T5814] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1293.217263][ T5711] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1293.224052][ T190] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1293.232638][ T5814] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1293.232669][ T5814] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1293.233263][ T5711] usb 5-1: can't read configurations, error -71 [ 1293.245167][ T190] usb 10-1: not running at top speed; connect to a high speed hub [ 1293.271022][ T5814] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1293.272046][ T190] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.280772][ T5814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.290831][ T190] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1293.299674][ T5814] usb 8-1: Product: syz [ 1293.309859][ T190] usb 10-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1293.322013][ T190] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.325427][ T5814] usb 8-1: Manufacturer: syz [ 1293.335918][ T5814] usb 8-1: SerialNumber: syz [ 1293.343592][ T5814] usb 8-1: config 0 descriptor?? [ 1293.356689][ T5814] port100 8-1:0.0: NFC: Could not get supported command types [ 1293.372553][ T190] usb 10-1: Product: syz [ 1293.380497][ T190] usb 10-1: Manufacturer: syz [ 1293.392548][ T190] usb 10-1: SerialNumber: syz [ 1293.694888][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1293.694946][ T30] audit: type=1400 audit(1783549072.102:2239): avc: granted { setsecparam } for pid=28293 comm="syz.9.6523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1293.695392][T28258] rdma_rxe: rxe_newlink: failed to add lo [ 1293.785197][ T30] audit: type=1400 audit(1783549072.202:2240): avc: denied { write } for pid=28293 comm="syz.9.6523" path="socket:[102943]" dev="sockfs" ino=102943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1293.831110][T28310] netlink: 'syz.7.6511': attribute type 13 has an invalid length. [ 1294.121377][T28310] gretap0: refused to change device tx_queue_len [ 1294.137460][T28310] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1294.268019][ T5814] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x054C pid 0x06C1 [ 1294.294685][ T5814] usb 8-1: USB disconnect, device number 53 [ 1294.304449][ T5814] usblp0: removed [ 1294.331749][ T30] audit: type=1400 audit(1783549072.742:2241): avc: denied { map } for pid=28317 comm="syz.2.6530" path="socket:[102948]" dev="sockfs" ino=102948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1294.358664][ T30] audit: type=1400 audit(1783549072.772:2242): avc: denied { read } for pid=28317 comm="syz.2.6530" path="socket:[102948]" dev="sockfs" ino=102948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1294.432105][T28320] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1294.443574][ T5745] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1294.457836][T28320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6531'. [ 1294.471613][ T30] audit: type=1400 audit(1783549072.882:2243): avc: denied { mounton } for pid=28319 comm="syz.2.6531" path="/proc/575/cgroup" dev="proc" ino=102960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1294.496380][ T5711] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1294.505227][ T30] audit: type=1400 audit(1783549072.922:2244): avc: denied { ioctl } for pid=28319 comm="syz.2.6531" path="socket:[103699]" dev="sockfs" ino=103699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1294.531548][ T30] audit: type=1400 audit(1783549072.922:2245): avc: denied { bind } for pid=28319 comm="syz.2.6531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1294.551945][ T30] audit: type=1400 audit(1783549072.922:2246): avc: denied { connect } for pid=28319 comm="syz.2.6531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1294.572391][ T30] audit: type=1400 audit(1783549072.942:2247): avc: denied { write } for pid=28319 comm="syz.2.6531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1294.593172][ T30] audit: type=1400 audit(1783549072.942:2248): avc: denied { remount } for pid=28319 comm="syz.2.6531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 1294.613819][ T5745] usb 7-1: Using ep0 maxpacket: 8 [ 1294.614899][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.629835][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.650472][ T5745] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1294.660896][ T5745] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.672733][ T5745] usb 7-1: config 0 has no interface number 0 [ 1294.673336][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 1294.682076][ T5745] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1294.693922][ T5745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.701988][ T5745] usb 7-1: Product: syz [ 1294.706202][ T5745] usb 7-1: Manufacturer: syz [ 1294.710822][ T5745] usb 7-1: SerialNumber: syz [ 1294.718248][ T5745] usb 7-1: config 0 descriptor?? [ 1294.726774][ T5745] uvcvideo 7-1:0.31: probe with driver uvcvideo failed with error -22 [ 1294.818249][ T5711] usb 5-1: config 0 has no interfaces? [ 1294.824391][ T5711] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1294.834157][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.844585][ T5711] usb 5-1: config 0 descriptor?? [ 1295.380304][ T5711] usb 5-1: USB disconnect, device number 48 [ 1295.405314][T26085] block nbd1: Possible stuck request ffff8880288f5080: control (read@0,4096B). Runtime 210 seconds [ 1295.465565][ T190] usb 10-1: unit 3 not found! [ 1295.504614][ T190] usb 10-1: USB disconnect, device number 9 [ 1295.795364][T19851] udevd[19851]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1296.369013][T28334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1296.643488][ T190] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1296.696343][ T4928] Bluetooth: hci6: command 0x0406 tx timeout [ 1296.728082][T28343] dlm: non-version read from control device 0 [ 1296.926451][ T190] usb 10-1: config 0 has no interfaces? [ 1296.936660][ T190] usb 10-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1296.965641][ T190] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.004837][T28346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6536'. [ 1297.042800][ T190] usb 10-1: config 0 descriptor?? [ 1297.111484][T28351] xt_hashlimit: size too large, truncated to 1048576 [ 1297.255217][T28356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33531 sclass=netlink_route_socket pid=28356 comm=syz.7.6539 [ 1297.356972][T28359] lo speed is unknown, defaulting to 1000 [ 1297.408490][T28362] netlink: 'syz.9.6534': attribute type 2 has an invalid length. [ 1297.447897][T28362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.500719][ T5711] usb 7-1: USB disconnect, device number 106 [ 1297.534923][T28362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.590964][T28367] netlink: 'syz.7.6541': attribute type 1 has an invalid length. [ 1297.833769][ T5711] usb 10-1: USB disconnect, device number 10 [ 1297.993129][T28371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1298.071714][T28367] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1298.185559][T28370] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1298.211412][T28370] bond7: (slave ipip0): The slave device specified does not support setting the MAC address [ 1298.227125][T28370] bond7: (slave ipip0): Error -95 calling set_mac_address [ 1298.322582][ T5711] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1298.356222][T28387] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1298.495144][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1298.516211][ T5711] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0a53, bcdDevice= 0.00 [ 1298.617736][ T5711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.660374][ T5711] usb 10-1: config 0 descriptor?? [ 1298.685395][T28375] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1298.738279][T28397] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1298.908070][T28375] tmpfs: Bad value for 'mpol' [ 1299.142431][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1299.142451][ T30] audit: type=1400 audit(1783549077.512:2261): avc: denied { ioctl } for pid=28398 comm="syz.2.6551" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1300.169465][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: unknown main item tag 0x0 [ 1300.197942][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: unknown main item tag 0x0 [ 1300.491493][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: unknown main item tag 0x0 [ 1300.500607][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: unknown main item tag 0x0 [ 1300.510320][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: unknown main item tag 0x0 [ 1300.521491][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: unknown main item tag 0x0 [ 1300.530239][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: unknown main item tag 0x0 [ 1300.552770][ T5814] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 1300.614599][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: unknown main item tag 0x0 [ 1300.653146][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: unknown main item tag 0x0 [ 1300.705394][ T5814] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1300.719144][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: unknown main item tag 0x0 [ 1300.740105][ T5814] usb 5-1: config 0 has no interface number 0 [ 1300.858937][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: collection stack underflow [ 1300.867706][ T5814] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1300.880895][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: item 0 0 0 12 parsing failed [ 1300.893218][ T5814] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.905193][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: parse failed (reason: -22) [ 1301.492426][ T5814] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1301.504505][ T5711] hid-corsair-void 0003:1B1C:0A53.001D: probe with driver hid-corsair-void failed with error -22 [ 1301.515442][ T5814] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1301.552721][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.560871][ T5711] usb 10-1: USB disconnect, device number 11 [ 1301.672881][ T5814] usb 5-1: config 0 descriptor?? [ 1301.884516][T28423] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1302.160906][ T30] audit: type=1400 audit(1783549080.572:2262): avc: denied { read } for pid=28426 comm="syz.2.6559" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1302.291477][T28434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1302.412140][ T5814] uclogic 0003:2179:0053.001E: failed retrieving string descriptor #100: -71 [ 1302.597942][ T5814] uclogic 0003:2179:0053.001E: failed retrieving pen parameters: -71 [ 1302.607813][ T5814] uclogic 0003:2179:0053.001E: pen probing failed: -71 [ 1302.637900][ T5814] uclogic 0003:2179:0053.001E: failed probing parameters: -71 [ 1302.670149][ T5814] uclogic 0003:2179:0053.001E: probe with driver uclogic failed with error -71 [ 1302.717975][ T5814] usb 5-1: USB disconnect, device number 49 [ 1303.024274][T28445] dlm: non-version read from control device 0 [ 1303.152046][T28446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6564'. [ 1303.325746][T28447] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6564'. [ 1303.554117][T28446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6564'. [ 1303.757230][T28446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6564'. [ 1303.900704][T28460] netlink: 252 bytes leftover after parsing attributes in process `syz.9.6568'. [ 1304.002375][ T5745] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1304.030138][T28465] netlink: 252 bytes leftover after parsing attributes in process `syz.9.6570'. [ 1304.435568][ T5745] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1304.453386][ T5745] usb 3-1: not running at top speed; connect to a high speed hub [ 1304.469642][ T5745] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.480643][ T5745] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1304.498933][ T5745] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1304.512125][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.597379][T28473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1304.782323][ T5745] usb 3-1: Product: syz [ 1304.791428][ T5745] usb 3-1: Manufacturer: syz [ 1304.802763][ T5745] usb 3-1: SerialNumber: syz [ 1305.015253][ T30] audit: type=1400 audit(1783549083.432:2263): avc: denied { create } for pid=28476 comm="syz.9.6575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1305.024635][T28458] input: syz1 as /devices/virtual/input/input51 [ 1305.045756][ T190] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1305.093144][ T30] audit: type=1400 audit(1783549083.432:2264): avc: denied { ioctl } for pid=28455 comm="syz.2.6567" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1305.202102][ T30] audit: type=1400 audit(1783549083.492:2265): avc: denied { read } for pid=4962 comm="acpid" name="event4" dev="devtmpfs" ino=4973 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1305.256520][ T190] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.288574][ T30] audit: type=1400 audit(1783549083.492:2266): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4973 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1305.317704][ T190] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1305.362362][ T30] audit: type=1400 audit(1783549083.492:2267): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4973 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1305.419788][ T190] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1305.446234][ T190] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1305.488209][ T190] usb 8-1: SerialNumber: syz [ 1305.705370][ T30] audit: type=1400 audit(1783549084.092:2268): avc: denied { append } for pid=28492 comm="syz.9.6578" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1306.327530][ T190] usb 8-1: invalid UAC_HEADER (v1) [ 1306.517076][ T30] audit: type=1400 audit(1783549084.912:2269): avc: denied { mount } for pid=28498 comm="syz.6.6579" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1307.238767][ T190] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1307.281584][ T5745] usb 3-1: unit 3 not found! [ 1307.305257][ T190] usb 8-1: USB disconnect, device number 54 [ 1307.366994][ T5745] usb 3-1: USB disconnect, device number 12 [ 1307.383713][T19854] udevd[19854]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1307.454701][T28508] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1307.508948][T19854] udevd[19854]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1307.552006][ T30] audit: type=1400 audit(1783549085.962:2270): avc: denied { write } for pid=28510 comm="syz.9.6585" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1307.639495][ T30] audit: type=1400 audit(1783549086.052:2271): avc: denied { append } for pid=28510 comm="syz.9.6585" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1307.684761][T28519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.746896][ T30] audit: type=1400 audit(1783549086.162:2272): avc: denied { create } for pid=28518 comm="syz.7.6587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1309.308053][T28539] netlink: 'syz.9.6592': attribute type 1 has an invalid length. [ 1309.567979][T28552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6596'. [ 1309.581224][T28539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1309.710513][T28544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1309.750287][T28544] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 1309.789881][T28544] bond2: (slave ipip0): Error -95 calling set_mac_address [ 1310.007237][T28562] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6600'. [ 1310.082693][ T5814] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1310.186036][T28566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1310.199882][T28566] FAULT_INJECTION: forcing a failure. [ 1310.199882][T28566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1310.213326][T28566] CPU: 0 UID: 0 PID: 28566 Comm: syz.9.6601 Tainted: G L syzkaller #0 PREEMPT(full) [ 1310.213353][T28566] Tainted: [L]=SOFTLOCKUP [ 1310.213359][T28566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1310.213369][T28566] Call Trace: [ 1310.213375][T28566] [ 1310.213380][T28566] dump_stack_lvl+0x100/0x190 [ 1310.213397][T28566] should_fail_ex.cold+0x5/0xa [ 1310.213412][T28566] _copy_to_user+0x32/0xd0 [ 1310.213426][T28566] simple_read_from_buffer+0xcb/0x170 [ 1310.213445][T28566] proc_fail_nth_read+0x1af/0x230 [ 1310.213461][T28566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1310.213478][T28566] ? rw_verify_area+0xce/0x6d0 [ 1310.213492][T28566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1310.213507][T28566] vfs_read+0x1e4/0xb40 [ 1310.213524][T28566] ? __pfx_vfs_read+0x10/0x10 [ 1310.213539][T28566] ? __fget_files+0x215/0x3d0 [ 1310.213560][T28566] ? __fget_files+0x21f/0x3d0 [ 1310.213581][T28566] ksys_read+0x12a/0x250 [ 1310.213596][T28566] ? __pfx_ksys_read+0x10/0x10 [ 1310.213616][T28566] do_syscall_64+0x115/0x870 [ 1310.213632][T28566] ? clear_bhb_loop+0x40/0x90 [ 1310.213646][T28566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.213657][T28566] RIP: 0033:0x7f39af75e68e [ 1310.213668][T28566] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1310.213679][T28566] RSP: 002b:00007f39ad9b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1310.213691][T28566] RAX: ffffffffffffffda RBX: 00007f39ad9b46c0 RCX: 00007f39af75e68e [ 1310.213698][T28566] RDX: 000000000000000f RSI: 00007f39ad9b40a0 RDI: 0000000000000006 [ 1310.213705][T28566] RBP: 00007f39ad9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.213712][T28566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.213718][T28566] R13: 00007f39afa26218 R14: 00007f39afa26180 R15: 00007ffe1196b4f8 [ 1310.213733][T28566] [ 1310.333034][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 1310.640123][ T31] INFO: task syz.1.5949:26055 blocked for more than 143 seconds. [ 1310.681272][ T31] Tainted: G L syzkaller #0 [ 1310.683499][T28557] trusted_key: encrypted_key: insufficient parameters specified [ 1310.711809][T28557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.717410][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1310.722969][T28557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.765733][ T31] task:syz.1.5949 state:D stack:28776 pid:26055 tgid:26054 ppid:15444 task_flags:0x400040 flags:0x00080002 [ 1310.829734][ T31] Call Trace: [ 1310.840096][ T31] [ 1310.851488][ T31] __schedule+0x125c/0x6730 [ 1310.868234][ T31] ? __pfx___schedule+0x10/0x10 [ 1310.883659][ T31] ? find_held_lock+0x2b/0x80 [ 1310.899565][ T31] ? schedule+0x225/0x2c0 [ 1310.918194][ T31] schedule+0xdd/0x2c0 [ 1310.931767][ T31] schedule_preempt_disabled+0x13/0x30 [ 1311.035661][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1311.035693][ T30] audit: type=1400 audit(1783549089.452:2276): avc: denied { execute } for pid=28569 comm="syz.9.6603" name="file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1311.154655][ T5711] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1311.304889][ T31] __mutex_lock+0xccc/0x1bd0 [ 1311.309548][ T31] ? bdev_open+0x41a/0xe40 [ 1311.314077][ T31] ? find_held_lock+0x2b/0x80 [ 1311.318789][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1311.323941][ T31] ? bdev_open+0x41a/0xe40 [ 1311.328370][ T31] bdev_open+0x41a/0xe40 [ 1311.342291][ T31] ? iput+0x3a/0x40 [ 1311.352305][ T31] blkdev_open+0x34e/0x4f0 [ 1311.358217][ T31] do_dentry_open+0x6ab/0x14d0 [ 1311.369032][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1311.382298][ T31] vfs_open+0x82/0x3f0 [ 1311.386431][ T31] path_openat+0x2873/0x4280 [ 1311.391042][ T31] ? __pfx_path_openat+0x10/0x10 [ 1311.412780][ T31] do_file_open+0x20e/0x430 [ 1311.417340][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1311.436853][ T31] ? alloc_fd+0x471/0x7a0 [ 1311.443577][ T31] ? do_getname+0x191/0x390 [ 1311.449593][ T31] do_sys_openat2+0x10f/0x1e0 [ 1311.460520][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1311.465864][ T31] __x64_sys_openat+0x12d/0x210 [ 1311.472629][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1311.474233][ T5711] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.478056][ T31] do_syscall_64+0x115/0x870 [ 1311.478090][ T31] ? clear_bhb_loop+0x40/0x90 [ 1311.490474][ T5711] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1311.493190][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.510304][ T5711] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1311.514063][ T31] RIP: 0033:0x7f8ed9d5e68e [ 1311.527952][ T31] RSP: 002b:00007f8edac09b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1311.537103][ T31] RAX: ffffffffffffffda RBX: 00007f8edac0a6c0 RCX: 00007f8ed9d5e68e [ 1311.547051][ T31] RDX: ffffffffd0921a0e RSI: 00007f8edac09c00 RDI: ffffffffffffff9c [ 1311.555443][ T31] RBP: 00007f8edac09c00 R08: 0000000000000000 R09: 0000000000000000 [ 1311.566730][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1311.576995][ T31] R13: 00007f8eda026038 R14: 00007f8eda025fa0 R15: 00007ffd3dcd59b8 [ 1311.585321][ T31] [ 1311.588603][ T31] [ 1311.588603][ T31] Showing all locks held in the system: [ 1311.597347][ T31] 2 locks held by kworker/1:1/29: [ 1311.602911][ T31] 1 lock held by khungtaskd/31: [ 1311.607841][ T31] #0: ffffffff8ebe6100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1311.618987][ T31] 2 locks held by getty/5366: [ 1311.623981][ T31] #0: ffff888033c4e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1311.632362][ T5711] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.641452][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1311.702101][ T31] 5 locks held by kworker/1:6/5814: [ 1311.707430][ T31] #0: ffff888023add540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1311.718349][ T31] #1: ffffc900051cfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1311.730390][ T31] #2: ffff8880227dc1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1311.739554][ T31] #3: ffff88802b025568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 1311.750165][ T31] #4: ffff88802aee6460 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 1311.760269][ T31] 1 lock held by udevd/19589: [ 1311.765077][ T31] #0: ffff8880283f9350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1311.774758][ T31] 1 lock held by syz.1.5949/26055: [ 1311.780207][ T31] #0: ffff8880283f9350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1311.790143][ T31] 1 lock held by syz.8.6157/26867: [ 1311.795824][ T31] #0: ffff8880283f9350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1311.805376][ T31] 1 lock held by syz.8.6157/26868: [ 1311.810512][ T31] #0: ffff8880283f9350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1311.820488][ T31] 2 locks held by kworker/u8:33/26981: [ 1311.826038][ T31] #0: ffff88801eb24940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1311.836986][ T31] #1: ffffc900067afd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1311.848758][ T31] 4 locks held by syz.2.6599/28555: [ 1311.854353][ T31] #0: ffff888074583040 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1311.864997][ T31] #1: ffff88807688e260 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_release+0x62/0x590 [ 1311.876848][ T31] #2: ffff888065e3cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1311.887282][ T31] #3: ffffffff8ebf1ba8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1311.898038][ T31] [ 1311.917494][ T5814] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1311.927212][ T31] ============================================= [ 1311.927212][ T31] [ 1311.932427][ T30] audit: type=1400 audit(1783549090.332:2277): avc: denied { setopt } for pid=28567 comm="syz.7.6602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1311.936418][ T31] NMI backtrace for cpu 1 [ 1311.936435][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1311.936457][ T31] Tainted: [L]=SOFTLOCKUP [ 1311.936463][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1311.936471][ T31] Call Trace: [ 1311.936477][ T31] [ 1311.936484][ T31] dump_stack_lvl+0x100/0x190 [ 1311.936507][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1311.936531][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1311.936552][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1311.936574][ T31] sys_info+0x141/0x190 [ 1311.936589][ T31] watchdog+0xcb1/0x1030 [ 1311.936610][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1311.936629][ T31] ? __pfx_watchdog+0x10/0x10 [ 1311.936646][ T31] ? __kthread_parkme+0x18c/0x230 [ 1311.936670][ T31] ? kthread+0x13a/0x450 [ 1311.936691][ T31] ? __pfx_watchdog+0x10/0x10 [ 1311.936706][ T31] kthread+0x370/0x450 [ 1311.936727][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.936751][ T31] ret_from_fork+0x72b/0xd50 [ 1311.936771][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1311.936791][ T31] ? __switch_to+0x800/0x10f0 [ 1311.936815][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.936839][ T31] ret_from_fork_asm+0x1a/0x30 [ 1311.936870][ T31] [ 1311.936915][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1311.957488][ T30] audit: type=1400 audit(1783549090.332:2278): avc: denied { listen } for pid=28567 comm="syz.7.6602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1311.959562][ C0] NMI backtrace for cpu 0 [ 1311.959574][ C0] CPU: 0 UID: 0 PID: 30 Comm: kauditd Tainted: G L syzkaller #0 PREEMPT(full) [ 1311.959593][ C0] Tainted: [L]=SOFTLOCKUP [ 1311.959598][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1311.959607][ C0] RIP: 0010:write_comp_data+0x18/0x90 [ 1311.959625][ C0] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 39 77 59 12 49 89 f8 49 89 f1 49 89 d2 65 48 8b 3d 10 77 59 12 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 40 28 [ 1311.959639][ C0] RSP: 0018:ffffc90000a67438 EFLAGS: 00000216 [ 1311.959652][ C0] RAX: 0000000000000001 RBX: ffffffff8bd07d41 RCX: ffffffff8bb5f26f [ 1311.959661][ C0] RDX: 000000007fffffff RSI: 0000000000000001 RDI: ffff88801f2dca80 [ 1311.959670][ C0] RBP: ffffc90000a67530 R08: 0000000000000006 R09: 0000000000000001 [ 1311.959679][ C0] R10: 000000007fffffff R11: 00000000000fbf68 R12: 0000000000000000 [ 1311.959687][ C0] R13: 0000000000000001 R14: ffffffff8bd07d40 R15: 000000007fffffff [ 1311.959696][ C0] FS: 0000000000000000(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 1311.959710][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1311.959719][ C0] CR2: 0000001b31304ff8 CR3: 000000009aa71000 CR4: 00000000003526f0 [ 1311.959728][ C0] Call Trace: [ 1311.959734][ C0] [ 1311.959739][ C0] vsnprintf+0x78f/0x1300 [ 1311.959759][ C0] ? __pfx_vsnprintf+0x10/0x10 [ 1311.959777][ C0] ? __asan_memcpy+0x3c/0x60 [ 1311.959799][ C0] sprintf+0xcc/0x100 [ 1311.959816][ C0] ? __pfx_sprintf+0x10/0x10 [ 1311.959834][ C0] ? get_data+0x3b6/0x500 [ 1311.959849][ C0] ? vsnprintf+0x4ae/0x1300 [ 1311.959866][ C0] info_print_prefix+0x146/0x350 [ 1311.959881][ C0] ? __pfx_info_print_prefix+0x10/0x10 [ 1311.959896][ C0] ? __pfx__prb_read_valid+0x10/0x10 [ 1311.959912][ C0] record_print_text+0x143/0x3c0 [ 1311.959926][ C0] ? desc_read_finalized_seq+0x131/0x1d0 [ 1311.959942][ C0] ? __pfx_record_print_text+0x10/0x10 [ 1311.959959][ C0] ? __pfx_prb_read_valid+0x10/0x10 [ 1311.959974][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1311.959990][ C0] printk_get_next_message+0x2d1/0x6c0 [ 1311.960009][ C0] ? __pfx_printk_get_next_message+0x10/0x10 [ 1311.960028][ C0] ? find_held_lock+0x2b/0x80 [ 1311.960046][ C0] ? clockevents_program_event+0x1bf/0x820 [ 1311.960067][ C0] ? lock_acquire+0x1b9/0x370 [ 1311.960085][ C0] console_flush_one_record+0x67c/0xe50 [ 1311.960103][ C0] ? clockevents_shutdown+0x1d0/0x1f0 [ 1311.960121][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1311.960138][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 1311.960161][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1311.960182][ C0] console_unlock+0x103/0x260 [ 1311.960200][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1311.960217][ C0] ? lock_acquire+0x140/0x370 [ 1311.960232][ C0] ? vprintk_emit+0x66a/0x6b0 [ 1311.960251][ C0] vprintk_emit+0x407/0x6b0 [ 1311.960269][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1311.960287][ C0] ? find_held_lock+0x2b/0x80 [ 1311.960303][ C0] ? ___ratelimit+0x77b/0xae0 [ 1311.960321][ C0] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 1311.960339][ C0] _printk+0xcf/0x110 [ 1311.960353][ C0] ? __pfx__printk+0x10/0x10 [ 1311.960365][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1311.960383][ C0] ? __pfx____ratelimit+0x10/0x10 [ 1311.960400][ C0] ? kauditd_hold_skb+0x1c7/0x210 [ 1311.960418][ C0] kauditd_hold_skb.cold+0x3f/0x4e [ 1311.960433][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1311.960450][ C0] kauditd_send_queue+0x232/0x2e0 [ 1311.960467][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1311.960491][ C0] kauditd_thread+0x645/0xb30 [ 1311.960508][ C0] ? __pfx_kauditd_thread+0x10/0x10 [ 1311.960525][ C0] ? rcu_is_watching+0x12/0xc0 [ 1311.960543][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1311.960564][ C0] ? __kthread_parkme+0x18c/0x230 [ 1311.960582][ C0] ? kthread+0x13a/0x450 [ 1311.960599][ C0] ? __pfx_kauditd_thread+0x10/0x10 [ 1311.960616][ C0] kthread+0x370/0x450 [ 1311.960634][ C0] ? __pfx_kthread+0x10/0x10 [ 1311.960653][ C0] ret_from_fork+0x72b/0xd50 [ 1311.960670][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1311.960687][ C0] ? __switch_to+0x800/0x10f0 [ 1311.960706][ C0] ? __pfx_kthread+0x10/0x10 [ 1311.960725][ C0] ret_from_fork_asm+0x1a/0x30 [ 1311.960748][ C0] [ 1311.963222][ T5814] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1311.979061][ T30] audit: type=1400 audit(1783549090.332:2279): avc: denied { write } for pid=28567 comm="syz.7.6602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1311.988331][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1311.988349][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1311.988372][ T31] Tainted: [L]=SOFTLOCKUP [ 1311.988379][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1311.988389][ T31] Call Trace: [ 1311.988395][ T31] [ 1311.988405][ T31] dump_stack_lvl+0x100/0x190 [ 1311.988430][ T31] vpanic+0x552/0x970 [ 1311.988446][ T31] ? __pfx_vpanic+0x10/0x10 [ 1311.988463][ T31] ? rcu_is_watching+0x12/0xc0 [ 1311.988489][ T31] panic+0xd1/0xe0 [ 1311.988503][ T31] ? __pfx_panic+0x10/0x10 [ 1311.988521][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1311.988540][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1311.988559][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1311.988577][ T31] ? watchdog.cold+0x1ec/0x234 [ 1311.988594][ T31] ? watchdog+0xcc1/0x1030 [ 1311.988612][ T31] watchdog.cold+0x1fd/0x234 [ 1311.988633][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1311.988654][ T31] ? __pfx_watchdog+0x10/0x10 [ 1311.988671][ T31] ? __kthread_parkme+0x18c/0x230 [ 1311.988694][ T31] ? kthread+0x13a/0x450 [ 1311.988715][ T31] ? __pfx_watchdog+0x10/0x10 [ 1311.988730][ T31] kthread+0x370/0x450 [ 1311.988752][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.988777][ T31] ret_from_fork+0x72b/0xd50 [ 1311.988797][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1311.988818][ T31] ? __switch_to+0x800/0x10f0 [ 1311.988842][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.988866][ T31] ret_from_fork_asm+0x1a/0x30 [ 1311.988898][ T31] [ 1311.990412][ T31] Kernel Offset: disabled