last executing test programs: 11.213438816s ago: executing program 0 (id=541): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x75, 0xb2, 0x1f, 0x40, 0x8086, 0xb63, 0xcaf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x3, 0xcc, 0xc8, 0xac, 0x0, [], [{{0x9, 0x5, 0x4, 0x4, 0x618, 0xd8, 0x3, 0x4, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x83, 0x62, 0x82}}, {{0x9, 0x5, 0x12, 0x0, 0x20, 0x0, 0xa, 0xc, [@generic={0x7, 0x5, "e6ea3588e4"}]}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x3000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100f4ff000000000000110000000c0009"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) clock_gettime(0x0, &(0x7f0000001a80)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000001a40)=[{{&(0x7f0000000580)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000001e00)=""/4096, 0x1000}}], 0x1, 0x40002121, &(0x7f0000001ac0)={r8, r9+10000000}) write$tcp_congestion(r7, &(0x7f0000000500)='bic\x00', 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r7) 11.170411628s ago: executing program 4 (id=542): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202080, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x7) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) r1 = syz_io_uring_setup(0x6440, &(0x7f0000000240)={0x0, 0x49cb, 0x10100, 0x1, 0x193}, &(0x7f0000000600)=0x0, &(0x7f0000000540)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r4 = io_uring_setup(0xc20, &(0x7f0000002000)={0x0, 0x0, 0x40, 0x0, 0x7ffff}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x11, 0x20000000, r5) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r5}}) io_uring_enter(r1, 0x55c2, 0x48d2, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10.503100292s ago: executing program 4 (id=545): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000c35000/0x4000)=nil, 0x4000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x18) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB="747261ee733d667d2c7266646e6f3db156c8753e6512266526e3ecb96f941eeedc8218088e3c98d71459565ffd39c286a6fed471b0f199829f58bb02cc2dc68400e321eff4d48f2ab2f338e92dfd8fe9df1ed54e31eff375ca11da052525af476b5e7acbba13e5c34976897105b8ffff2c1356fb5cb3d85432856ab55683d6bc9043cddd67c33375877000a6cee18b3299bbb6be4339ed8bab1452e39e3d6c06b7556be283e2e8fe0a8a81dbd9bc4733ad83f856ebe6608cf504e014ebc2688d520825300c8b6346cc7d32fd5f31cbe53244a814d310d857311f15c78a194b6bd03892262dc890c8082b7702866e0415a7f57cca7f6598c2104f90349cb78565ab3c5d45fcb65c6e256ae165954093f372098d991a0fbcdad94344d56029fcca035a28801920bd5dfc5936b45fed470d43278f39b8126d7e27098f9bbe75282c41de8aeb343b76578ba30bf13e333f5bc1c32d58105da0b04e6799947383be47d6e6741689beb615dfd2da7dee620c597dde704806d2d86dd7dcfef76cbe00cb0f67857493980bfb42722d5ad1", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',k']) socket(0x2, 0x80805, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x81, 0x0, 0xffffffff}, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x53f943, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000000c0)=0xd763) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r6, 0x0) close(r6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r3, &(0x7f0000000140)=0x7, 0x12) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r5, 0x0, 0x0) 8.659736694s ago: executing program 4 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x8, &(0x7f00000000c0)) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) munlockall() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000001200)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7}, 0x18) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000040)=[{0x2, 0x4, {0x2, 0xf0, 0x1}, {0x1, 0x0, 0x1}, 0x2, 0x1}, {0x1, 0x1, {0x1, 0xff, 0x2}, {0x2, 0x0, 0x2}, 0x1, 0xff}], 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x1, &(0x7f0000000040)=0x20, 0x4) 7.692025904s ago: executing program 2 (id=553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x18, &(0x7f0000000000)={@link_local, @link_local, @void, {@generic={0x8917, "a86a570f10cc0703adef"}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDCTL_SEQ_GETTIME(r2, 0x80045113, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.42400006s ago: executing program 0 (id=554): r0 = memfd_secret(0x80000) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000003c4432ba400fc99883", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1880502400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000002ec0)={0x1, @vbi={0xfffffffc, 0x6, 0x33524742, 0x32314742, [0xa, 0x8], [0x5, 0x7], 0x108}}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYRES8], 0x24}}, 0x4) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) 6.022263338s ago: executing program 0 (id=555): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x400202, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x300, 0x360, 0xf0, 0x800, 0x4, 0x100, 0x2, 0x1, {0x5, 0x7}, {0x8, 0x0, 0x1}, {0x8, 0x1}, {0x4, 0x5}, 0x2, 0x80, 0xc, 0x88, 0x0, 0x6ac, 0x7, 0x6ed8, 0xd4d, 0x3, 0x494, 0x0, 0x0, 0x200, 0x2, 0x7}) r1 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) r2 = getpgid(0x0) prlimit64(r2, 0x8, &(0x7f0000000140)={0x3, 0x9}, &(0x7f0000000180)) r3 = memfd_create(&(0x7f00000001c0)='/proc/asound/card2/oss_mixer\x00', 0x3) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r5 = io_uring_setup(0x631f, &(0x7f0000000240)={0x0, 0xd767, 0x10000, 0x0, 0x90, 0x0, r4}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x5) sched_setscheduler(r2, 0x5, &(0x7f0000000300)=0x8) io_setup(0x12e, &(0x7f0000000340)) r6 = io_uring_setup(0x6410, &(0x7f0000000380)={0x0, 0x6a9f, 0x80, 0x1, 0x304, 0x0, r4}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r6, 0x1a, &(0x7f0000000400)={0x2}, 0x1) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r7, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x400) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x1000) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r4) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000800)={&(0x7f00000006c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x90, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff9a5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x83d9826b808f19e0}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1bfe}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4e}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x90}}, 0x4040001) r9 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000008c0)={0x3, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000900)={&(0x7f0000000840)=[0x0], 0x1, r10}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x18, 0xa54, 0x6, 0xe32, 0x28820, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @value=r1, @void, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b80)={'gre0\x00', &(0x7f0000000a40)={'erspan0\x00', 0x0, 0x700, 0x7f87, 0x4, 0x8, {{0x39, 0x4, 0x0, 0x1, 0xe4, 0x64, 0x0, 0x3, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xb1, 0x1, 0x8, [{@loopback, 0xf}, {@multicast1, 0x100}, {@empty, 0x1}, {@private=0xa010100, 0x10}, {@rand_addr=0x64010101, 0xcc1}, {@multicast1, 0x7d9eb606}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x62d5}]}, @rr={0x7, 0xf, 0x9f, [@private=0xa010101, @loopback, @local]}, @noop, @end, @ssrr={0x89, 0x1f, 0x22, [@multicast2, @empty, @empty, @loopback, @multicast1, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x28, 0x3, 0x2, [{@broadcast}, {@loopback, 0x1}, {@local, 0x558}, {@private=0xa010102, 0x3}, {@remote, 0xfffffff1}, {@broadcast, 0x3cf}, {@loopback, 0x2}]}, @timestamp={0x44, 0x28, 0xda, 0x0, 0xb, [0x80, 0x53, 0x7fffffff, 0xe, 0x0, 0x4, 0x830, 0xffffffff, 0x1]}]}}}}}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r8, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r12}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000090}, 0x800) r13 = getpgid(r2) lstat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c80)="0fbec89ca73f2620fb", 0x9}], 0x1, &(0x7f0000001300)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x30, 0x1, 0x1, [r9, r0, 0xffffffffffffffff, 0xffffffffffffffff, r9, r3, r5, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r1, r5, 0xffffffffffffffff, r4, 0xffffffffffffffff, r0, r3]}}], 0xe0}}, {{&(0x7f0000001400)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001480)="f90e3e21ec00e6e09cdaa7af59f7a4bf58da672f282e0719f257efabe89dbe566c6525e6ee64fb17cec2db7362cb3df33bfc4809a3a081f3ee5fc7062c25987fe5f0b1996e3742491138", 0x4a}, {&(0x7f0000001500)="e347b5b7b574704c504fbe24823f148d24ddd4c87624766c75f026576b93f514066a5dba7f632b059b492b6e91c6e5384d489a45b47dd84ef40dbf67fab9cbca4f0c34cb1e72a338e1786b5f915056964986ef6b33e8f015800ed48d9b402d3deedcf1481f405f32eede2e3fc783f2240cb428e647b59099ac6f74ebbddf3259b63e3d0b698204e87771d27816b6557192eaae802ff0edd883c34287341167a71ff8b729ba67fe65d96263c06d2768069d435c0948fb95d0bab56512c1f8440cb88ba182bffeca9dc399ae35ea5db3ca0fa9f6fb2d9c18cc1c", 0xd9}, {&(0x7f0000001600)="72aea571d162735e49e3dbcf9b54085d99aec08b4609964817da3febffa5fb7f3504844af88ce1eda6a25ee9cb63f096b01b07", 0x33}], 0x3, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [r11, r9, r4, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x34, 0x1, 0x1, [r3, r5, r6, 0xffffffffffffffff, r6, r9, r0, 0xffffffffffffffff, r6]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4]}}], 0xd8, 0x80}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000001a40)="987c95a4ac5a7cac65a8a12709f7ef495ede254686487eb21bb54e4f08828b96955e5ad249248d390a333d2261a779fbe42b0f30ea1f136ec2059f48303d9d816a00ca4f26", 0x45}, {&(0x7f0000001ac0)="bfcb80a9bb8b960a273597e508055d7dbc2080962cb435dca0ffb859581289347d160939229f37135f3466d45246833acdc227cfd4395463e820e3d2a7ea6b14cccfc95fa96b6641f3aa59efcc131e6e7dcb144485da639c7997c50ac403657a65c4915a9160d4d3cc2a7ff973e6393306964437323dc445edf66553f87ee1ea28f12a83a82cc3dbc7f68d30a3ebb531243bc605545954b68421257474480c25b13dbcb600bdad80fbdf159265ac42f2b89236461f1939e0bd710c3c9c27d020ac674b9c50b6fd4831bf05fe71ca0126f7bacf402945185f341923bd04c8ea3bc0469fbf7d2ddaac85b58c299f9e6a725a78d20a768b0803fde520ff8e42df7e28d9237149c061aacbbe5e67a75022a2e4c2f8a3d08ec5fec3f8ccba0d508e1eb605bea66643e76831d7ffb277ff57d739512e166e69078ad49b11c67fc64fbd10c6e531a13732b1f556ce7480e659e0fd2c04658a81a9acc359a48abfae8f11b2251bd731413a0221e311aa5431fd895f923209ab5e0977a0f40d5190f1d4c9021f2c41802ca3e041482c7d45f6945b43f5b0e66aba2f7f5c33fe5ec7dd571a9d49c8e93e366bed16b484c619828669b16e8cc0808a8e422f3a9d96b8d8b9942a3839d188a50865a84dd0dce79cf20e8020668165fee1da09451495812f40977b2bacb53696e55eb50e39636c90cb676c303cc624e64e7ad518753dec5c51775ea90b0a57b0a61b266e1d5738fed34038bcd388f90105f92760630bc223fd874b85ea029bbfd724dde93e53038c02aad40555c629f1da7cc68baa48d60538610a777390bde765ebb6e3ccfce5923411c2af0f166e3fb99cb2c0a5f4708eb718ac7dd5c0f0208cd1e15b3eac901d2b4c3232bb488c661edb01da3d69bddd657a9f68cb54a9e27169ab07c86097142ca18b2aee007ad48f8b00251ad368b00a612a0c545a52d1fb2329b522ca71e54cd5e5b28e4dc4a1d3e484dbbe48c97ffcec2d43c91d21545e5b6caf33117cf20bc02b6f6f6c0e4debf65c0da0c85ac9871a00aba40ead28d9a9d09675b781366064d24230010e8a4c6980db82aeac78b67da528e63c83d267495aebaadbe92e4e0a0a95f02a239191648d33aab97f091e80a88359233ff64936b82d5fd4d6c349f5421bc61347b31e0c3e00a6421bedc7c3f073c4d2f3039d5f3253b54ae6417793d9dd82ea1cc6eb62d0d6e25a3fc5115deae62159d6d0e9845b10274c4592319cdba420a54eb61f50c9ad154bfd1e3be252f0d9228b73cf4fb3018cb56914b49fcbce7e3abeb06d4504bdce4826e6d13c68715b9038ac8584e1cf999ab9c290078d2f71dedbfb7dbe7cce40e27801f7fefa018abf8fffa4f4c89685137ac6085b7e604c747b2bccfe4f7a00c40250bb0ddf58b0f098b22d2c3e888be6beef24ca10b0920fc8dda835dccef43d95d950feae9a2b6f387977621e04a19c3033e167ec31e867c712149783f88163b3a3c37942436679d02cf639b25d0f925671179fa10f04be2121d0527ccdc2e003175ac520efd0fca92c12d31a786412d3e75433f32d3ae9b9417e7378a791a1a638b8d63de5e7d99bc2e212d0ed2e1b591305491abe6e1a5adcc911e5be1ce970421a7c22c6a7bb6526dbfc39080018d7ffc80fe7a8b6021366f096db5e4a63baa275bf173f5e3c22239b2329d0bab3db5bf794ec7887cad0f149384587c30a2970da3d8563ef62ff67cd5f1aba7bd0ffa44e2931b6491626addba6cf050042f1e040a8c44ab5f557ed94780618da98d82ef24638ce582bc4283d2e51595bf496c9504fd7640be4e0c400d2ebff996622e1ae36b03ce8f0110b5efc3edd4d6b1b2d1f0faab54e0abc256d8046b709fd55be63efe9b2b075c6bb22524753266a5bdd8c174a451eb2e7fbcaa0e9f1844417647b2c0751f1de86f69692ae9d26118a8964f95cd96abdbb208bd85e22837ad0f543c26b2d100b6a2c276f467ba7ad247893aecd73e1ae10a313823e4593f2acba375d97e8d9ee6f833219fcdf4b1c069fc3b983ac7aaa06b1c622e990a830a431364f9c99297a030d856cfa0c2bfa78ecb8e27a0ed15e9ab976a4496cd3089c5a0cb6e1a6093e191eb7960d2f0678ef3b87a0190ad8d58af5fd8fa75bba6956a57f0c76428473a5c4339936d461017eaa6b5bb7935e91d74aac1efeebf414b627d1de7e4942e7e05e827ca02be1126719dfa9373afc78efb5002692c3f0c73124899d6ff729ca358824bdfb477b0c4e10cc424799a24827f4e860dad239e55a80a89cc8dd54e68f9031a76fdd2e1a1d68622ac733c12958fe59b496503957446cf0512b444132d0d0b80fd0e085361d946e8606d2a6e0376166dacd560dfd1f3b1835bdd23203cfe1f68f5000269709077f584c67e4831b81564d9261f21e035ad2b6e7bd9634ec84253eca7b324f695c0873358472c43de520565a2927850d7e35d3a0e9282b3a64ca5c636555444bb7d62e7c88626e64f41af19f0e48de78b74b6e48d00dec3b7a8bd8edf1be740bcc64974cd57ea69641e85c6af0883c5c763e58d33e5d2f832182f2a5c2f51d85916456426eab414fadbd9d371bfbe1b6b643115f81512225ca5ccf2b9206e1a772cc4de825ec81b8c9012bd6d6df533b40560410a0c46770652339ba36c7d0aeaacf7f00d4c135ab90631ca7084351fbcc9f1366b023d235b6fa9791e3bb5584637b9a067a4ffd583e51fec6dadedbf580835739b6486d9c59b4ad2df3c069daab53627adb8419fe9a82df81d4443dfb853487aa3d466b7ab11405eab9727da768542e8f517b5155775d84614df50244ad1f74a1458fddf1655566d101d64bfda12d0346829739cf4de708a2f65802fe82146e175677d1f1970e17d1eb2a4e7e3b71ce1bc37a149d019c7569952262a6421c0130755081b41cade36895ea01281559b866a49cf8e8fac5cb5e79ca9278924746fd4cacc55f0744cbcd3e94ea1d3e565c1b3756db182259042be6fb5c87277f438f6d989246eb6337ff37d75efda69b0d986f329cb21d842125ae4a7df77f894ec943bba1932e0c0447891bab6bdb75d64e6228138836dd8c5b81abed7a0d01eb92304584857cfc4c4641e72cebc2c3cbf1dcff706284ba8f8066d91ae983481b3fcfc214aa3042f1bdb0ef62a65eaffbba6b679f69d465aa552410b6e998b98073d0844c220d872e64e6841297b33326474825c63f573f23bcdffef58715d6ead57885671ac6dd3709c88e61097ddb61d5fcda925348e4a078c3092ea951f1588cb1f76798c33f66f09be48cbfafb65185a33a8d67d472070c901bf87f5de8f9a28ed0d75cb3572931b4bd16494fc0c4cf5fba11b97af8e3d9161d0ca268ac9f2c29239156a4fb47f5e95b0729ecbecb180d132ed42e48cd28877333d53cfe6f4cf69eb5bd340f2ae31accd00f5cd6ccbd74850a4e51cb4420436ad261aeecd4579f854edee506091f6163535f475ae9107fb1fd4e87a7d2222595226d41c7d36cb64370d585be74c5473687c5b90249f001056da40d4ce9fa0002ea2e457116acde3d9d56646bf78e117994196533c0fac3cedc8a730c4d0942c17a931a0a6cdd8fb5c120f3046c177d48d9a1da7851c65a9284019ca65e0c4e0589e73d04859f1c675444674ecf59ea40b196fe7f81aa08034cdff647a0b4e69e2939df23579714812cf3bc3b4409e3db189aad612f7c39c8a02443bcf92089b7bc995ebdd81a4630aca8c891c9cf03649b471437c763a73dc193f21a64dc184c014a46edef41688fc84a8212b16213889b492ef56514e9ee87af83006ea4aeac446256a3d318693ae511931c9883b42e8710b80b080bae7b9e7138e931ef1bbeea7bdf8aea57a812f7e8b1bea709f98493c9094f5f439e52f58e5aa6e32310c52e074f08cb8caba2999bb111937215ab6ec5a31cc079d5f1c6d333f1c77939fef4a21b50c5f03f47535986bf528ff06ead3c56e6fc48dd001745da8384d3f098315ce9f6b821896e3cb4438e630ffbb0ace89739bff006bcd128a911a4f36aa12a49507ef3522e54255a6624ab8738f935dc6c056a9fbcdbc08332e0f72307d9632e709836a702a0e366027ac6c1aeebc03974c093d4f4d984f58c69098dd8310eec386cc4795b0fd684d3590bffc1a40bb0009872927cf6f69dbd8a1f417d0b08f9312897f4e4c04b3b06ad322261c4f694231b7233d27af35f0a77f5aea0c0d1f0bd5738312f40d1436c7fdf1a4a23e8d639aba3f86ad7e626317fe72e7d2d59d0c8789c56e254102a9e848afdefe0d48ade1bc54012b6f1ea66f631d7dde80d1db277745fff23cfabda3c1029dc8c5d3bfd056144a13c96db0059e2782512dcef042a52b28c4dd69d044f48cc09775eeb5f32e6b926f61249012d896411e5def25aade69d2ea4123694a0a0b56dffbb8f7d1078b7200ade9866b42ded49b28c4fe7d9e3fa557efcb4889ff7756be17a3ea7c25e903987a2800d608714c738d2fe3ef95fb03c491deb435bc3f4ce8ac80d6cb916cc7ca8eecccb740df19debddead4572f8713a8eab3d80293021d96a6b55a61a4d1bc84e58ff7ffcdbbda1d5d5551fb36b9647f23bcf0d346f9133b07e52785bbe06ff0d3c35dd05cf7674c6d2ec429ec0c8733226938e2e1fab7197787c52d8c85456903942b0c2838aa34432b2db2332f7bf7c78407ff79e50564f8c528ba8322da9d9407950b2c2ce7c6073dc6e75c095698254899a863dcfcb9dbe53f646ef10582dc3043e7725991377fadf32bbf925cc092c45a95a09e107fab820e1a27bb8ef57745275c19d9b361a1d6e04200b8ff74636558b9431d5cf6efe336e322c0fb6dc4d7370d72e70d9d3e643560e3e8ff763ce60e717082c573206a38feea656c0d71c7fde74f2d96f8d4198c600c4520a10254f177fc46ead2c74af03ff7ec62d42b1d93d0259bdc80c5164e9108a771a0ebe70abdc17ba79a57d115e5cf2a93e874b025fa601e2b22274052ebfe16ef4575a71d68d01d9c72fd6dc636bb68037ed0dff358245f06c012a9b05c21714590a50a415d2f8afda1c86646a0e506aa6f56d2fbfdad19a6d755b51d60ecb363ace101877426774fcf9d41e86adfc7e13dbf56c780d7e00a5589a45ddbba504515ad7ab4cde5623a66c25ec9b86cd1484eabf9ba8c6c7d861d9c5df9837a26de5ea151823885f666109d9fdb4187a2f4954f64bf3a31693039e5f30e8995ae0ed10ac82680d97c5f6b889d971c1a0ade11bf3d1497d58167a3667a171e9b18097e4406689d9cbc2d5188512a04172c4fff3a68081e6545f87722ae23d33a4d6a5e88b4bc8b45917c57be6dd8ad22422e1420f94891d288b3799996cb74950b73b0d3b70ce9ef2ea9f42f94fa69b87abedd12411b2b5a6e087a5cd2c5f5becf11ed32a8e2865b41f6ac756d0a552ddef62b1f9c0a0f1909a85af61a617c5a4a85cd2b47a541f7c155adbc7c3ad8415ba336703ed2e36c8dc4bcfd616ad47767fa03a6f739a97b8ef981dd4ed1ea61ffba49aad887dd0690967d91f010fde8e7c910d2b2f8337272e27fe2c5177da655c47366365dae646cbc6e4e6486374bdd3b19dee90c22172e220c1e24587c7a9a31ea024eb099da6bb4de197bc956ae76ca71d51ad2b436e601132674953fd92a0d81c36b6282774f1dcf2868942abc16a1b36592224c3cc23ce85b5892459335ba2f36c0c12f72522fbabbf3cdbc9521b86afb2f6ab81397fcd4e4d194b5da0219e577d19e5b1785277d0dbbf406aed81cc13203b817714440d0c44d11bde1", 0x1000}, {&(0x7f0000002ac0)="0bc679082237c1bcc3c4ff12fc9f7ee2122a5acb8ac0a4002c0cff31a7ed32fa7d5142066022e37ded0f6838ef30a119dd8da7a30108ffc12ac498263d", 0x3d}, {&(0x7f0000002b00)="e3994f5d09814e0c2a8eabf25ba78f5f53eb35b66703315ee3d890f60492561fe2ceb0a64c18493734002604300901a575edaa8325b33c5ab036cf66fe2c1bfa70a669e3022184abb07c0012cdc0b0de65b61c95fb14d1763ce2343628f7c4756a8fa63e31bd049e7020f80f65b889aed345a3e778de60bb6e04aa1bcdb1acf01724cd53b56cfb22dc69e228f4a207c5f85c419aacd2beb858530fe7c6733378a70fc740397b3b624efcef30cee4805decdf6e3b1744d7afcf38c00b33fed7572a3a211d5d6abc637fe8204c0a4c802df1c751be999e8e7f299c7121552ab49edb5abb2d543e3a3d96f880953d1b9d06b1893a32350a171211e77820b3ae0eb35af9b801110a835c94f0b956f64f681773c520aa9e002dc47a34e3d8d051d2affc5efa4fc0105e28784555eb408a6082678810a767a2c505b46ed86760d44071e447d11611e9703abb1b0b46cdf92fc1f1aa50e572fca261fa8167611187095ab6ec942226929163674de01d1df107972863c319b0143ce763889d9e64292befe431f40854354cae1ff53bf5f908cb8ad92446e481d879194734e65dc3258c0913a8f61b0660b1d73422a9be5d91e5089279c3fe273b8e61d7e43bc85adb6644c94e61e58a3513001863637d21d4b13ce94c875ee0995218bc112eb482c57bb6edb2f7c411c9594a73f65806420e94afce4512cec450131e0f2bae5b97560115d750e452b85d8725ce05ee27f9d06f40b71310294651da48aaa5ad9b779a8c74ddedcd43e260bcf0887947df784f34e4da5729850f64108b347876fcd87284ddd3a98f71ca4b1fb3141da7c89802ed1dfe8bead21f11ab9bfe534149c1b3c4125b41075966c109ccf0a574c208a1e75d46eca3fc2658f0753cf843e4af7411e966d8091031f94b71e7898ccea765cfa1dd8fb519bb908ffde5ef5c3a2114023c3143074906058329964746b31d7303f2c0303ef22fd8d7edba6858d2b522064f9839b8f5bb2bd9ff81cff3a080e48a3a8a6d36dac4ebf18104c27f302fcec5c961b79f3ccbdbbc2f819e392256898a74122f4da396cf81b29d83de1f7a75863cbe95864c4affb3621afe5c7c3f17b4edf5458bfc968f0d575d8f112125d127997ad9316d9303b45930caf2b7e7f7c77e3c2fab67e271e0e68cfa9a9c0a2ced0f3e95847ec449a2a783b50db318757836670edcc57be15d319b8d3e5a76a6b64817b78dfbdca26e3f8bb8a938982acb38d87ceca65a94868301d37e4514db51e3bb403b630c858069ba91e3846e0ff67872768071b2f6ff00e0bff1eda2e8d6b3e8aea6c6032ccb4b18f0352a3451d6f4e681287a46a8677dabfda9583b27cebade54536584c13b3e3b9a8676c3bcba2eb25b526809f8123c871f6e57caacd46f6b7e758a0f1099107740b77838fa589eeda79c211544f5036368fbfd48e3939e1c094a530447a7b5d547413cb05f7e19b68293ad87d8618a4655c7b657a55c7d3b572b1631a98f25bbc00c33f5d60e11e602371107e61b706b5f7f747d63adb53033f3bc303bbb53dde500ddab9fdcbb55516449cfd768b2d23210a40a198b50864c60942203072c3789b4372ae5e66d5b27e0d34db7ea18e5385321d2259ea925a5bfcf0617840ffc48b3f69448bf2b3be5c64bc81c10b5e1318ebbf7f2edca2201e84abcd1aa131e878889ef9005d53ed381c5d7aec7ca9e5a39f7ddf8633136eeda8f3b4f75572320c0b2fa238414a681507abd753677377f7f35ebd5a62007bc6b8462556af9c614ed15bc994db1fe2098311b9f0e7e00d37ad98d3b368ae2f5f0a227986e8b4baa1c18704bd653cf5bfb7a2bdc35611e2d19f65eb6af17536e774fd861d7e25a39f6489be2dfe6ea7131ef01222b94e83af03b01baa06fc8853e03ecc3159d0fa582d6fd07d7c0e47ed7898cb2ee58d6bb047a5331db9b51db9dae49823982b02eae50bcbe0680951248f6232f5a65bb48aad908527f61468d9574d702111be3d7f03a1899a3dad8d10da140e6fd110997e5bd238258fec1bf638b946bc3946aeee5a6316f2854d8fec6642c1a0345a15ce2fe2fa5d91d8ccbcf5e6845ee53824892d221a9303cad23943423c2d2772ba166d58d4c074055e2e55dff3ddef0091a03ee45e14d1897872d1e7b61564ab9b7018ffe934c3660a5e69c5de6ea266f35fdaf2a63301c0b0b6f364a8e161a88f50358403e06b4a822c0803b671a70fca4a4ddb318e56173a6d78148ea9d5f01c890c0f56f514b645ffc41009b33a3d4a0b329365a598d1664a75347e1c779050aa2caba90a6f4c92ed2dcd03367c3a018f7b4dad14b921de4882587aa0d7fd878e506f5183c42d7c1287aa0b3551625c77ca0b0166365637e9e9d5bf2737c7a624b6d9ec54fd30ecb8e3eddfb3adbf70a75905d003ead4f25083262fc1d96c67b93efc0bcc0afa03992e86734463acf55930de4151235446d9f1d15535ed38bd56965f7c05256e26cf29b4ba8d1cfbfdf98fb1d4d7842261c2dad7910f2c02197d6fae032ac701a7fd1e9f0257574d24141f12003688b0ae16bbe4b25b08981a92ddba78e94660ae69aab86c0e63a3b49a7fd7bc453ac36f99c7ef571de52f07cda8fb25939ec1edf2a39d6b2e46473eede4d5a4320506bfd9017e00e1a33764f7940656ce43c820707ceecb66d12232223131690e47550c5a8feb8059586f1b90e566b89e99e00953461865f8d67b9cec180e8d5fe26b309b02a9ccc483e5016037e5b50862beba2818a61708f8222fc38497575853352e5551af0cc541196fb84c8c2399b8f88edd451b59c7fcec575cb4faec63d55c1e92fb618c2990183792f9c5f647759c2dae1761f266f41ab7c1082ff9a9b2b27ef0e338249bada67a59cbc7d754b390289a7c2183da55daf073e086a0987846fe0e3fe04f36b16d0b43f7096f920f457da3fd304397833d2147b4f85d8ca428a9f1abe6d593712dba11e354a8205a88f1b569bbbd461e86df36a1f710072d0734bfda59b2dfd9d1c757edce0a77a81f55199eefeca35896974fea4a49589f047f13e515d03d1f607267a63521c448d971145e365d376912a9697c16f51eb5c45d8167c4c24be8e2f498fb7f03a206386af4ab1c6d06f1cde044039d9b4de9d9093f6c96c28e9958dc4c7f3da1b6a4f6124c2254d5890f42a8eb05f9a0dcbb87411135bfcc21c5746ab7bc168ea091517ea63d06a6ed8bec9ff1adfb3c2c9dad760773c6993a3e9a3f6e9ae474e6ea9f7b52eeb2ebd24b1e4dc35fabcbc239b5f0bbc0abf35d36bd842f6fec42ab928be02c94b324a2d3a6c64c12486a92e6561f7f75526620d04083b79720fd72eacaf7d3a66663e28f7f1749d3b82c2c52bc4bcc8d0abae94837f43ee4b521d718c504535edca11a1cfdf5d669ee0493384636010e413af53b6339650a63239fc94d6e29dc512443d0c3faf24f528a5c97b86348f3a554425660d05254a1ba83d093b6f12ed2f3089327d0d97eafa108a8c6116c72ac0e004e66b5844a6a6bdf060a59762e37fd93a0db7b0d8dd83be91ba140a227a2be3df81ae38e51ce883accb4da8739abb8929d526082b63966611bc1ec715009db2ac29d5cd7d753039eeb57c58ebd8adf915c5e6dc3f5e24cd81c08f4cd01eb783cebbad69a5f733574bab89335c72a63e0399e0a392a5c502807b12eeb8e20ecb4cb0b49b002188fd02f040436e177b96a3b88018be780dab03569cbdb0bdb02119909c8e301bb1cefbc7b56b7ee10d500c448abd4b5954daa2e06c344439e0362771831ecefd98013d8b5ea334141d8be225caaee6d57efd7b8733f1a00a1e495619ae5de46e782d4e5896ddcf4a0fb72c925a7724974a8d79b1553814ad1a2ccea5a7fce97792749280ddfa04c5f5f56a6e5b69fce93c2fae3852e3e9bfe651d0423331132af9c84c28cb59ee884da174091845fa546dd3e0f1a46425bfbe7918581eb6bf1c9eb7ca976c6879dbd10ccf8a2d1506562a0ed77f4873215801968ea289aecf1a7a8e1de3e451711e774777f84a5dc84005fe10c0bd9d8f5934c2964a445c65fa8fce17976675be2350e78a16b0ce7ab4e352d8d951b780d7aa1e7f46ae69c705c67b54fa0ccaa9de7ad5d2fe6dd188ecd7d4695ad271763d16e1bce58781bc10830e0260e2368076840e7093d5454354a6c6669f8256f85b762a90ea614421f5adadaa2b046e5707494640478d4c9967303d5812145eae7bf9a43bacd548c277b4bc19c9f78b26dfbebbfcad020e9ac9c0c5f9f5e1eede187449ac9d05ac0f2f2239c3841aefa9fb04235e0ff258273ccfc243d25d5b9444cd7207820f3e9016fdaadd1b61b65155f048ab9566b6a0ba2c29432bad339339bbd5f33ae372bcac141b6f7c17aa56a1323ca44553628b53d90b4931ee07cc9d0156c926312f79b1c4b2ca5d6930374ae25e98bc5370bffb61a08b355f7b765bd6fc105fe32e43abedd20755323d902dd1c0e36623eec8ebd3483be446dce9606249907f6813c9bb442380f38e2fe41c7c1a7a9d89192682120489144e9b188e41d0bf242fd666cb52a9b7a7e3f16e73f119e310031fbc2ea0b00447e8b42b082863d7ddd6bd674a352c040d7e9340bbcc06e8c56a21a11751579c86fe3bc40715e62d7fccd00c33cbfe5058981502fca3576f774ceb818e2d9ec0f775bafac7455b3d0c6cd6c79f691e1bdab02ca6a4fbf90561fa33d5daa3765c325476636c82bfed5392502d322ebfa92125b2f9892f26444fa4df5cf8dcc253c160016a3cf2027ed777678c851b2534158bdd90193e7660e16c2c83e785a4a36ec28feff6c4fab7b772128c5db32c37f89ed8574768a5873e75ea856eb9c45250c8539591c45f636d14f2084279f02b2035b8fa60a8da41dadd3053cfba54e33d901e8819df1265bef9ee14b6512a9bef8a0dbf6876cbe670f2a98a4a1e2b82095f63c819927160917aca2583aaf5aa10119293a5ddfb6144ae5eaa3e1f9f86d67ff5d1569d89eb6f472732252554b87fbc7eb14915867a03c51025b2fa329ed3ae907179273441d1bb6de02e3cd7c9c465cdc1440e86a3ca58053df7ddc1312f385ea89f4836a6dbaabdab8a97bd4053be7a5522287e6def622d1aeef827b48b0f04ca6ed2dbc349fbb30f7e31a0476db109fd6e60501170309ea35c485ff8917020215d8c46f86f20fc43809262bf052414e4e03e6f901d6d13ccb987f657e52c3212131d5bdf6ab131979989284169fb1ef5c8ce68a5b7cfa045e14ec22219280155fbb77200730957e2178185b24d6ec7696b7777cfb82eb9ea7657dd60fb6b00689565872bca9e3655781d2580b546ef9199d975d7848042b5f9cbe6d9f1ecfaf2f5ee6e7bc957781aee62a092150663114e71182774896ea9442aaf68061ad40df319d5aaa9da2bdb785cb1d981c41c0462930a4445f1789c81df401eb27891d5eaa7e5637987c0507323e2cfb0c3781a75a530fc10fd4bd5fce134433e8f82816b0956fe3ac06e60e5ed497f4ca112016ec541530f347c423c1cf197bc28acd042c99d5d7d47f73e0c7a6339a8be16c41c5792a7f3a3f5d7e6f7ee95147b8880669f2bc3226e9b46fb7830187d9826bb413961ab834a0d29735cdceaa16b655ae7ca4c401c1e5c26610782d7aef6b81b937117536ca08d3e68bc25f374dc5ebe2d652e2f42cbbb179da28fd5ffd4c248d13aecc5a0b423a40f3d6f764808dc8156f93de3ec7789852feaf7070fa9e65b9bcf304858faab48d54246de23338e7cf160d6d721629d25fa6fc59ef3", 0x1000}], 0x4, &(0x7f0000003d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x40, 0x8040}}], 0x3, 0x840) 6.012704503s ago: executing program 4 (id=556): ioperm(0x0, 0x5, 0x4000000000000020) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') utimensat(r0, 0x0, 0x0, 0x0) 5.964220852s ago: executing program 2 (id=557): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e7624cc3b88b330ad416c4c1d8c60589b6045a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843a40000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x0, 0x0, 0x1002], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xc7c7}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x605}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_COPY(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000adb000/0x2000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x2000}) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0/file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x9, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) 5.808000091s ago: executing program 3 (id=559): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xb, &(0x7f0000000840)=ANY=[], 0x0, 0x793, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) listen(r5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r6, @ANYBLOB="2e7b66646e6f3df00ba9926ebb4927edee1263ef124de00f437510c930b4b70b1311bf8b681f1a7890b99b5f2cb61cbf7f930a4846580de2a78097def9e997c586ac3aa0a25a897e74e5362f8c156652d4d759cf797001c392cd1dc245e6a70303ede9df7e424c734f47dd69f9e241c1be2419bc6ca54179d2a5fdcc3702fb96df0ef1e0618e2decddb0a36bd96f72ce78bde6764fcce3df1cd0b407a80222084d04ad05b5c820e33628e345239c9a7cbce84b9bb73609d3bc2b52969ddd7970cc29f983898e99cf88da00196accfcb6b612c21face877ea964481f6c8868eb4b9ef8f4484c42a8828f868c1a3f7", @ANYRESHEX=r5, @ANYBLOB]) sendmmsg$sock(r5, &(0x7f0000002640), 0x0, 0x0) getpid() r7 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r8 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_generic(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) socket$kcm(0x10, 0x2, 0x4) 5.804390313s ago: executing program 2 (id=560): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x723, "4f010000008b42be000000100000000100", 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0x40103e05, &(0x7f0000000180)={"b645563c45bcc7e181fad43c40fc603ebaf6ab65a29e23546aad0281b3aff5eb", r1}) 5.464036761s ago: executing program 0 (id=562): r0 = io_uring_setup(0x6c00, &(0x7f0000000080)={0x0, 0x569f, 0x8000, 0x1400004, 0x200}) io_uring_setup(0x20002880, &(0x7f0000000000)={0x0, 0xb07c, 0x7e, 0x0, 0x0, 0x0, r0}) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{0xffff}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r3, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) close(r2) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_open_dev$MSR(0x0, 0x4, 0x0) socket$kcm(0xa, 0x7, 0x73) socket$kcm(0x10, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000280)={0x28, 0x0, r3, 0x0, &(0x7f0000000200)="1af1d7ee508848e8969ddd752f00a3f89ac3229d1cfb864b42c81caa9ac4b7f755795cd05048e135e2e059f1e724d31695647df38e15d3afce87cc2536cb8bb500a07fa558c7fd96f61ba1ba2d89a9feda91c2d71457c585aa510207706fd830676fcf394e1f3593301a25f06212fea43677eba557527285c4de401b1cfc", 0x7e, 0x4}) socket$nl_route(0x10, 0x3, 0x0) 4.323131912s ago: executing program 4 (id=563): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r0, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/121, 0x79}], 0x1, 0x80000000, 0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x9f) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="b9000000000000", @ANYRES64], 0xb8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_DIRENTPLUS(r5, 0x0, 0x10) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x2}) 4.205084907s ago: executing program 1 (id=564): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b3700000000000000000500000008000300", @ANYRES32=r3, @ANYBLOB="0c3202000000000000000000caf45268cea4f918a7c8ccb0bc1c65db37b131e5fbffd96153beabbe32c9165e2bbb6d70c570"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.95236859s ago: executing program 3 (id=565): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1f, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) 2.952013839s ago: executing program 1 (id=566): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3768, 0xf485, 0x18, &(0x7f0000000000)={[0x9]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2.942097745s ago: executing program 4 (id=567): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x8634, 0x0, 0x4745504a, 0x0, 0x0, [{}, {0x3}, {}, {0x0, 0xb90}, {0x0, 0xffffffff}, {0x0, 0x1}]}}) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x210480) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x155) r4 = open(&(0x7f0000000080)='./bus\x00', 0x143042, 0x83) sendfile(0xffffffffffffffff, r4, 0x0, 0x80000001) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000200)={0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x6b) mkdir(0x0, 0x30) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81) memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xfffffffffffffff9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="d530d9952100f95a200012800800010068734cb9e200000000000000", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64], 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r8, 0x3, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x4, r9, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1000, r9, 0x0, 0x0, 0x3, 0x0, 0x2, r9}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xbb5d, 0xffffffffffffffff, &(0x7f0000000140)="e3e6b4a7a14917f86a2b294d90e988a999474d9dfe47a08addfe9c3878cda55f0ab5ccfca3bcacd0628c879f0fb03fc08e704b5f21a5bcbfda64e644014d00fe0044e90200bd1a7dd2", 0x49, 0x3, 0x0, 0x2}]) write$cgroup_devices(r7, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000004000), 0x40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r12, 0x40085112, &(0x7f00000046c0)=@s={0x5, @SEQ_MIDIPUTC=0xd8, 0x6, 0xa}) write$UHID_INPUT(r11, &(0x7f0000002080)={0xc, {"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", 0x4d5}}, 0x1006) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r1}) 2.312530327s ago: executing program 1 (id=570): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x0, 0x0, 0x1002], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xc7c7}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x605}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_COPY(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000adb000/0x2000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x2000}) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0/file0\x00'}, 0x6e) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x9, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) 2.263817237s ago: executing program 3 (id=571): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x35c9, &(0x7f0000000380)={0x0, 0x1ffffc, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) read(r6, &(0x7f0000000140)=""/109, 0x6d) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaeaaaaaaaaaaaa07000000cd60"], 0x0) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f86dd", 0x5ea}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0xc000) listen(r0, 0x802) 2.171976584s ago: executing program 0 (id=572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0xe8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{}, {}, @device_a, @device_a, @from_mac=@device_b, {0x0, 0xffd}}, 0x0, @random=0x1, 0x1, @val, @val, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x96, 0xb5, 0x6d}}, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x2, 0x7}}, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x62, 0xf, [@random={0x1, 0x5c, "6f9d87f6abe1c6a0531c76c6a7ae9ea6b52923070ca3815926e637d5f740be83c1cb7250e3e4baaaba4aaf708b61282dc05d37a74703964ddd591c92c377701f178b365a8751cb8d4e63d92e6ed5da8898032ef814b45709a68cdd7f"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}]}, 0xe8}}, 0x0) io_setup(0xa, &(0x7f0000000040)=0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003"], 0xe0}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000500000000dcdf251b00000008000300", @ANYRES32=r7, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) fchown(r4, 0xee01, 0x0) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000380)="6ce0f95176e054fe778336f77be0c03d2f7555c12bb77936968f624fde599c45c69e4eac6c383a8215f76de4396c04c5e07f1bd80e7167a455009aa79334e7639f5b9c107e4918ccd4bc5aedd3e6984ce302c5eb6e0ad47d5d9bd60416771cee390d8d9755509e99f56d0d4b5e8c650d391821f392d0dbf9380dad62a09e82ac52d49d0949f8b8388c02f837c01a433c15b7c40fe850e7bdfb94a7383886cf57ad5f1d029f28bad4a69b26a30a73126a1b79b3470d7f2d99ef9af731a976b7c681c071d18651fc317ae2db381f9d33e054b9a473111a138932e732adca", 0xdd, 0x2, 0x0, 0x0, r4}]) 2.156102512s ago: executing program 1 (id=573): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x6412680fe1f4b81c) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045520, &(0x7f0000002a40)) 1.884001213s ago: executing program 1 (id=574): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000600)=@assoc_value={r7, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x7, 0x8004, 0x3, 0x3, 0x7, 0xe, 0x200, r7}, &(0x7f0000000100)=0x20) fstatfs(0xffffffffffffffff, &(0x7f00000003c0)=""/146) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x90) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x4e21, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) write$P9_RSTATu(r0, 0x0, 0x0) close(0x3) 1.840680495s ago: executing program 2 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000001c0)={0x4, 0x101, 0x3, {0x1000, 0x4, 0x7fffffff, 0x9d04}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x18, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800", 0x50323234}) r5 = syz_usb_connect$cdc_ncm(0x0, 0x88, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4}, {0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x3}, @dmm={0x7, 0x24, 0x14, 0xc1, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffb, 0x9}, @country_functional={0x6, 0x24, 0x7, 0xc, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x4000010, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x7, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0xfee5, {0x1a}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r7, 0x303, 0x0, 0x2000}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 985.267462ms ago: executing program 1 (id=576): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x1f9303) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r2, 0x5452, &(0x7f0000000500)={0x1c, 0x2d, 0x0, 0x6, 0x9, 0x2006, 0xffffffff, 0x0, 0xffffffffffffffff}) syz_clone(0x102000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff00000ff4987300000000e3ffffff0008776472c675347e000772ddbec3b2dd283fe8fb55fc773dade32452597e65d51c8f2b2c0ad69812f02e767ea36aefb65f47f927b054420f29a877f25ae68fc9934ba6a0ca794cea81389243c39d2afd75bcbd7b55424cf7d2f55046ff37e4a5e8e5670da4651ccf74db627f27f6d6520700ccaeb8d94cfe4a70cd983a458799aee087a9b0723af06168b3b9c0e8994467a473137e5dfaafb12333f03e8e1e6df72a43729889"], 0x50) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000000540), &(0x7f0000000000)=""/7, 0x2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) mknod(0x0, 0x4, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r0, 0x0, 0x1000, 0xf2, &(0x7f00000006c0)="fcbb183e8016ec529a65439dd33ebabcc4975c01ab93b4ba407de3f9aac14566865543ff16ab1335fa5f6cfec7beab9520a9ac3c54ba7884c688f1cb0b81887f56302e0f72c6e5158c185d95bc767e499a684157dba9c9e09874ef2c4292d9da6f1edbdab714b46816e328b7bd2c85d5f7433faed8f250fed77cf707879c3f2fbc0ebc7b2357db3ef9643bbff870523473fa82f9b85257c0323ce83b2ee2478dd3119900d2b825558c7acdf00aa3a2b0b76a793ec123d8e0a68a323b2799d09ba231ec1f78446f2544f4c569e217731fa8cad8de06260d6c10b186a66dd6d5d1a7558f701026732b27e4e812069e4f665fd96a8942ce77523af8b719a4107003966f37acc20af136cb8fdec07f7c98fbe6f02fefb8b2683839debde82af732a27308b3e09d55c2775c752a9c1471f679fa27eba744ee7b12066ebc99a9448a51d0697bdf12ada190e7310944421f1c7c9baee9f387b393e5a4ee36577b0535c6b53a3c607fd5db26c63ee066a00618d44e3305716441da47fd032e1deab63d32faf99bae3f07987412115ea86f1d83add781a98d86e46898f0d3abcb0a8bf2d33273af62cadfd944d5eb3cfc286fae5d6c23abd09b2c300bbc5b29ad0a6ba1337da7e0043a66dd57e83b9d984d9aa5e1a9e4a6703ef14bd229a782a2603238b78dbbb628116c1c583920b34cc1e71facb689d910e2eb0dfda1ac43394898e256d915b1d41ee44417a7336b16623d731dcd44110ddd19ade2c7bc27ada619b4ea3e3c7269a046f5d9ebb4b42cd70739005b097cfa55a7ec9e2ab6586810d9afe6a9a49e165ac7a75ad760bba14aeec9a278846a4f1ef8f7704993449cbf9d8a1937b4ed6a0a73062e4ae78c099536c2f95e113be7f3338f1ca3aa378b27e66c9f2a91321c1c7877d4a76902f5db954c5ddba635ef69b78b5efc03dd6a2af89ddadd05911b546cfaf5b14e68684188d58d3b73ca8b0c94bf71b8c5177e8e024a1e7b48fd63e54f9447eee512e6da90419977bd55b8f68a64b4d4e04325348cca62ef6660cac81930443665677b12b267abb210b46e7a692d4e94215ce12f0974f3bd5089acc907419a776e9d4eddea4899c1535473f7f6c5eba1da6f93b032d8154eba648a524d3ff1d78c250ac51a395cb5161b7890adb3058b715a2202acd9e055eb798d20c9d3138212c95e065f3f0fc0132de0e5d119e1538f7a5fb2baf26012b0312d590f2fc2002853c3185799700966a3a51d73ac400c08d0b600c8d8350212f2d93cb6abec91cd464cfc1e6066c61638760a988a7d426403ac3966e71dc65685489c0b47729006481f8a47743889c7f919cfe7519ee4e7a5e46d764f8ac878d44960e8ba86b0982bb884a6d7985181b962a4bf97914b1c02fc9c17c23b92126b94c08ffe76c63388b242b83aa2e499f3e7ae31b22018e23171060586991f62737e4e53ad033ad01e8551dd66e016692125d8f912fef5a01ca8ba7e1ec640a1588fd9d54eae273f72bd2e561482faf52ba27b9d206899592e863cfdd2c7176b3e2ce5ad05ec263ebe1c0921598f692ffb5b782dc674c0c64c11f7e8b6192571e74bc52ae9c115bea5dc9d25d7c0a524be0f4706f2f77e28d5f9ddcd42d7ad7cd044ec124c97f4c134a7be3ac9333e7e0c48802854d5a3ea365725ac04090a652c933eb1f262defd054d9a030860a131a5a341947b9105d4a207bd1460abed7631038dd5159c8670f03b1a3070ad9c045fc77df0045e30e823539ef0460129839dd5da1c943ffb4d12de92e8759ee2c802d44c4bedfa7aa39db2abdf9318a875b44753a926636f814a72fadb92c20de9ed7f130ec565c8514fac879bfbe22813cc06756d4101e30786f638fb179683965a4f193e89228e6a64a74af8b804e95bbff3bcace256ce00d54138a4a984d7ccdab89512fc9a0e831fed257e1416dff3dbc463bac83de35d1529fc4082776d7ae5df418b158b9b8552560f753b267b09ae105c86f8c984a4329b131629f7edc8f561f19f17d7094fe33754971a1f1eb80b2d11533cd7e86c483cb665bbc41d37451264589345f1585db7088d631a10d35ffeb370577cb95997bb5f56856a12911c4e77391522a45626f104f36572bf8fdd9c7e29dd962c76342072fe570d1762faa86d659ad6a3fffa4b447a053bf467109fe094be7d01c3c327f91f181cdfa18e842fa4480b4a1465b8e94a665b3ae1334e67ce9475fef409d3535f344c63e17671c50dff8c1ee604230dfb37aaa8ef2b1ade18b44f55171da660849b9c9ddc426e246eccfb39ff72db46bf3ec8e74b4b280c4216366a2c0870cb8b5f2b800019b4be76b8bddeff05cfa81b06c319c509beb490393cca0e4280ac23f8351ba6ab2aae7def9123b22a6f98e6dd41632cf5db0ff78c3e15c76bed58ad26844e1a13845bd7c8fc9d347e40256d7fe03605830b3c4e19a8049734fadce04d083ecee2a605a568d5a48f527488a12d33e7e3d50961c3d10ae3d9fde52bcd26a4f1ccd75dc5d2fe808062cd5acc7608617244f5395a60c878d4a84c954f4ddaa76d9a0b51335b25c352a3ca803c5aca059211a51c594541ce7b3b507fe85af7035f9aa9b13e6c2cc45d2248a8c499605ed001b7508d594dfada30c5970c82991972abc47866cb132ff3f3cac885f39c4312522495174bd23b7c84726db7d9814bb2d4ca5e36d2a8de87bad8900cc66e873e4d078e21ff779bc565f53ecbc0b1895a741423fd3eb2c8a72fb68c796528e190db9a67d691d4bd92f8f46313426bb50d3de58aee0b919ac135b5906b6dc406772adf773f2315ab59b35e7a80a8e5ec5a1be4c49652d9b52d56ee43701706c811eddf3e2cfd6eec7ad72a668bb2991bfbdc44c7a8799bda59c710527c45ec455cfdf9e8b101a9e7ecc99f84bf883b2599b8565a91eda5bad031605422b368eb7acc99bfc28ad8df1dea5f2ad6c1c4dc96af601c556f68e524a22c55724ecdb7923c3627da1b02593b9143baa71ba678c1cba925b62730f1f9d47c0a1112be8e81834aa40c244914f2b61bc4e89e107be4a1d6543a5f561c50e13c5cb71e34bb2de623322ccb48a6d2918d2bef4113d269b4becc9c208b9682c9880339036a5a78868ff33bb18e08dfc5d617101502c5bed349bed6a38c0dbd04d43a23510a52005865f2cd0441fcc6c9a6801cca98450791de9dedf7e0f3aa5f820696866bfeb264da9954d08ea3c470d79b67694d226fbd178dbb1b8e919fa546c34d69f3fc47f1b754be34b7b1a1c4b56800a3ca3b60708255c07afe471c6b09c5f23f69712a1cc393a8ab96aa52052c3c356fbca7ba5c729f642a607d6f705fe8cc04f4abc06cb8c1e026794cbe2287572299f2be84699afcf9d99c82bc09ec0f30af7d18bcb60404857e9f059a4669cc57ecba2b288dd47dff32e89cb8bd37571eb2a3a38d8abd30997b2ed258a16125b6af219355d698619e5990a5c91b3952c54fa0e4d321054b26e91b65c747609585d21cdd053cfef5be4fe181fbaa8d5c0bad581518e368610aa8df09912f728b13a49dbd27cbb79cc476e2c8b69f5ab2478a52d7920e20ff9c6593a659a09d4dc64710c673c787d7d8079836d37afd51018f4bdefd0925ee1e90d9218993095a05b81e01392d7ca55f50cf79e6575520d6c4a942653fe7c178d62558fa7ae6896dd72cc48d0fe15ae58161c40040499c533b38ce94999b9f9cd316db549ad6ea9a651ff0880533613a7b01d213ce74039d0fdf4fbb7e524cfea3c0894c5b8eac986cd516d0131196f12b387036fa9b8c7fbfd735f8c24c9708d812058617e80d18e38f3a52eda613a00161527484f6d3738367b3cf8cfd727da1b2cc370cd5e06e6bc861af7d46bc7356db143a435172a743609e604fe00b190863d438166e75fa1b283db6ef37a2c161c530eace8c29aa4760caa34afee3670c1cb55a44cb49f45b5cbc8c50dbbc2028fb156fe2a3d75031a2894c02bac289660f78fba9910d66035509b146c8fb91aa9d96255ecd2cac100a1f5a9f1f4aa9a04d96438cd871eb6f09b1d344ddd4b859cad0b77d807c10d9d6de2868a8362a73252534d8dbb005a15da78bac2657bb2b64b6809b5e24538e6267e14059f295f22ca297c83775a6684b40bf3ed312c6fcebddf4552080eb02deff3394a6ba4288d58b756336d0fc3b6791926b61b1c169558175e5ffb4110c8f4fa70aaf863a194d1f75fcdc196d6642eb1d6a89f74c1a246ed5231c0690eb848517b481cb3a135b755ba40fa95e626f892c34cde03d02a41c916f6d8d289dbeb6c77420d11eef331dd14cf442d8cbdbb6a03bac9d3cf8b2e5d094969099943f30dd919c01a63b8ec25cd07729aa6d0ea7c64bf779126be80b2289059cbbbe196ded19a8d2a471b42fc697e9e1d14acd31eb123be4c08c6904359d3f1ffc3e469bc0f3447a394cff237055cb46c4209f4aa6b040803dc3aaf8a03229dd40507f5ab1b09b44e7944cee498af563dc72909b945de5b843646b13faece90e3a50aab17fa6ff4be9eb54e657dadf8e5817c66b0f14ee8b3ba34dd5cbbe008a0b3409fb2a2e0afd84d844aa1c4ccf9a1a31fc1855db6ce9023bec61eeea007a284cb5fe6a6fb6879a0da370ca63cfb47265025598294a73f67383926ff6308f683597684b79ccd5b94f072b337a7d8571b8d810a36d87c0d27f42a8a1c72067c6407faa439eae293eefc4eaf1a67405fc61f5efad244d1058814fc906ae431f6c0b0c6ef6a6561181753f202291ffffb8e4fbcf5d24bc693469a19ffd52c194283114717ceaf5a3f1dc42c34801e6347b59fbd2ec9cb064a335616e05142c1c7766aaec4c6073c9e74d3ba5a132408fe1955a30a179ac2def852b724c16b7a274e692ea3bb4a78f5891fbafa0d25ed57d43027df55d7bb8a4b3bb0c63d756ef672ff6efd4b84a19ff61c882aea76f052b69dc94a85185c529e98ec5457a7023287d98de58aece01dc2fde832a265fa7e2748c743c3d827c8486ea97c6ebe4bbb6506535e93fe38cfbccfef9f5a6c62ccad0c72ad3ad2a8d3e0fd17d10332f8f9201087f1b52f4c1d9209fb7a57ee18dce082c9c14cc95fa43635e990e0dac05f081e60da32ff08823b3f6ab6d1657a182dc9438a3c48793142691d1908f1f279c769ac3447df5db59678672ebf1959a5f03e7b5ad2887329ba3c21357df917fc8bb8ad964899d569f31f8be3f7d3dd789860d703844d98534cf585e2fa7cffb4efa03474a494c509ea3b4f10a36f788ec41187dfc7698671cc295304ce0f25b14c3dfc27139d8b504a3d62c612e1e1b1007799c9f143987dda95a69b4d784af56abc48d4543956d5a76d7d84f3bdd4c96b8182d3c3e6611664842d870133499f88c250c1b3b896b67d86c4172a5793cd37dbb7449d8cb1f3048a1cab8f530d261d3ccf258deabaf6683b9edcae0cd4ac18f195d5a873cf6fcc6828ea1a5f80ada8306960ccb543007e7d329fddec21e6af2d67e36eea2e7fca74666a19da5c0d71944e0b26f9a40e31c51c54b0e1590e074863e31cb3dc85b9b0f283a0b595cdadeae2a535c52c6225f8eb4b9cce58ee0beaa37fdb299f6d7effaff6d839caae296f404178e565afa73f07aef2ea687df4aca606c07b380ba3f42b244cbca20b900b39468f21a89445f85de3132146db50f96cc5e219d7bea6512db418e4b9681baf3c5fd12dd20d5184ffc9bf4676544b1dc6607f27185f385e824ee06dd513328a353e1e4cebfa361f7e3abcee9b1ddfa0a1b6a96f32e1f23e5d018c895e06bca6d90", &(0x7f00000000c0)=""/242, 0x306506ba, 0x0, 0x3e, 0x44, &(0x7f0000000040)="687443dea4d498f548fe673a03f5c7596d720c28891925da49acb4004cda7e67f842d48e47d8b6f17e9914e199796ecf28bfbe197b9eb3fba03c0c68ca6f", &(0x7f00000016c0)="188dddfdd950b49961f87a9ea892e8f4a290258d17e9fa52b5a71b992764067bc3f7e956962980f99cc266d1d50fc7cb4e67ed3bbcaace9a6815c4241e8677cf98c89e22", 0x1, 0x0, 0x4}, 0x50) 636.053871ms ago: executing program 3 (id=577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) clock_nanosleep(0xffffffffffffffff, 0x1, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x15, 0x7, 0x0, 0x2, 0x7, 0xe, 0x4, 0x81, 0xe5, 0xb0, 0x3, 0x0, 0x78, 0xfffffffd, 0x4, 0x17, 0xff, 0x2, '\x00', 0x2, 0xae}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x3ac300, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 318.373749ms ago: executing program 0 (id=578): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host, 0x2}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000140)=ANY=[@ANYRES32]) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f00000000c0)={{@my=0x0, 0x74}, 0x25, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002200)=@newtaction={0x13c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x128, 0x1, [@m_simple={0x124, 0x16, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7f5, 0xfffffffb, 0x3, 0x0, 0x4}}, @TCA_DEF_DATA={0xb, 0x3, 'police\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7f, 0xffffffffffffffff, 0x4, 0x4}}, @TCA_DEF_DATA={0xb, 0x3, 'police\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xa5, 0x6, "d25578d4071c1f7961a36a9d85a9a89fd50c5f5ff03d81556b2e2ce170735212bb11dbe4bc20bb93aa2ddfe30b68f27279ddf6a0f57c130f568431b47dcbe1f688330a17cfe89eae41a70d15092d5149d1a0595336c92101ab234d95a61b10615d44b3ea434eadaebd620f0aa18484043cf15173f4b0e050a7a910d0a01dd2d30ef71b6c2de27dc936dff4828c1546fa5971a8f362a300d51d74cea39d016a9ef3"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x13c}}, 0x0) 0s ago: executing program 3 (id=579): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)='.\x00', 0x2, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "ba29dde2e00f4624", "b3116d714b8a8631c8bd406fefb7306b0d092980deef0501ccf5f0025ff7af37", "bc5d346a", "b660a43d4c897ada"}, 0x38) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fgetxattr(r3, &(0x7f00000010c0)=ANY=[@ANYRES32=r3], &(0x7f0000001100)=""/4096, 0x1000) kernel console output (not intermixed with test programs): g=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d5a385d29 code=0x0 [ 107.953819][ T29] audit: type=1400 audit(1736666212.243:340): avc: denied { create } for pid=6527 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.300773][ T6534] netlink: 68 bytes leftover after parsing attributes in process `syz.0.130'. [ 109.641011][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 109.711895][ T6552] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 111.287165][ T29] audit: type=1400 audit(1736666215.463:341): avc: denied { write } for pid=6563 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.540251][ T5867] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 111.656058][ T29] audit: type=1400 audit(1736666215.923:342): avc: denied { connect } for pid=6571 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.690294][ T29] audit: type=1400 audit(1736666215.923:343): avc: denied { name_connect } for pid=6571 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 111.749983][ T29] audit: type=1400 audit(1736666216.053:344): avc: denied { write } for pid=6571 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 111.774425][ T29] audit: type=1400 audit(1736666216.053:345): avc: denied { watch } for pid=6571 comm="syz.3.140" path="/35/control" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.980172][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 111.986885][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.999326][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.011055][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.021306][ T5867] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.086779][ T5956] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.126203][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.242262][ T6593] sctp: [Deprecated]: syz.0.144 (pid 6593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.242262][ T6593] Use struct sctp_sack_info instead [ 112.309812][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 112.759329][ T5867] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.766271][ T5956] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 112.778453][ T5867] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.786575][ T5867] usb 5-1: Manufacturer: syz [ 112.825804][ T5867] usb 5-1: config 0 descriptor?? [ 113.002019][ T5956] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 113.012383][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.025769][ T5956] usb 2-1: Product: syz [ 113.270352][ T5956] usb 2-1: Manufacturer: syz [ 113.309224][ T5956] usb 2-1: SerialNumber: syz [ 113.319898][ T29] audit: type=1400 audit(1736666217.633:346): avc: denied { bind } for pid=6594 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.348109][ T5956] usb 2-1: config 0 descriptor?? [ 113.350097][ T5867] rc_core: IR keymap rc-hauppauge not found [ 113.359449][ T5867] Registered IR keymap rc-empty [ 113.364971][ T6578] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 113.377512][ T5956] hub 2-1:0.0: bad descriptor, ignoring hub [ 113.384620][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.393566][ T5956] hub 2-1:0.0: probe with driver hub failed with error -5 [ 113.404750][ T29] audit: type=1400 audit(1736666217.653:347): avc: denied { mounton } for pid=6594 comm="syz.2.146" path="/22/file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.440831][ T5956] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 113.473272][ T29] audit: type=1400 audit(1736666217.693:348): avc: denied { write } for pid=6594 comm="syz.2.146" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.533375][ T29] audit: type=1400 audit(1736666217.693:349): avc: denied { open } for pid=6594 comm="syz.2.146" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.554581][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.672973][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 113.698928][ T29] audit: type=1400 audit(1736666217.713:350): avc: denied { read } for pid=6594 comm="syz.2.146" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.754752][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 113.854645][ T29] audit: type=1400 audit(1736666217.813:351): avc: denied { map } for pid=6597 comm="syz.0.147" path="socket:[10052]" dev="sockfs" ino=10052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 113.861785][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 113.988705][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.431665][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.513639][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.540155][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.570195][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.604507][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.670831][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.767635][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.818212][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.874047][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.931389][ T5867] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 115.010547][ T5867] mceusb 5-1:0.0: Registered with mce emulator interface version 90 [ 115.042842][ T5867] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.110717][ T9] usb 2-1: USB disconnect, device number 4 [ 115.116628][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 115.148491][ T5867] usb 5-1: USB disconnect, device number 8 [ 115.709266][ T6625] random: crng reseeded on system resumption [ 116.146264][ T6640] binder: 6637:6640 ioctl c0306201 20000680 returned -14 [ 116.169378][ T6616] kvm: emulating exchange as write [ 116.720445][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 117.183195][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 117.298418][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.308285][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 117.317510][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.513313][ T6686] ptrace attach of "./syz-executor exec"[5814] was attempted by ""[6686] [ 117.524772][ T9] usb 3-1: config 0 descriptor?? [ 117.552281][ T6687] wg2: entered promiscuous mode [ 117.557598][ T6687] wg2: entered allmulticast mode [ 117.611851][ T9] em28xx 3-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 117.621659][ T9] em28xx 3-1:0.0: Video interface 0 found: [ 117.875148][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 117.893409][ T5867] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.949086][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 118.704461][ T9] em28xx 3-1:0.0: board has no eeprom [ 118.905879][ T5867] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.913021][ T9] em28xx 3-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 118.935505][ T5867] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 118.950370][ T5867] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.694938][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.695014][ T9] em28xx 3-1:0.0: Currently, V4L2 is not supported on this model [ 119.719635][ T5866] em28xx 3-1:0.0: Binding DVB extension [ 119.729355][ T5866] em28xx 3-1:0.0: no endpoint for DVB mode and transfer type 0 [ 119.736988][ T5866] em28xx 3-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 119.745349][ T5866] em28xx 3-1:0.0: Registering input extension [ 119.775348][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 119.775363][ T29] audit: type=1400 audit(1736666223.643:371): avc: denied { unmount } for pid=6694 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 119.778275][ T9] usb 3-1: USB disconnect, device number 8 [ 119.801299][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.815708][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 119.822980][ T9] em28xx 3-1:0.0: Closing input extension [ 119.931005][ T9] em28xx 3-1:0.0: Freeing device [ 120.132008][ T5867] usb 1-1: can't set config #27, error -71 [ 120.164308][ T5867] usb 1-1: USB disconnect, device number 4 [ 121.174642][ T29] audit: type=1400 audit(1736666224.483:372): avc: denied { append } for pid=6709 comm="syz.3.165" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.211060][ T29] audit: type=1400 audit(1736666227.513:373): avc: denied { ioctl } for pid=6710 comm="syz.1.164" path="socket:[10855]" dev="sockfs" ino=10855 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.261493][ T29] audit: type=1400 audit(1736666228.573:374): avc: denied { accept } for pid=6712 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.035847][ T29] audit: type=1400 audit(1736666228.613:375): avc: denied { bind } for pid=6712 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.338578][ T6743] mkiss: ax0: crc mode is auto. [ 126.349949][ T6743] misc userio: Invalid payload size [ 126.350731][ T6743] misc userio: No port type given on /dev/userio [ 126.438140][ T6744] misc userio: The device must be registered before sending interrupts [ 126.442796][ T6744] misc userio: The device must be registered before sending interrupts [ 126.766527][ T29] audit: type=1400 audit(1736666230.423:376): avc: denied { ioctl } for pid=6737 comm="syz.4.168" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 127.469590][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 127.473938][ T6754] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 127.490696][ T29] audit: type=1400 audit(1736666231.803:377): avc: denied { ioctl } for pid=6752 comm="syz.2.173" path="socket:[10899]" dev="sockfs" ino=10899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.540322][ T6755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.173'. [ 127.541142][ T29] audit: type=1400 audit(1736666231.853:378): avc: denied { bind } for pid=6752 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.734670][ T29] audit: type=1400 audit(1736666232.043:379): avc: denied { connect } for pid=6752 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.754216][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.889290][ T6762] openvswitch: netlink: Missing valid actions attribute. [ 127.896683][ T6762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.743234][ T29] audit: type=1400 audit(1736666232.853:380): avc: denied { create } for pid=6764 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.762968][ T29] audit: type=1400 audit(1736666232.853:381): avc: denied { bind } for pid=6764 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 128.810234][ T5866] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 129.121606][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 129.375809][ T29] audit: type=1400 audit(1736666233.683:382): avc: denied { bind } for pid=6779 comm="syz.1.179" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.400298][ T29] audit: type=1400 audit(1736666233.703:383): avc: denied { node_bind } for pid=6779 comm="syz.1.179" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 129.421844][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.571983][ T5866] usb 1-1: not running at top speed; connect to a high speed hub [ 129.580840][ T5866] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 64 [ 129.593863][ T5866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.603121][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.613058][ T5866] usb 1-1: Product: ᐄ [ 129.617253][ T5866] usb 1-1: Manufacturer: ⃘嫢깲垼Ⴘ䞿훠⊆ퟶ퉺含䘯괂ª褣Ұ⼲恜ቅꥰผ [ 130.177177][ T5866] usb 1-1: SerialNumber: 䱻礸 [ 130.183724][ T29] audit: type=1400 audit(1736666234.023:384): avc: denied { execute } for pid=6781 comm="syz.4.180" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 130.333674][ T29] audit: type=1400 audit(1736666234.643:385): avc: denied { create } for pid=6784 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 130.353207][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.387363][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 130.399852][ T6785] netlink: 100 bytes leftover after parsing attributes in process `syz.1.181'. [ 130.400549][ T29] audit: type=1400 audit(1736666234.673:386): avc: denied { connect } for pid=6784 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 130.428592][ T29] audit: type=1400 audit(1736666234.673:387): avc: denied { write } for pid=6784 comm="syz.1.181" path="socket:[10965]" dev="sockfs" ino=10965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 130.452103][ T29] audit: type=1400 audit(1736666234.673:388): avc: denied { accept } for pid=6784 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.474114][ T29] audit: type=1400 audit(1736666234.683:389): avc: denied { create } for pid=6786 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 130.494719][ T29] audit: type=1400 audit(1736666234.693:390): avc: denied { write } for pid=6786 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 130.660338][ T5867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.710598][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.810150][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 130.828668][ T5867] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 130.839515][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.856131][ T5867] usb 4-1: Product: syz [ 130.867045][ T5866] cdc_ncm 1-1:1.0: bind() failure [ 130.870096][ T5867] usb 4-1: Manufacturer: syz [ 130.876851][ T5867] usb 4-1: SerialNumber: syz [ 130.881885][ T5866] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 130.888737][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 130.894802][ T5866] cdc_ncm 1-1:1.1: bind() failure [ 130.913715][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.920573][ T5866] usb 1-1: USB disconnect, device number 5 [ 130.931028][ T5867] usb 4-1: config 0 descriptor?? [ 130.948747][ T5867] usb-storage 4-1:0.0: USB Mass Storage device detected [ 130.958821][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.991130][ T5867] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 131.006573][ T25] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 131.016522][ T5867] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 01) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a) [ 131.016522][ T5867] Please send a copy of this message to and [ 131.044509][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.051026][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.061035][ T25] usb 2-1: config 0 descriptor?? [ 131.570221][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 131.599881][ T6801] netlink: 'syz.0.184': attribute type 1 has an invalid length. [ 131.608430][ T25] lenovo 0003:17EF:6062.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 131.767196][ T5941] usb 2-1: USB disconnect, device number 5 [ 132.490215][ T5941] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.748831][ T5941] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.797226][ T5941] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 132.868589][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.971353][ T5941] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.013932][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.045892][ T6805] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.069441][ T5898] usb 4-1: USB disconnect, device number 5 [ 133.466528][ T5941] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.868124][ T9] usb 1-1: USB disconnect, device number 6 [ 133.959290][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 133.974257][ T29] audit: type=1400 audit(1736666238.283:391): avc: denied { write } for pid=6815 comm="syz.1.188" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 134.162468][ T6822] team1: entered promiscuous mode [ 134.212751][ T6822] 8021q: adding VLAN 0 to HW filter on device team1 [ 135.697710][ T29] audit: type=1400 audit(1736666240.003:392): avc: denied { ioctl } for pid=6840 comm="syz.3.196" path="socket:[11048]" dev="sockfs" ino=11048 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 136.788330][ T6852] netlink: 32 bytes leftover after parsing attributes in process `syz.4.198'. [ 136.995960][ T6852] wireguard0: entered promiscuous mode [ 137.010762][ T6852] wireguard0: entered allmulticast mode [ 137.109924][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 137.131686][ T6858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.199'. [ 137.396194][ T6854] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 137.403088][ T6854] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.583826][ T6854] vhci_hcd vhci_hcd.0: Device attached [ 137.647085][ T6854] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 137.653598][ T6854] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.716715][ T6854] vhci_hcd vhci_hcd.0: Device attached [ 137.749366][ T6854] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 137.755918][ T6854] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.763555][ T5867] vhci_hcd: vhci_device speed not set [ 137.789790][ T6854] vhci_hcd vhci_hcd.0: Device attached [ 137.802111][ T6854] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 137.808657][ T6854] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.820705][ T5867] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 137.863751][ T6854] vhci_hcd vhci_hcd.0: Device attached [ 137.884422][ T6854] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 137.891058][ T6854] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.941590][ T6854] vhci_hcd vhci_hcd.0: Device attached [ 137.976036][ T6854] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 137.976089][ T6854] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.976155][ T6854] vhci_hcd vhci_hcd.0: Device attached [ 138.561543][ T29] audit: type=1400 audit(1736666242.853:393): avc: denied { create } for pid=6896 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 138.642579][ T29] audit: type=1400 audit(1736666242.853:394): avc: denied { write } for pid=6896 comm="syz.4.208" path="socket:[11416]" dev="sockfs" ino=11416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 138.658071][ T6870] vhci_hcd: connection closed [ 138.666813][ T6873] vhci_hcd: connection closed [ 138.672082][ T12] vhci_hcd: stop threads [ 138.672716][ T6877] vhci_hcd: connection closed [ 138.678288][ T12] vhci_hcd: release socket [ 138.695682][ T6879] vhci_hcd: connection closed [ 138.695921][ T6885] vhci_hcd: connection closed [ 138.702855][ T12] vhci_hcd: disconnect device [ 138.713770][ T12] vhci_hcd: stop threads [ 138.714756][ T6865] vhci_hcd: connection reset by peer [ 138.718118][ T12] vhci_hcd: release socket [ 138.727903][ T12] vhci_hcd: disconnect device [ 138.734045][ T12] vhci_hcd: stop threads [ 138.738395][ T12] vhci_hcd: release socket [ 138.743791][ T12] vhci_hcd: disconnect device [ 138.753631][ T12] vhci_hcd: stop threads [ 138.758124][ T12] vhci_hcd: release socket [ 138.762880][ T12] vhci_hcd: disconnect device [ 138.776356][ T12] vhci_hcd: stop threads [ 138.782269][ T12] vhci_hcd: release socket [ 138.787250][ T12] vhci_hcd: disconnect device [ 138.795858][ T12] vhci_hcd: stop threads [ 138.800358][ T12] vhci_hcd: release socket [ 138.804915][ T12] vhci_hcd: disconnect device [ 139.280234][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.308148][ T6896] delete_channel: no stack [ 139.360169][ T5898] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.413972][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.212'. [ 139.430334][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 139.436911][ T25] usb 4-1: config 0 has no interfaces? [ 139.446409][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.472624][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.480985][ T25] usb 4-1: Product: syz [ 139.485999][ T25] usb 4-1: Manufacturer: syz [ 139.494844][ T25] usb 4-1: SerialNumber: syz [ 139.700911][ T25] usb 4-1: config 0 descriptor?? [ 139.757391][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.768619][ T5898] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 139.778366][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.800981][ T5898] usb 2-1: config 0 descriptor?? [ 139.952244][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 139.961314][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 139.970408][ T6903] netlink: 'syz.3.210': attribute type 15 has an invalid length. [ 139.990021][ T9] usb 4-1: USB disconnect, device number 6 [ 140.017090][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 140.020936][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.035513][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.141422][ T29] audit: type=1400 audit(1736666244.443:395): avc: denied { bind } for pid=6920 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.167382][ T29] audit: type=1400 audit(1736666244.473:396): avc: denied { name_bind } for pid=6920 comm="syz.2.217" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 140.191195][ T29] audit: type=1400 audit(1736666244.473:397): avc: denied { node_bind } for pid=6920 comm="syz.2.217" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 140.194638][ T6921] Invalid ELF header type: 0 != 1 [ 140.213086][ T29] audit: type=1400 audit(1736666244.473:398): avc: denied { module_load } for pid=6920 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 140.717441][ T29] audit: type=1400 audit(1736666244.993:399): avc: denied { write } for pid=6920 comm="syz.2.217" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.815004][ T6932] Bluetooth: MGMT ver 1.23 [ 140.817106][ T29] audit: type=1400 audit(1736666244.993:400): avc: denied { name_connect } for pid=6920 comm="syz.2.217" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 140.842510][ T6931] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 140.880343][ T29] audit: type=1800 audit(1736666245.173:401): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.211" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 141.150247][ T5941] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 141.281572][ T6942] random: crng reseeded on system resumption [ 141.491184][ T29] audit: type=1400 audit(1736666245.593:402): avc: denied { write } for pid=6933 comm="syz.0.220" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.610284][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 141.867428][ T5898] usbhid 2-1:0.0: can't add hid device: -71 [ 141.874340][ T5898] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 141.882338][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.893097][ T5941] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 141.899113][ T5898] usb 2-1: USB disconnect, device number 6 [ 141.905095][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 141.920092][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.922872][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 141.946651][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.952703][ T5941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.967843][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.977882][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.992453][ T5941] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 141.997995][ T9] usb 3-1: SerialNumber: syz [ 142.006414][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 142.016347][ T5941] usb 5-1: Product: syz [ 142.025486][ T5941] usb 5-1: Manufacturer: syz [ 142.031580][ T5941] usb 5-1: SerialNumber: syz [ 142.038624][ T5941] usb 5-1: config 0 descriptor?? [ 142.050180][ T5851] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 142.212745][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 142.226949][ T9] usb 3-1: 0:2 : does not exist [ 142.232259][ T5851] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 142.242044][ T9] usb 3-1: USB disconnect, device number 9 [ 142.265831][ T5941] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 142.272876][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 142.281431][ T5941] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 142.294559][ T5851] usb 1-1: Product: syz [ 142.298743][ T5851] usb 1-1: Manufacturer: syz [ 142.303781][ T5851] usb 1-1: SerialNumber: syz [ 142.310614][ T5851] usb 1-1: config 0 descriptor?? [ 142.316769][ T969] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.317085][ T6942] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 142.432745][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.460436][ T969] usb 4-1: Using ep0 maxpacket: 8 [ 142.466715][ T5941] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 142.473459][ T969] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 142.479409][ T5941] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 142.487425][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.506807][ T969] usb 4-1: Product: syz [ 142.511548][ T969] usb 4-1: Manufacturer: syz [ 142.516289][ T969] usb 4-1: SerialNumber: syz [ 142.521716][ T5941] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 142.529716][ T969] usb 4-1: config 0 descriptor?? [ 142.556796][ T969] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 142.676896][ T6948] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 142.683921][ T6948] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 142.749669][ T5941] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 143.463640][ T5941] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 143.494367][ T5827] Bluetooth: hci0: command 0x0401 tx timeout [ 144.180929][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 144.188545][ T5941] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 144.198164][ T5851] usb 1-1: USB disconnect, device number 7 [ 144.255030][ T5941] usb 5-1: USB disconnect, device number 9 [ 144.261057][ T5867] vhci_hcd: vhci_device speed not set [ 144.368592][ T29] audit: type=1400 audit(1736666248.673:403): avc: denied { mount } for pid=6930 comm="syz.3.219" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 145.475073][ T9] usb 4-1: USB disconnect, device number 7 [ 145.545098][ T6968] 9pnet_fd: Insufficient options for proto=fd [ 145.675894][ T29] audit: type=1400 audit(1736666249.973:404): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 145.683923][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.231'. [ 146.055076][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 146.201286][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 147.029446][ T6999] capability: warning: `syz.0.235' uses deprecated v2 capabilities in a way that may be insecure [ 147.623304][ T6998] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 147.713914][ T7000] input: syz1 as /devices/virtual/input/input10 [ 147.740603][ T29] audit: type=1400 audit(1736666252.043:405): avc: denied { read } for pid=7001 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 147.812125][ T29] audit: type=1400 audit(1736666252.123:406): avc: denied { setopt } for pid=7001 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.339332][ T29] audit: type=1400 audit(1736666252.633:407): avc: denied { getopt } for pid=7004 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.640307][ T5941] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.009580][ T29] audit: type=1400 audit(1736666253.313:408): avc: denied { create } for pid=7021 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 149.073950][ T7024] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 149.613872][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 149.630554][ T5941] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 149.638760][ T5941] usb 1-1: config 0 has no interface number 0 [ 149.644972][ T54] Bluetooth: hci1: command 0x0401 tx timeout [ 149.651466][ T5941] usb 1-1: config 0 interface 128 altsetting 6 endpoint 0x8 has an invalid bInterval 25, changing to 8 [ 149.663621][ T29] audit: type=1400 audit(1736666253.313:409): avc: denied { ioctl } for pid=7021 comm="syz.2.243" path="socket:[11775]" dev="sockfs" ino=11775 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 149.776202][ T5941] usb 1-1: config 0 interface 128 has no altsetting 0 [ 149.822663][ T5941] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 150.150164][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.180251][ T5941] usb 1-1: Product: syz [ 151.139204][ T5941] usb 1-1: Manufacturer: syz [ 151.144997][ T5941] usb 1-1: SerialNumber: syz [ 151.272537][ T5941] usb 1-1: config 0 descriptor?? [ 151.278992][ T5941] usb 1-1: can't set config #0, error -71 [ 151.288826][ T5941] usb 1-1: USB disconnect, device number 8 [ 151.828745][ T7044] geneve2: entered promiscuous mode [ 151.834915][ T7044] geneve2: entered allmulticast mode [ 151.895445][ T7040] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 151.902002][ T7040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 151.909610][ T7040] vhci_hcd vhci_hcd.0: Device attached [ 151.919501][ T7048] vhci_hcd: connection closed [ 151.938701][ T12] vhci_hcd: stop threads [ 151.947815][ T12] vhci_hcd: release socket [ 151.952415][ T12] vhci_hcd: disconnect device [ 152.048488][ T29] audit: type=1400 audit(1736666256.353:410): avc: denied { mounton } for pid=7054 comm="syz.1.249" path="/52/file0" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.065668][ T7059] overlayfs: statfs failed on './file0' [ 152.151804][ T29] audit: type=1400 audit(1736666256.353:411): avc: denied { getattr } for pid=7054 comm="syz.1.249" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 152.207724][ T29] audit: type=1400 audit(1736666256.353:412): avc: denied { mount } for pid=7054 comm="syz.1.249" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 152.231501][ T7065] ======================================================= [ 152.231501][ T7065] WARNING: The mand mount option has been deprecated and [ 152.231501][ T7065] and is ignored by this kernel. Remove the mand [ 152.231501][ T7065] option from the mount to silence this warning. [ 152.231501][ T7065] ======================================================= [ 152.273280][ T29] audit: type=1400 audit(1736666256.353:413): avc: denied { unlink } for pid=7054 comm="syz.1.249" name="#1" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.450333][ T5941] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.902363][ T7079] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 152.917667][ T7079] overlay: ./file0 is not a directory [ 152.919835][ T29] audit: type=1400 audit(1736666257.223:414): avc: denied { mount } for pid=7078 comm="syz.4.258" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 152.945840][ T5941] usb 1-1: device descriptor read/64, error -71 [ 153.120301][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.717802][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 153.745136][ T5941] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 153.777272][ T29] audit: type=1400 audit(1736666258.043:415): avc: denied { map } for pid=7089 comm="syz.4.261" path="/proc/177/task" dev="proc" ino=12081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 153.882466][ T7091] overlayfs: disabling nfs_export due to verity=on [ 154.080734][ T5941] usb 1-1: device descriptor read/64, error -71 [ 154.167958][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.180129][ T5869] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 154.189257][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.232574][ T5869] usb 2-1: config 0 descriptor?? [ 154.300435][ T5941] usb usb1-port1: attempt power cycle [ 154.445124][ T29] audit: type=1400 audit(1736666258.713:416): avc: denied { getopt } for pid=7093 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 154.464438][ T29] audit: type=1400 audit(1736666258.713:417): avc: denied { watch watch_reads } for pid=7093 comm="syz.3.262" path="/proc/226" dev="proc" ino=12090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 154.603495][ T7100] random: crng reseeded on system resumption [ 154.879235][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.888073][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.930236][ T5941] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 154.957771][ T5941] usb 1-1: device descriptor read/8, error -71 [ 155.500658][ T5941] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 155.700194][ T5941] usb 1-1: device descriptor read/8, error -71 [ 155.831848][ T5941] usb usb1-port1: unable to enumerate USB device [ 156.042333][ T29] audit: type=1800 audit(1736666260.353:418): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.259" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 156.341497][ T5869] usbhid 2-1:0.0: can't add hid device: -71 [ 156.347572][ T5869] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 156.369450][ T5869] usb 2-1: USB disconnect, device number 7 [ 156.590304][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.670422][ T969] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 156.760205][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 156.766971][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.777706][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.786795][ T9] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 156.795987][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.806800][ T9] usb 3-1: config 0 descriptor?? [ 156.825551][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.917179][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.928404][ T969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.942042][ T969] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.951359][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.982253][ T969] usb 1-1: config 0 descriptor?? [ 157.061829][ T29] audit: type=1400 audit(1736666261.373:419): avc: denied { getopt } for pid=7144 comm="syz.3.273" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.161490][ T7149] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 157.174703][ T4195] Bluetooth: hci5: Frame reassembly failed (-84) [ 158.102233][ T5941] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 158.270319][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 158.449668][ T969] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 158.453938][ T5941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 158.463911][ T969] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 158.486816][ T29] audit: type=1400 audit(1736666262.793:420): avc: denied { getopt } for pid=7132 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.488899][ T5941] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 158.538943][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.547590][ T5941] usb 2-1: Product: syz [ 158.550151][ T5866] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 158.552268][ T5941] usb 2-1: Manufacturer: syz [ 158.573515][ T5941] usb 2-1: SerialNumber: syz [ 158.583496][ T5941] usb 2-1: config 0 descriptor?? [ 158.710206][ T5866] usb 4-1: device descriptor read/64, error -71 [ 158.950301][ T5866] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 158.995466][ T5941] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 159.002797][ T5941] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 159.100166][ T5866] usb 4-1: device descriptor read/64, error -71 [ 159.210380][ T5866] usb usb4-port1: attempt power cycle [ 159.230170][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.339014][ T5851] usb 1-1: USB disconnect, device number 13 [ 159.745406][ T5941] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 159.810992][ T5866] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 159.853581][ T5866] usb 4-1: device descriptor read/8, error -71 [ 159.900284][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 159.962601][ T5941] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 159.996213][ T29] audit: type=1400 audit(1736666264.303:421): avc: denied { setattr } for pid=7169 comm="syz.0.279" name="loop0" dev="devtmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.999594][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.255037][ T5866] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 160.298463][ T5867] usb 2-1: USB disconnect, device number 8 [ 160.331352][ T5941] usb 5-1: Product: syz [ 160.335553][ T5941] usb 5-1: Manufacturer: syz [ 160.337029][ T29] audit: type=1400 audit(1736666264.623:422): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 160.342786][ T5941] usb 5-1: SerialNumber: syz [ 160.360771][ T29] audit: type=1400 audit(1736666264.633:423): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 160.379984][ T5941] usb 5-1: config 0 descriptor?? [ 160.392751][ T7156] syz.2.270 (7156) used greatest stack depth: 20672 bytes left [ 160.536632][ T9] usb 3-1: USB disconnect, device number 10 [ 160.539363][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 160.557479][ T29] audit: type=1400 audit(1736666264.863:424): avc: denied { accept } for pid=7179 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 160.704515][ T5866] usb 4-1: device descriptor read/8, error -71 [ 160.758245][ T5941] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 161.738435][ T5866] usb usb4-port1: unable to enumerate USB device [ 162.152099][ T29] audit: type=1400 audit(1736666266.453:425): avc: denied { write } for pid=7194 comm="syz.0.286" name="usbmon9" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.448031][ T7199] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 162.465892][ T7202] evm: overlay not supported [ 162.476714][ T7199] netlink: 224 bytes leftover after parsing attributes in process `syz.0.287'. [ 162.940424][ T969] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 163.120153][ T969] usb 1-1: Using ep0 maxpacket: 8 [ 163.133403][ T969] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.164660][ T969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.174905][ T5866] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 163.190359][ T5941] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 163.194901][ T969] usb 1-1: config 0 has no interface number 0 [ 163.208442][ T5941] usb 5-1: USB disconnect, device number 10 [ 163.229670][ T969] usb 1-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice=b5.2d [ 163.264466][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.290147][ T969] usb 1-1: Product: syz [ 163.294355][ T969] usb 1-1: Manufacturer: syz [ 163.298961][ T969] usb 1-1: SerialNumber: syz [ 163.344979][ T969] usb 1-1: config 0 descriptor?? [ 163.375658][ T969] snd_usb_variax 1-1:0.1: Line 6 PODxt Live found [ 163.395336][ T5866] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.409833][ T5866] usb 4-1: not running at top speed; connect to a high speed hub [ 163.435954][ T969] usb 1-1: selecting invalid altsetting 1 [ 163.460306][ T969] snd_usb_variax 1-1:0.1: set_interface failed [ 163.467337][ T5866] usb 4-1: config 2 has no interfaces? [ 163.484073][ T969] snd_usb_variax 1-1:0.1: Line 6 PODxt Live now disconnected [ 163.491917][ T969] snd_usb_variax 1-1:0.1: probe with driver snd_usb_variax failed with error -22 [ 163.524863][ T5866] usb 4-1: New USB device found, idVendor=2100, idProduct=9e5a, bcdDevice=c8.53 [ 163.534773][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.543204][ T5866] usb 4-1: Product: syz [ 163.547430][ T5866] usb 4-1: Manufacturer: 믔夘睱霎項咰鳡壤䏭揑ᣊ䔏䧇䪅ப䑉ꁺ褩쉲俅·며잯송샽㗖⥋挱ⓝ鄏钫ሏ新㞲ƍḤ੤쬨臄택픣ֹ婪㻷阱鰯ᴼ쉑⛲ꬪﺎ䆄愿ﭦ鶚焚᱉闄뱊㮃滿䶞䙌쾞娼鷉ᖃ㵂３⎿춵㦔ꪠ摋董胎쒑存螏 [ 163.575897][ T5866] usb 4-1: SerialNumber: syz [ 163.641659][ T7204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.287'. [ 163.842133][ T5941] usb 1-1: USB disconnect, device number 14 [ 163.904304][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.904468][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.907127][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.907280][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.912589][ T5866] usb 4-1: USB disconnect, device number 12 [ 164.240244][ T5851] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.460737][ T5851] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.471886][ T5851] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.481824][ T5851] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.491075][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.553065][ T7221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 165.051226][ T5851] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.359629][ T5869] usb 2-1: USB disconnect, device number 9 [ 166.006702][ T29] audit: type=1400 audit(1736666270.313:426): avc: denied { create } for pid=7240 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 166.084997][ T29] audit: type=1400 audit(1736666270.313:427): avc: denied { mount } for pid=7240 comm="syz.4.298" name="/" dev="configfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 166.147909][ T29] audit: type=1400 audit(1736666270.313:428): avc: denied { search } for pid=7240 comm="syz.4.298" name="/" dev="configfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.180632][ T29] audit: type=1400 audit(1736666270.313:429): avc: denied { read } for pid=7240 comm="syz.4.298" name="/" dev="configfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.280711][ T5869] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 166.298894][ T29] audit: type=1400 audit(1736666270.313:430): avc: denied { open } for pid=7240 comm="syz.4.298" path="/" dev="configfs" ino=1173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.320726][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.480373][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 166.491035][ T5869] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.548178][ T5869] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.635874][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.682485][ T5869] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 166.729104][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.806221][ T5869] usb 3-1: config 0 descriptor?? [ 167.253598][ T5869] mcp2200 0003:04D8:00DF.0006: item fetching failed at offset 5/7 [ 167.270570][ T5869] mcp2200 0003:04D8:00DF.0006: can't parse reports [ 167.290214][ T5869] mcp2200 0003:04D8:00DF.0006: probe with driver mcp2200 failed with error -22 [ 167.456768][ T5869] usb 3-1: USB disconnect, device number 11 [ 168.148316][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 170.395975][ T7295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.728410][ T29] audit: type=1400 audit(1736666275.033:431): avc: denied { mount } for pid=7313 comm="syz.3.318" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 170.749934][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.768313][ T7315] netlink: 'syz.0.316': attribute type 16 has an invalid length. [ 170.790234][ T7315] netlink: 56 bytes leftover after parsing attributes in process `syz.0.316'. [ 170.810001][ T29] audit: type=1400 audit(1736666275.033:432): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 171.050175][ T5851] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 171.290263][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 171.300939][ T29] audit: type=1400 audit(1736666275.523:433): avc: denied { read } for pid=7318 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.382746][ T5851] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.753257][ T5851] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.763234][ T5851] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.773241][ T5851] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.786426][ T5851] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.795907][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.835880][ T7328] binder: 7327:7328 ioctl 40046205 0 returned -22 [ 172.103074][ T5851] usb 3-1: GET_CAPABILITIES returned 0 [ 172.108611][ T5851] usbtmc 3-1:16.0: can't read capabilities [ 172.250821][ T7347] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 172.324337][ T29] audit: type=1400 audit(1736666276.623:434): avc: denied { write } for pid=7311 comm="syz.2.317" name="usbtmc0" dev="devtmpfs" ino=2874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 172.380732][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 172.467793][ T29] audit: type=1400 audit(1736666276.773:435): avc: denied { getopt } for pid=7353 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 172.499405][ T5956] usb 3-1: USB disconnect, device number 12 [ 172.515883][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 172.570322][ T29] audit: type=1400 audit(1736666276.853:436): avc: denied { setopt } for pid=7353 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.826323][ T7366] tipc: Can't bind to reserved service type 2 [ 172.944781][ T7371] tipc: Started in network mode [ 172.974830][ T7371] tipc: Node identity 1, cluster identity 4711 [ 172.989979][ T7371] tipc: Node number set to 1 [ 173.051489][ T7373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.335'. [ 173.123329][ T7373] netlink: 52 bytes leftover after parsing attributes in process `syz.1.335'. [ 173.720360][ T7379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'. [ 173.745787][ T7379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.336'. [ 173.813580][ T29] audit: type=1400 audit(1736666278.123:437): avc: denied { setopt } for pid=7378 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.900240][ T7388] mkiss: ax0: crc mode is auto. [ 175.132842][ T7385] syz.3.338 (7385): drop_caches: 2 [ 175.143062][ T7388] misc userio: Invalid payload size [ 175.229974][ T7390] misc userio: The device must be registered before sending interrupts [ 175.430165][ T5866] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 175.577058][ T29] audit: type=1400 audit(1736666279.863:438): avc: denied { write } for pid=7380 comm="syz.1.337" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.600273][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 175.611785][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.674685][ T7397] input: syz0 as /devices/virtual/input/input11 [ 175.789207][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 175.801010][ T29] audit: type=1400 audit(1736666279.883:439): avc: denied { remove_name } for pid=7380 comm="syz.1.337" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.823610][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.833502][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 176.548295][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 176.590786][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.603920][ T29] audit: type=1400 audit(1736666279.883:440): avc: denied { unlink } for pid=7380 comm="syz.1.337" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.626508][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.632844][ T29] audit: type=1400 audit(1736666279.983:441): avc: denied { create } for pid=7396 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 177.606937][ T5866] usb 5-1: string descriptor 0 read error: -71 [ 177.613268][ T5866] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 177.622717][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.790680][ T5866] usb 5-1: config 0 descriptor?? [ 177.797952][ T5866] usb 5-1: can't set config #0, error -71 [ 177.804570][ T29] audit: type=1326 audit(1736666280.733:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.2.341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d5a385d29 code=0x0 [ 177.827241][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.842427][ T5866] usb 5-1: USB disconnect, device number 11 [ 177.935946][ T7412] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 177.999402][ T29] audit: type=1400 audit(1736666282.303:443): avc: denied { ioctl } for pid=7411 comm="syz.4.347" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 178.024676][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.515091][ T969] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 178.582741][ T7426] FAULT_INJECTION: forcing a failure. [ 178.582741][ T7426] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 178.596614][ T7426] CPU: 1 UID: 0 PID: 7426 Comm: syz.4.351 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 178.607187][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.617229][ T7426] Call Trace: [ 178.620506][ T7426] [ 178.623416][ T7426] dump_stack_lvl+0x16c/0x1f0 [ 178.628087][ T7426] should_fail_ex+0x497/0x5b0 [ 178.632772][ T7426] _copy_to_user+0x32/0xd0 [ 178.637194][ T7426] simple_read_from_buffer+0xd0/0x160 [ 178.642571][ T7426] proc_fail_nth_read+0x198/0x270 [ 178.647591][ T7426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.653128][ T7426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.658685][ T7426] vfs_read+0x1df/0xbe0 [ 178.662832][ T7426] ? __fget_files+0x1fc/0x3a0 [ 178.667490][ T7426] ? __pfx___mutex_lock+0x10/0x10 [ 178.672519][ T7426] ? __pfx_vfs_read+0x10/0x10 [ 178.677183][ T7426] ? __fget_files+0x206/0x3a0 [ 178.681865][ T7426] ksys_read+0x12b/0x250 [ 178.686091][ T7426] ? __pfx_ksys_read+0x10/0x10 [ 178.690847][ T7426] do_syscall_64+0xcd/0x250 [ 178.695349][ T7426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.701231][ T7426] RIP: 0033:0x7fa65ad8473c [ 178.705631][ T7426] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.725231][ T7426] RSP: 002b:00007fa65bb4d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.733629][ T7426] RAX: ffffffffffffffda RBX: 00007fa65af75fa0 RCX: 00007fa65ad8473c [ 178.741584][ T7426] RDX: 000000000000000f RSI: 00007fa65bb4d0a0 RDI: 000000000000000b [ 178.749538][ T7426] RBP: 00007fa65bb4d090 R08: 0000000000000000 R09: 0000000000000000 [ 178.757499][ T7426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.765466][ T7426] R13: 0000000000000000 R14: 00007fa65af75fa0 R15: 00007ffe20fcca48 [ 178.773466][ T7426] [ 178.877677][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 178.886864][ T7433] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 178.970249][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 179.010118][ T969] usb 2-1: Using ep0 maxpacket: 8 [ 179.051518][ T969] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 179.059579][ T969] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 179.091355][ T969] usb 2-1: config 6 has no interface number 0 [ 179.097514][ T969] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 179.107514][ T969] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.470883][ T969] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 179.479977][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.488310][ T969] usb 2-1: Product: syz [ 179.496062][ T969] usb 2-1: Manufacturer: syz [ 179.500899][ T969] usb 2-1: SerialNumber: syz [ 180.038630][ T969] hso 2-1:6.2: Failed to find INT IN ep [ 180.082953][ T7452] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.357'. [ 180.255596][ T5956] usb 2-1: USB disconnect, device number 11 [ 180.390319][ T5867] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 180.942957][ T969] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 181.031203][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 181.037487][ T5825] Bluetooth: hci1: command 0x0401 tx timeout [ 181.044200][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 181.050588][ T5825] Bluetooth: hci0: command 0x0401 tx timeout [ 181.181740][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.183069][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 181.192891][ T969] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.214864][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.235222][ T969] usb 1-1: config 0 descriptor?? [ 181.244255][ T5867] usb 5-1: no configurations [ 181.249721][ T5867] usb 5-1: can't read configurations, error -22 [ 181.414540][ T5867] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 181.449811][ T7460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.488270][ T7460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.690239][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 181.698537][ T5867] usb 5-1: no configurations [ 181.727807][ T7483] sctp: [Deprecated]: syz.2.365 (pid 7483) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.727807][ T7483] Use struct sctp_sack_info instead [ 181.756181][ T5868] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 181.774119][ T5867] usb 5-1: can't read configurations, error -22 [ 181.829369][ T5867] usb usb5-port1: attempt power cycle [ 181.873375][ T29] audit: type=1400 audit(1736666286.103:444): avc: denied { read } for pid=7480 comm="syz.1.367" lport=55597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.920967][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 181.939667][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.043890][ T5868] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 182.096676][ T7482] input: syz0 as /devices/virtual/input/input12 [ 182.158677][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.219061][ T5868] usb 4-1: config 0 descriptor?? [ 182.261716][ T29] audit: type=1800 audit(1736666286.573:445): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.361" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 182.297238][ T5867] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 182.324322][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 182.334001][ T5867] usb 5-1: no configurations [ 182.338656][ T5867] usb 5-1: can't read configurations, error -22 [ 182.449179][ T5868] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 182.484177][ T5867] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 182.563925][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 182.613321][ T5867] usb 5-1: no configurations [ 182.679113][ T5867] usb 5-1: can't read configurations, error -22 [ 182.749378][ T5867] usb usb5-port1: unable to enumerate USB device [ 182.928934][ T7494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.369'. [ 183.462911][ T5866] usb 4-1: USB disconnect, device number 13 [ 183.756205][ T969] usbhid 1-1:0.0: can't add hid device: -71 [ 183.790167][ T969] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 183.836688][ T9] libceph: connect (1)[c::]:6789 error -101 [ 183.863966][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 183.871206][ T969] usb 1-1: USB disconnect, device number 15 [ 183.910192][ T7508] vivid-004: disconnect [ 184.182748][ T9] libceph: connect (1)[c::]:6789 error -101 [ 184.188840][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 184.320380][ T969] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 184.482077][ T969] usb 1-1: Using ep0 maxpacket: 8 [ 184.535454][ T969] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 184.560092][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.568123][ T969] usb 1-1: Product: syz [ 184.577911][ T7501] vivid-004: reconnect [ 184.597285][ T7502] ceph: No mds server is up or the cluster is laggy [ 185.201741][ T9] libceph: connect (1)[c::]:6789 error -101 [ 185.207841][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 185.213832][ T969] usb 1-1: Manufacturer: syz [ 185.218441][ T969] usb 1-1: SerialNumber: syz [ 185.225130][ T969] usb 1-1: config 0 descriptor?? [ 185.440748][ T969] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 186.081762][ T5868] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 186.250231][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 186.258735][ T5868] usb 4-1: config 0 has an invalid interface number: 135 but max is 0 [ 186.267780][ T5868] usb 4-1: config 0 has no interface number 0 [ 186.275505][ T5868] usb 4-1: New USB device found, idVendor=07c4, idProduct=a002, bcdDevice=25.82 [ 186.285414][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.295462][ T5868] usb 4-1: config 0 descriptor?? [ 186.303899][ T5868] ums-datafab 4-1:0.135: USB Mass Storage device detected [ 186.330466][ T5868] ums-datafab 4-1:0.135: Quirks match for vid 07c4 pid a002: 1 [ 186.350370][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 186.426158][ T7549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.385'. [ 186.543560][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.564979][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.576694][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.587387][ T5866] usb 4-1: USB disconnect, device number 14 [ 186.617205][ T9] usb 5-1: config 0 descriptor?? [ 186.849042][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.854538][ T969] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 186.865115][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.878793][ T5868] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 186.883301][ T969] usb 1-1: USB disconnect, device number 16 [ 186.960148][ T5956] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 187.044012][ T5868] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 187.053254][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.061333][ T5868] usb 2-1: Product: syz [ 187.065566][ T5868] usb 2-1: Manufacturer: syz [ 187.070252][ T5868] usb 2-1: SerialNumber: syz [ 187.080725][ T5868] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 187.121330][ T46] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 187.144577][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 187.164213][ T5956] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 187.176696][ T5956] usb 3-1: config 0 has no interface number 0 [ 187.192183][ T5956] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 187.217270][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.250087][ T5956] usb 3-1: Product: syz [ 187.254319][ T5956] usb 3-1: Manufacturer: syz [ 187.259017][ T5956] usb 3-1: SerialNumber: syz [ 187.274880][ T5956] usb 3-1: config 0 descriptor?? [ 187.359629][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.370598][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.400209][ T29] audit: type=1800 audit(1736666291.693:446): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.384" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 187.488956][ T5956] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 187.510923][ T5956] usb 3-1: No streaming interface found for terminal 6. [ 187.518060][ T7565] fuse: Bad value for 'fd' [ 187.548264][ T5956] usb 3-1: USB disconnect, device number 13 [ 187.771489][ T5868] usb 2-1: USB disconnect, device number 12 [ 187.790504][ T7552] block nbd1: shutting down sockets [ 187.912755][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 187.919748][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 187.936864][ T9] usb 5-1: USB disconnect, device number 16 [ 188.511092][ T46] usb 2-1: Service connection timeout for: 256 [ 188.650704][ T46] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 188.851762][ T46] ath9k_htc: Failed to initialize the device [ 188.859823][ T5868] usb 2-1: ath9k_htc: USB layer deinitialized [ 188.921855][ T29] audit: type=1400 audit(1736666293.233:447): avc: denied { read write } for pid=7563 comm="syz.0.391" dev="sockfs" ino=14552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 190.374981][ T7590] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 190.382819][ T7590] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 191.569969][ T29] audit: type=1326 audit(1736666295.873:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.3.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee185d29 code=0x7ffc0000 [ 191.593874][ T29] audit: type=1326 audit(1736666295.873:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.3.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee185d29 code=0x7ffc0000 [ 191.698504][ T29] audit: type=1400 audit(1736666295.933:450): avc: denied { ioctl } for pid=7593 comm="syz.4.399" path="socket:[15401]" dev="sockfs" ino=15401 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.842903][ T29] audit: type=1400 audit(1736666295.933:451): avc: denied { setattr } for pid=7593 comm="syz.4.399" name="SCTPv6" dev="sockfs" ino=15401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.909233][ T29] audit: type=1400 audit(1736666295.943:452): avc: denied { read } for pid=7593 comm="syz.4.399" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 191.933710][ T29] audit: type=1400 audit(1736666295.943:453): avc: denied { ioctl } for pid=7593 comm="syz.4.399" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 191.959491][ T29] audit: type=1326 audit(1736666295.973:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.3.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f92ee185d29 code=0x7ffc0000 [ 191.983156][ T29] audit: type=1326 audit(1736666295.973:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7595 comm="syz.3.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ee185d29 code=0x7ffc0000 [ 192.089151][ T7603] syzkaller1: entered promiscuous mode [ 192.095654][ T7603] syzkaller1: entered allmulticast mode [ 192.166145][ T7605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.266499][ T7611] netlink: 23 bytes leftover after parsing attributes in process `syz.2.403'. [ 192.518417][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 192.518436][ T29] audit: type=1400 audit(1736666296.823:481): avc: denied { getopt } for pid=7612 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.658989][ T29] audit: type=1400 audit(1736666296.963:482): avc: denied { setopt } for pid=7612 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 193.133942][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 193.356233][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.370156][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.028245][ T29] audit: type=1400 audit(1736666297.823:483): avc: denied { bind } for pid=7631 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 194.028733][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.062434][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 194.071695][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.101402][ T9] usb 2-1: config 0 descriptor?? [ 194.283736][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.300570][ T5868] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 194.463498][ T5868] usb 5-1: New USB device found, idVendor=413c, idProduct=81e0, bcdDevice=ac.c4 [ 194.552187][ T7623] xt_cgroup: path and classid specified [ 194.560804][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.766130][ T9] elecom 0003:056E:010C.0007: unknown main item tag 0x1 [ 194.773379][ T9] elecom 0003:056E:010C.0007: item fetching failed at offset 24/41 [ 194.798538][ T7645] FAULT_INJECTION: forcing a failure. [ 194.798538][ T7645] name failslab, interval 1, probability 0, space 0, times 1 [ 194.811954][ T9] elecom 0003:056E:010C.0007: probe with driver elecom failed with error -22 [ 194.821223][ T7645] CPU: 0 UID: 0 PID: 7645 Comm: syz.2.410 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 194.831832][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 194.841898][ T7645] Call Trace: [ 194.845183][ T7645] [ 194.848120][ T7645] dump_stack_lvl+0x16c/0x1f0 [ 194.852824][ T7645] should_fail_ex+0x497/0x5b0 [ 194.857524][ T7645] ? fs_reclaim_acquire+0xae/0x150 [ 194.862661][ T7645] should_failslab+0xc2/0x120 [ 194.867369][ T7645] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 194.872757][ T7645] ? fput+0x67/0x440 [ 194.876675][ T7645] ? getname_flags.part.0+0x4c/0x550 [ 194.881999][ T7645] getname_flags.part.0+0x4c/0x550 [ 194.887130][ T7645] __x64_sys_unlink+0xb0/0x110 [ 194.891910][ T7645] do_syscall_64+0xcd/0x250 [ 194.895277][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 194.896417][ T7645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.896449][ T7645] RIP: 0033:0x7f5d5a385d29 [ 194.908160][ T7648] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 194.911069][ T7645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.911090][ T7645] RSP: 002b:00007f5d5b1e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 194.911109][ T7645] RAX: ffffffffffffffda RBX: 00007f5d5a576080 RCX: 00007f5d5a385d29 [ 194.911122][ T7645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 194.911134][ T7645] RBP: 00007f5d5b1e4090 R08: 0000000000000000 R09: 0000000000000000 [ 194.911146][ T7645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.911157][ T7645] R13: 0000000000000000 R14: 00007f5d5a576080 R15: 00007ffdb5a653f8 [ 194.911181][ T7645] [ 195.146098][ T46] usb 2-1: USB disconnect, device number 13 [ 195.874350][ T7659] sp0: Synchronizing with TNC [ 196.309138][ T46] usb 5-1: USB disconnect, device number 17 [ 197.535047][ T7690] tipc: Started in network mode [ 197.539952][ T7690] tipc: Node identity 1, cluster identity 4711 [ 197.547218][ T7690] tipc: Node number set to 1 [ 197.790493][ T29] audit: type=1400 audit(1736666302.063:484): avc: denied { getopt } for pid=7700 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.823870][ T29] audit: type=1400 audit(1736666302.063:485): avc: denied { accept } for pid=7700 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.100316][ T5941] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 198.115223][ T7710] syz.1.433 (7710): /proc/7708/oom_adj is deprecated, please use /proc/7708/oom_score_adj instead. [ 198.286709][ T7712] netlink: 48 bytes leftover after parsing attributes in process `syz.2.434'. [ 198.287057][ T5941] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.313872][ T5941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.323556][ T5941] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.336353][ T5941] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 198.397683][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.479389][ T5941] hub 5-1:1.0: bad descriptor, ignoring hub [ 198.494628][ T5941] hub 5-1:1.0: probe with driver hub failed with error -5 [ 198.540700][ T5941] cdc_wdm 5-1:1.0: skipping garbage [ 198.545943][ T5941] cdc_wdm 5-1:1.0: skipping garbage [ 198.551253][ T5941] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 198.738228][ T5941] usb 5-1: USB disconnect, device number 18 [ 200.113367][ T29] audit: type=1400 audit(1736666304.423:486): avc: denied { execute } for pid=7720 comm="syz.3.437" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.501317][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.509999][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.561125][ T5956] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 200.902751][ T7745] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 200.909325][ T7745] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.919558][ T7745] vhci_hcd vhci_hcd.0: Device attached [ 200.925376][ T5821] bond0: (slave syz_tun): Releasing backup interface [ 200.937267][ T7745] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 200.958982][ T7748] vhci_hcd: connection closed [ 200.962256][ T7333] vhci_hcd: stop threads [ 200.973806][ T7333] vhci_hcd: release socket [ 200.978235][ T7333] vhci_hcd: disconnect device [ 201.121576][ T7333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.601997][ T7333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.646984][ T29] audit: type=1400 audit(1736666305.953:487): avc: denied { connect } for pid=7759 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.698033][ T29] audit: type=1400 audit(1736666305.953:488): avc: denied { setopt } for pid=7759 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.760115][ T29] audit: type=1400 audit(1736666305.953:489): avc: denied { write } for pid=7759 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.799308][ T7333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.097712][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 202.136946][ T7333] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.174075][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.175871][ T7762] usb usb8: usbfs: process 7762 (syz.4.448) did not claim interface 0 before use [ 202.183758][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.201985][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.248663][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.257717][ T5827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.269797][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.283762][ T29] audit: type=1400 audit(1736666306.593:490): avc: denied { mounton } for pid=7772 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 202.361821][ T7333] bridge_slave_1: left allmulticast mode [ 202.367774][ T7333] bridge_slave_1: left promiscuous mode [ 202.379485][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.405462][ T7333] bridge_slave_0: left allmulticast mode [ 202.422781][ T7333] bridge_slave_0: left promiscuous mode [ 202.450757][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.611297][ T29] audit: type=1400 audit(1736666306.903:491): avc: denied { ioctl } for pid=7781 comm="syz.1.454" path="socket:[16180]" dev="sockfs" ino=16180 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.637866][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 202.640120][ T29] audit: type=1400 audit(1736666306.953:492): avc: denied { nlmsg_read } for pid=7778 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.850110][ T29] audit: type=1400 audit(1736666307.143:493): avc: denied { create } for pid=7787 comm="syz.4.455" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 203.000524][ T29] audit: type=1400 audit(1736666307.303:494): avc: denied { write } for pid=7787 comm="syz.4.455" name="file0" dev="tmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 203.047176][ T29] audit: type=1400 audit(1736666307.303:495): avc: denied { open } for pid=7787 comm="syz.4.455" path="/79/file0" dev="tmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 203.123159][ T29] audit: type=1400 audit(1736666307.303:496): avc: denied { connect } for pid=7779 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 203.478236][ T7333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.503006][ T7333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.533836][ T7333] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 203.620199][ T7333] bond0 (unregistering): (slave bond1): Releasing backup interface [ 203.660158][ T7333] bond0 (unregistering): Released all slaves [ 204.099732][ T7333] bond1 (unregistering): Released all slaves [ 204.351737][ T5827] Bluetooth: hci4: command tx timeout [ 204.507304][ T29] audit: type=1400 audit(1736666308.803:497): avc: denied { unlink } for pid=5814 comm="syz-executor" name="file0" dev="tmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.566184][ T7333] tipc: Left network mode [ 204.582069][ T29] audit: type=1400 audit(1736666308.803:498): avc: denied { read write } for pid=5814 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.606141][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.621253][ T29] audit: type=1400 audit(1736666308.803:499): avc: denied { open } for pid=5814 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.645229][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.655713][ T29] audit: type=1400 audit(1736666308.803:500): avc: denied { ioctl } for pid=5814 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.681451][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.774925][ T29] audit: type=1400 audit(1736666308.833:501): avc: denied { prog_load } for pid=7797 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.926164][ T29] audit: type=1400 audit(1736666308.833:502): avc: denied { bpf } for pid=7797 comm="syz.4.457" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.834125][ T7772] chnl_net:caif_netlink_parms(): no params data found [ 206.479750][ T5827] Bluetooth: hci4: command tx timeout [ 206.560355][ T7333] hsr_slave_0: left promiscuous mode [ 206.566307][ T7333] hsr_slave_1: left promiscuous mode [ 206.574289][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.625196][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.756058][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.821974][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.927226][ T7333] veth1_macvtap: left promiscuous mode [ 206.939562][ T7333] veth0_macvtap: left promiscuous mode [ 207.729212][ T7333] team0 (unregistering): Port device team_slave_1 removed [ 207.776192][ T7333] team0 (unregistering): Port device team_slave_0 removed [ 207.870305][ T46] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 207.914338][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 207.914353][ T29] audit: type=1400 audit(1736666312.223:538): avc: denied { name_bind } for pid=7847 comm="syz.0.469" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 207.941598][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.968435][ T29] audit: type=1400 audit(1736666312.233:539): avc: denied { node_bind } for pid=7847 comm="syz.0.469" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 208.047516][ T46] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.105071][ T46] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 208.153481][ T46] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.171311][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.205397][ T7844] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.297458][ T46] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.510299][ T54] Bluetooth: hci4: command tx timeout [ 208.751983][ T29] audit: type=1400 audit(1736666313.053:540): avc: denied { create } for pid=7851 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.772002][ T29] audit: type=1400 audit(1736666313.053:541): avc: denied { create } for pid=7851 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.791373][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.798375][ T29] audit: type=1400 audit(1736666313.053:542): avc: denied { shutdown } for pid=7851 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.830690][ T29] audit: type=1400 audit(1736666313.053:543): avc: denied { write } for pid=7851 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.936793][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.944410][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.951860][ T7772] bridge_slave_0: entered allmulticast mode [ 208.958413][ T7772] bridge_slave_0: entered promiscuous mode [ 208.977525][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.999231][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.010371][ T7772] bridge_slave_1: entered allmulticast mode [ 209.018368][ T7772] bridge_slave_1: entered promiscuous mode [ 209.089430][ T29] audit: type=1400 audit(1736666313.393:544): avc: denied { read } for pid=7857 comm="syz.2.472" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 209.105989][ T7772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.122088][ T7858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'. [ 209.126050][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 209.143444][ T29] audit: type=1400 audit(1736666313.393:545): avc: denied { open } for pid=7857 comm="syz.2.472" path="net:[4026532806]" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 209.151279][ T7772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.177145][ T29] audit: type=1400 audit(1736666313.393:546): avc: denied { create } for pid=7857 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.205350][ T29] audit: type=1400 audit(1736666313.443:547): avc: denied { create } for pid=7859 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.450364][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.605005][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.841059][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.845510][ T7772] team0: Port device team_slave_0 added [ 209.854664][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.888690][ T7772] team0: Port device team_slave_1 added [ 209.905153][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.071466][ T9] usb 1-1: config 0 descriptor?? [ 210.240860][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 210.252137][ T7871] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 210.254827][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.267702][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.294014][ T7772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.308115][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.315069][ T7333] IPVS: stop unused estimator thread 0... [ 210.325569][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.351453][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.363560][ T7772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.413091][ T7874] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 210.413197][ T7772] hsr_slave_0: entered promiscuous mode [ 210.419893][ T7874] PKCS7: Only support pkcs7_signedData type [ 210.434198][ T7772] hsr_slave_1: entered promiscuous mode [ 210.489025][ T9] plantronics 0003:047F:FFFF.0008: report_id 2775996487 is invalid [ 210.497646][ T9] plantronics 0003:047F:FFFF.0008: item 0 4 1 8 parsing failed [ 210.511590][ T9] plantronics 0003:047F:FFFF.0008: parse failed [ 210.526344][ T9] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 210.592324][ T54] Bluetooth: hci4: command tx timeout [ 210.666502][ T969] usb 5-1: USB disconnect, device number 19 [ 210.815008][ T7883] syz.4.478: attempt to access beyond end of device [ 210.815008][ T7883] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 210.834517][ T7883] qnx4: unable to read the superblock [ 211.326571][ T7772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.339005][ T7772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.363060][ T7772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.381136][ T7772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.911439][ T7772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.934970][ T7772] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.017040][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.024208][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.061454][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.068601][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.340312][ T46] usb 1-1: USB disconnect, device number 17 [ 212.466240][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 212.563619][ T7916] netlink: 'syz.2.486': attribute type 1 has an invalid length. [ 212.711063][ T7772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.744496][ T7772] veth0_vlan: entered promiscuous mode [ 213.128210][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 213.128259][ T29] audit: type=1400 audit(1736666317.213:575): avc: denied { map } for pid=7910 comm="syz.0.485" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 213.284091][ T29] audit: type=1400 audit(1736666317.213:576): avc: denied { read write } for pid=7910 comm="syz.0.485" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 213.390458][ T29] audit: type=1400 audit(1736666317.343:577): avc: denied { bind } for pid=7910 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 213.396969][ T5941] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 213.417901][ T29] audit: type=1400 audit(1736666317.343:578): avc: denied { name_bind } for pid=7910 comm="syz.0.485" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 213.417938][ T29] audit: type=1400 audit(1736666317.343:579): avc: denied { node_bind } for pid=7910 comm="syz.0.485" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 213.467676][ T29] audit: type=1400 audit(1736666317.343:580): avc: denied { listen } for pid=7910 comm="syz.0.485" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 213.535280][ T29] audit: type=1400 audit(1736666317.363:581): avc: denied { ioctl } for pid=7910 comm="syz.0.485" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 213.559124][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 213.591661][ T7772] veth1_vlan: entered promiscuous mode [ 213.619692][ T7772] veth0_macvtap: entered promiscuous mode [ 213.626117][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.487'. [ 213.628914][ T7772] veth1_macvtap: entered promiscuous mode [ 213.665356][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.684897][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.696248][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.706915][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.717095][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.728321][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.730356][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 213.738258][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.749261][ T5941] usb 2-1: config 0 has an invalid interface number: 3 but max is 1 [ 213.753820][ T969] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 213.768237][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 213.769569][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.778230][ T5941] usb 2-1: config 0 has no interface number 1 [ 213.806273][ T5941] usb 2-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 213.817508][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.837074][ T5941] usb 2-1: Product: syz [ 213.845096][ T5941] usb 2-1: Manufacturer: syz [ 213.853045][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.864368][ T5941] usb 2-1: SerialNumber: syz [ 213.873014][ T5941] usb 2-1: config 0 descriptor?? [ 213.887274][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.908084][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.929846][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.946194][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.956402][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.968225][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.990202][ T7772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.005817][ T7772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.018568][ T7772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.033174][ T7772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.042222][ T7772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.051029][ T7772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.059916][ T7772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.114806][ T969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.143584][ T5941] usb 2-1: Could not set interface, error -71 [ 214.394719][ T29] audit: type=1400 audit(1736666318.443:582): avc: denied { map } for pid=7936 comm="syz.0.490" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.638629][ T969] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 214.807240][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.824346][ T5941] usb 2-1: USB disconnect, device number 14 [ 214.852119][ T29] audit: type=1400 audit(1736666318.443:583): avc: denied { execute } for pid=7936 comm="syz.0.490" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.881336][ T969] usb 3-1: config 0 descriptor?? [ 214.891008][ T969] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 214.946778][ T29] audit: type=1400 audit(1736666319.253:584): avc: denied { watch } for pid=7946 comm="syz.4.491" path="/86" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 214.970710][ T7333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.986888][ T7333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.007422][ T7947] syz.4.491: attempt to access beyond end of device [ 215.007422][ T7947] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 215.030770][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.038926][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.106475][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.117007][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.499939][ T5941] usb 3-1: USB disconnect, device number 15 [ 215.827415][ T7969] FAULT_INJECTION: forcing a failure. [ 215.827415][ T7969] name failslab, interval 1, probability 0, space 0, times 0 [ 215.841673][ T7969] CPU: 0 UID: 0 PID: 7969 Comm: syz.2.497 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 215.852275][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.862332][ T7969] Call Trace: [ 215.865608][ T7969] [ 215.868530][ T7969] dump_stack_lvl+0x16c/0x1f0 [ 215.873208][ T7969] should_fail_ex+0x497/0x5b0 [ 215.877885][ T7969] ? irqentry_exit+0x3b/0x90 [ 215.882471][ T7969] should_failslab+0xc2/0x120 [ 215.887141][ T7969] __kmalloc_noprof+0xcb/0x510 [ 215.891901][ T7969] ? aes_gcm_aad_update+0x84/0xc0 [ 215.896922][ T7969] skcipher_walk_next+0xf34/0x1620 [ 215.902035][ T7969] skcipher_walk_done+0x6aa/0xd20 [ 215.907053][ T7969] gcm_encrypt_aesni_avx+0x559/0x660 [ 215.912339][ T7969] ? __pfx_gcm_encrypt_aesni_avx+0x10/0x10 [ 215.918151][ T7969] ? mark_held_locks+0x9f/0xe0 [ 215.922907][ T7969] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.928105][ T7969] crypto_aead_encrypt+0xbd/0x100 [ 215.933121][ T7969] crypto_aead_encrypt+0xbd/0x100 [ 215.938136][ T7969] tls_push_record+0x1cb9/0x31b0 [ 215.943077][ T7969] ? __pfx_tls_push_record+0x10/0x10 [ 215.948349][ T7969] ? sk_psock_get+0x13f/0x470 [ 215.953028][ T7969] ? __pfx_sk_psock_get+0x10/0x10 [ 215.958049][ T7969] bpf_exec_tx_verdict+0xe24/0x1280 [ 215.963242][ T7969] ? iov_iter_advance+0x7d/0x6c0 [ 215.968184][ T7969] ? __pfx_bpf_exec_tx_verdict+0x10/0x10 [ 215.973858][ T7969] ? sk_msg_alloc+0x706/0xad0 [ 215.978532][ T7969] tls_sw_sendmsg+0x1b59/0x23c0 [ 215.983390][ T7969] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 215.988586][ T7969] ? selinux_socket_post_create+0x757/0x7f0 [ 215.994489][ T7969] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 216.001265][ T7969] ? __fget_files+0x206/0x3a0 [ 216.005939][ T7969] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 216.011141][ T7969] inet6_sendmsg+0x119/0x140 [ 216.015731][ T7969] __sys_sendto+0x374/0x4f0 [ 216.020245][ T7969] ? __pfx___sys_sendto+0x10/0x10 [ 216.025284][ T7969] ? ksys_write+0x1ba/0x250 [ 216.029779][ T7969] ? __pfx_ksys_write+0x10/0x10 [ 216.034624][ T7969] __x64_sys_sendto+0xe0/0x1c0 [ 216.039381][ T7969] ? do_syscall_64+0x91/0x250 [ 216.044053][ T7969] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.049251][ T7969] do_syscall_64+0xcd/0x250 [ 216.053749][ T7969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.059637][ T7969] RIP: 0033:0x7f5d5a385d29 [ 216.064043][ T7969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.083652][ T7969] RSP: 002b:00007f5d5b1c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 216.092060][ T7969] RAX: ffffffffffffffda RBX: 00007f5d5a576160 RCX: 00007f5d5a385d29 [ 216.100020][ T7969] RDX: fffffffffffffede RSI: 00000000200001c0 RDI: 0000000000000006 [ 216.107984][ T7969] RBP: 00007f5d5b1c3090 R08: 0000000000000000 R09: 0000000003000137 [ 216.115942][ T7969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.123913][ T7969] R13: 0000000000000000 R14: 00007f5d5a576160 R15: 00007ffdb5a653f8 [ 216.131893][ T7969] [ 217.496115][ T7986] netlink: 'syz.4.500': attribute type 1 has an invalid length. [ 217.504243][ T7986] netlink: 'syz.4.500': attribute type 1 has an invalid length. [ 218.410139][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 218.410159][ T29] audit: type=1400 audit(1736666322.193:612): avc: denied { setopt } for pid=7980 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.504161][ T7987] ./cgroup: Can't lookup blockdev [ 218.550450][ T29] audit: type=1400 audit(1736666322.213:613): avc: denied { bind } for pid=7980 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.683534][ T29] audit: type=1400 audit(1736666322.213:614): avc: denied { name_bind } for pid=7980 comm="syz.1.501" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 218.760337][ T5869] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 218.924431][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.930713][ T29] audit: type=1400 audit(1736666322.213:615): avc: denied { node_bind } for pid=7980 comm="syz.1.501" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 218.959641][ T5869] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 219.082825][ T969] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 219.265606][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.615142][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.622595][ T29] audit: type=1400 audit(1736666322.223:616): avc: denied { write } for pid=7980 comm="syz.1.501" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.670597][ T969] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 219.675912][ T5869] usb 3-1: config 0 descriptor?? [ 219.679767][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.701056][ T29] audit: type=1400 audit(1736666322.223:617): avc: denied { connect } for pid=7980 comm="syz.1.501" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.728944][ T29] audit: type=1400 audit(1736666322.223:618): avc: denied { name_connect } for pid=7980 comm="syz.1.501" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 219.730834][ T5869] usb 3-1: bad CDC descriptors [ 219.751198][ T29] audit: type=1400 audit(1736666322.423:619): avc: denied { shutdown } for pid=7980 comm="syz.1.501" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.760923][ T969] usb 2-1: config 0 descriptor?? [ 219.961942][ T29] audit: type=1400 audit(1736666324.263:620): avc: denied { getopt } for pid=8006 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.992943][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.033412][ T29] audit: type=1400 audit(1736666324.273:621): avc: denied { name_connect } for pid=8006 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 220.060419][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.061432][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.112338][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.149350][ T5866] usb 3-1: USB disconnect, device number 16 [ 220.830169][ T5866] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 221.355963][ T8024] Driver unsupported XDP return value 0 on prog (id 91) dev N/A, expect packet loss! [ 221.450167][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 221.459093][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.490119][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.519667][ T5866] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 221.535287][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.565984][ T5866] usb 5-1: config 0 descriptor?? [ 221.734022][ T5866] usbhid 5-1:0.0: can't add hid device: -71 [ 221.743630][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 221.795949][ T5866] usb 5-1: USB disconnect, device number 20 [ 221.972727][ T969] usbhid 2-1:0.0: can't add hid device: -71 [ 221.978976][ T969] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 221.994202][ T969] usb 2-1: USB disconnect, device number 15 [ 222.233182][ T8040] netlink: 'syz.2.515': attribute type 1 has an invalid length. [ 222.241010][ T8040] netlink: 'syz.2.515': attribute type 1 has an invalid length. [ 222.840313][ T5866] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 223.287396][ T8052] sctp: [Deprecated]: syz.1.518 (pid 8052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.287396][ T8052] Use struct sctp_sack_info instead [ 223.840181][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 223.849264][ T5866] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.858181][ T5866] usb 5-1: config 0 has no interface number 0 [ 223.950766][ T5866] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.961934][ T5866] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.971948][ T5866] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 223.981042][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.991803][ T5866] usb 5-1: config 0 descriptor?? [ 224.010507][ T8057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.132837][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 224.132877][ T29] audit: type=1400 audit(1736666328.433:634): avc: denied { checkpoint_restore } for pid=8056 comm="syz.0.520" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.211751][ T29] audit: type=1400 audit(1736666328.493:635): avc: denied { getopt } for pid=8056 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.523097][ T8000] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 224.741845][ T5866] uclogic 0003:28BD:0094.0009: pen parameters not found [ 224.748840][ T5866] uclogic 0003:28BD:0094.0009: interface is invalid, ignoring [ 224.934657][ T29] audit: type=1400 audit(1736666329.243:636): avc: denied { unlink } for pid=8069 comm="syz.0.524" name="#b" dev="tmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 225.000576][ T8000] usb 3-1: Using ep0 maxpacket: 32 [ 225.056823][ T8000] usb 3-1: config 0 has an invalid interface number: 215 but max is 0 [ 225.082868][ T8000] usb 3-1: config 0 has no interface number 0 [ 225.101225][ T29] audit: type=1400 audit(1736666329.273:637): avc: denied { mount } for pid=8069 comm="syz.0.524" name="/" dev="overlay" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 225.139533][ T8000] usb 3-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 225.271005][ T8000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.279110][ T8000] usb 3-1: Product: syz [ 225.287748][ T8000] usb 3-1: Manufacturer: syz [ 225.292518][ T8000] usb 3-1: SerialNumber: syz [ 225.310892][ T8000] usb 3-1: config 0 descriptor?? [ 225.318531][ T8000] io_ti 3-1:0.215: required endpoints missing [ 225.519569][ T8063] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.523'. [ 225.528836][ T8063] openvswitch: netlink: EtherType 0 is less than min 600 [ 225.960814][ T8000] usb 3-1: USB disconnect, device number 17 [ 226.160114][ T29] audit: type=1400 audit(1736666329.443:638): avc: denied { create } for pid=8069 comm="syz.0.524" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 226.532661][ T8081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8081 comm=syz.1.526 [ 227.017024][ T29] audit: type=1400 audit(1736666329.443:639): avc: denied { link } for pid=8069 comm="syz.0.524" name="#d" dev="tmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 227.142365][ T29] audit: type=1400 audit(1736666329.443:640): avc: denied { rename } for pid=8069 comm="syz.0.524" name="#e" dev="tmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 227.164742][ T29] audit: type=1400 audit(1736666329.473:641): avc: denied { ioctl } for pid=8035 comm="syz.4.514" path="socket:[17209]" dev="sockfs" ino=17209 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.189826][ T29] audit: type=1400 audit(1736666330.723:642): avc: denied { read } for pid=8077 comm="syz.1.526" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 227.200710][ T5897] usb 5-1: USB disconnect, device number 21 [ 227.213423][ T29] audit: type=1400 audit(1736666330.723:643): avc: denied { open } for pid=8077 comm="syz.1.526" path="/dev/sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 227.334581][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 227.968643][ T8100] random: crng reseeded on system resumption [ 228.072788][ T8102] sctp: [Deprecated]: syz.3.532 (pid 8102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.072788][ T8102] Use struct sctp_sack_info instead [ 228.999343][ T8118] overlayfs: failed to resolve './file1': -2 [ 229.629600][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 229.629611][ T29] audit: type=1400 audit(1736666333.933:652): avc: denied { create } for pid=8125 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 229.704884][ T29] audit: type=1400 audit(1736666333.963:653): avc: denied { setopt } for pid=8124 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.744415][ T29] audit: type=1400 audit(1736666333.983:654): avc: denied { write } for pid=8124 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.805938][ T29] audit: type=1400 audit(1736666333.983:655): avc: denied { mount } for pid=8124 comm="syz.3.539" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 229.859498][ T29] audit: type=1400 audit(1736666334.163:656): avc: denied { override_creds } for pid=8133 comm="syz.4.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 229.991319][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 230.430446][ T9] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 230.493480][ T9] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping [ 230.612404][ T9] usb 1-1: config 0 has no interface number 0 [ 230.659005][ T8147] random: crng reseeded on system resumption [ 230.678910][ T9] usb 1-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 230.709760][ T29] audit: type=1400 audit(1736666335.013:657): avc: denied { bind } for pid=8144 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 230.717556][ T9] usb 1-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 230.770121][ T29] audit: type=1400 audit(1736666335.053:658): avc: denied { execute } for pid=8144 comm="syz.3.547" path="/dev/audio" dev="devtmpfs" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 230.815186][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 230.856041][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.890747][ T9] usb 1-1: Product: syz [ 230.894952][ T9] usb 1-1: Manufacturer: syz [ 230.899555][ T9] usb 1-1: SerialNumber: syz [ 230.938162][ T9] usb 1-1: config 0 descriptor?? [ 230.963054][ T9] ljca 1-1:0.84: bulk endpoints not found [ 231.009796][ T8160] tmpfs: Unknown parameter 'usrquotaardlimit' [ 231.025942][ T29] audit: type=1400 audit(1736666335.333:659): avc: denied { open } for pid=8159 comm="syz.3.549" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 231.716183][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 231.738509][ T8168] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 232.255750][ T29] audit: type=1400 audit(1736666335.993:660): avc: denied { write } for pid=8131 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.427642][ T29] audit: type=1400 audit(1736666335.993:661): avc: denied { nlmsg_write } for pid=8131 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.783831][ C0] vxcan0: j1939_tp_txtimer: 0xffff888012d42c00: tx aborted with unknown reason: -2 [ 232.796267][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888012d42800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 232.815103][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888012d42c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 232.838630][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 233.462582][ T5897] usb 1-1: USB disconnect, device number 18 [ 235.037053][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 235.037071][ T29] audit: type=1400 audit(1736666339.313:668): avc: denied { mount } for pid=8191 comm="syz.2.557" name="/" dev="autofs" ino=17928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 235.125459][ T29] audit: type=1400 audit(1736666339.373:669): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 235.427784][ T29] audit: type=1400 audit(1736666339.733:670): avc: denied { sqpoll } for pid=8197 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 237.420907][ T8214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.582776][ T29] audit: type=1400 audit(1736666341.263:671): avc: denied { listen } for pid=8200 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.659738][ T29] audit: type=1400 audit(1736666341.273:672): avc: denied { write } for pid=8200 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.687841][ T29] audit: type=1400 audit(1736666341.283:673): avc: denied { create } for pid=8200 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 237.804889][ T29] audit: type=1400 audit(1736666341.653:674): avc: denied { read } for pid=8197 comm="syz.0.562" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 237.807519][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 237.916744][ T29] audit: type=1400 audit(1736666341.663:675): avc: denied { open } for pid=8197 comm="syz.0.562" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 237.982593][ T29] audit: type=1400 audit(1736666342.293:676): avc: denied { mount } for pid=8221 comm="syz.1.566" name="/" dev="rpc_pipefs" ino=17974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 238.096946][ T8225] batadv_slave_1: entered promiscuous mode [ 238.556248][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.569'. [ 238.568618][ T8229] xfrm1: entered promiscuous mode [ 238.573672][ T8229] xfrm1: entered allmulticast mode [ 238.777818][ T29] audit: type=1400 audit(1736666343.083:677): avc: denied { write } for pid=8228 comm="syz.2.569" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 238.801653][ T5866] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 239.180136][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 239.673309][ T5866] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 239.686827][ T5866] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.702682][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.892839][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.902915][ T5866] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.915967][ T5866] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.925336][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.184726][ T5866] usb 5-1: GET_CAPABILITIES returned 0 [ 240.190330][ T5866] usbtmc 5-1:16.0: can't read capabilities [ 240.240284][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 240.422052][ T5869] usb 5-1: USB disconnect, device number 22 [ 240.438749][ T8223] batadv_slave_1: left promiscuous mode [ 240.467941][ T8253] netlink: 'syz.0.572': attribute type 3 has an invalid length. [ 240.501933][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.523659][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.537407][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.554202][ T9] usb 3-1: Product: syz [ 240.562544][ T9] usb 3-1: Manufacturer: syz [ 240.572065][ T9] usb 3-1: SerialNumber: syz [ 240.840238][ T46] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 240.961473][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 240.961490][ T29] audit: type=1400 audit(1736666345.273:681): avc: denied { bind } for pid=8264 comm="syz.3.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.000266][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 241.011726][ T46] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 241.037854][ T46] usb 1-1: config 179 has no interface number 0 [ 241.041584][ T8265] [ 241.046445][ T8265] ====================================================== [ 241.053465][ T8265] WARNING: possible circular locking dependency detected [ 241.054568][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 241.060477][ T8265] 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 Not tainted [ 241.060492][ T8265] ------------------------------------------------------ [ 241.060499][ T8265] syz.3.579/8265 is trying to acquire lock: [ 241.060511][ T8265] ffff888025ae94d0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4db/0xcd0 [ 241.060567][ T8265] [ 241.060567][ T8265] but task is already holding lock: [ 241.060573][ T8265] ffff888025ae8258 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x378/0x5f0 [ 241.060622][ T8265] [ 241.060622][ T8265] which lock already depends on the new lock. [ 241.060622][ T8265] [ 241.060628][ T8265] [ 241.060628][ T8265] the existing dependency chain (in reverse order) is: [ 241.060635][ T8265] [ 241.060635][ T8265] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0} [ 241.103358][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 241.110377][ T8265] : [ 241.110387][ T8265] lock_sock_nested+0x3a/0xf0 [ 241.110410][ T8265] smc_listen_out+0x202/0x4a0 [ 241.110426][ T8265] smc_listen_work+0x5b5/0x50b0 [ 241.110440][ T8265] process_one_work+0x9c5/0x1ba0 [ 241.110459][ T8265] worker_thread+0x6c8/0xf00 [ 241.110475][ T8265] kthread+0x2c1/0x3a0 [ 241.190669][ T8265] ret_from_fork+0x45/0x80 [ 241.195596][ T8265] ret_from_fork_asm+0x1a/0x30 [ 241.200871][ T8265] [ 241.200871][ T8265] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 241.211031][ T8265] __lock_acquire+0x249e/0x3c40 [ 241.216396][ T8265] lock_acquire.part.0+0x11b/0x380 [ 241.222017][ T8265] __flush_work+0x4e5/0xcd0 [ 241.227031][ T8265] __cancel_work_sync+0x10c/0x130 [ 241.232564][ T8265] smc_clcsock_release+0x5f/0xe0 [ 241.238005][ T8265] __smc_release+0x5c2/0x880 [ 241.243096][ T8265] smc_close_non_accepted+0xda/0x200 [ 241.248883][ T8265] smc_close_active+0xc3c/0x1070 [ 241.254324][ T8265] __smc_release+0x634/0x880 [ 241.259414][ T8265] smc_release+0x1fc/0x5f0 [ 241.264331][ T8265] __sock_release+0xb0/0x270 [ 241.269424][ T8265] sock_close+0x1c/0x30 [ 241.274082][ T8265] __fput+0x3f8/0xb60 [ 241.278579][ T8265] task_work_run+0x14e/0x250 [ 241.283671][ T8265] syscall_exit_to_user_mode+0x27b/0x2a0 [ 241.289811][ T8265] do_syscall_64+0xda/0x250 [ 241.294818][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.301217][ T8265] [ 241.301217][ T8265] other info that might help us debug this: [ 241.301217][ T8265] [ 241.311419][ T8265] Possible unsafe locking scenario: [ 241.311419][ T8265] [ 241.318849][ T8265] CPU0 CPU1 [ 241.324190][ T8265] ---- ---- [ 241.329531][ T8265] lock(sk_lock-AF_SMC/1); [ 241.334021][ T8265] lock((work_completion)(&new_smc->smc_listen_work)); [ 241.343454][ T8265] lock(sk_lock-AF_SMC/1); [ 241.350471][ T8265] lock((work_completion)(&new_smc->smc_listen_work)); [ 241.357393][ T8265] [ 241.357393][ T8265] *** DEADLOCK *** [ 241.357393][ T8265] [ 241.365515][ T8265] 3 locks held by syz.3.579/8265: [ 241.370513][ T8265] #0: ffff8880607d1408 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 241.381034][ T8265] #1: ffff888025ae8258 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x378/0x5f0 [ 241.390415][ T8265] #2: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x107/0xcd0 [ 241.399624][ T8265] [ 241.399624][ T8265] stack backtrace: [ 241.405486][ T8265] CPU: 0 UID: 0 PID: 8265 Comm: syz.3.579 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 241.416050][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 241.426097][ T8265] Call Trace: [ 241.429357][ T8265] [ 241.432269][ T8265] dump_stack_lvl+0x116/0x1f0 [ 241.436934][ T8265] print_circular_bug+0x419/0x5d0 [ 241.441940][ T8265] check_noncircular+0x31a/0x400 [ 241.446858][ T8265] ? __pfx_check_noncircular+0x10/0x10 [ 241.452298][ T8265] ? register_lock_class+0xb1/0x1240 [ 241.457566][ T8265] ? lockdep_lock+0xc6/0x200 [ 241.462147][ T8265] ? __pfx_lockdep_lock+0x10/0x10 [ 241.467160][ T8265] __lock_acquire+0x249e/0x3c40 [ 241.471998][ T8265] ? __pfx___lock_acquire+0x10/0x10 [ 241.477178][ T8265] ? __pfx_mark_lock+0x10/0x10 [ 241.481924][ T8265] lock_acquire.part.0+0x11b/0x380 [ 241.487017][ T8265] ? __flush_work+0x4db/0xcd0 [ 241.491677][ T8265] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 241.497292][ T8265] ? rcu_is_watching+0x12/0xc0 [ 241.502039][ T8265] ? trace_lock_acquire+0x14e/0x1f0 [ 241.507225][ T8265] ? __flush_work+0x4db/0xcd0 [ 241.511885][ T8265] ? lock_acquire+0x2f/0xb0 [ 241.516371][ T8265] ? __flush_work+0x4db/0xcd0 [ 241.521034][ T8265] ? __flush_work+0x4db/0xcd0 [ 241.525694][ T8265] __flush_work+0x4e5/0xcd0 [ 241.530277][ T8265] ? __flush_work+0x4db/0xcd0 [ 241.534937][ T8265] ? __free_zapped_classes+0x291/0x320 [ 241.540382][ T8265] ? mark_lock+0xb5/0xc60 [ 241.544703][ T8265] ? __pfx___flush_work+0x10/0x10 [ 241.549709][ T8265] ? __pfx_wq_barrier_func+0x10/0x10 [ 241.554982][ T8265] ? __smc_release+0x5ba/0x880 [ 241.559726][ T8265] ? __pfx___might_resched+0x10/0x10 [ 241.565001][ T8265] __cancel_work_sync+0x10c/0x130 [ 241.570009][ T8265] smc_clcsock_release+0x5f/0xe0 [ 241.574934][ T8265] __smc_release+0x5c2/0x880 [ 241.579511][ T8265] ? __pfx_sock_def_readable+0x10/0x10 [ 241.584958][ T8265] smc_close_non_accepted+0xda/0x200 [ 241.590225][ T8265] smc_close_active+0xc3c/0x1070 [ 241.595144][ T8265] __smc_release+0x634/0x880 [ 241.599716][ T8265] smc_release+0x1fc/0x5f0 [ 241.604111][ T8265] __sock_release+0xb0/0x270 [ 241.608683][ T8265] ? __pfx_sock_close+0x10/0x10 [ 241.613514][ T8265] sock_close+0x1c/0x30 [ 241.617653][ T8265] __fput+0x3f8/0xb60 [ 241.621620][ T8265] ? _raw_spin_unlock_irq+0x23/0x50 [ 241.626803][ T8265] task_work_run+0x14e/0x250 [ 241.631379][ T8265] ? __pfx_task_work_run+0x10/0x10 [ 241.636473][ T8265] ? __pfx___do_sys_close_range+0x10/0x10 [ 241.642183][ T8265] syscall_exit_to_user_mode+0x27b/0x2a0 [ 241.647804][ T8265] do_syscall_64+0xda/0x250 [ 241.652296][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.658178][ T8265] RIP: 0033:0x7f4eb1d85d29 [ 241.662573][ T8265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.682163][ T8265] RSP: 002b:00007f4eafbf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 241.690559][ T8265] RAX: 0000000000000000 RBX: 00007f4eb1f75fa0 RCX: 00007f4eb1d85d29 [ 241.698510][ T8265] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 241.706467][ T8265] RBP: 00007f4eb1e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 241.714419][ T8265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.722374][ T8265] R13: 0000000000000000 R14: 00007f4eb1f75fa0 R15: 00007ffee8669be8 [ 241.730331][ T8265] [ 241.733350][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.740386][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 241.741291][ T29] audit: type=1400 audit(1736666345.303:682): avc: denied { listen } for pid=8264 comm="syz.3.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.751865][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 241.783018][ T46] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 241.796330][ T46] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 241.806498][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.832541][ T8261] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 242.169021][ T46] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15 [ 242.181521][ T29] audit: type=1400 audit(1736666346.493:683): avc: denied { read } for pid=5175 comm="acpid" name="js0" dev="devtmpfs" ino=2938 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.203663][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.212272][ T29] audit: type=1400 audit(1736666346.493:684): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2938 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.235380][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.242242][ T29] audit: type=1400 audit(1736666346.493:685): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2938 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.266806][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.413839][ T8245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8245 comm=syz.2.575 [ 242.428882][ T9] cdc_ncm 3-1:1.0: failed to get mac address [ 242.435719][ T9] cdc_ncm 3-1:1.0: bind() failure [ 242.442731][ T9] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 242.451137][ T9] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 242.459851][ T9] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 242.469925][ T9] usb 3-1: USB disconnect, device number 18 [ 242.480018][ T5866] usb 1-1: USB disconnect, device number 19 [ 242.480299][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 242.494679][ T5866] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 242.494816][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?