last executing test programs: 9m1.73530575s ago: executing program 4 (id=136): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000001600)=""/70, 0x46}], 0x1, 0xb, 0x7fff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000009905000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x2c8257be, r3, 0x0, 0x1ba8847c99}, 0x38) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f00000001c0)={0x2a, 0xffffffff, 0x4000}, 0xc) close_range(r0, r4, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x20004388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x6, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0x40e660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x71, 0xfffffffb, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0xffffffff, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x2, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r6 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, 0x0, &(0x7f0000000080)=0x1e) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x4840) ioctl$IOC_PR_REGISTER(r7, 0x401870c8, 0x0) 8m57.950161861s ago: executing program 4 (id=148): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xc80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x0, 0xfdfdffff, 0xffff7fff}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) r3 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000300)=r3) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000780)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0xfffffffe) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000780)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)="6b48b2c6fedc1fd5326f6e", 0xb}, {0x0}, {0x0}], 0x3}}, {{&(0x7f0000001b00)=@un=@file={0xfa579406317d78ca, './file0\x00'}, 0x80, &(0x7f0000001c40)}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000006680)) faccessat2(0xffffffffffffffff, 0x0, 0x1c0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) (async) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000080)=0x8}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) 8m57.700784653s ago: executing program 4 (id=152): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000680)={@empty, @local, 0x0}, &(0x7f00000006c0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0], 0x0, 0xdc, &(0x7f00000007c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0x20c89}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_TTL={0x5, 0x8, 0x6}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r16, 0x40814, 0x203}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r14}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="4c030000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="6401028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="800102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000101000008000600", @ANYRES32=r11, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="080007000000000008000100", @ANYRES32=r16, @ANYBLOB="3c00028038000100340001006e6f746966795f70656572735f630e006e740000000000000000000000000000e9b6d5ca030000000800040004000000"], 0x34c}, 0x1, 0x0, 0x0, 0x850}, 0xc010) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x1}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x1800}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40048c0}, 0x0) 8m54.890699746s ago: executing program 4 (id=161): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000023c0)={0x144, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x130, 0x11, 0x0, 0x1, [@nested={0x12c, 0xcf, 0x0, 0x1, [@nested={0x125, 0x146, 0x0, 0x1, [@generic="f5ef56146c91147563276660e594de86923b901b9c", @nested={0x10c, 0x6c, 0x0, 0x1, [@nested={0x108, 0x10f, 0x0, 0x1, [@nested={0x101, 0x11b, 0x0, 0x1, [@generic="44e4ba7c0b0ff113b095b181686c69e6901606a6035b241060d1ba9b116c80da82d5b88cc6363112ecfcfe146d3396e45fbbf0a08b22fd28c11b96cceeebb143edb758f38e41e6198a4aac1b4f64403c0297fdc66d55feb17b3a47961e32432008a761d761630abd62e074f1aeda6ad0a673e1e2f1ef46c79d906ae0a1b56a1cb49371c5044e8535c676535532d332e91b4270db1184a76120ede03ed5473adf06033298dbeef6a61dc38f79dcbab66a59547791ab5c867c0e0244d06d7eeb09d3b84e9bad5626f647e62bd3f0", @typed={0x5, 0x6b, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x105, 0x0, 0x0, @u64=0xfffffffffffffffd}, @typed={0x1a, 0x82, 0x0, 0x0, @binary="9da6d2cfd0d56814fd84a9b4e09bfefb7e71aa6b1338"}]}]}]}]}]}]}]}, 0x144}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) 8m53.96580962s ago: executing program 4 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x18, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x8) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0xfffffffffffffffe) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000008840)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000500)="f0b7e997a8f0b08a4057d08fc8585e6b8749d1f9b8ceabb622d730b070070faa5f067a1bd404ada1aff2db40a599dc02e0490d5167893776c139f6928f1a8834e5077ae8820da3f966f3b6a8ba0c352a002a6ab9059e803354d38503bd6ea9ff990bb8d73b4e25ae6e90ff24c831589bf33d193efb03ff29dd62355fd4c40984cace2bdc2efa4a2e0b768e3939c18fc5c8ff0c744df7dd", 0x97}, {&(0x7f0000000600)="4166d5d3fe833d5cc27dcf3a7a9f0770ae2b5aa85318a540a1a152a4ce1d086e24513bf9833e84e4208aca8dde74de57092ce52d67f2bcfaf55f126e40755044190a14b6ab7b61e640711c35cf0f28acf3129b1bf13f8a70ae17bd8ace749cb40bd6b453b7953bde0fe1fccda7866841d0848fc446d15ab83c3a008eb74c52092f5fbc4f56b5e170c67b8abdcdfea4c9bfced23c5e42cc7183", 0x99}, {&(0x7f00000006c0)="1cdf2ef2bec7b2e9c855c8b453ee553b72ff7b2653cc10c2225863b12737d1266dfb00e69a1dde37f70a0a0bfd1c97cfd06e341293f0d2100e34320e738d7f74390d25dacf8e917f983e930fd59381a2a22e6eadb9570ba0682a2c1beff0e7d4963ceffd44b3c948290a26393615c9504250260c5e31154e8d602aea559f7518484811e0469a1cba29a8b9561fcac73bb1fc121637ef1f49ac2c3af063fb7d3aa6bc39528294a8579e15ac574610c07c91306e23605ef0a281f6c38d7233d8aa63f4304df2c52792f0d4b4c36fd34ead6bb858f9da491ab5b957b4cd469b29d65e51da94aec41d4aecddf472432c535671f056", 0xf3}, {&(0x7f00000007c0)="7e5e86844c5ad1785c00604fa5b35b17cf9b338b66f8bf304c45d624a19b6b80c4ad4789f7e27fcaeb30610302b32b85257159130f4c49cf2781b1ad52d07663753da27f53dc05b5eb4285f24564c303f7e1bb6d3aac2948912d16e8ff001a74276d817988a0613c1db9186468653f497294d44d31a60371fd8acdfd2fa6a6ffbfff72293491f33bb44a849624ac0f1b9fbf4e266ce2c291ed9bc7b7d911040ecb75561de6d3941acdc7658e5f47750bb429ce76fa65cc91f6c768b232c88bbb56371c6714b9cc93089e91b2c9", 0xcd}, {&(0x7f0000000240)="31ee25be52850a416d534a6b64df794c6d7aab96145564c1771dcb73267c4a15439df33e3bd4571028074a3da9e3c194f2843da9d8", 0x35}, {&(0x7f00000003c0)="9b94cbc13470991b8429dae86a8dccedae2b1089fb99c6f732c1dabdfb15107dbb1aba72d9ad7220d47b43836807c47c9792b6ca44d238bb4a6b43b4cb4b87495edfce03b6823033b2ccf284ef1a578f73b9402abc", 0x55}, {&(0x7f0000000f40)="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", 0x1000}], 0x7, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="d518c5dc9480eccf2d2ae196148748bee9e054f086b89c8d038dfd02c48142d3b308d87510904085eb241ccc6e64d6443fd8fc18427043f3e74844dd197976a542b21004513a69b34c0fe57d07839f516e73ae149cadf57e4eb57cc30ab4913b5d902ed342e19318a78e4a4784923ecfb10441f2f6fdda9bddb5814bdff1e78c381750b6e44ae7028e992496374e1d54ca4908e8328ad58b6dbc7a90e15a0f1bbb07099f87b93cc2043fb0e8325d00d4d382b6f40268072526635f2a22b43ca68251613c88edb1e5331aaeb2849c5cc33643f861517bf57dba6b897eadb7ad7a9c57021e87eb728f75fa481430e5b32a89b1f2d926737c", 0xf7}, {&(0x7f0000000a40)="d72c402093339fe8327b2b007248b1bde62cf1d95c2d697cb7f7dbdea0b1e3157fc89c2b9d4f0a0487d8319c17d1c71c486830ece049be7caecbcc7690319adff576ec684b852a031e9bedb11fadaec5325aeff33d4405544dd10f3512f3564cbffa156ca1546c74e00469dff0b75c6bcfa37a65026874f70319b4008b21fd01043f0b09ae4a49864c2c718a3d8aea5f2a4276cfc7ad6047d9aae9e9a2b83d1893449da09c3275f230e25011c63f480d09f62d9950919d425ed981007b56cd96325065c636e5183a8e2697013a32477f05ef770ce1ce31", 0xd7}, {&(0x7f0000000b40)="5e4a2bf8c4b3e5a61891d4c4d0c9bed2a1d426ff80f2725300df5ed51799421e0b981b97eb8625ed48e6329a1dd73ec10b62334d9c7d5ce293243a0fe5206d1a096048a5aec6e821f8a284e6188260413d7b1b88ec60d2e1c8f1e6606a111d6a27484cc95625535c63d29f95a942d77cc5e3c3dadc1ca702c211af87c88f9f0ddc9e56dbb3d2f89c918feb135dcb30e151fc053f1d37e3d3815e2b8b34c16466bc066cf3445a6d9325bd39b6704c6d14a9f585764519cd73a3e24eee23469f8f9cb47d25d32e3c43bbec740a5f714c2b", 0xd0}], 0x3, &(0x7f0000002140)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x34, 0x1, 0x1, [r4, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff, r2, r4, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r5, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r4, r0, r5, r4]}}], 0xd8, 0x4051}}, {{0x0, 0x0, &(0x7f0000006540)=[{&(0x7f0000006200)="c32108b37f70ed3771027e4e7385afb64b83d9599a56659d9af86e5c47b6e19292700b23ac24911cf571bb98214f2c735b838cf46518e0c7c4dc47d002d1c7c2db461c14c8a2c45520a63834967f78426df2738325a4039afa6401d10acf25b9379aa91c08b883f694cb4bc234ed117a77ac160d5c20a7", 0x77}, {&(0x7f0000006380)="21c342c48b088048e3cd3253d1209a61415a7b9fa9b55bf355a589bf459dfc9895998c0c030edcc45b9889bd99811947858142836449c6d010044cf8f27e2e4788ef8ddf13d77a2916979000135c6378df4d067261a7f1e30409863e493604a716c40ef3901482eceb1a3c5754feb70605973d924798bc9ad94a99a59662e55cd83c856b27a49a834293f57635f21fc4705ea5ed478ba178127a17916bb2ca93251b13ab8edbc40fb122691e0ceb45b3d1c2ce0564253c9d2b2eed82bab878390ae3b43fd8d8636b4d1b4777e42892ec2d38f987", 0xd4}, {&(0x7f0000006480)="753ff01ae46cb1e4e4df72d885cd60f376fbe42b367d5fe39726274de1c90b57386ff7409710003e2f2d823e0d3d26c4f5208b10dd556032e6295d02a6881fd287fe52660a99e0e7ce92a61ac1056de9939a0dc44bafb728407b62db8f2fb89b72da2e1249430866259591d7e07e2161769537f559f6db7d65986852ab5077535e4e31b7f1b3462f60061361d096939d3e220485b2c94dbd3a368285c32c82ae75e4a82269fc66a1de6cf854cb3e84375ab1d55c", 0xb4}, {&(0x7f0000006280)="56779be566c95b5334674c936c8435ee75ce8f728ebaea204934c3220908cf91", 0x20}], 0x4, &(0x7f0000006740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r4]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000006800)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000006d00)=[{&(0x7f0000006880)="a1d67d4afedd9380e09966541c96e5ef61dc044e3d4960533fd43819f27888a6d7ed19f473ebe7ffa3c712e943da0c85310f48d5e5f533f59042e8e13f9d548a19084aff0378e58a34354e944a50b53a6aa1c699374050ccb9e670d87e46fd8563002895ef39b4477c19cb2814c1734254b0f8a7914a9ed58a", 0x79}, {&(0x7f0000006900)="dd7b8eaa43e503f66c31fe881a37076ab2afb3b9301dd9a4deb5ab61dc449e6591dcaff4f3f8ea5b4142f52e27c94142505f67fb0ca0a0c23ccf7bf6957e07003427d8bb0f1fecee0294cfadfd8307d8fc2b80b5fd8658be8a928b1e68f81c3b17d543b97870852001a8f67382780661b5af51be416c7b223820b8", 0x7b}, {&(0x7f0000006980)="3c43b8378ffada767bea7e5457c4292a590047b9d416f1f535cb7cb5cf46c610fa6d687d677b82fe1a2653c2fb2aa0fc0f6f9b783bb4298663fd9d9555e36545a67fe197a64a0a6869faab4124f816e6ba", 0x51}, {&(0x7f0000006a00)="67b0de4e70979370fc1b79a904de07d80a9f5bb3d589bc41491f5dbb14da6d940969b26c5ad8249adec45460c468a2525ac6f1504a5435f077fb61922f576440f0fc7101548665c17414113e23b231a68eb207b7da02633fbcc73e8fa7d1b88964eb0dd6c5baf17cd3c9467e1b34af2f8eda568903fcdf57a130fd0679ce4f06935954b870d775a68674c83afebd032bf5e9196274f3857fbdebd8ef1820643d68482cd8cc", 0xa5}, {&(0x7f0000006ac0)="70dc1d9ea218e7e7b19a2694b10a061eb6f8819702240e3621e9f1a8edffdcd6f1a8e5d8c882db749788e7b12c614c023ee0946f81b5ee1c88ed6c08f2fed2178d4cf0864fe3322a010dbd7090716c035140fa136c062e5d50bb4f5fb0c8f8798fd1ec7ec521ad8c1f09865b986f7527f0ddb4e0fe2074ecc86b7b600212d31d9488f496d40752f63ae056cb60cec40b9a828b674a0843afd78cd539262f4a68e5083e49736ff5b9cb0a04bc0158fe4b4ca8", 0xb2}, {&(0x7f0000006b80)="6e03e7e1f853cd511243b30b76adaf682617b60fc8ec366cb5f3a6c450e212a730f62271e28b4e3095467e2c2b5d3d825749ddb0d63e58afdd09732ea1accfa5b16db6e52606f20753a930e099307754aafd13325b4017330edfd5e197a55ee0f3774ee2be3bc657edda81154b778897364be6f23108de96f093ab84ee2cecb1c4ad5c2a940e406fb7f3d721a7d9b1aa988a32d5005df229f3a6c88a10c5f6e8059384e8427a3892c99124ac14913657253ebd582a31ca492e1c4f3db8fc467f0cdb81a210febb261525446eb7edae4d669d", 0xd2}, {&(0x7f0000006c80)="6a968655d5cf4735850305707f8eaa6366bac9fe6419ef00c731e62c9fe9f9e1f43f34d1706f61fceff9cc3a155d69a958755394c8fa66c6524e3ed9470d873dac29570d538cd36932c2", 0x4a}], 0x7, &(0x7f0000006d80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r4, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x40000}}, {{0x0, 0x0, &(0x7f00000072c0)=[{&(0x7f0000006e00)="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", 0xff}, {&(0x7f0000006f00)="23ae3ac9462978001307ba1e9380274fe64754d49e31f84a0f22364e15142b2599a4153c1a4c4cc64fd83edf591420af77c553c1f57c8c9ab3bd8c0cebceea34f89621b8c7f6688ef74ad4c8642b2e4c66b375f7a45d9fd6b7e2136420183cc0411ac4d12a7d865b46fea42d0bfa13969b8d7f0d27775163268a6ba28d8355411ac265468d1f015d29de474aa9514683cddb8f5ebe5003b4bd7a60cae0ce98539a8ae91b8b0b0ca64894", 0xaa}, {&(0x7f0000006fc0)="6f4b45323f2daf1a4a012e1a2794cbf19f4205b686e28369b93801e60af60b3c61d808a9a4b01c99a69120163094e585f9d651505b5fd2a1a49ee448", 0x3c}, {&(0x7f0000007000)="87aa279309a08f87c1de39691f2c3a7a370dd96733b0f728526099db0a6b98adedfcfef715a5647b35919dc152fc5163f55eff59315001878ea55c3fc3413ed181b765c6663584b5e8811fb029dbc8834517b0fdc9cc0a0e72873aa3126b59f1c21e999c3419040dd8555abd377fb0e7c87d258eab24e8ce", 0x78}, {&(0x7f0000007080)="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", 0xfa}, {&(0x7f0000007180)="3751556dc4f19e4368efcd0bd500f986ff4ce40adce590e21d6a9df3a5f313e3c333a2ece42249e297d90208bef7938ed90cbe35b88154532c9496808faeb144b901d0a425a78f6cf09e85", 0x4b}, {&(0x7f0000007200)="37b1cd4de61452e603e2d37f95081996a78d01227094a0f3bfae0f57fed27163e7a2c3684409c9a3bc9c090dbaf1429aa9ff558f4ee39f7a2c81b453d10abefa9dc92390757badc000fc062c8b44c7c26dd9315cfff56c1a73c1cf485417703306fc2ea4530bb3c735be5c1e85db11e439bf7c151c884e05772fe34e6c8602b4aabdd9b18327da276cf2cce53bff45dd30a650210814552552cc0d1b3c10e7284a28f3ec0a697b3ebf2c4a5a4a3c20ff7d20", 0xb2}], 0x7, &(0x7f00000073c0)=[@cred={{0x1c}}], 0x20, 0x4}}, {{&(0x7f0000007400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000008780)=[{&(0x7f0000007480)="8b4ac70895571eee425a2d7f73dfe20c8e6a9e2e54fe29767801a050a2a50abf67c645633950310165fe910747eabf5d4242026a21a9a73e9cba97480d4acb6a4bd981ff471a6f7b43d1ce2b5c1a2a4609ee80fe4e88102fb72a062b38f1eb7e1ddd10e28b25c14ded37339ebb3e841ac8b035d74e6a2668847d2031d8c50d86", 0x80}, {&(0x7f0000007500)="e5e45df75fff297523145093037ffefef8a01dda854fdbf34b4367c90ced4ee4783dd447fa9bac70e64cf277c15b3b3962cefd7f90d50a82161a6b86e30b7bed7fa52fd6e9637e5151c75d60840aabf87a40818f7faabba1c9cac7903e5c9cb031e810bce9277102b7dd21a3008ae99d35248259bb2c363a827c3a7cdff3dcee8083f9c219f747b821023067177fd72ed1e57ae7000b", 0x96}, {&(0x7f00000075c0)="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", 0x1000}, {&(0x7f00000085c0)="cacd10edc738b70b0da10b469c1661ce6ef8da8aed2de24d7f41d885cb1ef60c048cd53eab4cbe6ce1adbe0659b875a5b1818bc8dd029bde49d7d5de44fd28022bd19e6f8583582071cd2b1ae4e96070456f1e2dda65f06701b84ebf2611a90e01cb2d72f2d265ed189cace51c54deff21217b08e54203b4595e6e1d3da7b7f51d43c0396c3e934e6a33b6b830177e073cc7bb26e352e387a41bb534073ba366d2fb0bcf67b3430bd5570e4cdaf958be5d020ae8a9d11d37155825d47eae5f1fc88ee02945d5cddd2ca7ca88479a7111234786385225bf3945842eee51e474b96ec3a31a1cedd4bbe59396", 0xeb}, {&(0x7f00000086c0)="9ae4777c7135641865aa4bb282aba79e057a5e48acc9e86c1946243872aa3230905455ae3c2fec169c13dc805b3f73d64820", 0x32}, {&(0x7f0000008700)="2529ec16c870f4f19e9aef0ec18ec35c9d72132a5fc1199be94978b3e06042b2d2ceaecd8a0a2fed41174ea7035dc426b78e7e1758a20594305229bd8f684d0ce459a9e8b5b36e8176dcd5f61ebfa058dd4ac8b50e2470c4dc841f7cfa2497e8e342bc184263c7efeb31ad36178b", 0x6e}], 0x6, &(0x7f0000008800)}}], 0x6, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2f"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_by_handle_at(r5, &(0x7f0000000600)=ANY=[], 0x101040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200362e967860b1e075a381a70e91570100000000000c0100000000005f00"], 0x0, 0x28, 0x0, 0x1}, 0x28) socket$pppl2tp(0x18, 0x1, 0x1) bind$unix(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x25dfdbfc, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 8m52.64170902s ago: executing program 4 (id=169): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000780)=ANY=[@ANYBLOB="12011003000000108417040040000102030109022d0001010730020904008202030102060921faff0e0122e605090581032000e1af0c09050203400004030d5ba5cb1d1b93873960979480dd86faf8af90fb80dffd3f1f37ab512257"], &(0x7f0000000680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x81, 0xe, 0x10, 0x40, 0x1}, 0x2f, &(0x7f0000000940)=ANY=[@ANYBLOB="050f2f0003148652108eab14ddae0f100408fac617e660061677d86cc7992079e6f20b10010c030061a6465fb8f4948a96e66d2544c6d98453b24be58a66b1de5a149ec308bada858da3ce38406a3b9f9ae5e165317701ec57e667fe8c873aeaaf93fa0f17fee1d989712e368055d7f7af0c1f8a80cae4a3e8f31f1ca1d319a8781b33c5ade0cd2058e5011f2df6dbc55d787ff01680505b76c63eadfc38676bae566741d0f2f3a1f2"], 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44c}}, {0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="460389892e4c87a92c2036e986f39d4f92e777f2d2f743c2db04904d205d24e32310bee7d81e25c71286961dfd96f2b430806bdeeb82beb5a38b9c340e3a7328e4a9b9fbf358"]}, {0x94, &(0x7f0000000580)=ANY=[@ANYBLOB="94032806723fb0b9f28c8ec3e7d75fb09b4bc434565aa5db208f56868d5f81b52398a303dac163abd07c167106de905ab31574095e93b55849841c02a83f86a46971cce8f6c57e84f179d07055f41e10a402c4107294a3037854ee22d3687d86868a3e45d508f3cebacc5d8c6cabc9ff3519ef830881939c86d1ca246ff711ad4db00000"]}, {0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="0803b75e0cad8df6"]}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3409}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000300), 0xffffffcd) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x7a71, 0x0, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) sendto$packet(r2, 0x0, 0x0, 0x8000, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000dc0)={@fallback=r3, 0xffffffffffffffff, 0x0, 0x20}, 0x20) bind$unix(r7, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x288102, 0x0) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0xe01c0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000280)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000040)={0x3, "99bdb1b0c7251b080600f0230a74bd856e3c10db57c3f7484d9ed4190dbc00f3"}) close(r9) syz_clone3(&(0x7f0000000800)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockname$packet(r8, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x70) eventfd2(0xbfb, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000700), 0x1) 8m37.166086502s ago: executing program 32 (id=169): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000780)=ANY=[@ANYBLOB="12011003000000108417040040000102030109022d0001010730020904008202030102060921faff0e0122e605090581032000e1af0c09050203400004030d5ba5cb1d1b93873960979480dd86faf8af90fb80dffd3f1f37ab512257"], &(0x7f0000000680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x81, 0xe, 0x10, 0x40, 0x1}, 0x2f, &(0x7f0000000940)=ANY=[@ANYBLOB="050f2f0003148652108eab14ddae0f100408fac617e660061677d86cc7992079e6f20b10010c030061a6465fb8f4948a96e66d2544c6d98453b24be58a66b1de5a149ec308bada858da3ce38406a3b9f9ae5e165317701ec57e667fe8c873aeaaf93fa0f17fee1d989712e368055d7f7af0c1f8a80cae4a3e8f31f1ca1d319a8781b33c5ade0cd2058e5011f2df6dbc55d787ff01680505b76c63eadfc38676bae566741d0f2f3a1f2"], 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44c}}, {0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="460389892e4c87a92c2036e986f39d4f92e777f2d2f743c2db04904d205d24e32310bee7d81e25c71286961dfd96f2b430806bdeeb82beb5a38b9c340e3a7328e4a9b9fbf358"]}, {0x94, &(0x7f0000000580)=ANY=[@ANYBLOB="94032806723fb0b9f28c8ec3e7d75fb09b4bc434565aa5db208f56868d5f81b52398a303dac163abd07c167106de905ab31574095e93b55849841c02a83f86a46971cce8f6c57e84f179d07055f41e10a402c4107294a3037854ee22d3687d86868a3e45d508f3cebacc5d8c6cabc9ff3519ef830881939c86d1ca246ff711ad4db00000"]}, {0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="0803b75e0cad8df6"]}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3409}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000300), 0xffffffcd) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x7a71, 0x0, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) sendto$packet(r2, 0x0, 0x0, 0x8000, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000dc0)={@fallback=r3, 0xffffffffffffffff, 0x0, 0x20}, 0x20) bind$unix(r7, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x288102, 0x0) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0xe01c0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000280)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000040)={0x3, "99bdb1b0c7251b080600f0230a74bd856e3c10db57c3f7484d9ed4190dbc00f3"}) close(r9) syz_clone3(&(0x7f0000000800)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockname$packet(r8, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x70) eventfd2(0xbfb, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000700), 0x1) 3m47.381772031s ago: executing program 3 (id=1127): syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000fffffffbffff08004500002000002f907800000000ffffffff00006558000c907801000000"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101dcaba720702751903ed90102030109021200010000100009049702"], 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) write$selinux_load(r5, 0x0, 0xffa8) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) r6 = syz_io_uring_setup(0x2b5, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x400000, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r9, 0x0, 0xffffffffffff8000, 0x0) (async) close(r12) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r13, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r13, 0xc4c85512, &(0x7f00000007c0)={{0x2, 0x4, 0xffa, 0x9, 'syz1\x00', 0x6}, 0x1, [0x7ff, 0x1, 0x6a7, 0x200, 0x8, 0x5, 0x8, 0x3, 0x369, 0x3, 0x6, 0x3, 0x0, 0x742, 0x1, 0x3, 0xd4, 0x3, 0x75e, 0xfffffffffffffff7, 0x9, 0x3, 0xfffffffffffffff7, 0x100000000, 0x2, 0x4, 0x3, 0x101, 0x8, 0x2d7f, 0xd, 0x7, 0xe, 0x3, 0x100000001, 0x7, 0xe, 0x1135, 0xf1a6, 0x7b5, 0x100000001, 0x5d, 0x3, 0x7, 0x0, 0x7f, 0x10, 0x8000, 0x3, 0x6, 0x80000000, 0x0, 0x9, 0xfffffffffffffff6, 0xd, 0xe000000000000000, 0xa000000000000000, 0x3, 0x9, 0x69a, 0x5, 0x2, 0xfffffffffffffff7, 0x0, 0xffffffff, 0x5, 0x100000001, 0xa2, 0x7, 0xbb, 0x0, 0x1000000000000, 0x2, 0x7, 0x4, 0x6, 0x10000, 0x3, 0x9, 0x8, 0x7, 0x80, 0x2, 0x2380, 0x3, 0x4, 0x7, 0x37385a1c, 0xfffffffffffffc35, 0x1086, 0x6, 0x33, 0x77, 0xfffffffffffffffa, 0x2, 0x3, 0x7fffffffffffffff, 0x6, 0x6, 0x1, 0x2, 0xfe, 0x0, 0x7, 0x400, 0x3, 0x2, 0x6, 0x80, 0x0, 0x4cfe, 0x5, 0x5, 0x100000001, 0x3, 0xfffffffffffffffd, 0xb, 0x10000, 0x4, 0x20000000000000, 0x4, 0x5, 0xedb, 0x8000000000000000, 0xcde, 0x7, 0x6, 0xc06a]}) close(r10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) accept4(r1, 0x0, &(0x7f00000000c0), 0x80800) 3m45.956228217s ago: executing program 3 (id=1131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xf, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x4, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffe, 0xb}}}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0b6d61e255d280e5b48c7502764dcbe370b467dfb4d96bcd708f165e6388beab968610d136ff40f92d826e433311e2993c02573506dbc69ecc69e1287b4f6"], 0x7c}, 0x1, 0x0, 0x0, 0x2402e880}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000500d1030000080003400000000114000000110001000000bff1000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) 3m45.544586875s ago: executing program 3 (id=1133): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$sg(&(0x7f0000000400), 0x3, 0x204402) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdc01, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x4004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair(0x18, 0x4, 0x2, &(0x7f0000000000)) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) readlinkat(r5, 0x0, &(0x7f00000001c0)=""/5, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000700), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r7, @ANYRES16, @ANYBLOB, @ANYBLOB], 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 3m43.950456266s ago: executing program 3 (id=1136): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) getdents64(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x245059, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x6, 0x26, {0x26, 0x8, "0b41f8b041cbc046657bbc26c5ffb437c02a0b003cffb5d0c2f66c689c92525ed564ab09"}}, &(0x7f0000000080)={0x0, 0x3, 0xe8, @string={0xe8, 0x3, "1c62745b0524eb5d5fff59db018be2e8c49db1bfc70eaa9827f41fc5f6df11c4651304a21390a66050119698122bdab3587aa8fe29e27ef66387aa5d53c58e9f13953c5995b2ef0d708417b42a4030d6e38410ae70c499d6a01482986a04eed49768bd6f7d0a7fdad09d48f008b17eaca72a80586e471118c912d0d1c9661b0d62bc33073b42f82e971a58c9f9671d8fb6b93e2fb738cc6ef20554be5de519472beae557a39eb83141bb70da7e40ec43f52a26c1a0f1f34df73dc9e2ffd59c16a673e06ee1eb00c61c85455f0ded57800414ca0b7655055435d42afc506f5210b17aaa9e9a04"}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x15, 0x72, "d57fefbbeae62a9e7deec6bb8fe2067538bcd81f647a54d8bd42313be9e13b612286ebfb6abca31186f3ccea03105ae93df2357bb729dd1bd04f3bc5e8abd56de9a52a395a57594eb8665135b35b804afabaaf188eecad7c7a064f05b7fe6a79439cd259f2e2bcf9b78b73672ca3653d94eb"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000002c0)={0x20, 0x0, 0xd5, {0xd3, "6d72240d995a2de55f60b4da00c93c6f97781868c1d7a6e0f8e35176358d5a99b6c7e2ad31c221c1b03fe639f1ab04c925e5763c8aab3bdacbfb7eae09cd2fabeef20d89d3887a3cec565d65de610d1ee86a5a9dbdd4c44ccf63d3f534aca168db42c7a0d1b3dfab5c5f4c0dff56b74a479b9c956fa3d11bac7ef4acb073918cf392edea21a96de4646112375c9e5773774e203efc022f017ace333466c0a32dcfbcbc88333c98d730b314d814189033ee5b1269eefd0df8c37ad8198ff6ced4bd40bdafd91ee79095a140a5d19a6d9eddeb63"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x88}}) 3m41.101390295s ago: executing program 3 (id=1145): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="0924e2017a713126d14cf7837116cae4bab3c2b6d2a75705bc53d31a3260350e", 0x20}, {&(0x7f00000006c0)="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", 0xfd}, {&(0x7f0000000800)="cbed8be70931f1c610dec0d9dff1a0290da2954eb4fc32e22178e26ff889713d2f0bf39680a63e5ef65b2203247a917a2d2502d1244bb3f97d041adbb8c0c5a558678b0e248871ac7e0d5a0fe3b360d50cf9f73f7fa870bc782a51e02f83f00a7caabd27d9b1ed23d158484654a46a4a7578637b1ada84e671ab32cc6f0909f861b375ba", 0x84}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2]}}], 0x100, 0x5}}, {{&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f40)="0d791371acfba5f9be0d36f3f603418bd49390bbd630da7c4de57c0c659b06b17a01dde7e0b382b4933dfbdaedea7b2b15b36119f6eb90d025bb3a5c198e9ff37b9e09a68d3c2b0b654e92182d4cc7c43f01a312658cbca374c6cc917f415ecbb3ae063f54f4c51f", 0x68}, {&(0x7f0000000fc0)="87e3df410d7aa021bb7d8ce4db756631e9127df26235c0be3dcdb5cafc8c71c362a433d6caae99f0157c44adb4bd9ac97c2fc7e15ca89c3c2024f068b8958c4a30acd18f8d48c1f8ef79e413d04debbccd03bc252241d0fe525da3cd7b2916fd00c8212148e0bc6c4bb07a7a7fb078", 0x6f}], 0x2, &(0x7f0000001200)=[@rights={{0x24, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0xe8, 0x4040001}}, {{&(0x7f0000001300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000008c0)="4d24fb1cf76acc94c92e5bafee215e1b238474e6f2a561a94ecca7d6cd4ae187ea074fa96b8018a41a9d8251a01f8224e729f078b9e1b39ad27b1a137222e28c1f294461e903bbef44cc4917e5e66c1243a288c7097cee3beb235e602b126e1379fde28b9c68a6c79d02eb46b066e3d1339bce3f9cac17dda87d03e0f2ce959ad4de0a299b07", 0x86}, {&(0x7f00000013c0)="9aafd7c8b25a2d85983465441d0082cdc512f6a804c1fbd4ac8de53eff99d23474ac1ab2c233d46471582a7083b14f0afb884e24802a90f29a5a7f1a701297b8a5ac690acd771320e63d1b7f21396b74787984e17040e7f6ebe48b076a635304b4aedc3bf27ea99fa1006ee1d7cd7675fdff4b63fdca7da34e01fb7d68e843b5c848b7cb653640800801e4ec9cfc562e5453fb8abb8c3b0772f3acb5b97b4600058a2d9b8492958d903285bcea0e", 0xae}, {&(0x7f0000001480)="e9a8daa75d5cb8967a279d534b7add7e50d71703f8706aa2404d7bdc818cba19bb061d0c1d949f96c4a0c84be0fe51c531ac539dfba5e176d7e47004ab31f30df53521e511a79b2656aa15702e8fad9c79a8128280877c7ebe3aa44e43887a63d9f58af090b6eaddfc58d8b8840b22e09dbb79d124e43745d751b73608329ddd414482fa5488a2eda3c12239974d6f40f034fdc430a2c5d683bb76d4de4c8ac7828b5c69fee3325535a0", 0xaa}], 0x3, &(0x7f0000001600)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78, 0xc880}}], 0x3, 0x40004) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x70) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x4, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x2c5f00000000, 0x9, 0xe2, 0x9, 0x3, 0x9, 0x4, 0x2}, {0x8, 0x0, 0x8, 0x2}, 0xf, 0x6e6bc0, 0x0, 0x1, 0x2, 0x3}, {{@in=@empty, 0x4d6, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x3, 0x2, 0xfb, 0x8000, 0xfffffbb8}}, 0xe8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0xad8}) r5 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x110, 0xc8, 0x8, 0x0, 0x5803, 0x220, 0x2e8, 0x2e8, 0x220, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd0, 0x110, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x0, 0x42, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc8) dup3(r5, 0xffffffffffffffff, 0x0) 3m39.916890612s ago: executing program 3 (id=1150): socket$inet_tcp(0x2, 0x1, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xf7ffffff}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r1, &(0x7f0000000240)=""/253, 0xfd) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102377, 0x19058) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x7ffe, 0xb577, {0x0}, {0xffffffffffffffff}, 0x20000000010001, 0x6}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x13fffe, 0x0, 0x0, 0x1e, 0xc, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04c728964a02447a75d00a69ea917deb7ba193b1e7772fd29f30e6aecb600", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r7 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000100)="7838fd341a0700cc28331d49733137d9", 0x10) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 3m23.764932422s ago: executing program 33 (id=1150): socket$inet_tcp(0x2, 0x1, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xf7ffffff}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r1, &(0x7f0000000240)=""/253, 0xfd) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102377, 0x19058) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x7ffe, 0xb577, {0x0}, {0xffffffffffffffff}, 0x20000000010001, 0x6}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x13fffe, 0x0, 0x0, 0x1e, 0xc, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04c728964a02447a75d00a69ea917deb7ba193b1e7772fd29f30e6aecb600", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r7 = socket(0x2b, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000100)="7838fd341a0700cc28331d49733137d9", 0x10) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 18.346196751s ago: executing program 1 (id=1817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2}, 0x18) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$isdn(0x22, 0x2, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1800) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) 13.730189546s ago: executing program 1 (id=1825): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r1, 0xc0001502, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='-\x00', &(0x7f0000000340)='./file0/../file0\x00', r0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x80000e, 0x12, 0xffffffffffffffff, 0x100000000) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r3, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f5", 0x93, 0x0, &(0x7f0000000700)=@ax25={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 13.567251511s ago: executing program 2 (id=1827): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000000000000000000008500000023000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 13.37109243s ago: executing program 2 (id=1829): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x245059, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000002c0)={0x20, 0x0, 0xd5, {0xd3, "6d72240d995a2de55f60b4da00c93c6f97781868c1d7a6e0f8e35176358d5a99b6c7e2ad31c221c1b03fe639f1ab04c925e5763c8aab3bdacbfb7eae09cd2fabeef20d89d3887a3cec565d65de610d1ee86a5a9dbdd4c44ccf63d3f534aca168db42c7a0d1b3dfab5c5f4c0dff56b74a479b9c956fa3d11bac7ef4acb073918cf392edea21a96de4646112375c9e5773774e203efc022f017ace333466c0a32dcfbcbc88333c98d730b314d814189033ee5b1269eefd0df8c37ad8198ff6ced4bd40bdafd91ee79095a140a5d19a6d9eddeb63"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x88}}) 11.758098882s ago: executing program 1 (id=1835): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000032400400010000009501000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0xa7, 0x880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x1f, 0xfffffffb, 0x34014c40, 0x0, 0x0, 0x5b0, 0x0, 0x0, 0x0, 0x10, 0xb}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000008340)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8000, 0xfffffffc, r6, r7, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r4) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000080)={0x53, 0x68, &(0x7f0000000040)="c44b70231fb69d77", {0x10000, 0x101, 0x41415270, 0x8, 0xa3, 0x8, 0x4, 0x80000}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f00000002c0)=0xe8) mount$afs(&(0x7f00000003c0)=@cell={0x23, 'syz0:', 'syz0', '.readonly'}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x908000, &(0x7f0000000680)=ANY=[@ANYBLOB='flock=write,subj_role=.readonly,uid>', @ANYRESDEC=r9, @ANYBLOB="5b560e15c6be0a8caaee028bfc7873ec38432bd9692e6671e7bc64bc3974c382513e0e62a85c4bfe50a03b15b5be934b72358ff0f236a6d63ac9f64db7985889bdd3cdbcc8d1174f719c47886ee62c3aa8b47353ceff0bebadc8dc776e1567b2a96dac18583304"]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x20821, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmoda=00000000000000000040000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',default_permissions,max_read=0x0000000000000009,blksize=0x0000000000001400,default_permissions,context=root,smackfsroot=/dev/v4l-subdev#\x00,fsmagic=0x0000000000000007,subj_user=/dev/v4l-subdev#\x00,dont_appraise,\x00']) 8.976385439s ago: executing program 2 (id=1842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) select(0x0, 0x0, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={r1, r2/1000+60000}) signalfd(r0, &(0x7f0000000180)={[0x5]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100210126bd7000000000000a000000000000009e3b209aec47b7d40000000008000a00040000003b5a8663883afc3b1430f15ad16771a6cacc9c966c25dabdecdc7209000000ad7a60d0be5092e81b4c8379e0487fbf4c86df45765586f1ab3a2ec80caeadb411e8000800000000000012cadd8e33cd4e9eb55c53979c81d04a81b431553fa24d769f255e64ade8ce0f64c16e85bfaac45ed2609eff3eebdf3a21e19ce855edbf"], 0x24}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) semtimedop(r4, &(0x7f0000000140)=[{0x1, 0x3c, 0x1800}, {0x4, 0xac1b}], 0x2, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000000d}) shutdown(0xffffffffffffffff, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r8, &(0x7f0000000000), 0x0) close(0xffffffffffffffff) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x4, 0x0, 0x5, "750538440ff92fe2aaf1beea7cedc151042cd9893bc31f80716a120d8be6d7f81cd81e960c000386e7255f0669b7401fcb8d69d00000d51de08a00ee1d9a27", 0x33}, 0x60) socketpair(0x25, 0x1, 0x0, &(0x7f0000000200)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) 7.524193884s ago: executing program 1 (id=1846): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="020400020a00000000000000070000000300060000000e0002004e24e00000020000000000000000950d0000eeff03d40581000000000000030005003c00000002004e20ac1414bb0000000000000000508a08737ce0d4d161bce2075c894d774a80af570ec667558c2f01a48783ac2cf37ff799361917bdfe83176040fc8d94cd7cf82370e7649d02638680a47c812fb0ae9f5481031a838e7bd04cc35825a1383ec08d4751a9967791b704f87f92addb870ddf716af25a3178bd099a9bf6ff906467609b016dcb"], 0x8a}, 0x1, 0x400000000000000}, 0x8000) socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x81, 0xffffffff}) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x7) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffe, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905546b3"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102396, 0x18ffc) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0xfffffffffffffffe, 0x0, 0x4000000000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r4, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) write(r2, &(0x7f0000000280)="8e", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) getpgid(0x0) 7.520375451s ago: executing program 2 (id=1847): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xfffffffffffffc5e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0xffffffff, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x9, 0x0}}}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000020000000c00000018110000", @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, r5, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.316154945s ago: executing program 6 (id=1848): syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0xe42, &(0x7f0000000980)={0x0, 0x4, 0x1000, 0x0, 0x3b9}, 0x0, &(0x7f00000004c0)) shutdown(0xffffffffffffffff, 0x1) r0 = socket(0x26, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002cc0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) recvmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000440)=[{&(0x7f00000030c0)=""/4096, 0x1000}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = getpid() r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000500)={0x5, 0x6, 0x2, 0x8}) syz_clone3(&(0x7f0000000200)={0x305000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/40, 0x28, &(0x7f0000000a00)=""/4096, &(0x7f0000000180)=[r3, r3, r3, r3, r3, r3, r3, r3, r3], 0x9}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="f228445d03da5ba45f52964f8cccdda294aff020991da00bcdbf3b2298ffe0b5e2c201b0e34916d1c62fc7a8cfbcaef5cbd196fdf62f1b08e05a9a1e1bbc45013cbb3b49b8eeedfc6c125760c48e58b45d9b1c710f4dc013d1f2c93425334533f22b8b537402bb054f111cd732d890551b569f6ee946d3a89c0190bc8a5522cd47e4c2ca623d2fecc9cce37fce0d45dbff4c0f54470c784d5a56909e5e3806e124f6a1a99e9439883f2f53159a2c25524a1c2114bd6d4b91073daaec654989e5cf60604b4fc230853b0f62767aa3c6d19fe809db610babd15477b59abcd805c6877b5e8a4e", 0xe5) fcntl$getown(r5, 0x9) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, r3, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 5.92006135s ago: executing program 6 (id=1851): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.851554802s ago: executing program 6 (id=1854): setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) r0 = epoll_create1(0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x20008, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d05}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x1, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000600)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x3, 0x0, 0x0, @fd}, @typed={0xb, 0xf, 0x0, 0x0, @str='zonefs\x00'}]}]}, 0x30}], 0x1}, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10) r10 = timerfd_create(0x0, 0x0) timerfd_settime(r10, 0x0, 0x0, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r0, &(0x7f0000000040)) r12 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r12, &(0x7f0000000b80)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7fffffff, 0x0) 4.473324608s ago: executing program 1 (id=1856): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.469101808s ago: executing program 2 (id=1857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) select(0x0, 0x0, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={r1, r2/1000+60000}) signalfd(r0, &(0x7f0000000180)={[0x5]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100210126bd7000000000000a000000000000009e3b209aec47b7d40000000008000a00040000003b5a8663883afc3b1430f15ad16771a6cacc9c966c25dabdecdc7209000000ad7a60d0be5092e81b4c8379e0487fbf4c86df45765586f1ab3a2ec80caeadb411e8000800000000000012cadd8e33cd4e9eb55c53979c81d04a81b431553fa24d769f255e64ade8ce0f64c16e85bfaac45ed2609eff3eebdf3a21e19ce855edbf"], 0x24}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) semtimedop(r4, &(0x7f0000000140)=[{0x1, 0x3c, 0x1800}, {0x4, 0xac1b}], 0x2, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000000d}) shutdown(0xffffffffffffffff, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r8, &(0x7f0000000000), 0x0) close(0xffffffffffffffff) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x4, 0x0, 0x5, "750538440ff92fe2aaf1beea7cedc151042cd9893bc31f80716a120d8be6d7f81cd81e960c000386e7255f0669b7401fcb8d69d00000d51de08a00ee1d9a27", 0x33}, 0x60) socketpair(0x25, 0x1, 0x0, &(0x7f0000000200)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) 3.654311549s ago: executing program 0 (id=1858): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x5) pipe2$9p(&(0x7f00000005c0), 0x800) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x834, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESOCT]) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) tkill(r1, 0xb) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010a25bd7000fddbdf250400000008000c000300000014000600fc02000000000000000000000000000014000500fe8000000000000000000000000000bb080002"], 0x4c}, 0x1, 0x0, 0x0, 0x88d3}, 0x4080) futex(&(0x7f0000000840)=0x1, 0xd, 0x1, &(0x7f0000000880)={0x77359400}, 0x0, 0x2) close(0xffffffffffffffff) 3.103211288s ago: executing program 6 (id=1859): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, 0x0, 0x0) 3.100375977s ago: executing program 1 (id=1860): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xfd44) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 2.924395263s ago: executing program 6 (id=1861): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$binfmt_elf64(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1b0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') lseek(r5, 0x98b, 0x2) getdents64(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYRES64=r4], 0x48) r7 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0xf) close(r8) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r10, 0x0, 0x0, 0x11a9) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) 2.730865611s ago: executing program 0 (id=1862): syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) mmap$xdp(&(0x7f0000542000/0x2000)=nil, 0x2000, 0x2000001, 0x12, 0xffffffffffffffff, 0x180000000) r0 = socket(0xa, 0x5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x2400c871}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='ext4_mb_release_group_pa\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x23e69000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d04, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b00), 0x0, 0x891) recvmmsg(r3, &(0x7f0000000000), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2.518023818s ago: executing program 5 (id=1863): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x80081) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000300)={0x2, {0x80800, 0x7f, 0x40000008, 0xfffffffd}}) 2.40506751s ago: executing program 5 (id=1864): r0 = socket(0x1, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x520, 0x380, 0x1c0, 0x0, 0x1c0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private, 0x21}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2a}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x520}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local, 0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) connect(r2, &(0x7f0000000040)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x800, 0x2}, 0x80) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x3a, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 2.193035004s ago: executing program 5 (id=1865): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000000000000000000008500000023000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000080)="c1188e19b95d02", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 2.132687354s ago: executing program 5 (id=1866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = dup(r3) getsockopt$inet_buf(r4, 0x118, 0x1, 0x0, 0x0) 1.727994187s ago: executing program 0 (id=1867): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="660f3a0b31f6260f30ba2000b002ee65260ff4e767660f3814df0f01c30f0f82a0009e66b9800000c00f326635001000000f30baf80c66b888b6278a66efbafc0c66edf4", 0x44}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="6622f6f3a782d303660f6ab6000026f3aa0fbdf1268056ff009e0fc71c2e0f34", 0x20}], 0x1, 0x48, 0x0, 0x19) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="6622f6f3a782d303660f6ab6000026f3aa0fbdf1268056ff009e0fc71c2e0f34", 0x20}], 0x1, 0x48, 0x0, 0x19) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.665368535s ago: executing program 2 (id=1868): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync_file_range(0xffffffffffffffff, 0x9, 0x0, 0x5) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x140) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1210c0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xffe0}, {0xfff2, 0xa}, {0x9, 0xfff1}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x16c, 0x30, 0x1, 0x0, 0x0, {}, [{0x158, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x128, 0x14, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf8e}]}, {0xd1, 0x6, "c981b918df2ddab4ce5070fdb8dec43f99798750e7520f4d140b326a983aa0f49feba4fa7bafdf53b87ef8343ac78b17e48e1b71ffb786121ea44612e60b8088b5b0af80dcd20dc545e48e32ce08a28a7095f6ef8e1bc6675b0f17b9ac362bc84f3af65f16fccd3f7d1e490058c12d6b5cf1b3c9cea7c87942269d75df0137af5fe22ae5f2452a12c616424064d90bd57ddddacf0d9f3d631a4f1b21cb412b00978e99dd7d5868e4cc5143846c463b05adf8fac327f6633731e63c7cb08a04cdcb25e3a88b21bb6d2e4fe81c7e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000280)=0xb) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) 1.370208778s ago: executing program 0 (id=1869): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x12, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r4, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000060000000000000000000000850000002e000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.203954268s ago: executing program 6 (id=1870): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r1) sendmmsg$unix(r1, &(0x7f0000000180), 0x0, 0x4004) r2 = socket(0x2a, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x84}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000300)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x1607c0, 0x78e22799f4a46ffe) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x4, 0x2000400, 0x3ff, 0x10000d, 0x3, 0x6, 0x4}, 0x1c) recvmmsg$unix(r4, &(0x7f0000000100)=[{{&(0x7f0000001d40), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001dc0)=""/69, 0x45}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = syz_open_dev$sndpcmc(0x0, 0x0, 0x509602) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64=r5, @ANYBLOB="00022abd7000fddbdf250800000006000300ff01000014000800626f6e645f736c6176655f30000000000500"], 0x40}, 0x1, 0x0, 0x0, 0x24000004}, 0x4004) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/hardlockup_count', 0x169a82, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 628.443296ms ago: executing program 5 (id=1871): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000), 0x0) 369.907299ms ago: executing program 0 (id=1872): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000040000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x2, 0x0, 0x80000001, 0x6, 0x0, "7f1227f7adf97affe4ffff7d1800"}) r3 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000500)={r5}) 357.865748ms ago: executing program 5 (id=1873): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa0}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = syz_io_uring_setup(0x4f6, &(0x7f00000002c0)={0x0, 0x80fd, 0x100, 0x1, 0x322}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "7e72708d"}, @global=@item_012={0x1, 0x1, 0x3, "a7"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa0}}}}}]}}]}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket(0x28, 0x5, 0x0) (async) syz_io_uring_setup(0x4f6, &(0x7f00000002c0)={0x0, 0x80fd, 0x100, 0x1, 0x322}, &(0x7f0000000080), &(0x7f0000000440)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x0, 0x0, 0x1}) (async) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "7e72708d"}, @global=@item_012={0x1, 0x1, 0x3, "a7"}]}}, 0x0}, 0x0) (async) 0s ago: executing program 0 (id=1874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000280)={{&(0x7f00003cb000/0x1000)=nil, 0x1000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) ptrace$poke(0x4, r5, &(0x7f0000000240), 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000000c0), 0x0, 0x4805) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x5, 0x27c, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000380), 0xfffffffffffffffd, 0x402) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000240)={&(0x7f00000001c0)=[{0xf, 0x5200, 0x2000, &(0x7f0000000280)="1c"}, {0x0, 0x1000, 0x0, 0x0}, {0x5, 0x4200, 0x0, 0x0}], 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0xfffffffc, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) kernel console output (not intermixed with test programs): overrun [ 492.034045][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 492.153353][T11723] ceph: No mds server is up or the cluster is laggy [ 492.394958][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 492.812871][ T30] audit: type=1400 audit(1762542064.460:1395): avc: denied { write } for pid=11733 comm="syz.0.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 492.953639][ T30] audit: type=1400 audit(1762542064.591:1396): avc: denied { ioctl } for pid=11741 comm="syz.2.1312" path="socket:[36326]" dev="sockfs" ino=36326 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 493.144330][ T30] audit: type=1400 audit(1762542064.591:1397): avc: denied { connect } for pid=11741 comm="syz.2.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 493.166696][ T30] audit: type=1400 audit(1762542064.591:1398): avc: denied { write } for pid=11741 comm="syz.2.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 493.705109][T11747] ip6erspan0: entered promiscuous mode [ 494.254214][ T30] audit: type=1400 audit(1762542065.807:1399): avc: denied { ioctl } for pid=11757 comm="syz.6.1316" path="socket:[36358]" dev="sockfs" ino=36358 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 494.418463][ T30] audit: type=1400 audit(1762542065.807:1400): avc: denied { write } for pid=11757 comm="syz.6.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 494.984208][ T30] audit: type=1400 audit(1762542065.807:1401): avc: denied { read } for pid=11757 comm="syz.6.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 495.002552][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1318'. [ 495.282884][T11772] program syz.1.1319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.297308][ T30] audit: type=1804 audit(1762542065.807:1402): pid=11762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1317" name="/newroot/294/file0" dev="tmpfs" ino=1578 res=1 errno=0 [ 495.319969][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.342735][ T5900] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 497.538765][ T5900] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 497.547365][ T5900] usb 3-1: config 0 has no interface number 0 [ 497.718422][ T5900] usb 3-1: config 0 interface 29 has no altsetting 0 [ 497.736254][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 497.736267][ T30] audit: type=1400 audit(1762542069.034:1404): avc: denied { name_bind } for pid=11798 comm="syz.6.1326" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 497.878213][ T5900] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 497.922014][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.939667][ T30] audit: type=1400 audit(1762542069.259:1405): avc: denied { create } for pid=11812 comm="syz.1.1328" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 498.108259][ T5900] usb 3-1: Product: syz [ 498.122491][ T5900] usb 3-1: Manufacturer: syz [ 498.148352][ T5900] usb 3-1: SerialNumber: syz [ 498.193426][ T5900] usb 3-1: config 0 descriptor?? [ 498.911087][ T5900] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 499.241652][T11784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.251037][T11784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.320551][T11832] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 499.884139][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 500.460777][ T5900] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 500.484331][ T5900] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 500.599658][T11849] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1335'. [ 501.197679][ T5900] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 501.212330][ T5900] usb 3-1: USB disconnect, device number 37 [ 501.793604][T11874] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 502.744532][T11849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1335'. [ 503.726043][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1344'. [ 503.833184][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1344'. [ 503.905659][T11894] netlink: 'syz.6.1344': attribute type 13 has an invalid length. [ 503.931212][T11894] netlink: 'syz.6.1344': attribute type 14 has an invalid length. [ 504.969991][ T5817] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 505.144637][ T5817] usb 7-1: Using ep0 maxpacket: 16 [ 505.151465][ T30] audit: type=1400 audit(1762542075.994:1406): avc: denied { bind } for pid=11922 comm="syz.2.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 505.163286][ T5817] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 505.204231][T11929] FAULT_INJECTION: forcing a failure. [ 505.204231][T11929] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 505.217499][ T5817] usb 7-1: config 0 has no interface number 0 [ 505.225170][T11929] CPU: 1 UID: 0 PID: 11929 Comm: syz.5.1351 Not tainted syzkaller #0 PREEMPT(full) [ 505.225192][T11929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 505.225200][T11929] Call Trace: [ 505.225206][T11929] [ 505.225212][T11929] dump_stack_lvl+0x16c/0x1f0 [ 505.225243][T11929] should_fail_ex+0x512/0x640 [ 505.225265][T11929] should_fail_alloc_page+0xe7/0x130 [ 505.225285][T11929] prepare_alloc_pages+0x3c2/0x610 [ 505.225309][T11929] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 505.225334][T11929] ? mark_held_locks+0x49/0x80 [ 505.225360][T11929] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 505.225384][T11929] ? lockdep_hardirqs_on+0x7c/0x110 [ 505.225408][T11929] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 505.225430][T11929] ? stack_depot_save_flags+0x3de/0x9c0 [ 505.225454][T11929] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 505.225477][T11929] ? __kasan_kmalloc+0xaa/0xb0 [ 505.225493][T11929] ? write_ldt+0x3ca/0xd20 [ 505.225508][T11929] ? do_syscall_64+0xcd/0xfa0 [ 505.225521][T11929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.225570][T11929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 505.225595][T11929] ? policy_nodemask+0xea/0x4e0 [ 505.225620][T11929] alloc_pages_mpol+0x1fb/0x550 [ 505.225642][T11929] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 505.225667][T11929] alloc_pages_noprof+0x131/0x390 [ 505.225687][T11929] get_zeroed_page_noprof+0x18/0xb0 [ 505.225703][T11929] alloc_ldt_struct+0x9f/0x1a0 [ 505.225720][T11929] write_ldt+0x3ca/0xd20 [ 505.225738][T11929] ? __fget_files+0x20e/0x3c0 [ 505.225756][T11929] ? __pfx_write_ldt+0x10/0x10 [ 505.225773][T11929] ? fput+0x9b/0xd0 [ 505.225794][T11929] ? ksys_write+0x1ac/0x250 [ 505.225808][T11929] ? __pfx_ksys_write+0x10/0x10 [ 505.225832][T11929] __x64_sys_modify_ldt+0xb1/0x170 [ 505.225851][T11929] do_syscall_64+0xcd/0xfa0 [ 505.225868][T11929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.225884][T11929] RIP: 0033:0x7f323d38f6c9 [ 505.225899][T11929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.225915][T11929] RSP: 002b:00007f323e2dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 505.225931][T11929] RAX: ffffffffffffffda RBX: 00007f323d5e5fa0 RCX: 00007f323d38f6c9 [ 505.225942][T11929] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000001 [ 505.225951][T11929] RBP: 00007f323e2dc090 R08: 0000000000000000 R09: 0000000000000000 [ 505.225960][T11929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.225969][T11929] R13: 00007f323d5e6038 R14: 00007f323d5e5fa0 R15: 00007ffc62c5bb38 [ 505.225994][T11929] [ 505.235962][ T5817] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 505.545004][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.574778][ T5817] usb 7-1: Product: syz [ 505.579493][ T5817] usb 7-1: Manufacturer: syz [ 505.580595][T11929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.584542][ T5817] usb 7-1: SerialNumber: syz [ 505.649522][ T5817] usb 7-1: config 0 descriptor?? [ 505.656712][ T5817] hub 7-1:0.132: bad descriptor, ignoring hub [ 505.667351][ T5817] hub 7-1:0.132: probe with driver hub failed with error -5 [ 505.701185][ T5817] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input31 [ 506.519997][ T5817] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 506.740196][T11949] batadv_slave_1: entered promiscuous mode [ 507.093723][ T11] block nbd0: Possible stuck request ffff888026a70000: control (read@0,4096B). Runtime 300 seconds [ 507.104794][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 507.131425][ T5817] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.141830][ T5817] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 507.156047][ T5817] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 507.170148][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.180427][ T5817] usb 6-1: config 0 descriptor?? [ 507.198603][ T5817] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 507.369532][T11957] program syz.2.1357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.071098][T11949] batadv_slave_1: left promiscuous mode [ 509.192916][ T42] usb 7-1: USB disconnect, device number 3 [ 509.312190][ T30] audit: type=1400 audit(1762542079.885:1407): avc: denied { setopt } for pid=11943 comm="syz.5.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.343340][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1355'. [ 509.688703][T11974] IPVS: Error connecting to the multicast addr [ 510.152743][T11966] libceph: resolve '4.' (ret=-3): failed [ 510.193680][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.625300][ T5894] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 510.842704][ T5894] usb 2-1: config 0 has an invalid interface number: 97 but max is 0 [ 510.860351][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.890159][ T5894] usb 2-1: config 0 has no interface number 0 [ 510.935498][ T5894] usb 2-1: too many endpoints for config 0 interface 97 altsetting 109: 101, using maximum allowed: 30 [ 510.956802][ T5894] usb 2-1: config 0 interface 97 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 511.043643][ T5894] usb 2-1: config 0 interface 97 has no altsetting 0 [ 511.054035][ T5894] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 511.063545][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.077284][ T5894] usb 2-1: config 0 descriptor?? [ 511.394161][ T5894] usb 2-1: string descriptor 0 read error: -71 [ 511.407463][ T5894] usb 2-1: USB disconnect, device number 31 [ 511.426604][ T42] usb 6-1: USB disconnect, device number 29 [ 512.010772][ T30] audit: type=1400 audit(1762542082.420:1408): avc: denied { ioctl } for pid=12010 comm="syz.0.1371" path="socket:[37978]" dev="sockfs" ino=37978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 512.325024][ T30] audit: type=1400 audit(1762542082.644:1409): avc: denied { listen } for pid=12016 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 512.971141][ T30] audit: type=1400 audit(1762542082.654:1410): avc: denied { accept } for pid=12016 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.080026][ T30] audit: type=1804 audit(1762542082.691:1411): pid=12021 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1374" name="/newroot/28/file0" dev="tmpfs" ino=169 res=1 errno=0 [ 513.302310][T12032] tmpfs: Unknown parameter 'mpÚÍG¶Á™èLÔ°ýÅ; [ 513.302310][T12032] Z™¾öûÊ.ô«' [ 513.856492][ T30] audit: type=1400 audit(1762542084.141:1412): avc: denied { ioctl } for pid=12014 comm="syz.1.1372" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 513.935648][T12020] support for cryptoloop has been removed. Use dm-crypt instead. [ 516.398625][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1384'. [ 516.507464][T12071] program syz.5.1385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.780613][ T30] audit: type=1804 audit(1762542086.844:1413): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1387" name="/newroot/296/file0" dev="tmpfs" ino=1602 res=1 errno=0 [ 517.752038][T12088] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 518.141675][T12095] No control pipe specified [ 518.536382][ T5894] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 518.640561][ T30] audit: type=1400 audit(1762542088.612:1414): avc: denied { read } for pid=12107 comm="syz.0.1394" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 518.755084][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 518.764302][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1394'. [ 518.773320][T12112] netlink: 'syz.0.1394': attribute type 11 has an invalid length. [ 518.781165][T12112] netlink: 'syz.0.1394': attribute type 7 has an invalid length. [ 519.076458][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.113899][ T5894] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 519.654774][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 519.662285][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.863636][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 519.885480][ T5894] usb 3-1: config 0 descriptor?? [ 520.580230][T12117] ceph: No mds server is up or the cluster is laggy [ 520.583284][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 521.622800][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 521.801939][T12098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.828970][ T30] audit: type=1400 audit(1762542091.587:1415): avc: denied { unmount } for pid=11196 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 521.829936][T12098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.135918][ T30] audit: type=1400 audit(1762542091.886:1416): avc: denied { setopt } for pid=12139 comm="syz.5.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 522.160721][T12136] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 522.221765][T12148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.348828][T12136] usb 7-1: config 0 interface 0 has no altsetting 0 [ 522.499304][ T30] audit: type=1400 audit(1762542091.961:1417): avc: denied { map } for pid=12134 comm="syz.1.1399" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 522.526836][T12136] usb 7-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 522.564334][T12136] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.587177][T12136] usb 7-1: config 0 descriptor?? [ 522.775318][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 522.793384][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 522.825080][ T5894] usb 3-1: USB disconnect, device number 38 [ 522.931371][T12163] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 522.951945][ T30] audit: type=1400 audit(1762542092.653:1418): avc: denied { create } for pid=12162 comm="syz.5.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 522.982744][ T30] audit: type=1400 audit(1762542092.672:1419): avc: denied { watch watch_reads } for pid=12164 comm="syz.0.1408" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 523.034099][T12136] usbhid 7-1:0.0: can't add hid device: -71 [ 523.040840][T12136] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 523.055672][T12136] usb 7-1: USB disconnect, device number 4 [ 523.146213][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 523.208272][ T5817] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 523.316836][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 523.327910][ T9] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 523.337006][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.347776][ T9] usb 2-1: config 0 descriptor?? [ 523.357789][ T5817] usb 6-1: device descriptor read/64, error -71 [ 523.409062][T12175] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1411'. [ 523.532274][T12177] serio: Serial port ptm0 [ 523.590502][ T9] usb 2-1: USB disconnect, device number 32 [ 523.658251][ T5817] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 523.916165][ T5817] usb 6-1: device descriptor read/64, error -71 [ 524.267501][T12186] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1412'. [ 524.420622][ T30] audit: type=1400 audit(1762542093.635:1420): avc: denied { bind } for pid=12179 comm="syz.6.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 524.456639][ T5817] usb usb6-port1: attempt power cycle [ 524.481853][ T30] audit: type=1400 audit(1762542093.645:1421): avc: denied { connect } for pid=12179 comm="syz.6.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 524.516165][ T30] audit: type=1400 audit(1762542093.645:1422): avc: denied { ioctl } for pid=12179 comm="syz.6.1412" path="socket:[38528]" dev="sockfs" ino=38528 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 524.687228][T12194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1415'. [ 524.833034][ T5817] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 525.035372][ T5817] usb 6-1: device descriptor read/8, error -71 [ 525.400294][ T5817] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 525.465273][ T5817] usb 6-1: device descriptor read/8, error -71 [ 525.543250][T12208] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1419'. [ 525.592662][ T5817] usb usb6-port1: unable to enumerate USB device [ 526.001773][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 526.013387][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 526.022596][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 526.031668][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 526.040720][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 526.049792][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 526.475764][ T30] audit: type=1400 audit(1762542095.946:1423): avc: denied { map } for pid=12224 comm="syz.5.1423" path="socket:[38778]" dev="sockfs" ino=38778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 526.660917][ T30] audit: type=1400 audit(1762542095.974:1424): avc: denied { map } for pid=12224 comm="syz.5.1423" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 526.780777][ T30] audit: type=1400 audit(1762542095.983:1425): avc: denied { execute } for pid=12224 comm="syz.5.1423" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 527.687374][ T5817] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 527.797034][ T30] audit: type=1326 audit(1762542097.180:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.0.1430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe29a98f6c9 code=0x0 [ 528.413144][ T30] audit: type=1400 audit(1762542097.573:1427): avc: denied { sys_nice } for pid=12243 comm="syz.6.1428" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 528.490881][ T5817] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 528.499977][ T5817] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 528.509074][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.538694][ T5817] usb 3-1: config 0 descriptor?? [ 528.661085][T12256] input: syz1 as /devices/virtual/input/input32 [ 529.814204][ T24] usb 3-1: USB disconnect, device number 39 [ 531.047086][T12268] loop4: detected capacity change from 0 to 2559 [ 531.054074][T12268] buffer_io_error: 334 callbacks suppressed [ 531.054087][T12268] Buffer I/O error on dev loop4, logical block 0, async page read [ 531.105924][T12268] Buffer I/O error on dev loop4, logical block 0, async page read [ 531.442735][T12268] Buffer I/O error on dev loop4, logical block 0, async page read [ 531.476163][T12268] loop4: unable to read partition table [ 531.480647][T12273] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 531.482110][T12268] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 531.536122][T12273] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 531.544628][T12273] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 531.564425][T12273] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 531.573709][ T5816] Buffer I/O error on dev loop4, logical block 319, async page read [ 531.596598][T12273] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 531.781392][T12273] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 531.825262][ T5183] ldm_validate_partition_table(): Disk read failed. [ 531.832020][ T5183] Dev loop4: unable to read RDB block 0 [ 531.878112][ T979] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 531.886324][ T5183] loop4: unable to read partition table [ 532.059859][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 532.266130][ T979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.283129][ T979] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 532.295465][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 532.316375][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 532.352289][ T979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 532.365304][ T30] audit: type=1400 audit(1762542101.427:1428): avc: denied { read } for pid=12283 comm="syz.0.1439" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 532.409890][ T979] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 532.433396][ T30] audit: type=1400 audit(1762542101.427:1429): avc: denied { open } for pid=12283 comm="syz.0.1439" path="/293/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 532.457022][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 532.465101][ T979] usb 2-1: Product: syz [ 532.487515][ T979] usb 2-1: Manufacturer: syz [ 532.492151][ T979] usb 2-1: SerialNumber: syz [ 532.509229][ T30] audit: type=1400 audit(1762542101.427:1430): avc: denied { ioctl } for pid=12283 comm="syz.0.1439" path="/293/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 532.535917][ T979] usb 2-1: config 0 descriptor?? [ 532.583845][ T30] audit: type=1400 audit(1762542101.558:1431): avc: denied { write } for pid=12290 comm="syz.5.1441" path="socket:[37865]" dev="sockfs" ino=37865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 532.639559][ T30] audit: type=1400 audit(1762542101.680:1432): avc: denied { read } for pid=12290 comm="syz.5.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 532.815914][T12297] program syz.0.1442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.970643][ T979] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 532.977449][ T979] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 533.184706][ T979] radio-si470x 2-1:0.0: software version 14, hardware version 146 [ 533.210210][ T979] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 533.341432][ T30] audit: type=1326 audit(1762542102.363:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12301 comm="syz.0.1443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe29a98f6c9 code=0x0 [ 533.406034][ T979] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 533.415192][ T979] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 533.422509][ T979] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 533.431235][ T979] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 533.480211][ T979] usb 2-1: USB disconnect, device number 33 [ 534.398906][T12317] fuse: Bad value for 'fd' [ 536.198958][T12330] loop4: detected capacity change from 0 to 2559 [ 536.208481][T12330] ldm_validate_partition_table(): Disk read failed. [ 536.216123][T12330] Dev loop4: unable to read RDB block 0 [ 536.248748][T12330] loop4: unable to read partition table [ 536.254871][T12330] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 536.430020][ T30] audit: type=1400 audit(1762542105.169:1434): avc: denied { connect } for pid=12323 comm="syz.6.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 536.482948][T12331] buffer_io_error: 494 callbacks suppressed [ 536.482978][T12331] Buffer I/O error on dev loop4, logical block 148, lost async page write [ 536.498276][T12331] Buffer I/O error on dev loop4, logical block 149, lost async page write [ 536.508080][T12331] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 536.517384][T12331] Buffer I/O error on dev loop4, logical block 151, lost async page write [ 536.533157][T12331] Buffer I/O error on dev loop4, logical block 152, lost async page write [ 536.542276][T12331] Buffer I/O error on dev loop4, logical block 153, lost async page write [ 536.551332][T12331] Buffer I/O error on dev loop4, logical block 154, lost async page write [ 536.560253][T12331] Buffer I/O error on dev loop4, logical block 155, lost async page write [ 536.570472][T12331] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 536.581978][T12331] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 536.796017][ T5183] ldm_validate_partition_table(): Disk read failed. [ 537.271303][ T5183] Dev loop4: unable to read RDB block 0 [ 537.281872][ T5183] loop4: unable to read partition table [ 537.764406][T12342] program syz.5.1453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.677941][ T979] libceph: connect (1)[c::]:6789 error -101 [ 538.798532][T12349] ceph: No mds server is up or the cluster is laggy [ 538.893303][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 538.904113][T12337] [U]  [ 539.169467][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 539.175501][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 539.371924][ T30] audit: type=1326 audit(1762542108.003:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12363 comm="syz.2.1459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48c098f6c9 code=0x0 [ 539.394887][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.499568][T12368] __nla_validate_parse: 35 callbacks suppressed [ 539.499580][T12368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1460'. [ 539.608000][ T11] block nbd0: Possible stuck request ffff888026a70000: control (read@0,4096B). Runtime 330 seconds [ 539.798388][T12373] program syz.5.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.007431][ T30] audit: type=1804 audit(1762542108.611:1436): pid=12379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1464" name="/newroot/314/file0" dev="tmpfs" ino=1695 res=1 errno=0 [ 540.788512][T12387] program syz.6.1465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.466549][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 541.473704][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 541.564336][ T5885] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 541.567765][T12406] ceph: No mds server is up or the cluster is laggy [ 541.774893][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 541.783916][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 541.863499][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 541.889699][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.916804][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 541.931923][T12325] syz.0.1448 (12325): drop_caches: 1 [ 541.972654][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 542.002118][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 542.029274][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 542.069780][ T5885] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 542.085709][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 542.376647][ T5885] usb 3-1: Product: syz [ 542.380838][ T5885] usb 3-1: Manufacturer: syz [ 542.385427][ T5885] usb 3-1: SerialNumber: syz [ 542.419738][ T5885] usb 3-1: config 0 descriptor?? [ 542.447395][ T30] audit: type=1400 audit(1762542110.884:1437): avc: denied { listen } for pid=12422 comm="syz.5.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 542.825477][ T5885] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 542.832951][ T5885] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 543.058896][ T5885] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 543.105451][ T5885] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 543.182414][ T5885] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 543.370793][ T5885] usb 3-1: USB disconnect, device number 40 [ 543.509620][T12437] program syz.6.1480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 544.045108][T12443] tipc: Started in network mode [ 544.049997][T12443] tipc: Node identity 080211000001, cluster identity 4711 [ 544.081655][T12443] tipc: Enabled bearer , priority 0 [ 544.103688][T12444] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 544.133574][T12444] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 544.185303][T12444] tipc: Resetting bearer [ 544.258457][ T6201] tipc: Resetting bearer [ 544.797513][T12463] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 544.810214][T12463] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 545.374838][ T24] tipc: Node number set to 134418688 [ 545.393953][ T30] audit: type=1326 audit(1762542113.559:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323d38f6c9 code=0x7ffc0000 [ 545.558254][ T30] audit: type=1326 audit(1762542113.559:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323d38f6c9 code=0x7ffc0000 [ 545.628439][ T30] audit: type=1326 audit(1762542113.559:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f323d38f6c9 code=0x7ffc0000 [ 545.726223][ T30] audit: type=1326 audit(1762542113.559:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323d38f6c9 code=0x7ffc0000 [ 545.780048][ T30] audit: type=1326 audit(1762542113.559:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323d38f6c9 code=0x7ffc0000 [ 545.939800][ T30] audit: type=1326 audit(1762542113.559:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f323d38f6c9 code=0x7ffc0000 [ 545.965149][ T30] audit: type=1326 audit(1762542113.559:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323d38f6c9 code=0x7ffc0000 [ 546.002300][ T30] audit: type=1326 audit(1762542113.559:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323d38f6c9 code=0x7ffc0000 [ 546.509938][ T30] audit: type=1326 audit(1762542113.559:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f323d38f6c9 code=0x7ffc0000 [ 546.603472][ T30] audit: type=1326 audit(1762542113.569:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323d38f6c9 code=0x7ffc0000 [ 547.121037][T12486] program syz.1.1494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.572601][ T5819] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 548.149269][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 548.309585][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 548.317627][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.330365][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 548.342352][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 548.354437][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 548.437986][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 548.623648][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 548.780532][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 548.796170][ T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 548.805270][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 548.807406][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.813372][ T9] usb 2-1: Product: syz [ 548.813390][ T9] usb 2-1: Manufacturer: syz [ 548.813403][ T9] usb 2-1: SerialNumber: syz [ 548.837885][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 548.838596][ T9] usb 2-1: config 0 descriptor?? [ 548.847481][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 548.861282][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.882065][ T24] usb 3-1: config 0 descriptor?? [ 549.146809][ T9] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 549.171087][ T9] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 549.219673][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1502'. [ 549.360228][ T9] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 549.384361][ T9] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 549.400131][ T9] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 550.663214][ T9] usb 2-1: USB disconnect, device number 34 [ 551.010396][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 551.917094][ T9] usb 3-1: USB disconnect, device number 41 [ 552.024605][T12536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.113525][T12536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.265801][ T979] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 552.521944][ T9] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 552.684373][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 552.684406][ T30] audit: type=1400 audit(1762542127.453:1484): avc: denied { getopt } for pid=12550 comm="syz.0.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 552.855097][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 552.872207][ T9] usb 2-1: config 0 has no interface number 0 [ 552.887551][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 12447, setting to 8 [ 552.900720][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 553.185621][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.222722][ T9] usb 2-1: config 0 descriptor?? [ 553.229364][T12534] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 553.244151][ T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 553.357332][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'. [ 553.499701][ T979] usb 2-1: USB disconnect, device number 35 [ 556.332200][ T30] audit: type=1400 audit(1762542130.521:1485): avc: denied { execute_no_trans } for pid=12577 comm="syz.1.1519" path="/325/file0" dev="tmpfs" ino=1751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 556.786000][T12591] loop5: detected capacity change from 0 to 7 [ 556.796543][T12591] Dev loop5: unable to read RDB block 7 [ 556.804895][T12591] loop5: unable to read partition table [ 556.811118][T12591] loop5: partition table beyond EOD, truncated [ 556.817365][T12591] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 556.828468][ T30] audit: type=1804 audit(1762542131.288:1486): pid=12595 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1523" name="/newroot/244/file0" dev="tmpfs" ino=1308 res=1 errno=0 [ 556.850985][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.740917][ T9] libceph: connect (1)[c::]:6789 error -101 [ 557.746926][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 557.842832][T12602] ceph: No mds server is up or the cluster is laggy [ 558.104390][ T9] libceph: connect (1)[c::]:6789 error -101 [ 558.156145][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 558.676134][T12618] program syz.0.1530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.700658][ T30] audit: type=1400 audit(1762542133.084:1487): avc: denied { map } for pid=12622 comm="syz.5.1532" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 558.724617][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.013721][T12631] binder: 12622:12631 ioctl c0306201 200000000680 returned -14 [ 559.928138][ T30] audit: type=1400 audit(1762542133.131:1488): avc: denied { call } for pid=12622 comm="syz.5.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 559.947456][ T30] audit: type=1400 audit(1762542133.131:1489): avc: denied { transfer } for pid=12622 comm="syz.5.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 561.052797][ T5817] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 562.570897][ T30] audit: type=1400 audit(1762542133.281:1490): avc: denied { accept } for pid=12624 comm="syz.6.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 562.797293][T12642] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 562.803816][T12642] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 562.818591][T12642] vhci_hcd vhci_hcd.0: Device attached [ 562.854443][T12646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.881285][ T5894] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 563.281411][T12662] bridge0: entered promiscuous mode [ 563.288283][T12662] macsec1: entered promiscuous mode [ 563.621060][ T5894] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 563.642195][ T5894] usb 6-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 563.646660][ T979] usb 34-1: SetAddress Request (2) to port 0 [ 563.662128][ T979] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 563.716527][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.930461][ T5894] usb 6-1: config 0 descriptor?? [ 564.296513][ T5894] usb 6-1: USB disconnect, device number 35 [ 565.392010][T12695] program syz.1.1547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.975848][T12643] vhci_hcd: connection reset by peer [ 566.016595][ T60] vhci_hcd: stop threads [ 566.021708][ T60] vhci_hcd: release socket [ 566.040803][ T60] vhci_hcd: disconnect device [ 566.085368][T12715] block device autoloading is deprecated and will be removed. [ 566.105941][ T30] audit: type=1400 audit(1762542139.987:1491): avc: denied { write } for pid=12714 comm="syz.0.1553" name="file0" dev="tmpfs" ino=1651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 566.212226][ T30] audit: type=1400 audit(1762542139.987:1492): avc: denied { open } for pid=12714 comm="syz.0.1553" path="/311/file0" dev="tmpfs" ino=1651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 566.235867][ T30] audit: type=1400 audit(1762542140.062:1493): avc: denied { ioctl } for pid=12714 comm="syz.0.1553" path="/311/file0" dev="tmpfs" ino=1651 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 566.644094][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 566.836508][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 566.851757][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.863271][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.150036][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 567.159816][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.174520][ T24] usb 7-1: config 0 descriptor?? [ 567.184859][ T24] hub 7-1:0.0: bad descriptor, ignoring hub [ 567.192845][ T24] hub 7-1:0.0: probe with driver hub failed with error -5 [ 567.209974][ T24] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 568.172521][ T24] libceph: connect (1)[c::]:6789 error -101 [ 568.178823][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 568.283504][T12750] ceph: No mds server is up or the cluster is laggy [ 568.579412][ T5817] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 568.707087][ T30] audit: type=1400 audit(1762542142.363:1494): avc: denied { listen } for pid=12724 comm="syz.6.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 568.783450][ T30] audit: type=1400 audit(1762542142.485:1495): avc: denied { accept } for pid=12724 comm="syz.6.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 569.021120][ T5817] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 569.049436][ T5817] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 569.065078][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.101620][ T5817] usb 2-1: config 0 descriptor?? [ 569.107997][ T5880] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 569.117223][ T979] usb 34-1: device descriptor read/8, error -110 [ 569.308416][ T5880] usb 3-1: config 0 interface 0 has no altsetting 0 [ 569.329203][ T5880] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 569.348712][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.372929][ T5900] usb 2-1: USB disconnect, device number 36 [ 569.404256][ T5880] usb 3-1: config 0 descriptor?? [ 569.563834][ T979] usb usb34-port1: attempt power cycle [ 569.870826][ T5880] usbhid 3-1:0.0: can't add hid device: -71 [ 569.879971][ T5880] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 570.138714][ T5880] usb 3-1: USB disconnect, device number 42 [ 570.322569][ T979] usb usb34-port1: unable to enumerate USB device [ 570.344825][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1567'. [ 570.386054][ T5894] usb 7-1: USB disconnect, device number 6 [ 570.447014][ T30] audit: type=1804 audit(1762542144.075:1496): pid=12811 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1569" name="/newroot/317/file0" dev="tmpfs" ino=1684 res=1 errno=0 [ 570.535346][ T5900] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 571.123344][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 571.294495][ T5900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.308162][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 571.332999][ T5900] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 571.401576][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.458725][ T5900] usb 2-1: config 0 descriptor?? [ 571.492396][ T5900] hub 2-1:0.0: bad descriptor, ignoring hub [ 571.515703][ T5900] hub 2-1:0.0: probe with driver hub failed with error -5 [ 571.530652][ T5900] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 571.753514][ T30] audit: type=1400 audit(1762542145.263:1497): avc: denied { append } for pid=12828 comm="syz.6.1573" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 571.797044][ T11] block nbd0: Possible stuck request ffff888026a70000: control (read@0,4096B). Runtime 360 seconds [ 571.990978][T12833] program syz.5.1574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.375056][ T30] audit: type=1326 audit(1762542145.890:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.6.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8858f6c9 code=0x7fc00000 [ 572.458978][T12847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1572'. [ 573.609670][T12859] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 575.463167][ T30] audit: type=1804 audit(1762542148.771:1499): pid=12878 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1582" name="/newroot/319/file0" dev="tmpfs" ino=1695 res=1 errno=0 [ 575.503600][T12879] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 575.682643][ T30] audit: type=1400 audit(1762542148.827:1500): avc: denied { ioctl } for pid=12872 comm="syz.2.1583" path="socket:[41209]" dev="sockfs" ino=41209 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 575.778834][ T5880] usb 2-1: USB disconnect, device number 37 [ 575.798234][T12888] program syz.1.1585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.877950][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.353999][T12892] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 576.417855][T12898] binder: 12893:12898 ioctl c018620c 200000000100 returned -1 [ 577.336267][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 578.775543][ T5880] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 578.776279][T12136] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 578.950218][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 578.956333][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 578.981199][ T5880] usb 6-1: device descriptor read/64, error -71 [ 579.023770][T12136] usb 7-1: Using ep0 maxpacket: 8 [ 579.039223][T12136] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.268108][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 579.278309][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 579.285119][T12937] ceph: No mds server is up or the cluster is laggy [ 579.292049][ T5880] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 579.324255][T12136] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 579.350417][ T30] audit: type=1400 audit(1762542152.409:1501): avc: denied { setopt } for pid=12943 comm="syz.2.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 579.401002][ T30] audit: type=1400 audit(1762542152.447:1502): avc: denied { read } for pid=12945 comm="syz.0.1598" lport=55835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 579.436077][T12136] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 579.482695][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 579.494633][ T5880] usb 6-1: device descriptor read/64, error -71 [ 579.503794][T12136] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 579.611970][ T5880] usb usb6-port1: attempt power cycle [ 579.639921][T12136] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 579.697447][T12136] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 579.706636][T12136] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 579.715529][T12136] usb 7-1: Product: syz [ 579.720186][T12136] usb 7-1: Manufacturer: syz [ 579.724789][T12136] usb 7-1: SerialNumber: syz [ 579.753531][T12136] usb 7-1: config 0 descriptor?? [ 579.837314][ T30] audit: type=1400 audit(1762542152.858:1503): avc: denied { relabelfrom } for pid=12943 comm="syz.2.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 579.915746][ T30] audit: type=1400 audit(1762542152.896:1504): avc: denied { relabelto } for pid=12943 comm="syz.2.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 579.938715][T12959] ubi: mtd0 is already attached to ubi31 [ 579.999643][ T5880] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 580.024315][T12136] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 580.039912][ T5880] usb 6-1: device descriptor read/8, error -71 [ 580.064114][T12136] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 580.237379][T12136] radio-si470x 7-1:0.0: software version 14, hardware version 146 [ 580.259299][T12136] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 580.295927][ T5880] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 580.339313][ T5880] usb 6-1: device descriptor read/8, error -71 [ 580.456640][ T5880] usb usb6-port1: unable to enumerate USB device [ 580.551001][T12136] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 580.576099][T12136] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 580.583478][T12136] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 580.592210][T12136] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 581.165513][T12136] usb 7-1: USB disconnect, device number 7 [ 581.308081][T12981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12981 comm=syz.6.1605 [ 581.640811][T12981] pim6reg: entered allmulticast mode [ 581.732484][ T30] audit: type=1804 audit(1762542154.636:1505): pid=12988 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1608" name="/newroot/344/file0" dev="tmpfs" ino=1835 res=1 errno=0 [ 581.755029][ C0] vkms_vblank_simulate: vblank timer overrun [ 582.017082][ T5894] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 582.552189][ T5894] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 582.568736][ T5894] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 582.588103][ T5894] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 582.678672][T13001] FAULT_INJECTION: forcing a failure. [ 582.678672][T13001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.691925][T13001] CPU: 1 UID: 0 PID: 13001 Comm: syz.5.1610 Not tainted syzkaller #0 PREEMPT(full) [ 582.691947][T13001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 582.691957][T13001] Call Trace: [ 582.691964][T13001] [ 582.691970][T13001] dump_stack_lvl+0x16c/0x1f0 [ 582.692002][T13001] should_fail_ex+0x512/0x640 [ 582.692028][T13001] _copy_from_user+0x2e/0xd0 [ 582.692050][T13001] copy_msghdr_from_user+0x98/0x160 [ 582.692074][T13001] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 582.692095][T13001] ? rcu_is_watching+0x12/0xc0 [ 582.692130][T13001] ___sys_sendmsg+0xfe/0x1d0 [ 582.692154][T13001] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.692174][T13001] ? __lock_acquire+0x622/0x1c90 [ 582.692233][T13001] __sys_sendmsg+0x16d/0x220 [ 582.692256][T13001] ? __pfx___sys_sendmsg+0x10/0x10 [ 582.692277][T13001] ? rcu_is_watching+0x12/0xc0 [ 582.692309][T13001] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 582.692337][T13001] do_syscall_64+0xcd/0xfa0 [ 582.692355][T13001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.692372][T13001] RIP: 0033:0x7f323d38f6c9 [ 582.692386][T13001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.692402][T13001] RSP: 002b:00007f323e29a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.692418][T13001] RAX: ffffffffffffffda RBX: 00007f323d5e6180 RCX: 00007f323d38f6c9 [ 582.692429][T13001] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000006 [ 582.692439][T13001] RBP: 00007f323e29a090 R08: 0000000000000000 R09: 0000000000000000 [ 582.692449][T13001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.692458][T13001] R13: 00007f323d5e6218 R14: 00007f323d5e6180 R15: 00007ffc62c5bb38 [ 582.692484][T13001] [ 582.919590][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.927988][ T5894] usb 2-1: Product: syz [ 582.932439][ T5894] usb 2-1: Manufacturer: syz [ 582.937512][ T5894] usb 2-1: SerialNumber: syz [ 582.952175][ T5894] usb 2-1: config 0 descriptor?? [ 582.957736][T12986] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 582.976982][T12986] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 583.637774][T13011] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 583.647499][T13011] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 583.678291][ T5894] Error reading MAC address [ 583.826688][T13016] netlink: 'syz.5.1615': attribute type 27 has an invalid length. [ 583.905086][ T5880] usb 2-1: USB disconnect, device number 38 [ 584.157918][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 584.824524][T13016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.889476][T13016] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 584.897511][T13016] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 584.908285][T13016] batman_adv: batadv0: Interface deactivated: gretap1 [ 584.983111][T13017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.075907][T13017] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.228369][T13017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.330833][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.340334][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.355956][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.368274][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.547274][ T5900] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 585.919364][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 585.938789][ T5900] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 586.093097][ T5900] usb 3-1: config 0 has no interface number 0 [ 586.106679][ T5900] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 586.122260][ T5900] usb 3-1: config 0 interface 85 has no altsetting 0 [ 586.172660][ T5900] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 586.181794][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.190088][ T5900] usb 3-1: Product: syz [ 586.194347][ T5900] usb 3-1: Manufacturer: syz [ 586.207009][ T5900] usb 3-1: SerialNumber: syz [ 586.239524][ T5900] usb 3-1: config 0 descriptor?? [ 586.408560][ T30] audit: type=1804 audit(1762542158.995:1506): pid=13050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1623" name="/newroot/326/file0" dev="tmpfs" ino=1731 res=1 errno=0 [ 586.548246][T13054] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input36 [ 587.244418][ T5900] appletouch 3-1:0.85: Geyser mode initialized. [ 587.253704][ T5900] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input35 [ 587.326625][ T30] audit: type=1400 audit(1762542159.855:1507): avc: denied { read } for pid=13039 comm="syz.2.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 587.390636][T13063] netlink: 'syz.2.1620': attribute type 13 has an invalid length. [ 587.418741][T13063] netlink: 'syz.2.1620': attribute type 17 has an invalid length. [ 587.421887][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 587.486540][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 587.564848][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1624'. [ 587.647529][T13058] ceph: No mds server is up or the cluster is laggy [ 587.674052][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 587.702313][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 587.932474][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 587.991403][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 588.015179][T13069] ceph: No mds server is up or the cluster is laggy [ 588.114000][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 588.136840][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'. [ 588.142959][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 588.242083][ T5983] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 588.483746][ T5983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 588.504458][T13063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.539205][ T5983] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 588.555318][ T5983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.592874][ T5983] usb 2-1: config 0 descriptor?? [ 588.623751][ T30] audit: type=1326 audit(1762542161.081:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13084 comm="syz.6.1628" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f8858f6c9 code=0x0 [ 588.660117][ T5983] usb 3-1: USB disconnect, device number 43 [ 588.716484][ T5983] appletouch 3-1:0.85: input: appletouch disconnected [ 588.833846][ T5900] usb 2-1: USB disconnect, device number 39 [ 589.366935][T13108] fuse: Bad value for 'user_id' [ 589.383082][T13108] fuse: Bad value for 'user_id' [ 589.691362][ T30] audit: type=1400 audit(1762542161.997:1509): avc: denied { read } for pid=13107 comm="syz.2.1633" path="socket:[42501]" dev="sockfs" ino=42501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 590.676580][ T5983] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 590.784998][T13141] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 590.879574][ T5983] usb 2-1: Using ep0 maxpacket: 16 [ 590.901579][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 590.923338][ T5983] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 590.943070][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.957239][T12136] libceph: connect (1)[c::]:6789 error -101 [ 590.963235][T12136] libceph: mon0 (1)[c::]:6789 connect error [ 590.980661][ T5983] usb 2-1: Product: syz [ 590.992174][ T5983] usb 2-1: Manufacturer: syz [ 591.007173][ T5983] usb 2-1: SerialNumber: syz [ 591.012845][T13147] ceph: No mds server is up or the cluster is laggy [ 591.116651][ T5983] usb 2-1: config 0 descriptor?? [ 591.140161][ T5983] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 591.165285][ T5983] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 591.781751][ T5983] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 591.947968][T13122] tipc: Resetting bearer [ 592.069713][ T5983] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 592.165704][ T5983] em28xx 2-1:0.0: board has no eeprom [ 592.237402][ T5983] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 592.245335][ T5983] em28xx 2-1:0.0: dvb set to bulk mode. [ 592.274049][T13168] binder_alloc: binder_alloc_mmap_handler: 13165 200000ffe000-200001000000 already mapped failed -16 [ 592.627092][T12136] em28xx 2-1:0.0: Binding DVB extension [ 592.644718][ T5983] usb 2-1: USB disconnect, device number 40 [ 592.651837][ T5983] em28xx 2-1:0.0: Disconnecting em28xx [ 592.741678][T12136] em28xx 2-1:0.0: Registering input extension [ 592.752093][ T5983] em28xx 2-1:0.0: Closing input extension [ 592.798713][ T5983] em28xx 2-1:0.0: Freeing device [ 592.900901][T13176] macsec1: entered allmulticast mode [ 592.906865][T13176] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 593.071612][T13180] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 593.224767][ T5983] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 593.456784][T13197] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1650'. [ 593.465863][T13197] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 593.500142][ T5983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 593.509152][ T5983] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 593.538819][ T5983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.569840][ T5983] usb 2-1: config 0 descriptor?? [ 593.669148][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 593.680320][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 593.791478][T13204] ceph: No mds server is up or the cluster is laggy [ 593.857337][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1652'. [ 593.968015][ T5983] usb 2-1: USB disconnect, device number 41 [ 594.947013][T13243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1657'. [ 594.972289][ T30] audit: type=1400 audit(1762542166.992:1510): avc: denied { getopt } for pid=13242 comm="syz.1.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 596.428749][ T5894] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 596.558202][ T5900] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 596.599736][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 596.606496][ T5894] usb 6-1: config 251 has an invalid interface number: 48 but max is 0 [ 596.626108][ T5894] usb 6-1: config 251 has no interface number 0 [ 596.632816][ T5894] usb 6-1: config 251 interface 48 has no altsetting 0 [ 596.642204][ T5894] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f6.07 [ 596.651637][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.660060][ T5894] usb 6-1: Product: syz [ 596.664604][ T5894] usb 6-1: Manufacturer: syz [ 596.670211][ T5894] usb 6-1: SerialNumber: syz [ 596.731523][ T5900] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 596.746207][ T5983] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 596.753835][ T5900] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 596.753861][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.756219][ T5900] usb 2-1: config 0 descriptor?? [ 596.933747][T13284] team0: Port device team_slave_0 removed [ 596.941469][ T5983] usb 3-1: Using ep0 maxpacket: 32 [ 596.948509][ T5983] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 596.984165][ T5983] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 596.999992][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 597.010672][ T5983] usb 3-1: Product: syz [ 597.016668][ T5983] usb 3-1: Manufacturer: syz [ 597.021614][ T5983] usb 3-1: SerialNumber: syz [ 597.033010][ T5983] usb 3-1: config 0 descriptor?? [ 597.044669][T13289] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 597.047830][ T5880] usb 2-1: USB disconnect, device number 42 [ 597.091067][ T5900] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 597.129836][ T5894] usb 6-1: USB disconnect, device number 40 [ 597.277494][ T5900] usb 7-1: config 0 interface 0 has no altsetting 0 [ 597.286732][ T5900] usb 7-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 597.296727][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.311774][ T5900] usb 7-1: config 0 descriptor?? [ 597.334554][ T5894] usb 3-1: USB disconnect, device number 44 [ 597.741608][ T30] audit: type=1400 audit(1762542169.602:1511): avc: denied { read } for pid=13340 comm="syz.1.1673" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 597.922463][T13347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13347 comm=syz.5.1672 [ 598.087112][ T5900] usbhid 7-1:0.0: can't add hid device: -71 [ 598.095837][ T5900] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 598.128107][ T5900] usb 7-1: USB disconnect, device number 8 [ 598.378371][T13354] : renamed from veth0_vlan (while UP) [ 598.982015][ T30] audit: type=1804 audit(1762542170.762:1512): pid=13369 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1683" name="/newroot/364/file0" dev="tmpfs" ino=1945 res=1 errno=0 [ 599.261103][ T5983] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 599.763474][ T5983] usb 7-1: Using ep0 maxpacket: 8 [ 599.775309][ T5983] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 599.792120][ T5983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.818101][ T5983] usb 7-1: config 0 descriptor?? [ 599.831011][ T5983] gm12u320 7-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 599.852221][ T5983] gm12u320 7-1:0.0: probe with driver gm12u320 failed with error -5 [ 599.933254][ T5983] usb-storage 7-1:0.0: USB Mass Storage device detected [ 599.960664][ T5983] usb-storage 7-1:0.0: device ignored [ 600.839994][ T5880] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 600.853414][ T24] usb 7-1: USB disconnect, device number 9 [ 600.982262][ T5880] usb 3-1: device descriptor read/64, error -71 [ 601.261234][ T5880] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 601.346054][ T5983] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 601.410047][ T5880] usb 3-1: device descriptor read/64, error -71 [ 601.518393][ T5983] usb 6-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 601.531111][ T5983] usb 6-1: config 1 interface 0 altsetting 93 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 601.533779][ T5880] usb usb3-port1: attempt power cycle [ 601.542585][ T5983] usb 6-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 601.561829][ T5983] usb 6-1: config 1 interface 0 has no altsetting 0 [ 601.569674][ T5983] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.579320][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 601.588357][ T5983] usb 6-1: SerialNumber: syz [ 601.633615][T13397] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 601.633693][ T5900] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 601.894692][T13397] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 601.987212][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 601.993959][ T5900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.004605][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 602.017866][ T5900] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 602.027361][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.035774][ T5880] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 602.045326][ T5900] usb 2-1: config 0 descriptor?? [ 602.054013][ T5900] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 602.062626][ T5880] usb 3-1: device descriptor read/8, error -71 [ 602.123647][T13397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.135059][T13397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.329296][ T5880] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 602.351202][ T5880] usb 3-1: device descriptor read/8, error -71 [ 602.400887][ T5983] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 602.401176][ T30] audit: type=1804 audit(1762542173.970:1513): pid=13413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1695" name="/newroot/89/file0" dev="tmpfs" ino=490 res=1 errno=0 [ 602.470080][ T5880] usb usb3-port1: unable to enumerate USB device [ 602.582836][ T5983] usb 6-1: USB disconnect, device number 41 [ 602.600339][ T5983] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 603.146774][T13422] libceph: resolve '4.' (ret=-3): failed [ 603.568831][T13433] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 603.948534][ T11] block nbd0: Possible stuck request ffff888026a70000: control (read@0,4096B). Runtime 390 seconds [ 605.065534][ T24] usb 2-1: USB disconnect, device number 43 [ 605.126421][T13452] 9pnet_fd: Insufficient options for proto=fd [ 605.137077][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 605.178614][T13455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13455 comm=syz.5.1700 [ 605.360696][T13459] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1704'. [ 605.652052][T13470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.664999][ T979] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 605.825943][T13470] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 606.086605][ T979] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.096892][ T979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 606.106042][ T979] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 606.120283][ T979] usb 2-1: config 1 interface 0 has no altsetting 0 [ 606.578129][ T979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.587374][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.640617][ T979] usb 2-1: Product: syz [ 606.644995][ T979] usb 2-1: Manufacturer: syz [ 606.652922][ T979] usb 2-1: SerialNumber: syz [ 607.038981][T13493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13493 comm=syz.0.1709 [ 607.223275][ T979] usb 2-1: USB disconnect, device number 44 [ 607.252849][ T30] audit: type=1400 audit(1762542178.507:1514): avc: denied { read } for pid=13494 comm="syz.6.1710" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 607.287312][ T30] audit: type=1400 audit(1762542178.507:1515): avc: denied { open } for pid=13494 comm="syz.6.1710" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 607.369234][ T5880] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 607.564758][ T30] audit: type=1400 audit(1762542178.535:1516): avc: denied { ioctl } for pid=13496 comm="syz.2.1711" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 607.590900][ T30] audit: type=1400 audit(1762542178.601:1517): avc: denied { block_suspend } for pid=13494 comm="syz.6.1710" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 607.612577][ T30] audit: type=1400 audit(1762542178.619:1518): avc: denied { create } for pid=13494 comm="syz.6.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 607.632631][ T30] audit: type=1400 audit(1762542178.629:1519): avc: denied { create } for pid=13494 comm="syz.6.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 607.653562][ T30] audit: type=1400 audit(1762542178.638:1520): avc: denied { write } for pid=13494 comm="syz.6.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 607.674199][ T30] audit: type=1400 audit(1762542178.638:1521): avc: denied { read } for pid=13494 comm="syz.6.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 607.761695][ T5880] usb 3-1: config 0 interface 0 has no altsetting 0 [ 607.768438][ T5880] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 607.778022][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.788271][ T5880] usb 3-1: config 0 descriptor?? [ 607.967634][ T30] audit: type=1400 audit(1762542179.181:1522): avc: denied { read write } for pid=11196 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.016529][ T30] audit: type=1400 audit(1762542179.181:1523): avc: denied { open } for pid=11196 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.073808][ T30] audit: type=1400 audit(1762542179.181:1524): avc: denied { ioctl } for pid=11196 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.074298][T13503] loop2: detected capacity change from 0 to 7 [ 608.099736][ T30] audit: type=1400 audit(1762542179.265:1525): avc: denied { prog_load } for pid=13501 comm="syz.6.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 608.129617][ T30] audit: type=1400 audit(1762542179.265:1526): avc: denied { bpf } for pid=13501 comm="syz.6.1712" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 608.158510][ T5816] loop2: p1 [ 608.162049][ T5816] loop2: partition table partially beyond EOD, truncated [ 608.171951][ T5816] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 608.268804][T13503] loop2: p1 [ 608.281782][T13503] loop2: partition table partially beyond EOD, truncated [ 608.295592][T13503] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 608.315966][T13508] netlink: 'syz.1.1713': attribute type 12 has an invalid length. [ 608.523216][ T5880] usbhid 3-1:0.0: can't add hid device: -71 [ 608.529193][ T5880] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 608.558036][ T5880] usb 3-1: USB disconnect, device number 49 [ 608.651542][ T30] audit: type=1400 audit(1762542179.517:1527): avc: denied { create } for pid=13504 comm="syz.1.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 608.700700][ T30] audit: type=1400 audit(1762542179.527:1528): avc: denied { connect } for pid=13504 comm="syz.1.1713" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 608.727656][ T5816] udevd[5816]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 608.750616][ T5816] udevd[5816]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 608.762076][ T30] audit: type=1400 audit(1762542179.527:1529): avc: denied { write } for pid=13504 comm="syz.1.1713" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 608.816100][ T30] audit: type=1400 audit(1762542179.620:1530): avc: denied { create } for pid=13504 comm="syz.1.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 608.886260][ T30] audit: type=1400 audit(1762542179.658:1531): avc: denied { perfmon } for pid=13496 comm="syz.2.1711" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 609.085745][ T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 609.599751][T13521] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 612.314474][T13549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1723'. [ 612.327236][T13549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1723'. [ 613.415387][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 613.415403][ T30] audit: type=1400 audit(1762542184.269:1586): avc: denied { read } for pid=13562 comm="syz.0.1728" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 613.468210][ T30] audit: type=1400 audit(1762542184.269:1587): avc: denied { open } for pid=13562 comm="syz.0.1728" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 613.658330][ T30] audit: type=1400 audit(1762542184.279:1588): avc: denied { ioctl } for pid=13562 comm="syz.0.1728" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 613.995884][ T30] audit: type=1400 audit(1762542184.699:1589): avc: denied { map_read map_write } for pid=13569 comm="syz.2.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 614.484498][ T30] audit: type=1400 audit(1762542184.915:1590): avc: denied { connect } for pid=13570 comm="syz.6.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 614.505815][ T30] audit: type=1400 audit(1762542184.915:1591): avc: denied { getopt } for pid=13570 comm="syz.6.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 614.535588][ T30] audit: type=1400 audit(1762542185.317:1592): avc: denied { create } for pid=13569 comm="syz.2.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 614.556444][ T30] audit: type=1400 audit(1762542185.317:1593): avc: denied { connect } for pid=13569 comm="syz.2.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 614.646281][ T30] audit: type=1400 audit(1762542185.317:1594): avc: denied { ioctl } for pid=13569 comm="syz.2.1731" path="socket:[43930]" dev="sockfs" ino=43930 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 615.031763][ T30] audit: type=1400 audit(1762542185.775:1595): avc: denied { execute } for pid=13584 comm="syz.1.1735" path="/375/cpu.stat" dev="tmpfs" ino=2015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 615.168673][T12136] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 615.330836][T12136] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 615.339344][T12136] usb 7-1: config 0 has no interface number 0 [ 615.347932][T12136] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 615.361139][T12136] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.379843][T12136] usb 7-1: Product: syz [ 615.384280][T12136] usb 7-1: Manufacturer: syz [ 615.389112][T12136] usb 7-1: SerialNumber: syz [ 615.426870][T12136] usb 7-1: config 0 descriptor?? [ 615.668854][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.725014][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.796647][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.822061][T13598] FAULT_INJECTION: forcing a failure. [ 615.822061][T13598] name failslab, interval 1, probability 0, space 0, times 0 [ 615.834902][T13598] CPU: 0 UID: 0 PID: 13598 Comm: syz.1.1738 Not tainted syzkaller #0 PREEMPT(full) [ 615.834925][T13598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 615.834935][T13598] Call Trace: [ 615.834941][T13598] [ 615.834948][T13598] dump_stack_lvl+0x16c/0x1f0 [ 615.834981][T13598] should_fail_ex+0x512/0x640 [ 615.835001][T13598] ? fs_reclaim_acquire+0xae/0x150 [ 615.835024][T13598] should_failslab+0xc2/0x120 [ 615.835044][T13598] __kmalloc_noprof+0xdd/0x880 [ 615.835068][T13598] ? tomoyo_encode2+0x100/0x3e0 [ 615.835093][T13598] ? tomoyo_encode2+0x100/0x3e0 [ 615.835110][T13598] tomoyo_encode2+0x100/0x3e0 [ 615.835136][T13598] tomoyo_encode+0x29/0x50 [ 615.835153][T13598] tomoyo_realpath_from_path+0x18f/0x6e0 [ 615.835181][T13598] tomoyo_mount_acl+0x1ae/0x850 [ 615.835197][T13598] ? bpf_ksym_find+0x127/0x1c0 [ 615.835223][T13598] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 615.835248][T13598] ? is_bpf_text_address+0x94/0x1a0 [ 615.835270][T13598] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 615.835285][T13598] ? unwind_get_return_address+0x59/0xa0 [ 615.835334][T13598] ? tomoyo_domain+0xbb/0x150 [ 615.835355][T13598] ? tomoyo_profile+0x47/0x60 [ 615.835379][T13598] tomoyo_mount_permission+0x16d/0x420 [ 615.835395][T13598] ? tomoyo_mount_permission+0x14f/0x420 [ 615.835414][T13598] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 615.835446][T13598] security_sb_mount+0x9b/0x260 [ 615.835466][T13598] path_mount+0x158/0x23a0 [ 615.835492][T13598] ? __pfx_path_mount+0x10/0x10 [ 615.835513][T13598] ? kmem_cache_free+0x2d4/0x6c0 [ 615.835526][T13598] ? putname+0x154/0x1a0 [ 615.835551][T13598] ? putname+0x154/0x1a0 [ 615.835567][T13598] ? putname+0x154/0x1a0 [ 615.835589][T13598] ? __x64_sys_mount+0x293/0x310 [ 615.835607][T13598] __x64_sys_mount+0x293/0x310 [ 615.835627][T13598] ? __pfx___x64_sys_mount+0x10/0x10 [ 615.835660][T13598] do_syscall_64+0xcd/0xfa0 [ 615.835680][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.835697][T13598] RIP: 0033:0x7f86d598f6c9 [ 615.835710][T13598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.835725][T13598] RSP: 002b:00007f86d67f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 615.835742][T13598] RAX: ffffffffffffffda RBX: 00007f86d5be6090 RCX: 00007f86d598f6c9 [ 615.835753][T13598] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 615.835764][T13598] RBP: 00007f86d67f9090 R08: 0000000000000000 R09: 0000000000000000 [ 615.835774][T13598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.835784][T13598] R13: 00007f86d5be6128 R14: 00007f86d5be6090 R15: 00007ffd63795c48 [ 615.835810][T13598] [ 615.835870][T13598] ERROR: Out of memory at tomoyo_realpath_from_path. [ 616.050701][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.586711][T12136] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 616.611965][T12136] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 616.637830][T12136] asix 7-1:0.251: probe with driver asix failed with error -71 [ 616.644072][ T5880] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 616.793608][ T5880] usb 3-1: device descriptor read/64, error -71 [ 616.801013][T12136] usb 7-1: USB disconnect, device number 10 [ 617.531288][ T5880] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 617.683410][ T5880] usb 3-1: device descriptor read/64, error -71 [ 617.830893][T13616] trusted_key: encrypted_key: insufficient parameters specified [ 617.874987][ T5880] usb usb3-port1: attempt power cycle [ 618.655450][ T5880] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 618.739845][ T5880] usb 3-1: device descriptor read/8, error -71 [ 618.822689][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 618.822699][ T30] audit: type=1400 audit(1762542189.330:1624): avc: denied { read write } for pid=13631 comm="syz.5.1749" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 618.853367][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.873109][ T30] audit: type=1400 audit(1762542189.376:1625): avc: denied { open } for pid=13631 comm="syz.5.1749" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 618.897455][T12136] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 618.926264][ T30] audit: type=1400 audit(1762542189.423:1626): avc: denied { read open } for pid=13634 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.966745][ T5894] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 619.096786][T12136] usb 7-1: Using ep0 maxpacket: 8 [ 619.124435][T12136] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.134863][ T5880] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 619.164936][ T5880] usb 3-1: device descriptor read/8, error -71 [ 619.212017][T12136] usb 7-1: config 0 has no interfaces? [ 619.220436][ T30] audit: type=1400 audit(1762542189.423:1627): avc: denied { getattr } for pid=13634 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.245806][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.252641][T12136] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 619.266752][ T5894] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 619.277727][T12136] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.287744][ T5894] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 619.296318][ T5880] usb usb3-port1: unable to enumerate USB device [ 619.426337][T12136] usb 7-1: config 0 descriptor?? [ 619.431544][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.493132][ T30] audit: type=1400 audit(1762542189.956:1628): avc: denied { add_name } for pid=13633 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.606435][ T5894] usb 2-1: config 0 descriptor?? [ 619.636697][ T30] audit: type=1400 audit(1762542189.956:1629): avc: denied { create } for pid=13633 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 619.851256][ T30] audit: type=1400 audit(1762542189.956:1630): avc: denied { write } for pid=13633 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=7176 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 619.931333][ T5894] usb 2-1: USB disconnect, device number 45 [ 619.952125][T13649] xt_connbytes: Forcing CT accounting to be enabled [ 620.046898][ T30] audit: type=1400 audit(1762542189.956:1631): avc: denied { append } for pid=13633 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=7176 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 620.172891][ T30] audit: type=1400 audit(1762542190.508:1632): avc: denied { create } for pid=13654 comm="syz.0.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 620.246317][ T30] audit: type=1400 audit(1762542190.508:1633): avc: denied { module_request } for pid=13654 comm="syz.0.1751" kmod="net-pf-16-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 622.819532][ T5900] usb 7-1: USB disconnect, device number 11 [ 623.747758][T13698] random: crng reseeded on system resumption [ 623.769902][T13698] Restarting kernel threads ... [ 623.776868][T13698] Done restarting kernel threads. [ 624.198876][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 624.198891][ T30] audit: type=1400 audit(1762542194.353:1654): avc: denied { write } for pid=13708 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 624.200697][T13709] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1761'. [ 624.221379][ T30] audit: type=1400 audit(1762542194.353:1655): avc: denied { nlmsg_write } for pid=13708 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 624.634872][ T5894] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 624.676557][ T30] audit: type=1804 audit(1762542194.736:1656): pid=13714 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1762" name="/newroot/282/file0" dev="tmpfs" ino=1507 res=1 errno=0 [ 625.077781][ T5894] usb 3-1: config 0 has an invalid interface number: 157 but max is 0 [ 625.107314][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.142024][ T5894] usb 3-1: config 0 has no interface number 0 [ 625.156395][ T5894] usb 3-1: config 0 interface 157 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 625.206154][ T5894] usb 3-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=df.a2 [ 625.218679][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.239301][ T5894] usb 3-1: Product: syz [ 625.243481][ T5894] usb 3-1: Manufacturer: syz [ 625.248062][ T5894] usb 3-1: SerialNumber: syz [ 625.297630][ T5894] usb 3-1: config 0 descriptor?? [ 625.347610][ T5894] ax88179_178a 3-1:0.157: probe with driver ax88179_178a failed with error -22 [ 625.380316][ T30] audit: type=1400 audit(1762542195.466:1657): avc: denied { sys_module } for pid=13715 comm="syz.6.1763" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 625.647406][ T5894] usb 3-1: USB disconnect, device number 54 [ 625.891361][ T30] audit: type=1400 audit(1762542195.915:1658): avc: denied { ioctl } for pid=13721 comm="syz.5.1764" path="socket:[44808]" dev="sockfs" ino=44808 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 626.286993][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 626.447258][ T5900] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 626.543521][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 626.550193][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.560703][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 626.574352][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 626.587217][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 626.628206][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 626.631794][ T30] audit: type=1400 audit(1762542196.635:1659): avc: denied { mount } for pid=13741 comm="syz.5.1768" name="/" dev="ramfs" ino=45267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 626.656550][ T24] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 626.705652][ T5900] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 626.714879][ T5900] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 626.718927][ T30] audit: type=1400 audit(1762542196.701:1660): avc: denied { name_bind } for pid=13741 comm="syz.5.1768" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 626.751774][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 626.902656][ T24] usb 7-1: Product: syz [ 626.907492][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.907741][ T24] usb 7-1: Manufacturer: syz [ 626.927224][ T5900] usb 2-1: config 0 descriptor?? [ 626.982537][ T24] usb 7-1: SerialNumber: syz [ 627.009542][ T24] usb 7-1: config 0 descriptor?? [ 627.034786][ T30] audit: type=1400 audit(1762542197.009:1661): avc: denied { create } for pid=13741 comm="syz.5.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 627.126179][ T30] audit: type=1400 audit(1762542197.037:1662): avc: denied { bind } for pid=13741 comm="syz.5.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 627.177091][ T5900] usb 2-1: USB disconnect, device number 46 [ 627.186139][ T30] audit: type=1400 audit(1762542197.037:1663): avc: denied { setopt } for pid=13741 comm="syz.5.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 627.238294][ T24] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 627.250232][ T24] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 627.463527][ T24] radio-si470x 7-1:0.0: software version 14, hardware version 146 [ 627.471435][ T24] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 627.698170][ T24] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 627.717825][ T24] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 627.785652][ T24] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 627.850618][ T24] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 627.927480][ T24] usb 7-1: USB disconnect, device number 12 [ 628.839679][ T979] libceph: connect (1)[c::]:6789 error -101 [ 628.866161][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 629.184708][T13783] ceph: No mds server is up or the cluster is laggy [ 629.712758][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 629.832890][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 629.899416][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 629.899431][ T30] audit: type=1400 audit(1762542199.685:1668): avc: denied { unlink } for pid=11196 comm="syz-executor" name="file0" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 630.043257][ T30] audit: type=1400 audit(1762542199.825:1669): avc: denied { create } for pid=13767 comm="syz.0.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 630.159785][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 630.169842][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 630.178912][ T30] audit: type=1400 audit(1762542199.900:1670): avc: denied { bind } for pid=13767 comm="syz.0.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 630.436946][T13799] ceph: No mds server is up or the cluster is laggy [ 630.606704][ T30] audit: type=1400 audit(1762542200.349:1671): avc: denied { create } for pid=13811 comm="syz.5.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 632.365405][ T30] audit: type=1804 audit(1762542201.986:1672): pid=13825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1781" name="/newroot/386/file0" dev="tmpfs" ino=2073 res=1 errno=0 [ 633.680721][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 633.688499][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 633.788377][T13850] ceph: No mds server is up or the cluster is laggy [ 633.973637][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 633.979639][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 634.662007][T13871] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1788'. [ 635.007667][ T30] audit: type=1400 audit(1762542204.446:1673): avc: denied { firmware_load } for pid=13877 comm="syz.6.1789" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 635.400256][ T30] audit: type=1400 audit(1762542204.839:1674): avc: denied { create } for pid=13888 comm="syz.2.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 636.126008][ T11] block nbd0: Possible stuck request ffff888026a70000: control (read@0,4096B). Runtime 420 seconds [ 637.163860][ T30] audit: type=1400 audit(1762542206.064:1675): avc: denied { write } for pid=13899 comm="syz.2.1794" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 637.361792][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1797'. [ 639.069914][ T30] audit: type=1400 audit(1762542208.262:1676): avc: denied { append } for pid=13951 comm="syz.2.1805" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 639.537911][ T30] audit: type=1400 audit(1762542208.524:1677): avc: denied { read } for pid=13953 comm="syz.5.1807" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 639.698856][ T30] audit: type=1400 audit(1762542208.533:1678): avc: denied { open } for pid=13953 comm="syz.5.1807" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 639.790855][ T30] audit: type=1400 audit(1762542208.636:1679): avc: denied { bind } for pid=13953 comm="syz.5.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 639.949553][ T5900] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 639.999247][ T30] audit: type=1326 audit(1762542209.132:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29a98f6c9 code=0x7ffc0000 [ 640.060718][ T30] audit: type=1326 audit(1762542209.132:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29a98f6c9 code=0x7ffc0000 [ 640.088747][ T30] audit: type=1326 audit(1762542209.132:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe29a98f6c9 code=0x7ffc0000 [ 640.113323][ T30] audit: type=1326 audit(1762542209.132:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.0.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29a98f6c9 code=0x7ffc0000 [ 640.164816][ T5900] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 640.176698][ T5900] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 640.186212][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.209541][ T5900] usb 3-1: config 0 descriptor?? [ 640.216842][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 640.377157][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 640.384173][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 640.396357][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 640.409331][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.417978][ T24] usb 6-1: Product: syz [ 640.430972][ T24] usb 6-1: Manufacturer: syz [ 640.438136][ T24] usb 6-1: SerialNumber: syz [ 640.453025][ T5900] usb 3-1: USB disconnect, device number 55 [ 640.470441][ T24] usb 6-1: config 0 descriptor?? [ 640.493405][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 640.503615][ T24] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 641.132767][ T24] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 641.344892][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 641.344916][ T30] audit: type=1400 audit(1762542210.395:1692): avc: denied { ioctl } for pid=14008 comm="syz.1.1815" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45637 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 641.557125][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 641.583146][T14016] netlink: 'syz.2.1813': attribute type 21 has an invalid length. [ 641.614068][ T24] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 641.630300][ T24] em28xx 6-1:0.0: board has no eeprom [ 641.706837][ T24] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 641.734991][ T24] em28xx 6-1:0.0: dvb set to bulk mode. [ 641.740659][ T5894] em28xx 6-1:0.0: Binding DVB extension [ 641.778179][ T24] usb 6-1: USB disconnect, device number 43 [ 641.796028][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 641.841795][ T5983] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 641.862323][ T5894] em28xx 6-1:0.0: Registering input extension [ 641.868723][ T24] em28xx 6-1:0.0: Closing input extension [ 641.888604][ T24] em28xx 6-1:0.0: Freeing device [ 642.012821][ T5983] usb 3-1: Using ep0 maxpacket: 32 [ 642.019415][ T5983] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 642.027916][ T5983] usb 3-1: config 0 has no interface number 0 [ 642.036300][ T5983] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 642.045531][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.053501][ T5983] usb 3-1: Product: syz [ 642.058089][ T5983] usb 3-1: Manufacturer: syz [ 642.062690][ T5983] usb 3-1: SerialNumber: syz [ 642.069143][ T5983] usb 3-1: config 0 descriptor?? [ 642.077475][ T5983] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 642.224327][T14021] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 642.253395][T14021] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 642.418500][ T5983] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 642.431018][ T5983] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 643.152219][ T979] libceph: connect (1)[c::]:6789 error -101 [ 643.160518][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 643.257867][T14026] ceph: No mds server is up or the cluster is laggy [ 644.204322][ T30] audit: type=1400 audit(1762542213.061:1693): avc: denied { mount } for pid=14035 comm="syz.6.1822" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 644.484239][ T30] audit: type=1400 audit(1762542213.332:1694): avc: denied { mounton } for pid=14035 comm="syz.6.1822" path="/112/file0" dev="fuse" ino=18446744073709551615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 644.509858][T14039] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 645.181806][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 645.191354][ T5894] usb 3-1: USB disconnect, device number 56 [ 645.360094][ T5894] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 645.581936][ T5894] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 645.740866][ T5894] quatech2 3-1:0.51: device disconnected [ 645.809753][ T30] audit: type=1400 audit(1762542213.360:1695): avc: denied { remount } for pid=14035 comm="syz.6.1822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 646.229406][ T30] audit: type=1400 audit(1762542214.960:1696): avc: denied { write } for pid=14047 comm="syz.1.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 646.522554][ T30] audit: type=1400 audit(1762542215.240:1697): avc: denied { unmount } for pid=11196 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 646.802993][ T5817] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 646.985671][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.015239][ T5817] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 647.025159][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.946500][ T30] audit: type=1400 audit(1762542215.867:1698): avc: denied { mounton } for pid=14074 comm="syz.6.1834" path="/114" dev="tmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 648.005759][ T5817] usb 3-1: config 0 descriptor?? [ 648.033487][ T30] audit: type=1400 audit(1762542215.867:1699): avc: denied { mount } for pid=14074 comm="syz.6.1834" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 648.034132][ T5817] pwc: Askey VC010 type 2 USB webcam detected. [ 648.086818][ T5900] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 648.233959][ T30] audit: type=1400 audit(1762542216.840:1700): avc: denied { unmount } for pid=11196 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 648.297143][ T5900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.475735][T14083] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 648.486481][ T5817] pwc: recv_control_msg error -32 req 02 val 2b00 [ 649.242377][ T5817] pwc: recv_control_msg error -32 req 02 val 2700 [ 649.271154][ T5900] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 649.358752][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.429915][ T5817] pwc: recv_control_msg error -32 req 02 val 2c00 [ 649.596895][ T5817] pwc: recv_control_msg error -32 req 04 val 1000 [ 649.735035][ T5900] usb 6-1: config 0 descriptor?? [ 649.749719][ T5817] pwc: recv_control_msg error -32 req 04 val 1300 [ 649.994545][ T5817] pwc: recv_control_msg error -32 req 04 val 1400 [ 650.093804][ T5817] pwc: recv_control_msg error -32 req 02 val 2000 [ 650.103780][ T5817] pwc: recv_control_msg error -32 req 02 val 2100 [ 650.115640][ T5900] pwc: Askey VC010 type 2 USB webcam detected. [ 650.136191][ T5817] pwc: recv_control_msg error -32 req 04 val 1500 [ 650.157517][ T5900] pwc: send_video_command error -71 [ 650.176436][ T5817] pwc: recv_control_msg error -32 req 02 val 2500 [ 650.191070][ T5900] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 650.203159][ T5817] pwc: recv_control_msg error -32 req 02 val 2400 [ 650.234253][ T5817] pwc: recv_control_msg error -71 req 02 val 2600 [ 650.253135][ T5900] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 650.269839][ T5817] pwc: recv_control_msg error -71 req 02 val 2900 [ 650.286688][T14093] fuse: Bad value for 'rootmode' [ 650.301044][ T5900] usb 6-1: USB disconnect, device number 44 [ 650.307265][ T5817] pwc: recv_control_msg error -71 req 02 val 2800 [ 650.324362][ T5817] pwc: recv_control_msg error -71 req 04 val 1100 [ 650.674285][ T5817] pwc: recv_control_msg error -71 req 04 val 1200 [ 650.703780][ T5817] pwc: Registered as video103. [ 650.756589][ T5817] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 650.781195][ T30] audit: type=1400 audit(1762542219.225:1701): avc: denied { read } for pid=5168 comm="acpid" name="event5" dev="devtmpfs" ino=3476 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.859902][ T30] audit: type=1400 audit(1762542219.225:1702): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=3476 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.922518][ T5817] usb 3-1: USB disconnect, device number 57 [ 650.962701][ T30] audit: type=1400 audit(1762542219.225:1703): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=3476 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 651.051462][T14105] loop4: detected capacity change from 0 to 2559 [ 651.060080][T14105] buffer_io_error: 177 callbacks suppressed [ 651.060094][T14105] Buffer I/O error on dev loop4, logical block 0, async page read [ 651.082688][ T30] audit: type=1400 audit(1762542219.365:1704): avc: denied { read write } for pid=14101 comm="syz.5.1840" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 651.089430][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'. [ 651.144347][T14105] Buffer I/O error on dev loop4, logical block 0, async page read [ 651.238369][T14110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 651.257712][ T30] audit: type=1400 audit(1762542219.365:1705): avc: denied { open } for pid=14101 comm="syz.5.1840" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 651.304458][T14105] loop4: unable to read partition table [ 651.526033][T14109] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 651.546640][ T30] audit: type=1400 audit(1762542219.431:1706): avc: denied { cmd } for pid=14099 comm="syz.6.1841" path="socket:[46518]" dev="sockfs" ino=46518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 651.567599][T14105] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 651.585148][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 651.591245][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 651.597140][ T30] audit: type=1400 audit(1762542219.478:1707): avc: denied { read write } for pid=14101 comm="syz.5.1840" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 651.630418][ T5820] Buffer I/O error on dev loop4, logical block 319, async page read [ 651.695916][T14112] ceph: No mds server is up or the cluster is laggy [ 651.882918][T14109] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 651.891764][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 651.901753][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 652.199954][T14109] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 652.267691][T14109] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 652.317571][T14109] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 652.335481][T14121] binder: BINDER_SET_CONTEXT_MGR already set [ 652.344559][T14109] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 652.353305][T14121] binder: 14120:14121 ioctl 4018620d 200000004a80 returned -16 [ 652.493060][T14109] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 652.600167][T14125] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 652.996287][ T5183] ldm_validate_partition_table(): Disk read failed. [ 653.003514][ T5183] Dev loop4: unable to read RDB block 0 [ 653.010565][ T5183] loop4: unable to read partition table [ 653.398857][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 653.398885][ T30] audit: type=1400 audit(1762542221.676:1719): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 654.097028][T14145] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1850'. [ 654.832359][ T5817] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 655.099368][ T5817] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.109613][ T5817] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 655.137790][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.146912][ T30] audit: type=1804 audit(1762542223.303:1720): pid=14157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1855" name="/newroot/367/file0" dev="tmpfs" ino=1951 res=1 errno=0 [ 655.186866][ T5817] usb 6-1: config 0 descriptor?? [ 655.203834][ T5817] pwc: Askey VC010 type 2 USB webcam detected. [ 655.862272][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 656.176092][ T5817] pwc: recv_control_msg error -32 req 02 val 2b00 [ 656.188328][ T24] libceph: connect (1)[c::]:6789 error -101 [ 656.193854][ T5817] pwc: recv_control_msg error -32 req 02 val 2700 [ 656.194501][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 656.202048][ T5817] pwc: recv_control_msg error -32 req 02 val 2c00 [ 656.226943][ T5817] pwc: recv_control_msg error -32 req 04 val 1000 [ 656.234818][ T5817] pwc: recv_control_msg error -32 req 04 val 1300 [ 656.241777][ T5817] pwc: recv_control_msg error -32 req 04 val 1400 [ 656.248802][ T5817] pwc: recv_control_msg error -32 req 02 val 2000 [ 656.259538][ T5817] pwc: recv_control_msg error -32 req 02 val 2100 [ 656.267701][ T5817] pwc: recv_control_msg error -32 req 04 val 1500 [ 656.481215][ T24] libceph: connect (1)[c::]:6789 error -101 [ 656.481372][ T5817] pwc: recv_control_msg error -32 req 02 val 2500 [ 656.487387][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 656.564794][T14170] ceph: No mds server is up or the cluster is laggy [ 656.599591][ T5817] pwc: recv_control_msg error -32 req 02 val 2400 [ 656.607097][ T5817] pwc: recv_control_msg error -71 req 02 val 2600 [ 656.648622][ T5817] pwc: recv_control_msg error -71 req 02 val 2900 [ 656.678641][ T5817] pwc: recv_control_msg error -71 req 02 val 2800 [ 656.727181][ T5817] pwc: recv_control_msg error -71 req 04 val 1100 [ 656.770610][ T5817] pwc: recv_control_msg error -71 req 04 val 1200 [ 656.808267][ T5817] pwc: Registered as video103. [ 656.851959][ T5817] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input40 [ 656.916159][ T5817] usb 6-1: USB disconnect, device number 45 [ 657.005587][ T30] audit: type=1400 audit(1762542225.043:1721): avc: denied { listen } for pid=14182 comm="syz.6.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 657.182861][ T5894] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 657.194986][ T30] audit: type=1400 audit(1762542225.230:1722): avc: denied { read write } for pid=14187 comm="syz.0.1862" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 657.237461][ T30] audit: type=1400 audit(1762542225.249:1723): avc: denied { open } for pid=14187 comm="syz.0.1862" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 657.262047][ T30] audit: type=1400 audit(1762542225.249:1724): avc: denied { create } for pid=14187 comm="syz.0.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 657.343246][ T5900] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 657.482132][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 657.493307][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.506301][ T30] audit: type=1400 audit(1762542225.520:1725): avc: denied { connect } for pid=14192 comm="syz.5.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 657.526874][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.538025][ T5900] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 657.546028][ T5900] usb 7-1: config 0 has no interface number 0 [ 657.550185][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 657.565605][ T5894] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 657.580312][ T5900] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 657.599703][ T30] audit: type=1400 audit(1762542225.520:1726): avc: denied { write } for pid=14192 comm="syz.5.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 657.610018][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.629809][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.650046][ T5900] usb 7-1: config 0 descriptor?? [ 657.661844][ T5900] usb 7-1: selecting invalid altsetting 1 [ 657.675570][ T5900] dvb_ttusb_budget: ttusb_init_controller: error [ 657.678749][ T5894] usb 2-1: config 0 descriptor?? [ 657.725136][ T5900] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 657.826156][ T5900] DVB: Unable to find symbol cx22700_attach() [ 657.947051][ T30] audit: type=1400 audit(1762542225.923:1727): avc: denied { mount } for pid=14182 comm="syz.6.1861" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 657.993116][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1861'. [ 657.994387][ T5900] DVB: Unable to find symbol tda10046_attach() [ 658.009107][ T30] audit: type=1400 audit(1762542225.960:1728): avc: denied { getopt } for pid=14197 comm="syz.5.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 658.087928][ T5900] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 658.113554][ T5900] usb 7-1: USB disconnect, device number 13 [ 658.225444][T14205] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 658.240266][T14205] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 658.485924][ T5894] input: HID 0955:7214 Haptics as /devices/virtual/input/input41 [ 659.222064][T14208] random: crng reseeded on system resumption [ 659.223353][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 659.223366][ T30] audit: type=1400 audit(1762542227.120:1730): avc: denied { read } for pid=14179 comm="syz.1.1860" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 659.320003][ T5894] shield 0003:0955:7214.000D: Registered Thunderstrike controller [ 659.338419][ T30] audit: type=1400 audit(1762542227.223:1731): avc: denied { read } for pid=14211 comm="syz.6.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 659.379750][ T5894] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 659.489328][ T30] audit: type=1400 audit(1762542227.316:1732): avc: denied { write } for pid=14211 comm="syz.6.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 659.759396][T14181] SELinux: failed to load policy [ 659.907113][ T24] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 659.918679][ T5983] usb 2-1: USB disconnect, device number 47 [ 659.928564][ T24] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 659.944350][ T24] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 659.969840][ T24] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 659.995085][ T5983] ------------[ cut here ]------------ [ 660.000576][ T5983] workqueue: work disable count underflowed [ 660.006494][ T5983] WARNING: CPU: 1 PID: 5983 at kernel/workqueue.c:4355 enable_work+0x2f8/0x340 [ 660.015420][ T5983] Modules linked in: [ 660.019549][ T5983] CPU: 1 UID: 0 PID: 5983 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 660.028912][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 660.038965][ T5983] Workqueue: usb_hub_wq hub_event [ 660.043971][ T5983] RIP: 0010:enable_work+0x2f8/0x340 [ 660.049148][ T5983] Code: 89 ee e8 fb bb 38 00 45 84 ed 0f 85 29 fe ff ff e8 0d c1 38 00 c6 05 8b 3d e6 0e 01 90 48 c7 c7 20 29 8c 8b e8 a9 f0 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 97 4e a1 00 e9 aa fe ff ff [ 660.058525][ T5817] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 660.068738][ T5983] RSP: 0018:ffffc90002e973b0 EFLAGS: 00010086 [ 660.068766][ T5983] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9001945f000 [ 660.068778][ T5983] RDX: 0000000000100000 RSI: ffffffff817b3ef5 RDI: 0000000000000001 [ 660.068791][ T5983] RBP: ffff8880340fe738 R08: 0000000000000001 R09: 0000000000000000 [ 660.106194][ T5983] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920005d2e77 [ 660.114143][ T5983] R13: 0000000000000000 R14: ffff8880340fe698 R15: ffff8880340fe730 [ 660.122090][ T5983] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 660.130996][ T5983] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 660.137558][ T5983] CR2: 000020000016c000 CR3: 00000000226a6000 CR4: 00000000003526f0 [ 660.145507][ T5983] Call Trace: [ 660.148765][ T5983] [ 660.151672][ T5983] ? __pfx_enable_work+0x10/0x10 [ 660.156591][ T5983] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 660.162375][ T5983] __cancel_work_sync+0xe7/0x130 [ 660.167307][ T5983] thermal_zone_device_unregister+0x28e/0x4d0 [ 660.173352][ T5983] ? __pfx_shield_remove+0x10/0x10 [ 660.178438][ T5983] power_supply_unregister+0x10a/0x150 [ 660.183872][ T5983] shield_remove+0x75/0x130 [ 660.188349][ T5983] ? __pfx_shield_remove+0x10/0x10 [ 660.193433][ T5983] hid_device_remove+0xd1/0x260 [ 660.198255][ T5983] ? __pfx_hid_device_remove+0x10/0x10 [ 660.203685][ T5983] device_remove+0xcb/0x170 [ 660.208158][ T5983] device_release_driver_internal+0x44b/0x620 [ 660.214201][ T5983] bus_remove_device+0x22f/0x420 [ 660.219119][ T5983] device_del+0x396/0x9f0 [ 660.223423][ T5983] ? __pfx_device_del+0x10/0x10 [ 660.228245][ T5983] ? do_raw_spin_lock+0x12c/0x2b0 [ 660.233246][ T5983] hid_destroy_device+0x19c/0x240 [ 660.238246][ T5983] usbhid_disconnect+0xa0/0xe0 [ 660.242988][ T5983] usb_unbind_interface+0x1dd/0x9e0 [ 660.248175][ T5983] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 660.253787][ T5983] ? __pfx_usb_unbind_interface+0x10/0x10 [ 660.259489][ T5983] device_remove+0x125/0x170 [ 660.264054][ T5983] device_release_driver_internal+0x44b/0x620 [ 660.270105][ T5983] bus_remove_device+0x22f/0x420 [ 660.275039][ T5983] device_del+0x396/0x9f0 [ 660.279343][ T5983] ? __pfx_device_del+0x10/0x10 [ 660.284163][ T5983] ? kobject_put+0x210/0x5a0 [ 660.288739][ T5983] usb_disable_device+0x355/0x7d0 [ 660.293746][ T5983] usb_disconnect+0x2e1/0x9c0 [ 660.298405][ T5983] hub_event+0x1c81/0x4fe0 [ 660.302817][ T5983] ? __lock_acquire+0xb8a/0x1c90 [ 660.307754][ T5983] ? __pfx_hub_event+0x10/0x10 [ 660.312506][ T5983] ? interval_tree_remove+0xd00/0xee0 [ 660.317868][ T5983] ? rcu_is_watching+0x12/0xc0 [ 660.322616][ T5983] process_one_work+0x9cf/0x1b70 [ 660.327535][ T5983] ? __pfx_process_one_work+0x10/0x10 [ 660.332884][ T5983] ? assign_work+0x1a0/0x250 [ 660.337455][ T5983] worker_thread+0x6c8/0xf10 [ 660.342028][ T5983] ? __pfx_worker_thread+0x10/0x10 [ 660.347113][ T5983] kthread+0x3c5/0x780 [ 660.351168][ T5983] ? __pfx_kthread+0x10/0x10 [ 660.355755][ T5983] ? rcu_is_watching+0x12/0xc0 [ 660.360494][ T5983] ? __pfx_kthread+0x10/0x10 [ 660.365057][ T5983] ret_from_fork+0x675/0x7d0 [ 660.369617][ T5983] ? __pfx_kthread+0x10/0x10 [ 660.374178][ T5983] ret_from_fork_asm+0x1a/0x30 [ 660.378943][ T5983] [ 660.381935][ T5983] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 660.389188][ T5983] CPU: 1 UID: 0 PID: 5983 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 660.398540][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 660.408567][ T5983] Workqueue: usb_hub_wq hub_event [ 660.413570][ T5983] Call Trace: [ 660.416819][ T5983] [ 660.419721][ T5983] dump_stack_lvl+0x3d/0x1f0 [ 660.424295][ T5983] vpanic+0x640/0x6f0 [ 660.428255][ T5983] ? enable_work+0x2f8/0x340 [ 660.432819][ T5983] panic+0xca/0xd0 [ 660.436518][ T5983] ? __pfx_panic+0x10/0x10 [ 660.440924][ T5983] check_panic_on_warn+0xab/0xb0 [ 660.445837][ T5983] __warn+0xf6/0x3c0 [ 660.449700][ T5983] ? __pfx_vprintk_emit+0x10/0x10 [ 660.454705][ T5983] ? enable_work+0x2f8/0x340 [ 660.459268][ T5983] report_bug+0x3c3/0x580 [ 660.463591][ T5983] ? enable_work+0x2f8/0x340 [ 660.468171][ T5983] handle_bug+0x184/0x210 [ 660.472482][ T5983] exc_invalid_op+0x17/0x50 [ 660.476968][ T5983] asm_exc_invalid_op+0x1a/0x20 [ 660.481790][ T5983] RIP: 0010:enable_work+0x2f8/0x340 [ 660.486972][ T5983] Code: 89 ee e8 fb bb 38 00 45 84 ed 0f 85 29 fe ff ff e8 0d c1 38 00 c6 05 8b 3d e6 0e 01 90 48 c7 c7 20 29 8c 8b e8 a9 f0 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 97 4e a1 00 e9 aa fe ff ff [ 660.506558][ T5983] RSP: 0018:ffffc90002e973b0 EFLAGS: 00010086 [ 660.512603][ T5983] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9001945f000 [ 660.520552][ T5983] RDX: 0000000000100000 RSI: ffffffff817b3ef5 RDI: 0000000000000001 [ 660.528497][ T5983] RBP: ffff8880340fe738 R08: 0000000000000001 R09: 0000000000000000 [ 660.536444][ T5983] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920005d2e77 [ 660.544387][ T5983] R13: 0000000000000000 R14: ffff8880340fe698 R15: ffff8880340fe730 [ 660.552333][ T5983] ? __warn_printk+0x1a5/0x350 [ 660.557078][ T5983] ? __pfx_enable_work+0x10/0x10 [ 660.561991][ T5983] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 660.567773][ T5983] __cancel_work_sync+0xe7/0x130 [ 660.572688][ T5983] thermal_zone_device_unregister+0x28e/0x4d0 [ 660.578726][ T5983] ? __pfx_shield_remove+0x10/0x10 [ 660.583811][ T5983] power_supply_unregister+0x10a/0x150 [ 660.589254][ T5983] shield_remove+0x75/0x130 [ 660.593742][ T5983] ? __pfx_shield_remove+0x10/0x10 [ 660.598828][ T5983] hid_device_remove+0xd1/0x260 [ 660.603659][ T5983] ? __pfx_hid_device_remove+0x10/0x10 [ 660.609110][ T5983] device_remove+0xcb/0x170 [ 660.613584][ T5983] device_release_driver_internal+0x44b/0x620 [ 660.619623][ T5983] bus_remove_device+0x22f/0x420 [ 660.624538][ T5983] device_del+0x396/0x9f0 [ 660.628841][ T5983] ? __pfx_device_del+0x10/0x10 [ 660.633660][ T5983] ? do_raw_spin_lock+0x12c/0x2b0 [ 660.638659][ T5983] hid_destroy_device+0x19c/0x240 [ 660.643655][ T5983] usbhid_disconnect+0xa0/0xe0 [ 660.648395][ T5983] usb_unbind_interface+0x1dd/0x9e0 [ 660.653573][ T5983] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 660.659183][ T5983] ? __pfx_usb_unbind_interface+0x10/0x10 [ 660.664877][ T5983] device_remove+0x125/0x170 [ 660.669438][ T5983] device_release_driver_internal+0x44b/0x620 [ 660.675481][ T5983] bus_remove_device+0x22f/0x420 [ 660.680397][ T5983] device_del+0x396/0x9f0 [ 660.684699][ T5983] ? __pfx_device_del+0x10/0x10 [ 660.689529][ T5983] ? kobject_put+0x210/0x5a0 [ 660.694105][ T5983] usb_disable_device+0x355/0x7d0 [ 660.699111][ T5983] usb_disconnect+0x2e1/0x9c0 [ 660.703771][ T5983] hub_event+0x1c81/0x4fe0 [ 660.708178][ T5983] ? __lock_acquire+0xb8a/0x1c90 [ 660.713096][ T5983] ? __pfx_hub_event+0x10/0x10 [ 660.717851][ T5983] ? interval_tree_remove+0xd00/0xee0 [ 660.723208][ T5983] ? rcu_is_watching+0x12/0xc0 [ 660.727948][ T5983] process_one_work+0x9cf/0x1b70 [ 660.732863][ T5983] ? __pfx_process_one_work+0x10/0x10 [ 660.738211][ T5983] ? assign_work+0x1a0/0x250 [ 660.742779][ T5983] worker_thread+0x6c8/0xf10 [ 660.747356][ T5983] ? __pfx_worker_thread+0x10/0x10 [ 660.752437][ T5983] kthread+0x3c5/0x780 [ 660.756478][ T5983] ? __pfx_kthread+0x10/0x10 [ 660.761040][ T5983] ? rcu_is_watching+0x12/0xc0 [ 660.765776][ T5983] ? __pfx_kthread+0x10/0x10 [ 660.770344][ T5983] ret_from_fork+0x675/0x7d0 [ 660.774903][ T5983] ? __pfx_kthread+0x10/0x10 [ 660.779470][ T5983] ret_from_fork_asm+0x1a/0x30 [ 660.784215][ T5983] [ 660.787316][ T5983] Kernel Offset: disabled [ 660.791613][ T5983] Rebooting in 86400 seconds..