last executing test programs: 14.569761673s ago: executing program 3 (id=2205): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000180), 0x2ae, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010700000000fcdbdf"], 0x2c}}, 0x40) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000940)={0x60, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffc}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 11.176750661s ago: executing program 3 (id=2224): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) socket$inet(0x2, 0x2, 0x73) 10.562292294s ago: executing program 3 (id=2226): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x32}, 0x8) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = syz_io_uring_setup(0x249e, &(0x7f0000000400)={0x0, 0x256c, 0x20, 0x2, 0x1ec}, &(0x7f0000000280), &(0x7f0000000480)) syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce, 0x0, r4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4c542, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000600)={'pim6reg1\x00', 0x2000}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f00000005c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4140) r9 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r9, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00030400000004034704"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="61d309f4b8fdc070be076a5622c163da910ffbd23e2818310a4f251367635795b72965ef3270b905cde3c057f3f9c81e2baf6f69e5c97ccf7278839041d9f6436e7a4e2cd90c4812af7f4849f79543fa180c955618859e1761dc75fc8a367f29f729f3d6335af8fac35a129810aa77a0e71257cfe4e526720cfa9cb0dc1bb61ddab495014f186037e34ecc701536065ff51e5f787a2f5be960ceb3b2f6f0b683410938112a0a3182cbe94c81cb3d7a8917720414166df4bb0cd0f32c313af402623451"]}, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="400081080000e6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="007e01000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r10, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='aio\x00', 0x412, &(0x7f0000000380)='\'-:}\x00') syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x20000000, 0x1}) io_uring_enter(r4, 0x3516, 0x3180, 0x3, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904efff0002060000aecbc0bfda495205c432622f5f32ac7ef81b8586593f45f75c25b4a7470b073d34bb2198b159c689d3cbc4a3c243ef3be25158"], 0x0) 9.59776112s ago: executing program 2 (id=2229): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) (async) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b00)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) sendto$inet(r4, &(0x7f0000000000)="4c37e0a34d4a468e5a5928e9da5ca9e38fbb0f6d99e1f35d166a54a530baaf5823c4e91450d20fae1e16ce07706175a97159c8c26ae7fc3ee8c488a026da19fc70f56a7d19a8e729a3b38db882a1530b22d44cf5ee31fef09d59", 0x5a, 0x20044001, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 9.521195707s ago: executing program 2 (id=2231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffe}}, 0x50) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r4, &(0x7f0000000080)=""/72, 0x48) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000001100)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@host}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) keyctl$read(0xb, r4, &(0x7f0000001280)=""/188, 0xbc) getsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f0000001180), &(0x7f00000011c0)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRESHEX, @ANYRESOCT=r0], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r10, &(0x7f0000000800)=[{&(0x7f0000000340)=""/48, 0x30}, {0x0, 0x30}], 0x2) bind$alg(r10, &(0x7f0000001200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-aes-ce,blake2s-128-arm)\x00'}, 0x58) 8.582491866s ago: executing program 2 (id=2234): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000700)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'ecb(serpent)\x00'}, {0x20, 'syzkaller\x00'}, {0x20, '#,'}], 0xa, "bdaba6d33accd75850e494e52d022b00a3af9af78dd63d20070d960c2cb4f0c978544d44a54e6d8d9d161140ce1dc7c24223a0badef9e032e76e5df2519ef92fdcb415752631c258bfdb33989f7d0cb494ec9a98f72ef89f601a88f5dcc5febc105213e4b32f2c184eaa58da2eb986f52bbb486c2b35f4184d8f69de7302ab2c686346eca64b58d44175ad1e719ee2e8fba998024bdcb2699bdab2f5a3bc91318e20090aaec9c8f8d63a126550bdd9c2082532cd3d10015fe8a3d9b0832679e7d6e892a8dd5a5ed8eeb9073eaac1da309858"}, 0xfb) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000580)="02a2f97a177137003d9b418698b97c81bf1bde789b66365fd7b1bbae5f5e00cb9b4432ed011564c758321c92aff549a18b82016d730fcdb5445c31a7d34e0b20bd90f8032e6aabfeac73e8c3c526528c0f25bd2cbe7523c99341983cd8011863d7a336c52f6322d92efa0d1f24e4491d933c065c74c6c30fd46cacd7c7781f0d7ce8f19f79392863f6fb743820810da45d", 0x91}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)="2001987c5ccf58f5f75061ee", 0xc}, {&(0x7f00000003c0)="8b120728c90b0b4a530fab46abf402095b65870c2a0ac8f0847a8e8ab1d98f34cdd3a1c838f816c52ca57b8a7efbcea529afab803882b9f88c28cab3df58895ebffef931a275cc35f9fefa5bd7a1f580106f3c7defd09032cf42417504eefea81cfa7bfea5032e42cc0858cee1b8e74e133934cc54cd707c5c85d4e5008025c28b72b46d12248babbe0d3f7916a5610416ee255a331398dea59a1a406070cc13e81701447ded270b0c1bce36d2bf06db98dd9c1ed65668eb5c2f4cab0ee3", 0xbe}, {&(0x7f0000000940)="0154cb3eb8695dcc7f253cb0f84f99ca40dada3fa997c3cdeaf5fba62ba9dca2592b2e1f1a3b323346857c2dc8a7feb60cabba8b2bae17b6adbf986484866d0995da61fdd7468d7a890840c77e27f020ceeaac9105570794647e71a0180a96c66f23d8bb7da1bb5d4862d206", 0x6c}], 0x3}}], 0x2, 0x8810) sendmsg$alg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004086) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @broadcast}}}}, 0x0) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010025bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="ff0000000000000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) 8.520948806s ago: executing program 2 (id=2235): io_uring_setup(0x80003eae, &(0x7f0000000380)={0x0, 0xf79d, 0xfff6, 0x2, 0x5e}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc3030905880320000602040905830200738f"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x3c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FRA_SRC={0x14, 0x2, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x6, 0xb, 0x0) mmap(&(0x7f0000841000/0x4000)=nil, 0x4000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@multicast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0xac1414aa, @private=0xa010101, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa011100, 0x1000000}, {@local}, {@remote}, {@dev}, {@remote}]}]}}}}}}}, 0x0) 8.432564668s ago: executing program 0 (id=2236): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x0, 0xa3}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) (rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}}, 0x20}, 0x1, 0x0, 0x0, 0x104}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000500)={0x3b4, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa27}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a23}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff97b8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x41a4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a26}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3707abe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd1d}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9a12}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffffffff, @private1, 0xa65}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x3}}}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x49, 0x3, "a708ffc2ae758fdd4671041e500553fdb0235e6e68deff814a1fe9d64ad95dfbae816acf83d9a702f9fe0ef3827a34e21c100a4f09a3f7381e80c678631932a7439fc6e6e6"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x8049}, 0x10) (async) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000040)={0x8, r2}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={0x1c, 0x41, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4, 0x1}]}, 0x1c}}, 0x4010) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r9, 0x4020aed2, &(0x7f0000000180)={0x8080001, 0x10000}) (async) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x71, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xed, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x80, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x2, 0x1, 0x16, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "9cd8"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0xf, 0xf, 0x7}, {0x6, 0x24, 0x1a, 0x1, 0x3}, [@mdlm_detail={0x7d, 0x24, 0x13, 0x9, "80cefda27a63213188902c589b5eb2f3484853661a684953c6793a22c53a92497673e00b713332a011d9624902debfc68cab92277db59757c7c940f645d8d959a0341aabae1c56dae371d95f2ddb182c077c5616bf4078fff7a2cfaf6eab3fea237fbf271b3d26f4e20b2c2449a87663a7574865d77682bb39"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0xff, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x40, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x420, 0x2, 0xf, 0xe}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x7, 0xd4, 0x0, 0x10, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x413}}, {0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="1003d2b203b323bb9c8d95a760b7d1c6e97155e57b37768208006852d69aba"]}, {0xb3, &(0x7f0000000300)=@string={0xb3, 0x3, "5c33f120ffc20b355de37d54ab5d107dd3bbc14d62c3e2a65581a95750e4e50dbbd0e6cf855767b916524956262c6de061162b0d317657146646dbe5399f95c0f9dcaf6fc4b06d672d9e11197fe98285a5ce66de69523f3043c02eb699f6dd4713826e36ed6a15486aab1e15c77dabe2513efcf174e921c3e7246ee1d809548a9e3681a0d1fed94684753c6c15faac62fd6b8511da30abc6ca830742bb119de14b68417ae163d3ff4a2be717b58ed9161d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42d}}]}) (async) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000400)={0x24, &(0x7f00000002c0)={0x0, 0x23, 0x14, {0x14, 0x1, "d0d8c9c0a8a7f3dc5b12052bb5c34f5625b1"}}, 0x0, 0x0, 0x0}, 0x0) 8.302642159s ago: executing program 0 (id=2237): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x80805, 0x0) unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000005c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 7.407278797s ago: executing program 3 (id=2238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x7020000}, 0x20000000) 6.649670009s ago: executing program 0 (id=2239): io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r0, 0x100000000, 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={0x0}) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x4, &(0x7f0000000040)=0xd06) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000000000000000000000000000095000000e1ffffff"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_pgetevents(r0, 0x40, 0x5, &(0x7f0000000280)=[{}, {}, {}, {}, {}], &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0xffffffffffff0000]}, 0x8}) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6.254591492s ago: executing program 3 (id=2240): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49df, 0x0, 0x0, 0x35, 0x10, "ec28a144f13d7607"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) r7 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}]}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) socket(0x3, 0x80000, 0x4000) socket$key(0xf, 0x3, 0x2) 5.86561069s ago: executing program 0 (id=2242): syz_usb_connect(0x0, 0x44c, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x78, 0xdf, 0x78, 0x20, 0x9fb, 0x6026, 0x6ad2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43a, 0x1, 0x7f, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x7, 0x60, 0x70, 0x69, 0x0, [@generic={0xe2, 0x3d, "20ed0a89e95180b4e8c0eaefdc34d4d3a0e3e36b0417776ee507409a3ec465fca9372fd6dedf2de72e7120ed79963308d0aea634e59c630007f61ff0b96778919cde58aee7369f30431c8af9d930b42f6829021e868a37e99d6f9faec83f6ba3bfad6e53f755ac3e10cce871a1c9d141ad639e9b5487da34bb249cffc14b8bfa0a964c17f6fc456b3f5d7c1c592592eb310db084a23438b3195c7dec3f8dd1abda0a09c03b3239c682b814447635b8690d0d2c02364640ff52b901703f4d997cb3cdf492e92975bdd37aac6324e05ae369b1f92318c3e55a7e426f8000fa465c"}], [{{0x9, 0x5, 0xe, 0x8, 0x400, 0x0, 0x2, 0x8, [@generic={0xa2, 0x23, "d644c43a6e8c46bab13250f91e4620ae01413d3ce8dac2e30126dd50badbfd854722b3f31f3319c14c7975686effa4f8072c2208a0a0fa338b32a9e28778faf8b9d1f84151cb067b25c945ae4ba3c3002ff4d804961751445d025917c2ff331724c2ea12f92d73a233f4c650317817a77ff1fc1021fa22a4580c54ff6c4fa652a456dbc1a836c65473cb2ab75a2e80dcdcfd8997580b8198a06ed8d7ed9af9cf"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x208, 0x1, 0xc3, 0x7f, [@generic={0x101, 0xb, "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"}, @generic={0xc9, 0x6, "bdc3b0f24cbd49f1e46fe9fbcdde3cc3671981da5100028c2f8afafbe333adc18146621d811297d49e68846d2ecbc84d05d05bc1b0796ff20e6c23346817d9439f9c411c41091a2a5f21465dc264e5f61d8b1e8ce0d549e814f7f91c219f48a2526c2deb87b2b825b421ec12510d96ee609cf11b1bb1ed56e975a283aad9b500344512e6c27c34b7938939d693095f859234c57208e8ab8ef851ff2506c310069c9617de6622ed1bf5ac8d401c581de13e3573572432608dbd3924ce4f88c6e882afe4499f78d8"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x10, 0x8, 0x9}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x80, 0xf, 0x2}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x4, 0x0, 0x0, [@generic={0x1d, 0x5, "90276cb0277d4f8b6e76c0075b5208a884f05c964889724587845e"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xe8, 0xf3, 0x5, [@generic={0x41, 0x22, "1e0d2a94488a19658d1578620108827d2c4c90acf25b67216170fe47b73fe32e299d6cd09706ef4630f1ac059239f2092f57e4ec79d8928503fb8d8198471b"}, @generic={0x36, 0x24, "b2b09a1bcbd1a28721645270471cf8960817be279d2eece1e4a65deacccb667abe1318fc78f37fce88005342ee038c9c4e12f28c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xd, 0x5e, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1a, 0xb2e}]}}]}}]}}]}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x4) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1477, 0x1022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x80, 0x97, [{{0x9, 0x4, 0x0, 0x2d, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x8dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x408, 0x2, 0x9, 0x9}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0x0, 0x6, 0x201, 0x0, 0xa, 0xca, 0x40, 0xb}, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="5bf65faa04"], 0x2}) getpriority(0x1, 0x0) 4.936703331s ago: executing program 1 (id=2244): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76f47792ad6215887d70323030302e752c63616368653d30"]) (async) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr(r3, &(0x7f00000001c0)=@known='system.posix_acl_default\x00', &(0x7f0000000200)='\x00', 0x1, 0x2) (async) r4 = dup2(r0, r0) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) fcntl$setstatus(r0, 0x4, 0x42800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) fcntl$setflags(r5, 0x2, 0x1) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020) 4.895730189s ago: executing program 4 (id=2245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() setrlimit(0xd, 0xfffffffffffffffc) (async, rerun: 32) r0 = getpid() (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = dup2(r1, r1) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x14003f00}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r7, 0x0, 0xfff7fffffffffff5}, 0x18) (async) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x183082) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async, rerun: 32) r8 = getpid() ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x15, 0x1, 0x10000, 0xe0a, 0x7f, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x8, 0x3}) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xff) (async) sched_setscheduler(r8, 0x5, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 64) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.490745006s ago: executing program 1 (id=2246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000040)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0028d4ca1590b500a6399ae6c5d28ce100"/27], 0x1c}}, 0x0) 4.461890375s ago: executing program 1 (id=2247): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_pidfd_open(r4, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) setns(r5, 0x10000000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) connect$vsock_stream(r3, &(0x7f0000000240)={0x28, 0x0, 0x2711, @host}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x190) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) 4.329542166s ago: executing program 4 (id=2248): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000340)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x80805, 0x0) unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000005c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 4.118640518s ago: executing program 2 (id=2249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x80805, 0x0) unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000005c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 3.344263295s ago: executing program 4 (id=2250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000000) 1.924240643s ago: executing program 0 (id=2251): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32], 0x20) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001714"], 0x30}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r2, 0x9) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) lseek(r7, 0x1000000000931f, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r10 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) sendmmsg(r10, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f00000002c0)) 1.646645305s ago: executing program 4 (id=2252): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c00020006", @ANYRES32, @ANYBLOB='\b'], 0x64}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x6023, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001200200028bd7000fddbdf25180d090000024e2202000000040000000500000001000000a3d976000006", @ANYRES32=0x0, @ANYBLOB="04000000b905000003000000c98f00000e00010075a709cbbc472494a81000005b0001007cd2b5e45cfd9742b84570c43776fd7da4e718c020ab1c898c566c3b052299f49bcc0ef925ec2a317d83eab1d5c15c3d2e756ea744c5133a263b018580d390044900f412d8363eb25342d149bd2724e62d1ad4ca5240f300"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_emit_ethernet(0x288, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000002440)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000080000000b0000000000", @ANYRES32, @ANYBLOB="0200000000009f000000000000008d9e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES64=r0, @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x1, "446216e924934e178cb394e17e362af7c5cd5e9eb598e00b961feee297d2a061", 0x38414762}) r7 = syz_io_uring_setup(0xa0, &(0x7f0000000480)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.645983278s ago: executing program 1 (id=2253): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000800)={0x6, 0x8, 0x400, 0x0, 0x7f, "db8f2d2b3b7596160c69c1acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000005480)=[{{&(0x7f0000000500)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000580)="c49a58ec0e7c57a8eb8c666b0a617137e6a6b3ff222b0c110805d0b395e649f455e0ae3ed93e2c36e94f15bc6e337e38a109b38c6bf780e027fc3281b7e84b154bfd48642ea9b40d3c1e1e3fa1c13ad183bd0e6960c4ea88681ce16a7599615707572eb0c254a808282fdf96808129468d7ff8fa90970668c0c06de1991cd88d6eff86ee5204ec748c7542da29", 0x8d}, {&(0x7f0000000640)="d795ad3d762364f5b4c1bbd1643f3cf511cfe3c9379dc850da4720d2c1254ce7cac77716ef085840e3eb3598744afbfd53416af6c97610b0c82f64649083a269ef1a6da4790392a794e873f0eb26c5728f6ec4b6efd7cf2a6783b3aa081ef8f3e68232a96ef531de745cc2ebfcfa20eb35be1451bdae60faa4011184424d2c", 0x7f}, {&(0x7f00000006c0)="88b974de89f4bc94396761dc085652682b23d8a0947e04306c6ca24238ffbb833b33b1016bf26de0a6f53d9a87a8d10b15d115337b22cf38387cc008a7b7485fd6f2121a9997f6abf94881b80ec9a87c2d405dbf7f6ee6627114c62e129591e1cba18058170338000dde54340f7d218f233be6c955b1e7b2263fbce22eba8ee7f3ad32af04b24d1e8253c38806c930ea73ac979f21d419af3966f79e94df435f5704f1cb8a54e6993d021cfcc1f96dcb216ba1ec35e414d5feb537d692b86da966d41fcd79d100413be38cbbe7301209bc26c4930cc381c14f", 0xd9}], 0x3, &(0x7f0000001f80)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r2, r0, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0]}}], 0xb0, 0x8000}}, {{&(0x7f0000002040)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000002280)=[{&(0x7f00000020c0)="b8c24045429e93b93a0df5b716e49981e305977216e81e3911f4fcc4113c1558a55d33146e046d", 0x27}, {&(0x7f0000002100)="a2083e28e68c8779aba934f129882a1d4cfee6851b53718e1671b002f252cf694f7e5ddd8fab98db5d3810d3dc1ed9e4b3f4c65d28ebfd28ed9f6fb03f2be5d3e36ad261399cf3b63b196799c56b58ad126167b3ca5f", 0x56}, {&(0x7f0000002180)="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", 0xfd}], 0x3, &(0x7f0000002380)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}], 0x38, 0x8004}}, {{&(0x7f00000023c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000840)="e21810ab7f1fc5fd9cb61f7a1de4ab29c206e5decd80c0cabd2c955b8dd8e2b11c9dd4349923856055edfe7d4c4a5a317be8c2d1ce38f85d859172468579a96de70e1a23e91e23020e059214e451ef54ca40cae81c947d4e9feb8ca9eed7ef6951dd9c0a", 0x64}], 0x1, &(0x7f0000002580)=[@rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110, 0x48845}}, {{&(0x7f00000026c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004b00)=[{&(0x7f0000002740)="66382ae3c3e973084abf0846725c4b5e18fc184fdf1956", 0x17}, {&(0x7f0000002780)="2b98105425ca6317861d45f34a4689b824248cc2b5e09c9d417328f56c3134522cce54195688c6c01d74b54f345995ff4fd2a09d0e013c84fca193806a419123732071151743bfead62ad46113d36131cc42c50c520abfd1f77b66eb9e04eacf998183c1330593d6e62a344d94c3649cb1051254ef16e94c1cb8dccd6278deed6a5080d075a5acfd6cb6f4b286f2a47c6a32c541cd783009bbcb46c115b53dbc4ff2f94bd94e439885db322a6e98d9fe7f630c28219a45d29d8fc1c6e12c5e26e2c71b1559449786e3dea5c67cb86622e07b01a3e291d51cbfd9c15d8b705f3f57c3b6173f02fe90a6292075a42e16dba6846aaaa0c4634fd56eb2ca0059df2c808c5c20424b996a3d9ba9d1530bcff7cb28560b4cc70786acf2488c731de2f01a393febef389468253356d6a18c9ca26ba122aec003b7865774d1811e10ea85682b72c7171b553e009593851628ccae45e1ffbdbd8fec7b3f6fdd1f8e26d8942178765058e8ea1da56eed096504b12d460383c23227d83349f45cca1ac34e05400a5abe18b66debde0ed39850238d18ebf51b502b9366efa09ac3457b5d48580486cb3f2f31d23b813006bccc5baf8ccfe9eada25e2333738526dba4012a4d77917ef2f1ca5c767eddf7607ebf3244532a4f0cd34f291e7abe8faeb6e24a7aad2a1815326d19cbeeec93d136992ee8316fcb4596e25dfaf5696e67d2712cc90f6ba3a3e54c37b1fdcf78faa7a8f575eb449b3e6bac6362051f4ee3c844aca24f46fbf7750f17e0393c5373e2dd856ea45aeabca23cd9b2abd83c6f23348b804841ee2ecc6263ce16a1a5e458a69d0f3cbdb87bd252f176d8de0afe9c6acb2f7465635258721a772998462286518dffdb9ae3b2b31f4862c91cd635a3a9957ddfb9b1cda4af9e8f5a7fe439024afc39ed8e0a868c0553a698c718f3dd9e24600395d0b3293eb7e3d1a75fbd619dd8e149bc9921d4aef02cab7e81ca4c1b62a490d52aa1edfb8b81a616da0027ea4af55dd8b6cdf4605f1e41fc9add980cae18e95b3746672e0effe9ea09a81de13a011dd97e34fcb56da578a358b53c9a64f3d7510478ea8b2bd658b88c0541601114bf303e35cd9999519ae9dbd71d7d9b63925cf5f0c2b514d19fff7bb6af5eb6caa9ff613a109260d3edc5522c2ae8d18adaefcc5ebcc225d4153ddf96a214a245f89eec883b12a7512501ce55e9e6a96518027fbca09bf99540937b202f596a37e1f9d6182ec8ea85464e110d6454809f936f8992a63c55dab5fe7a405e6d63cc27e1d4addde02803f69798062a10e342bc94aa8bf8416933bff1ff7a666a5908ce2381bc8c27f67bdacf7958afdf271b08d111aea06340da838a4f181a972e3714c9115dd45b7ec020ebd37bac6cdaaef60384a8596b3f1d0f2f261fefc0de3cd83b1039ffad8d0909861e516de266ba597a8d712809e925c8891f257ae79321e2660ea6d70dce9f5b7f9420067bad98a63e332ff01a00083f925a5a865fb1ee9dd169c93ffbc39f801fae32a8f9c953f4c21493972a5e5fc071a698b559d102faa63553410acd1b3d83a5b207deddb1b19c42c1c462d4a5209e0c760eef6c84a9a330eb5903fdfeb49f874364cbfbb98edde14b1736a913b199b203daf9b334ea8e1c3bdf7fff01b2e25dad84e9edbc0e0610a11031ae4ea5ac7be0bcb710200065108cdef9b84211bae08be52199dd7e2175da3e96af100410f1ffba2dcef2a5ec83c4bdf8c619e769cfe2c1b004fdf0d696b60d72dac9401524e5b69896b83d008a10adad11d7d4181303be0430e1c2a8ee3978b7815ea059338fef36d3b076f2ac5210283684944a536b30ed9c33f71d17eca2629f64b6257fbc1a51710b616cfc27805f385204ca6fe2573478ab39c517d0f73eebad7989c7cc13d30ae72d72f7015904dfd6f31926d3331a4db863ff1f1fee6ce125c3c998f72228e39ce1efc2005b6dc46f9efc6529f39a42fee1af9403906de59dee205636922b96a5a8f00801dd881a86e913b5ececac749e14a6dcd8fdf544143f92790fb2373fd64afa9e4bb3c792c350740255d7562c28227021b128c89ef8d58ceb0fe55f697bd74439a4a3191be56e251e56543acd52523f8f29f113d38c0861aa1e50358c3cefc58464963576d160d81b4ef6a9eb435ce78c825206e0c1c9d392897e170cff0554657a616f235c2e29b1e35f0641ec8188915cc560f2ba1ee3626df25f24a10d187afc482122c04089a12c28e4f0670ef6054582cf6c37813aea4fb3356140e65a0f177e7437e52397eb25be7a9d5461aae42f1b322a9860023ea1cad64c302e6295e62dacfc3ca567f9af72cfb199cb151fb22a6b75f401e956fb79a578e0d04b78c3ff640d75bd9c52ff205b7f8b67cd939f3c3bd7db088fbc7b36cdbf6f345a0a2dd3cb008197e55480ee9fe8e1728dbc62be886cb3515cfa013533ead5db636b7ab526c743986cc05fdbd108f859c88f50db4c3cdd7f1028f940076fa7d07e6b5ea9e015966e660f3f084de19a430076a4a644741c8ddcc8d80606d9ebb86d646b7c0a59028cba6f87ab07e47b208b2e9411008f376d20196c111e08f7c9054d5f458b8ada23ded6242e075d158793de786f12fa62d5657f67b4bfad3d778906a2f29497405fa43e9843f41733f9d49377deffd2e84e6717da5c823b04470e0d044751c6cee2b36d6f9f570a434d365f4848cd01a26225240400e3db22f6c73ca01152bd7ace71cbae2fe250b2b5f81c6002eb01770f755876d22b329d0e6edefc940c02dae43f62ef858476135e4379e88ac4e0d44b30dc76a9c22ccad1349e17d082f7fbbfc676ed9b8832cc756f670be8aab4b573ee93627b6276b1f851ca5cd8f5d325f1350d15a5c4a5845ebd476943fdf44528e775c16638243c84e15c2a6c4907d4908032902e223efc6bda1e8d240b033e9f67ca44d71483cbcf5a2fc1bd3cf5ed5c8b866da6de705b27483f4e632917833bcdfd2659aa444ceb0c0864bdd5f45b3af0b46611a002fa14f41b58b9e3666113e22dbcbf50e32c885f4ef4e6f25bf102005a66e0ae6ebc9ce85ac2753a1bd5b245116fceb408075bb83297697b8d523c13414cf9015ada18fc0ccf6f8d9a3ea5a8c18ed39133370cb50f8ad44ad0351eeaab06e17f8f9447f28dea2ece9462dd22e13db5d1b49485f439a78586f1863c44e04f466b6be7efe0f6b873468709e506b1f09314790317ee33666fe6106241c6ddc3bdeafdee7f8bf10698b0c0dbb5ada033d35533d9ee68eb2b24547f9c3a8d6854514f1996ca31441ab2d90c69218a8177c409080a5fc754d3b3fb4e9b9b6fb79615d00cdd944eab0b1dfa1a750d7584d675068650d99296d92e88bf75f94afcf5644b34874d51a0beb921f27237f3c8ca7ceb8bbb57895f876302e5e31b7369c8c4a3dc03b7b6f360056639c9212b6c6b84e9a637b1da47a05df0143fb488793f772bd99fab2a3091ba63de52c7ab7b05fc963ec2632faf0f5406cde9d2e4411572fac52d0b903cde8ab7232eac36b507992c83d6a24506d53bf58d87264a827094b014f1cad54c8264973963ab5048e133118e52af2c91080b30c1457bb0b4e1e2e3c72efb244e4651716d1fd79a3dbffef087fc5d4e7885029b8bb50b188d35b84978922d585165e01538cacd16f412267e09facb5859149dbad4bc2fa8682d0ff6d57d79c6d33d7e68a0c27a3ec222f89c82053f6eab83f0e1100baa0a8b2a9b1a9ad51e20fbeac722dde85d6f0c632d8877b968a98c1d07b10682f26a93f6fcabd7e795761683826641755ad5c840ed486f9b6dd788a09cfb538644a7990339f544cd8ff128bac965834ffda1aed2e9bb68c49bb39eee77aecf19537c019ca60f8043c67e7858e2ba67e1dbf0a0f06666275d8c5a9513d0d6b8252ef6ad95b607d910cefd077c1f47db3fdc47ba5134acc760ba0d6cb5fde1e96576fcad41e28deba75ebbec0085957f76fe4d3f9883162ad3d3fabf229121b68c0a82912f2f7e94cfeeeb38a753a70e68d7ec5643077cddfe96670fe6ece1ab650fad664a7d8255f9ebc200dc6b14b4b9c2e1a8fb317909ed5bbd3d33238ecae29957f2801df67b018120653444b1ccc5b95a4e6e8fdef4794df95c203f46bf0865c5c35da2472f31fabcb43ee6042a281d83d2680ff4b637beea49ca7ed101dcd5026bde10fa25f3ea18d2969aa760610bc97e0e19b0461e6016ca473388eb8c8afa97132e1e42b6264c6248106a20f71d1c367e7821bae7cd25f5eb6bc8ad836535c965944279df047fba9a8a0a9fd9508b62228f5c3f9afb069d557c23878fc84587217d1e3c629aea9f2719cc44a110f1f2a9d811505ec6fdbb4007538f526b4f52a2935843267400d949d9b44052b2bf8a2a4bb3453704e5b074acd12e34a36a6ceaf32c7ea8c3d2e9647e165556c5589e995c0be505167cca1c1d2c6a306a87d38bdf0897f5119a038eb480aea27cc717e17095e2c85009b567dfc066c7ee469006a7f86121d19f5f3c4568018c1f69d7e9cbac31ea9a53c151e9cac049d075b0d26ed562300e8227b8231f938c0b9735647aa2ff6552859cd387baa31a7b86f41928b495544f5c01917a016138fb875dc4ab95d7ab5fa2597a0916fd2361a113232a5019505dd3b98851ad3df8692d86b6ae03ddd7b69d104795ed80e470e99e9c27c419bf8c13b166cb0f737521672860dcd5d2c81629d906c5d8e5981d228e98a9586526cd4f56ae0a7f355b530c4fc918baa5cf810924aa1081e96f596055303224c404341c61cfcc7810fa7c6dbb9187ba8d28a63088d756578bdc43729a712747a333c1027d5fb18ca3687daa1056a1f9dc6bffc0cc94b06b1ca9251df647501565d1a388b1090eee294eb44489a77385f70788d1764c2df0dd113975a4557c21a61dac9b203c76ae84833b8970f25b68b2cdfd4bc54b46ee022cd40e17436ae5a48085b7c9e18544806c64c9e573e82d3de34d9b8c30d82909d70ebee4f01bcad7c25813e14f7e234f0ab744191317e087d83a979e3869538a130ad50b97a0d3f7b7e09923bafef64e8cadfee7b85c6de289d6566af4efa68c0e7fc88a467f2f9bf9148871e970f6c002b453a106ca6430224cc32ab266a7f29a911c61d40b8299ba3f3ba3aeb4b05b39fabb92d48c61bfcf0ad171edf343f7d94ff38f38bfb42d2813455792a39b08acce461c729277966a317c4274b330df0ea7c05ca3aee520507cd91a9658f0cdcf68bf4841faa55c6ac7640d5dea3d12dca9212f8cc3f23ecada6245f4627347a279c80f00515136bc9a76b73d58d0deef1b0f155ffae35dc467f0ca79dbf5907ef3fbff97e94dbdf48a4b2fa9a1fc1c7ea2f4c09d7c594f1f72acc7d1a8e9b52930d698a0ac4db572162965db1a3e7d2f80681677e88a10965a525fb1580cdf95aa3039763a90395a4d8d6cbb65a210ba13a208106ce1c221e5d7e7d4f650ef7795dd8d25ec56cafbab7df27af07e1a21b3c786cb56d3b49e06065b8c6fa4906bb817d31fe7d96a40475f83398c4594dc138957baa8a6214bd2cc383ced66c9194078546c1e828c3341ec4c2d7b993325cf5cdeb5caf79e63b9882a4ce3e89c220ae789656e54b4b159a1832b184260273fcdff7a76cea990873933c9c5fb378f3a64c2b747511ad4fb63499c5bfe4f9b1514493647f494f7bf07d668ba0c494c993b65b759d75f5d9524957ae4e8aec59cfa335fbd4f2f618d4b442e87db3ad0b32c9c44136350c7e0f8f8f5c2760aee9ee52c04d2426b621", 0x1000}, {&(0x7f0000003780)="c799ec1b8a8f15a61d0ab481dd22fada6af5a39b3a3c183946bdf20cf12176ef1fff60e75740925f03d9ac50fbd6218c00e0037ee267add98f0c419230f9cbd70ae3f78c165cceaaeabdeabff25943eb4dfe9c7ab30b3af73f3ef915ad", 0x5d}, {&(0x7f0000003800)="23fdad242cb0b31a4188b3007a23db127d3696538d1dabed38baa8b90cbc3c5cd244b9bf7796053991a0b19eb36d44a90e4e6832d4e7ccb94f7f80ef3ecfd5037eb738c5ad2c2a28bec268db461f917371dcdd47772c99d727b64793e1a5305fd37549b1dd12186dbadee6ec673f18c89a9990af11ce5ef14ac7a27dc26afbaee7ba2b81774d54c3df509b9f6d58a992e6baab7e3f1e2a95036422e3b3a36ed5b691a1884b6ade", 0xa7}, {&(0x7f00000038c0)="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", 0x1000}, {&(0x7f00000048c0)="49962a8a8ea1b0898c7f8b4f8c888ae69179ed43d12833bd5b66e75557c4da3d0a4ca4fb8deea05734f0644fee9ff4642532f2d3db6ca92af9521e25427bbc3b19940d9a104b14d30ecb31ea5bc404d130ccbeeb4accd2fbdc6be661a3c3d0fad8421c40724d9d4f6479181878ae15c8e074f99a5f895871fdb0397868eb928706", 0x81}, {&(0x7f0000004980)="8fb9756e2fb4f08aecc8e12fa5f82b23fee337bfe8d0d32217c3b433046dec99deb384942d3b7b2e057e6896fb43a3c4118b4b7d4e0bc0b96847e06cb7cf465faf0823a194da2c10c97399df63b1a6992e58a1c60bae3d74415ae5788fdedd2cd282ab9b7d47e27995e93a243c13c382c31b65eae1cf7366961fbc56218bf646abf31d4331376d0e14c2650a86c7748950caf1f5c58b6339c1abc8176322c56065ff48dec039928e5e29a95d7a4549f8", 0xb0}, {&(0x7f0000004a40)="a495e7c4f55e3787155334483689834c1e9cf904437bb6463b40baa8f3b06daac8236e88de712fb54869157310e16840fa0ca000005e5e52a00ffa3f02e2dcfee9de0d1b76a8", 0x46}, {&(0x7f0000004ac0)="0f5a6654148e6fa863a741961e2846555505ed53ead98ccc0a64ac7fcb32da18a30d06b7120c272260e9054264a9f3878b97a855e2e891ca453def09", 0x3c}], 0x9, &(0x7f0000004bc0)=ANY=[@ANYBLOB=' \x00'/16, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x14000004}}, {{&(0x7f0000004c00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005240)=[{&(0x7f0000004c80)="f0299cbd832f5bcde2718f0cba42e7bf45a5dcef1d1d5c501ece2677a61f975d20b63745354640dd4acbf074fe73d2b691cdb30edabf4c8390c20706d2c4caa0396d9db17bf0572ce345d7d0d25b9905a17e85638632058c999cc2ae403f035e6535d5afda55873815c8c7533bb7cc9580e8212980f3787b50625012a11a59d61e20a8c5d798dd5f89eab1937ddb7407defa2f4d9a6ffe386abc7cc26c36a06089cadb82f0549eaeed", 0xa9}, {&(0x7f0000004d40)}, {&(0x7f0000004d80)="2a95c32937ba0babe43023a2e734c93ecf74b1127018f4ae78909503d1c4872e117151d1a0cad6789d6bdfa551cef2d8e5069a74ffbde2de787886e476af02d812ac1bc8b486f5cc2867ca438a25139a58bd53775914d8ce97b9492173f14735b139ce07c99005daf74b295408a2a47c0cfb59685eb339834631ee418d0dc6dced7eacac7ef02864830f8238ff", 0x8d}, {&(0x7f0000004e40)="dc3c59423d5ea5b142481c2640c77e8de2035c32fe177b3835ec1dd7652ffc05f680e7c77d31c584a9c42c3fca0d78c78893337d5ab9d490c6dde435dca67000031f033540c57af8bbf706a88b535cc24d868bca70e84620bb4f046548524573a6e947f372b2cfd4aa97c80e1cd16676a34365c9c560fe6f14571bb2c9828465e13f2433d19b624d4102596af83c39b692ba4e3ede7a7ca12d43c26f1c74d28ee5247e79f301b4dbbb0115d32ddd669b2ec8ee2c3e44fad1e8cc7248f9715292423c334619eafcf63cdac51144e7c5e253400a6d88d0ce80", 0xd8}, {&(0x7f0000004f40)="f7e5edcfb4199640bb2abd98437f226ef2c979f1afd4dd3605bff1ae62fe6bee35fd85b3bb2870d382992778fc549b8aded800011a7aadfc3fc2692f524c2647cc129000277d0ba019b62d73481ba77c2992a817bc4a9c5cd6e59b8e16a378eaa3e5eaa4d6e83f", 0x67}, {&(0x7f0000004fc0)="a1f9b2da91cd58344f782691d0d3110f0012fd887dfe0c7b501efcfcba243d46614072040027d438a3ec4b15246eab79a5b85b6e475a774e5cd5c5dbd81814a31be83784dd1e6eee814f19e5ca614db4c513dd9da3526c0c12960fd4b26213167758dc2a18f556edf8e8da6cdf53cb1363ffec45777ed740647ec624f8a4711d92e3a8bfa258e572f8fe7c2706656b012496e0275f7cad450d26955604527a867d7f461029cb38bc6d1be1256b67e0850036", 0xb2}, {&(0x7f0000005080)="c7c0c0bb52d7b56e5235c2a2d027da854f64e5005ec667433887088ef4a0641fdf1404eb9b5ad7ce2455549b38c70c9647bbbd5ac6b1614c1369a9bc086a9444fb85cc362523b7a404bb8a1e1fd44791ba78b1acc6915594ec4868db057dc2", 0x5f}, {&(0x7f0000005100)="e1f5285563ea121070b4b15446a4a33ed4f9dd000058ed2254c29a755f22d88d0435a9e2cbfcececdd3f29611f9a862484c7245d580e5673cd78abaf156912fb155e815239e9ffa1122ebdced4a44cdebf68d5e496607dd3fc5c97132b2e7e3ea9336c8fc3b4d3c67ee237aa840e869ba9a6da210989c169d21b02f800da552268f65ee0bc4b3a36076471d7e281c974ea7ec4b84fa44331f5021ead8ad399e8ad8efb0105a4e45ae13adcf137c432f59d2657809fa49a907abc73b8f34dcd49d53792a0029b8a52720485307b", 0xcd}, {&(0x7f0000000900)="fcc9cdee9ae13cac26221ccc8f738d2da88d0ee047a1073d274200878c0236c4febde6369175647412ea59f26b0e07fb4779f342bd8d6523302c2c1f5a3fdfe0d4cfbe1624a1b06a6e191f7e380bf444213cf39395d7e8ab7d2b081b7eeb", 0x5e}], 0x9, &(0x7f00000053c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90, 0x11}}], 0x5, 0x20040000) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x7, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x4e97, 0x4c1, 0x27, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x8, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000000, 0x3, 0x0, 0x4, 0x1, 0x0, 0x0, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0xfcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x3, 0x0, 0x10000, 0x40000, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x9c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0x1, 0x0, 0xb0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x80000001, 0x0, 0x0, 0x210000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x406, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4]}, 0x45c) 1.56993713s ago: executing program 2 (id=2254): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x7323, 0x0, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "1a29b98c"}]}}, 0x0}, 0x0) sendfile(r6, r6, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000004c0)={0x4, &(0x7f0000000440)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}]}) sendfile(r1, r6, 0x0, 0x401) connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000080)={0x9, &(0x7f0000000100)=[{0xd76, 0xe, 0x2, 0x7802}, {0x7, 0xcd, 0xff, 0x358e}, {0x8, 0x72, 0x1, 0x80}, {0x6, 0x0, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x2}, {0x1, 0x10, 0x8, 0x603}, {0x5, 0x3, 0x2, 0x7}, {0x349, 0x6, 0x2, 0x1}, {0x100, 0x6, 0x7, 0x80000001}]}) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0x26, 0x0, [0x2, 0x5, 0xffffffff, 0x5, 0x80000000, 0x400, 0x3, 0x9, 0x2f8, 0x1, 0x3d, 0x5, 0x3, 0x3, 0xffff8000, 0xbecfa19]}, {0x18, 0x0, [0x2, 0x1ff, 0x5, 0x2, 0x124, 0x0, 0x4, 0x800, 0x2, 0x8, 0x4, 0x3, 0x0, 0x0, 0x5, 0x101]}, {0x4, 0x0, [0xfffffff9, 0xa, 0x40, 0x82, 0x9, 0x5, 0xfffffffd, 0x4dc, 0xbad, 0x25e9, 0xb, 0x88, 0x2, 0x2, 0xd215, 0x1]}, {0x21, 0x0, [0x4, 0x0, 0x9, 0xff, 0x2, 0x774371fb, 0x1, 0x4000, 0x3, 0x9, 0x4, 0x6, 0x5, 0x3, 0x7, 0x800]}, {0x24, 0x0, [0x80, 0x60000000, 0x200, 0xc, 0x7, 0x3, 0x4, 0x5, 0x40, 0x3, 0x8, 0x9, 0xbe3, 0x9, 0x80000001, 0x1]}, {0x2, 0x0, [0xffff8000, 0x4, 0xffff, 0x800, 0x80000001, 0x8, 0x80, 0x1, 0x1, 0x1, 0x401, 0xf, 0x8, 0x8d2, 0x2, 0x3]}], r11, 0x1, 0x1, 0x1b0}}, 0x20) 1.050819086s ago: executing program 4 (id=2255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f00000001c0), 0x1001) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c00)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000007000000000000930200000008000000000000070000000003000000000000b32c43bef7080200000000005f2e2e2e5f5f5f00"], &(0x7f0000000a00)=""/248, 0x46, 0xf8, 0x1}, 0x28) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async) setresuid(0xee00, 0xee01, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000280)={'syzkaller0\x00', {0x2, 0x4e21, @multicast2}}) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r5 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) (async) tkill(r5, 0x16) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0xfffffffffffffff1, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0) 686.65644ms ago: executing program 1 (id=2256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_getscheduler(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000190001090000000000000000021800000002fdac141400100016800c00010000000000000000040511000011000000"], 0x3c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r3, &(0x7f0000000140)=""/4096, 0x1000) fcntl$setlease(r3, 0x400, 0x0) fcntl$getflags(r3, 0x401) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x40007, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x200}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f00000000c0), &(0x7f0000000080)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x4800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x401, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b0000000904"], 0x0) 371.203376ms ago: executing program 4 (id=2257): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) syz_usb_connect(0x4, 0x696, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000001880)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x300, 0x7f, 0x5, 0x0, 0x30, 0x2}, 0x7e, &(0x7f0000001780)={0x5, 0xf, 0x7e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "eaf411ea5c020c85827b76d0628cc8e5"}, @ssp_cap={0x24, 0x10, 0xa, 0x90, 0x6, 0x10001, 0xff00, 0x2, [0xc0, 0xc0, 0xc0, 0xff3f00, 0xc0, 0xf]}, @ssp_cap={0x18, 0x10, 0xa, 0x2e, 0x3, 0x8099, 0x1e00, 0x4746, [0xc0, 0xc000, 0x5f27]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xe, 0x0, 0x2466}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0xc11, 0xf00f, 0x7, [0xff0000, 0x1fe000f, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x7, 0xf4}]}, 0x2, [{0x5, &(0x7f0000001800)=@string={0x5, 0x3, '1Mt'}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x3401}}]}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) r2 = socket(0x10, 0x3, 0x6) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x40000000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000018c0)=0x0) migrate_pages(r4, 0x5, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x272) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) (async) syz_usb_connect(0x4, 0x696, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000001880)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x300, 0x7f, 0x5, 0x0, 0x30, 0x2}, 0x7e, &(0x7f0000001780)={0x5, 0xf, 0x7e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "eaf411ea5c020c85827b76d0628cc8e5"}, @ssp_cap={0x24, 0x10, 0xa, 0x90, 0x6, 0x10001, 0xff00, 0x2, [0xc0, 0xc0, 0xc0, 0xff3f00, 0xc0, 0xf]}, @ssp_cap={0x18, 0x10, 0xa, 0x2e, 0x3, 0x8099, 0x1e00, 0x4746, [0xc0, 0xc000, 0x5f27]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xe, 0x0, 0x2466}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0xc11, 0xf00f, 0x7, [0xff0000, 0x1fe000f, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x7, 0xf4}]}, 0x2, [{0x5, &(0x7f0000001800)=@string={0x5, 0x3, '1Mt'}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x3401}}]}) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) (async) socket(0x10, 0x3, 0x6) (async) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x40000000) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000018c0)) (async) migrate_pages(r4, 0x5, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x272) (async) 338.707017ms ago: executing program 3 (id=2258): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x2}}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) (async) read$FUSE(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) (async) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) chdir(0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r5 = epoll_create(0x101) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x80000004}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)={0x0, 0x0}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002980), 0x80, 0x0) read$char_usb(r7, &(0x7f00000029c0)=""/16, 0x10) 14.577198ms ago: executing program 0 (id=2259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b9af8ff00000000bfa2000000000e0321acd8efb71e9b4c0ec722000007020000f8ffffffb703000008000010f704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='1'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x25, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r8 = socket$rxrpc(0x21, 0x2, 0x2) signalfd4(r8, &(0x7f0000000040)={[0x3]}, 0x8, 0x80800) openat(0xffffffffffffffff, 0x0, 0x180, 0x4) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x60201, 0x0) write$FUSE_DIRENTPLUS(r9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}}, 0x0) 0s ago: executing program 1 (id=2260): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x10401) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xfffc, 0x6, {0x803, 0x5d5}, {0xfffc, 0x2}, @cond=[{0x3ff, 0x4, 0x70, 0x8a, 0x6, 0x2}, {0x3, 0x7, 0x0, 0x9, 0x8001, 0x800}]}) mount$overlay(0x0, 0x0, 0x0, 0x80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001140)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)="eb302959fd27edb054e0b2d428816afedf8f2461da36d1c9fc4a52348d9d4f62f77267b6ba4b39efeb4315bda512c4559bb5a8283ee8cfa29b38658be72976069b3416c11bc942fe0e80e460fb8f3937f00ad792671f8ca165d043bcb4f079d697427d9cd788e056ea0e8d0f66c424166b0bd7a495fc41c8585e8c5cdcd3f7b64c3f91c1c954923113bf79b5c72cc4b1a4e3143d51a192f50519fbd09bbd30a83b969b5274255a5e786a06c8d86d25984a7ed5751660f305044b28ceff806ccbffb0e2ee0573ed74a091de1fa952153a058f384a7193ee08979d461f0de4022014e456fbf9", 0xe5}, {&(0x7f00000003c0)="10a7800ba7d945a16f6b306bcd97d6085239eef327f44d872ab1b1632cf9d48c9593069a6a0fdbeb8df4dc154ee1f05d8055d52407de285574c07144eba6b7283e5551ef29a75cbf1d67f8eaac8cf2c8877450f655dbcb3ac86fb286915fe87ca68e5ce1b804c92f9eb708e8d5b3fe3a6b38f800527d5ecc9c596b3bfb3bca4020e82ea426977e88f43a0ebfd0e5a9efe0e352ffbb26c5327246336354596583a17178bb7176167bfa41b4e3415354c9a245a1f77459bac1eb3b80e43895d8249f9a0913c5203d5cc3b5887a4ecce2d3", 0xd0}, {&(0x7f0000000200)="8078a70c38a25af61603f6484a5696888f35039a55ae7d324e3860b767a6225ac045e3e7e72c15ca97aa82874a57ffffddcf3caccfb5e38c59ef4d1e57b527e59f2ae9078685156c3a06f55f0800d2c6fe8c46a098671bae745be44284b8f611c7221526d00fc4ab75f167244c32d4a682dfb4156989136ec87fa2db510673f7", 0x80}, {&(0x7f0000000500)}, {&(0x7f0000000540)="5754574d0bf6c785292d909c80a36244b285fa6836f6effc2f03cc9260eab460c811050fc364531a1d0d2181bc7b3d5cc1bb4571cc04c78b721cbb4176f975fb5bf0c90a0ad59533f6a1f8", 0x4b}], 0x5, &(0x7f0000000f00)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="62f41712688f252b2e7300000000"], 0xd0}}, {{&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000b40)=[{&(0x7f00000009c0)="2fb54083b9e525ab7c39e723c067250179e931df67eea771d93c4eaad923d9ae46fb0092e86065ce3c89c40e8951570829e576131573a82fcc40caa7d3c1021f07dfa590bba0eb34b9c56760a5bbe4069c02ebb0a71807bd0aaec7c813cc47fc58956a243c3e624606551a6e74c7849d130a7b16d9d4e1ce4aa10baf606c8b8e3ca905629abcb3db2b93ef0e4a051d25f605e8158f99623b6901963ef386e0151b1357685df867792112228469016c7c7adf8ca79fffe4369663f18438a649fbf11b5bfd3b03f517a76f98443579b2be9823a149919cfede18a6192a82e2bf", 0xdf}, {&(0x7f0000000ac0)="9869b38bd4ca939f59e45ff81a82429e1797ec863edc171357c45554fadcd83497cbd38872d92f6639435a64b82f21b6a68530d68b6bf22379f253160d22f921abf633c2fdc64cc6060386d5", 0x4c}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200000073acfac327d42d356cb25bee0c2e6c8b242715a33ca78740c9079232eb97b85858fbf3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32], 0x68, 0x4000}}, {{&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000c80)="2efe04a2380aac978f8792615878b54c8f943ec84530f0dc6e5eb7a4e3b74c8bd9bd8672d8a7ebceddefae833a46efa3ad1e52001d04eeb4e7813d1841202901e8138d278a310f6fd33f3f7161045151325001fade443fa7fe7fa3994377a0a39c29044bb5ff814abad2fc7c6c451f91eec909e175b5c241568a4a29e9d48a2af345", 0x82}, {&(0x7f0000000d40)="9000681c66918db5d4d8dcb97631c0a539", 0x11}, {&(0x7f0000000d80)="f082125051ba53525c", 0x9}, {&(0x7f0000000dc0)="acb848ee71822e293329d91f7f0512d23defde410d4b9d33be0baa1963f676c78a52cd654ad38575c1ae457ff1c46ca192644c7b0cd8636678228ca5cc3869faf1ae54d733915e9f2ab3f01c2db97ce071db826b2bd363ee41f85f502fec9f3bd7e95a0f6c9a05bcef7b0cfd44d7d98306554da33ee7feece6b45e51f12efa7c20", 0x81}, {&(0x7f0000001000)="7ca8bcc108ae5273ef4d20d41310ed641ce235634f6203fa167c4b67972501d76beb3f85be9b098d8fb38d0bc1c873605777e5ba5cf66dac308b05f0f5ebae4043b51c4b0110c345e5bba14994172763e554de3c8ac66b2a577c95b63f48629b3be943436c1728418b32ce22eda813bfe0bce58892ad0d74844aba337e69663e4d4ae6ca807271f9d78cfc2ced9edcc1e1c4993c4b2d4a8516b3c70f998ab5e54493211dc6b4d796ad8e0999dc1560eeff7fb554df481f16c8f53d41811e0fc203c649ee0489faf9602938", 0xcb}], 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r1, @ANYRES32, @ANYBLOB='\x00\b'], 0x28}}], 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc0403d11, 0x0) socket$inet(0xa, 0xaf86d33200065442, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000080)="0f20c035000001000f22c0670feb6cbf260f211a67fe0ecebd670fc7a9888e0f01cf84b3d3abd1b5260f09f30f23750fd40500000000", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) kernel console output (not intermixed with test programs): Product=0, SerialNumber=0 [ 538.477826][ T9] option 4-1:127.127: GSM modem (1-port) converter detected [ 539.295298][ T5219] udevd[5219]: worker [5974] terminated by signal 33 (Unknown signal 33) [ 539.305568][ T5219] udevd[5219]: worker [5974] failed while handling '/devices/virtual/block/loop2' [ 539.613268][ T5984] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 539.785230][ T5984] usb 3-1: Using ep0 maxpacket: 8 [ 539.791846][ T5984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 539.801407][ T5984] usb 3-1: config 7 has an invalid interface number: 67 but max is 0 [ 539.810336][ T5984] usb 3-1: config 7 has no interface number 0 [ 539.819587][ T5984] usb 3-1: string descriptor 0 read error: -22 [ 539.827390][ T5984] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 539.837296][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.074510][T13417] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 540.106103][T13417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.178719][T13417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.273226][T13417] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 540.317921][T13417] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 540.350314][ T5984] usb 4-1: USB disconnect, device number 56 [ 540.367850][ T5984] option 4-1:127.127: device disconnected [ 540.381055][T13418] batadv_slave_1: entered promiscuous mode [ 541.068320][T13445] ptrace attach of "./syz-executor exec"[5856] was attempted by "./syz-executor exec"[13445] [ 541.087288][ T9] usb 3-1: USB disconnect, device number 65 [ 541.654062][T13451] lo speed is unknown, defaulting to 1000 [ 541.660575][T13451] lo speed is unknown, defaulting to 1000 [ 542.126393][T13464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1625'. [ 542.202141][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1625'. [ 542.763115][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 543.283152][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 543.334537][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 543.354192][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 543.383639][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 543.398170][ T24] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 543.408063][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.423105][ T24] usb 3-1: Product: syz [ 543.427349][ T24] usb 3-1: Manufacturer: syz [ 543.432659][ T24] usb 3-1: SerialNumber: syz [ 543.451502][ T24] usb 3-1: config 0 descriptor?? [ 543.489516][ T24] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 543.527080][ T24] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card [ 543.566299][ T24] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 544.413907][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'. [ 544.549669][ T24] usb 3-1: USB disconnect, device number 66 [ 544.710628][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 544.710643][ T30] audit: type=1400 audit(1757090373.746:1214): avc: denied { ioctl } for pid=13512 comm="syz.3.1635" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 545.235639][ T5984] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 545.269919][ T979] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 545.347806][ T979] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 545.415803][ T5984] usb 4-1: Using ep0 maxpacket: 16 [ 545.427776][ T5984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 545.503549][ T5984] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 545.516583][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.531611][ T5984] usb 4-1: config 0 descriptor?? [ 545.544517][ T5984] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input28 [ 545.892068][ T5204] bcm5974 4-1:0.0: could not read from device [ 545.906173][ T5984] bcm5974 4-1:0.0: could not read from device [ 545.915516][ T5204] bcm5974 4-1:0.0: could not read from device [ 545.931732][ T5204] bcm5974 4-1:0.0: could not read from device [ 546.441511][ T5984] input: failed to attach handler mousedev to device input28, error: -5 [ 546.469929][ T5204] bcm5974 4-1:0.0: could not read from device [ 546.477639][ T5984] usb 4-1: USB disconnect, device number 57 [ 546.527508][ T30] audit: type=1326 audit(1757090375.546:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 546.558791][ T5204] bcm5974 4-1:0.0: could not read from device [ 546.719272][ T30] audit: type=1326 audit(1757090375.556:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 546.992562][ T30] audit: type=1326 audit(1757090375.586:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 547.202629][ T30] audit: type=1326 audit(1757090375.586:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 547.283368][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'. [ 547.465852][ T30] audit: type=1326 audit(1757090375.586:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 547.511109][ T30] audit: type=1326 audit(1757090375.586:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 547.640020][ T30] audit: type=1326 audit(1757090375.586:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 547.821737][ T30] audit: type=1326 audit(1757090375.586:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 547.904532][ T30] audit: type=1326 audit(1757090375.586:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13540 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 547.992539][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 548.221987][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 548.244160][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 548.295485][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 548.314135][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 548.378594][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 548.402714][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 548.509360][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 548.610075][ T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 548.685290][ T9] usb 4-1: Product: syz [ 548.802056][ T9] usb 4-1: Manufacturer: syz [ 548.916181][T13569] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1649'. [ 549.373371][ T9] usb 4-1: SerialNumber: syz [ 549.401858][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input29 [ 549.598056][ T24] usb 4-1: USB disconnect, device number 58 [ 549.759372][ T24] appletouch 4-1:1.0: input: appletouch disconnected [ 549.872723][T13575] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1651'. [ 551.237264][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 551.237278][ T30] audit: type=1326 audit(1757090380.276:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13576 comm="syz.4.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43018ebe9 code=0x7ffc0000 [ 551.315238][T13593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.378265][T13593] bond0: (slave rose0): Enslaving as an active interface with an up link [ 551.406102][ T30] audit: type=1400 audit(1757090380.306:1271): avc: denied { bind } for pid=13592 comm="syz.3.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 551.431176][ T30] audit: type=1400 audit(1757090380.306:1272): avc: denied { connect } for pid=13592 comm="syz.3.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 551.461628][ T30] audit: type=1400 audit(1757090380.306:1273): avc: denied { write } for pid=13592 comm="syz.3.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 551.489853][T13581] pim6reg: entered allmulticast mode [ 551.497674][ T30] audit: type=1326 audit(1757090380.316:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13576 comm="syz.4.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43018ebe9 code=0x7ffc0000 [ 551.536527][ T30] audit: type=1326 audit(1757090380.316:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13576 comm="syz.4.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff43018ebe9 code=0x7ffc0000 [ 551.703693][T13576] pim6reg: left allmulticast mode [ 552.883054][ T30] audit: type=1326 audit(1757090380.316:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13576 comm="syz.4.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43018ebe9 code=0x7ffc0000 [ 553.000417][T13610] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1661'. [ 553.363921][ T30] audit: type=1326 audit(1757090380.316:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13576 comm="syz.4.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43018ebe9 code=0x7ffc0000 [ 553.428555][ T30] audit: type=1326 audit(1757090380.316:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13576 comm="syz.4.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff430190b07 code=0x7ffc0000 [ 553.471566][ T30] audit: type=1326 audit(1757090380.316:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13576 comm="syz.4.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff430190a7c code=0x7ffc0000 [ 553.521089][T13614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1662'. [ 553.949141][T13624] overlay: ./file0 is not a directory [ 554.441985][ T979] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 554.623184][ T979] usb 5-1: not running at top speed; connect to a high speed hub [ 554.851706][ T979] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 554.873991][ T979] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 554.888004][ T979] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.907574][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.927759][ T979] usb 5-1: Product: syz [ 554.939070][ T979] usb 5-1: Manufacturer: syz [ 554.949168][ T979] usb 5-1: SerialNumber: syz [ 555.307027][T13643] i2c i2c-0: Invalid block write size 34 [ 555.326081][ T979] usb 5-1: USB disconnect, device number 74 [ 555.338362][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'. [ 555.702035][ T9] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 555.894362][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 555.907370][ T9] usb 3-1: can't read configurations, error -61 [ 555.983701][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 556.039578][T13659] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1677'. [ 556.048957][ T9] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 556.074458][ T5926] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 556.209011][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 556.216802][ T9] usb 3-1: can't read configurations, error -61 [ 556.225496][ T9] usb usb3-port1: attempt power cycle [ 556.245913][ T5926] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 556.255184][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.264902][ T5926] usb 5-1: Product: syz [ 556.269152][ T5926] usb 5-1: Manufacturer: syz [ 556.274562][ T5926] usb 5-1: SerialNumber: syz [ 556.281011][ T5926] usb 5-1: config 0 descriptor?? [ 556.289111][ T5926] ems_usb 5-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 556.300867][ T5926] ems_usb 5-1:0.0: probe with driver ems_usb failed with error -22 [ 556.489996][ T5926] usb 5-1: USB disconnect, device number 75 [ 556.562037][ T9] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 556.585685][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 556.593424][ T9] usb 3-1: can't read configurations, error -61 [ 556.732107][ T9] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 556.764298][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 556.771958][ T9] usb 3-1: can't read configurations, error -61 [ 556.779571][ T9] usb usb3-port1: unable to enumerate USB device [ 556.899497][T13664] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1678'. [ 556.909500][T13664] 0{X: entered promiscuous mode [ 556.923907][T13664] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1678'. [ 556.935381][T13664] 1{X: renamed from 30{X [ 556.941767][T13664] 1{X: left promiscuous mode [ 556.947808][T13664] 1{X: entered allmulticast mode [ 556.954828][T13664] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 557.159137][T13673] loop7: detected capacity change from 0 to 7 [ 557.313291][ T5984] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 557.573111][ T5984] usb 4-1: Using ep0 maxpacket: 32 [ 557.590183][ T5984] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.616411][ T5984] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 557.630350][ T5984] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 557.774833][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 557.788177][ T5984] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 557.812865][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 557.823746][ T5984] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 557.838199][ T5984] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 557.850369][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.862832][ T5984] usb 4-1: Product: syz [ 557.867276][ T5984] usb 4-1: Manufacturer: syz [ 557.876793][ T5984] usb 4-1: SerialNumber: syz [ 557.974855][ T5984] usb 4-1: config 0 descriptor?? [ 557.984303][T13669] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 557.996132][ T5984] usb 4-1: NFC: Reader power on cmd error -90 [ 558.014968][ T5984] pn533_usb 4-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 558.033770][ T5984] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 558.161531][T13673] Dev loop7: unable to read RDB block 7 [ 558.167608][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 558.177515][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 558.186152][T13673] loop7: unable to read partition table [ 558.197417][T13673] loop7: partition table beyond EOD, truncated [ 558.226061][T13673] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 558.294789][ T5926] usb 4-1: USB disconnect, device number 59 [ 559.588890][ T5984] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 560.857977][ T9] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 560.992004][ T9] usb 4-1: device descriptor read/64, error -71 [ 561.242919][ T5984] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 561.265714][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.286198][ T5984] usb 5-1: config 0 descriptor?? [ 561.474249][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 561.474266][ T30] audit: type=1400 audit(1757090390.516:1309): avc: denied { setopt } for pid=13721 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 561.529424][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'. [ 561.544493][ T9] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 561.811751][ T9] usb 4-1: device descriptor read/64, error -71 [ 561.922938][ T9] usb usb4-port1: attempt power cycle [ 562.467564][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.475476][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.703519][ T5984] pegasus 5-1:0.0: probe with driver pegasus failed with error -121 [ 562.763537][ T9] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 562.887106][ T30] audit: type=1400 audit(1757090391.926:1310): avc: denied { bind } for pid=13747 comm="syz.3.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 563.002612][ T30] audit: type=1400 audit(1757090391.926:1311): avc: denied { write } for pid=13747 comm="syz.3.1700" path="socket:[37468]" dev="sockfs" ino=37468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 563.185656][ T9] usb 4-1: device not accepting address 62, error -71 [ 563.555206][T13760] lo speed is unknown, defaulting to 1000 [ 563.570191][T13760] lo speed is unknown, defaulting to 1000 [ 564.169482][ T5984] usb 5-1: USB disconnect, device number 76 [ 564.903156][ T5984] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 565.062782][ T5984] usb 5-1: device descriptor read/64, error -71 [ 565.091634][ T30] audit: type=1400 audit(1757090394.126:1312): avc: denied { setattr } for pid=13783 comm="syz.0.1710" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 565.322832][ T5984] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 565.503027][ T5984] usb 5-1: device descriptor read/64, error -71 [ 565.654536][ T30] audit: type=1400 audit(1757090394.696:1313): avc: denied { listen } for pid=13792 comm="syz.2.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 565.663353][ T5984] usb usb5-port1: attempt power cycle [ 565.895284][T13794] fuse: Unknown parameter 'sootmode' [ 566.068714][ T5984] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 566.094056][ T5984] usb 5-1: device descriptor read/8, error -71 [ 566.354365][ T5984] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 566.383152][ T5984] usb 5-1: device descriptor read/8, error -71 [ 566.494185][ T5984] usb usb5-port1: unable to enumerate USB device [ 566.602333][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 566.765318][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 566.776547][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 566.832417][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 566.969230][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.034460][T13807] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 567.047757][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 567.138200][T13815] : renamed from bridge_slave_0 (while UP) [ 570.387178][ T10] usb 4-1: USB disconnect, device number 64 [ 570.536960][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 571.084010][T13845] netlink: 'syz.2.1726': attribute type 10 has an invalid length. [ 571.109347][T13845] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.117984][T13845] bridge_slave_1: left allmulticast mode [ 571.123698][T13845] bridge_slave_1: left promiscuous mode [ 571.129337][T13845] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.220508][ T30] audit: type=1400 audit(1757090400.246:1314): avc: denied { watch watch_reads } for pid=13852 comm="syz.3.1727" path="/355/file1" dev="tmpfs" ino=1932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 571.630537][T13856] lo speed is unknown, defaulting to 1000 [ 571.638669][T13856] lo speed is unknown, defaulting to 1000 [ 571.700488][T13863] qrtr: Invalid version 0 [ 571.932993][T13869] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1730'. [ 572.892532][ T5900] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 573.093126][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 573.153660][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 573.213309][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 573.269272][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 573.311067][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.348291][ T5900] usb 5-1: Product: syz [ 573.361567][ T5900] usb 5-1: Manufacturer: syz [ 573.396735][ T5900] usb 5-1: SerialNumber: syz [ 573.434840][ T5900] usb 5-1: config 0 descriptor?? [ 573.461803][ T5900] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 573.515832][ T5900] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 574.192794][ T5900] em28xx 5-1:0.0: chip ID is em2710 [ 574.333265][ T5900] em28xx 5-1:0.0: Config register raw data: 0xb1 [ 574.339680][ T5900] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 574.383981][ T5900] em28xx 5-1:0.0: No AC97 audio processor [ 574.427882][ T5900] usb 5-1: USB disconnect, device number 81 [ 575.065692][T13936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1747'. [ 575.149448][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1747'. [ 575.322425][ T44] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 575.493145][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 576.368881][ T44] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 576.389149][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.407603][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.445407][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 576.496517][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.508523][ T44] usb 4-1: Product: syz [ 576.531492][ T44] usb 4-1: Manufacturer: syz [ 576.550980][ T44] usb 4-1: SerialNumber: syz [ 576.718412][T13957] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 576.724923][T13957] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 576.919465][T13957] vhci_hcd vhci_hcd.0: Device attached [ 577.162281][ T9] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 577.208078][T13934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.233099][T13934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.497305][T13962] vhci_hcd: connection reset by peer [ 577.514654][ T36] vhci_hcd: stop threads [ 577.518939][ T36] vhci_hcd: release socket [ 577.543647][ T36] vhci_hcd: disconnect device [ 578.453445][T13991] geneve2: entered promiscuous mode [ 578.473824][T13991] geneve2: entered allmulticast mode [ 578.667823][ T44] usb 4-1: 0:2 : does not exist [ 578.679602][ T44] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 578.748915][ T44] usb 4-1: USB disconnect, device number 65 [ 579.341855][T13997] 9pnet: Could not find request transport: f [ 579.454721][T14004] binder: 14003:14004 ioctl c0306201 200000000080 returned -14 [ 579.711861][T14011] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 579.718392][T14011] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 579.727076][T14011] vhci_hcd vhci_hcd.0: Device attached [ 579.843610][T14014] vhci_hcd: connection closed [ 579.847806][ T7446] vhci_hcd: stop threads [ 579.874896][ T30] audit: type=1400 audit(1757090408.906:1315): avc: denied { write } for pid=14016 comm="syz.3.1768" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 579.908053][ T7446] vhci_hcd: release socket [ 579.917108][ T7446] vhci_hcd: disconnect device [ 579.972850][ T44] usb 37-1: new high-speed USB device number 10 using vhci_hcd [ 579.985168][ T44] usb 37-1: enqueue for inactive port 0 [ 580.114489][ T44] vhci_hcd: vhci_device speed not set [ 580.159542][ T30] audit: type=1400 audit(1757090409.196:1316): avc: denied { create } for pid=14026 comm="syz.3.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 580.179706][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.355357][T14027] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 580.536714][ T30] audit: type=1400 audit(1757090409.566:1317): avc: denied { setopt } for pid=14032 comm="syz.2.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 580.947061][T14037] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1771'. [ 581.322693][ T5984] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 581.553724][ T5984] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 581.602618][ T5984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.631474][ T5984] usb 3-1: config 0 descriptor?? [ 582.016333][T14046] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1773'. [ 582.273309][T14039] mkiss: ax0: crc mode is auto. [ 582.286268][T14039] syz.0.1772 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 582.299784][ T30] audit: type=1400 audit(1757090411.336:1318): avc: denied { map } for pid=14041 comm="syz.1.1774" path="socket:[38582]" dev="sockfs" ino=38582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 582.412132][ T9] vhci_hcd: vhci_device speed not set [ 582.599729][ T30] audit: type=1400 audit(1757090411.636:1319): avc: denied { name_bind } for pid=14049 comm="syz.4.1777" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 582.795508][T14062] lo speed is unknown, defaulting to 1000 [ 582.833808][T14062] lo speed is unknown, defaulting to 1000 [ 583.853342][ T5984] pegasus 3-1:0.0: can't reset MAC [ 583.874253][ T5984] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 583.978411][ T5984] usb 3-1: USB disconnect, device number 71 [ 586.402836][T14139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1793'. [ 586.471298][T14139] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 586.480012][ T30] audit: type=1400 audit(1757090415.496:1320): avc: denied { getopt } for pid=14138 comm="syz.0.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 586.770937][T14144] netlink: 'syz.3.1794': attribute type 1 has an invalid length. [ 586.998018][T14144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 587.058664][T14148] bond5: (slave veth3): Enslaving as an active interface with a down link [ 588.381535][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1794'. [ 588.451790][T14160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.755005][T14151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 588.862770][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 589.049745][ T10] usb 3-1: device descriptor read/64, error -71 [ 589.228231][T14181] tmpfs: Bad value for 'huge' [ 589.468467][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 589.861721][T14187] macvtap1: entered promiscuous mode [ 589.868269][T14187] vlan0: entered promiscuous mode [ 589.877898][T14187] macvtap1: entered allmulticast mode [ 589.885273][T14187] vlan0: entered allmulticast mode [ 589.890724][T14187] veth0_vlan: entered allmulticast mode [ 589.901956][ T10] usb 3-1: device descriptor read/64, error -71 [ 590.012185][ T10] usb usb3-port1: attempt power cycle [ 590.371964][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 591.047886][ T10] usb 3-1: device descriptor read/8, error -71 [ 591.436154][T14199] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1805'. [ 591.782324][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 591.823157][ T10] usb 3-1: device descriptor read/8, error -71 [ 591.868958][T14201] bond1: entered promiscuous mode [ 591.876812][T14201] bond1: entered allmulticast mode [ 591.888700][T14167] delete_channel: no stack [ 591.908937][T14201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 592.009907][ T10] usb usb3-port1: unable to enumerate USB device [ 592.043290][ T30] audit: type=1400 audit(1757090421.086:1321): avc: denied { read } for pid=14207 comm="syz.0.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 592.218553][T14212] : renamed from bridge_slave_0 (while UP) [ 592.334074][T14216] block nbd0: Attempted send on invalid socket [ 592.353380][ T979] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 592.367985][T14216] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.397455][T14216] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 592.441020][ T30] audit: type=1400 audit(1757090421.476:1322): avc: denied { setopt } for pid=14217 comm="syz.4.1812" lport=60233 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 592.563428][ T979] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 592.577751][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.618418][ T979] usb 4-1: config 0 descriptor?? [ 593.144935][T14227] geneve2: entered promiscuous mode [ 593.160714][T14227] geneve2: entered allmulticast mode [ 593.286824][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 593.324198][T14229] openvswitch: netlink: Flow actions attr not present in new flow. [ 594.382548][ T979] pegasus 4-1:0.0: probe with driver pegasus failed with error -110 [ 594.627930][T14256] geneve2: entered promiscuous mode [ 594.959369][T14261] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 595.188412][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 597.130478][ T44] usb 4-1: USB disconnect, device number 66 [ 597.267946][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 597.834203][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1828'. [ 598.172114][ T30] audit: type=1400 audit(1757090427.206:1323): avc: denied { lock } for pid=14290 comm="syz.3.1831" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 598.283538][T14300] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 598.290061][T14300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 598.298440][T14300] vhci_hcd vhci_hcd.0: Device attached [ 598.396141][T14301] vhci_hcd: connection closed [ 598.399271][ T6185] vhci_hcd: stop threads [ 598.446414][ T6185] vhci_hcd: release socket [ 598.473675][ T6185] vhci_hcd: disconnect device [ 598.522490][ T5984] vhci_hcd: vhci_device speed not set [ 599.160189][T14319] xfrm0: entered promiscuous mode [ 599.170582][T14319] xfrm0: entered allmulticast mode [ 599.178570][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 599.509797][T14328] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 599.518325][ T5861] Bluetooth: hci3: unexpected event 0x09 length: 6 > 3 [ 623.904871][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.918917][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 664.457967][ T30] audit: type=1400 audit(1757090493.496:1324): avc: denied { ioctl } for pid=14334 comm="syz.2.1843" path="socket:[39724]" dev="sockfs" ino=39724 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 664.586797][ T30] audit: type=1400 audit(1757090493.626:1325): avc: denied { mount } for pid=14341 comm="syz.0.1846" name="/" dev="pstore" ino=3916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 664.752679][ T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 664.892045][ T5893] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 664.905155][ T24] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 664.928722][ T24] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 664.940961][ T24] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 8459, setting to 1024 [ 664.963086][ T24] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 664.983613][ T24] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 664.993284][ T24] usb 3-1: Manufacturer: syz [ 664.998032][ T24] usb 3-1: SerialNumber: syz [ 665.058902][ T5893] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 665.076437][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.096668][ T5893] usb 4-1: Product: syz [ 665.100896][ T5893] usb 4-1: Manufacturer: syz [ 665.106206][ T5893] usb 4-1: SerialNumber: syz [ 665.119068][ T5893] usb 4-1: config 0 descriptor?? [ 665.291720][ T30] audit: type=1400 audit(1757090494.316:1326): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 665.291775][T14358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.360173][T14358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.144178][T14370] syzkaller0: entered promiscuous mode [ 666.149684][T14370] syzkaller0: entered allmulticast mode [ 666.503687][T14378] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 667.414704][ T24] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 667.453904][ T24] usb 3-1: USB disconnect, device number 76 [ 667.568363][ T5984] usb 4-1: USB disconnect, device number 67 [ 668.735522][T14395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.924995][ T10] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 669.078784][ T10] usb 3-1: config 0 has an invalid interface number: 78 but max is 0 [ 669.078820][ T10] usb 3-1: config 0 has no interface number 0 [ 669.078866][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=7462, bcdDevice=bb.03 [ 669.078889][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.081162][ T10] usb 3-1: config 0 descriptor?? [ 669.109682][T14402] pimreg: entered allmulticast mode [ 669.280314][T14413] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 669.280344][T14413] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 669.280408][T14413] vhci_hcd vhci_hcd.0: Device attached [ 669.290213][T14393] macvtap0: refused to change device tx_queue_len [ 669.306257][ T10] usb 3-1: string descriptor 0 read error: -71 [ 669.364004][ T10] usb 3-1: USB disconnect, device number 77 [ 669.408325][T14355] udevd[14355]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.78/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.409100][T14415] vhci_hcd: connection closed [ 669.410619][ T7440] vhci_hcd: stop threads [ 669.410640][ T7440] vhci_hcd: release socket [ 669.410787][ T7440] vhci_hcd: disconnect device [ 669.463362][ T5900] vhci_hcd: vhci_device speed not set [ 669.643198][ T5893] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 669.792059][ T5893] usb 5-1: device descriptor read/64, error -71 [ 670.029202][T14426] geneve3: entered promiscuous mode [ 670.035645][T14426] geneve3: entered allmulticast mode [ 670.044986][ T5893] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 670.111959][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 670.211912][T14330] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 670.219553][ T5893] usb 5-1: device descriptor read/64, error -71 [ 670.291921][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 670.307008][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.328905][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 670.340663][ T5893] usb usb5-port1: attempt power cycle [ 670.357056][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 670.373876][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 670.383255][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.394045][ T10] usb 3-1: Product: syz [ 670.399940][ T10] usb 3-1: Manufacturer: syz [ 670.404719][T14330] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 670.413934][ T10] usb 3-1: SerialNumber: syz [ 670.418630][T14330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.431433][T14330] usb 4-1: Product: syz [ 670.436232][ T10] usb 3-1: config 0 descriptor?? [ 670.450864][T14330] usb 4-1: Manufacturer: syz [ 670.457051][ T10] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 670.463791][T14330] usb 4-1: SerialNumber: syz [ 670.469164][ T10] gspca_stv06xx: st6422 sensor detected [ 670.479190][T14330] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 670.499883][ T979] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 670.702049][ T5893] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 670.745722][ T5893] usb 5-1: device descriptor read/8, error -71 [ 670.992028][ T5893] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 671.023198][ T5893] usb 5-1: device descriptor read/8, error -71 [ 671.142700][T14330] usb 4-1: USB disconnect, device number 68 [ 671.151428][ T5893] usb usb5-port1: unable to enumerate USB device [ 671.741989][ T979] usb 4-1: Service connection timeout for: 256 [ 671.760711][ T979] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 671.778738][ T979] ath9k_htc: Failed to initialize the device [ 671.796582][T14330] usb 4-1: ath9k_htc: USB layer deinitialized [ 671.891285][T14437] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 672.884646][ T10] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 672.945849][ T10] usb 3-1: USB disconnect, device number 78 [ 673.376254][T14470] input: syz0 as /devices/virtual/input/input30 [ 673.403837][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 673.572062][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 673.579778][ T10] usb 3-1: config 187 has an invalid interface number: 208 but max is 3 [ 673.607951][ T10] usb 3-1: config 187 has an invalid interface number: 49 but max is 3 [ 673.619132][ T10] usb 3-1: config 187 contains an unexpected descriptor of type 0x1, skipping [ 673.628125][ T10] usb 3-1: config 187 contains an unexpected descriptor of type 0x2, skipping [ 673.639715][ T10] usb 3-1: config 187 contains an unexpected descriptor of type 0x1, skipping [ 673.648777][ T10] usb 3-1: config 187 has 2 interfaces, different from the descriptor's value: 4 [ 673.658865][ T10] usb 3-1: config 187 has no interface number 0 [ 673.668357][ T10] usb 3-1: config 187 has no interface number 1 [ 673.675710][ T10] usb 3-1: config 187 interface 208 altsetting 82 has an invalid descriptor for endpoint zero, skipping [ 673.690422][ T10] usb 3-1: config 187 interface 208 altsetting 82 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 673.792623][ T5900] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 673.802687][ T10] usb 3-1: config 187 interface 49 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 673.820689][ T10] usb 3-1: config 187 interface 49 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 673.834808][ T10] usb 3-1: config 187 interface 208 has no altsetting 0 [ 673.841765][ T10] usb 3-1: config 187 interface 49 has no altsetting 0 [ 673.851065][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=33.1d [ 673.860357][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.868431][ T10] usb 3-1: Product: 斚왋⴬웖₶逪錯싃琹灧⯅苚琗봿䞅辚諹 [ 673.880068][ T10] usb 3-1: Manufacturer: ъ [ 673.884920][ T10] usb 3-1: SerialNumber: syz [ 673.894897][ T10] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 673.908586][ T10] usb 3-1: no configuration chosen from 1 choice [ 673.913753][T14477] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 673.915205][ T30] audit: type=1400 audit(1757090502.956:1327): avc: denied { bind } for pid=14476 comm="syz.4.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 673.953224][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 673.964946][ T5900] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 673.979363][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.989153][ T5900] usb 4-1: Product: syz [ 673.994319][ T5900] usb 4-1: Manufacturer: syz [ 673.998969][ T5900] usb 4-1: SerialNumber: syz [ 674.033648][ T5900] r8152-cfgselector 4-1: Unknown version 0x0000 [ 674.041674][ T5900] r8152-cfgselector 4-1: config 0 descriptor?? [ 674.998336][ T5984] r8152-cfgselector 4-1: USB disconnect, device number 69 [ 676.468909][T14520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1889'. [ 676.545228][T14521] netlink: 'syz.0.1889': attribute type 29 has an invalid length. [ 676.553192][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 676.744436][ T979] usb 3-1: USB disconnect, device number 79 [ 677.580389][T14530] netlink: 'syz.3.1890': attribute type 21 has an invalid length. [ 677.588490][T14530] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1890'. [ 677.598361][T14530] netlink: 'syz.3.1890': attribute type 4 has an invalid length. [ 677.606341][T14530] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1890'. [ 678.022690][T14528] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 678.029222][T14528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 678.037703][T14528] vhci_hcd vhci_hcd.0: Device attached [ 678.378642][T14538] vhci_hcd: connection closed [ 678.385082][ T7440] vhci_hcd: stop threads [ 678.439393][ T7440] vhci_hcd: release socket [ 678.449380][ T7440] vhci_hcd: disconnect device [ 678.488802][T14543] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 678.502953][ T5984] usb 37-1: new high-speed USB device number 11 using vhci_hcd [ 678.518955][ T5984] usb 37-1: enqueue for inactive port 0 [ 678.625316][T14546] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1896'. [ 678.632900][ T5984] vhci_hcd: vhci_device speed not set [ 679.706054][T14579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1905'. [ 679.748691][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1905'. [ 679.895281][T14582] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 681.631082][ T30] audit: type=1400 audit(1757090510.666:1328): avc: denied { write } for pid=14615 comm="syz.2.1915" lport=50708 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 681.677905][T14614] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 681.713083][T14614] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 681.735925][T14614] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 681.754147][T14614] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 681.760520][T14620] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 681.768824][T14620] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 681.776447][T14620] vhci_hcd vhci_hcd.0: Device attached [ 681.959348][T14621] vhci_hcd: connection closed [ 681.959578][ T7446] vhci_hcd: stop threads [ 682.061941][ T5893] usb 41-1: new high-speed USB device number 14 using vhci_hcd [ 682.833401][ T7446] vhci_hcd: release socket [ 682.939420][ T7446] vhci_hcd: disconnect device [ 683.513353][ T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 683.538540][T14661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.548868][T14661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.559679][T14661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.593054][T14661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.663509][ T10] usb 5-1: device descriptor read/64, error -71 [ 683.912039][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 683.922653][ T5900] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 684.041904][ T10] usb 5-1: device descriptor read/64, error -71 [ 684.088091][ T5900] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 684.100357][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.110393][ T5900] usb 3-1: Product: syz [ 684.116409][ T5900] usb 3-1: Manufacturer: syz [ 684.121188][ T5900] usb 3-1: SerialNumber: syz [ 684.130409][ T5900] usb 3-1: config 0 descriptor?? [ 684.154757][ T10] usb usb5-port1: attempt power cycle [ 684.415607][ T979] usb 3-1: USB disconnect, device number 80 [ 684.512255][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 684.546025][ T10] usb 5-1: device descriptor read/8, error -71 [ 684.791952][ T10] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 684.825642][T14677] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1930'. [ 684.836361][T14677] nbd: illegal input index -28 [ 684.843237][ T10] usb 5-1: device descriptor read/8, error -71 [ 684.850481][T14677] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1930'. [ 684.972202][ T10] usb usb5-port1: unable to enumerate USB device [ 685.874239][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.883956][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.890438][ T30] audit: type=1400 audit(1757090514.346:1329): avc: denied { cmd } for pid=14687 comm="syz.2.1933" path="socket:[40705]" dev="sockfs" ino=40705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 686.135301][T14693] ksmbd: Unknown IPC event: 3, ignore. [ 686.508419][T14330] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 686.788020][T14330] usb 3-1: Using ep0 maxpacket: 16 [ 686.806233][T14330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.855491][T14330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.890304][T14330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 687.073019][T14330] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 687.096025][T14330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.183979][T14330] usb 3-1: config 0 descriptor?? [ 687.350700][T14699] delete_channel: no stack [ 687.359797][T14714] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1939'. [ 687.891960][ T5893] vhci_hcd: vhci_device speed not set [ 687.921082][T14727] input: syz1 as /devices/virtual/input/input31 [ 688.000581][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1941'. [ 688.063934][ T5861] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 688.095003][T14727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.114250][T14727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.203009][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1941'. [ 689.639969][T14749] tmpfs: Unknown parameter '' [ 689.645994][ T30] audit: type=1400 audit(1757090518.676:1330): avc: denied { ioctl } for pid=14744 comm="syz.3.1946" path="socket:[41239]" dev="sockfs" ino=41239 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 690.901957][T14762] geneve3: entered promiscuous mode [ 690.907251][T14762] geneve3: entered allmulticast mode [ 691.298316][T14330] usbhid 3-1:0.0: can't add hid device: -71 [ 691.318300][T14330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 691.612936][T14330] usb 3-1: USB disconnect, device number 81 [ 691.695376][T14767] geneve2: entered promiscuous mode [ 691.845864][T14767] geneve2: entered allmulticast mode [ 692.880605][T14783] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 693.373981][ T30] audit: type=1400 audit(1757090522.406:1331): avc: denied { read write } for pid=5843 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.471886][ T30] audit: type=1400 audit(1757090522.406:1332): avc: denied { open } for pid=5843 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.538418][ T30] audit: type=1400 audit(1757090522.416:1333): avc: denied { ioctl } for pid=5843 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.607668][ T30] audit: type=1400 audit(1757090522.486:1334): avc: denied { read write } for pid=14785 comm="syz.2.1955" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 693.675062][ T30] audit: type=1400 audit(1757090522.486:1335): avc: denied { open } for pid=14785 comm="syz.2.1955" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 693.711953][ T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 693.725726][ T30] audit: type=1400 audit(1757090522.486:1336): avc: denied { ioctl } for pid=14785 comm="syz.2.1955" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 693.754826][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 693.760902][ T30] audit: type=1400 audit(1757090522.736:1337): avc: denied { allowed } for pid=14787 comm="syz.4.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 693.781485][ T30] audit: type=1400 audit(1757090522.736:1338): avc: denied { create } for pid=14787 comm="syz.4.1956" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 693.805290][ T30] audit: type=1400 audit(1757090522.736:1339): avc: denied { map } for pid=14787 comm="syz.4.1956" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 693.899350][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 693.916512][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 694.133027][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 694.146433][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 694.168163][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.186106][ T10] usb 3-1: Product: syz [ 694.196272][ T10] usb 3-1: Manufacturer: syz [ 694.206594][ T10] usb 3-1: SerialNumber: syz [ 694.252356][ T10] usb 3-1: config 0 descriptor?? [ 694.274140][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 694.299133][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 694.476972][T14786] binder: 14785:14786 ioctl c0306201 0 returned -14 [ 694.783231][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 694.784855][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 694.784871][ T30] audit: type=1400 audit(1757090523.826:1370): avc: denied { create } for pid=14819 comm="syz.4.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 694.794807][T14815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1955'. [ 694.956805][ T30] audit: type=1400 audit(1757090523.946:1371): avc: denied { append } for pid=14785 comm="syz.2.1955" name="v4l-subdev1" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 695.085928][ T30] audit: type=1400 audit(1757090524.126:1372): avc: denied { create } for pid=14819 comm="syz.4.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 695.107642][ T30] audit: type=1400 audit(1757090524.146:1373): avc: denied { name_bind } for pid=14819 comm="syz.4.1962" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 695.151760][ T30] audit: type=1400 audit(1757090524.186:1374): avc: denied { node_bind } for pid=14819 comm="syz.4.1962" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 695.328457][T14827] tmpfs: Bad value for 'mpol' [ 695.461043][ T30] audit: type=1400 audit(1757090524.456:1375): avc: denied { read } for pid=14832 comm="syz.3.1967" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 695.485060][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (2) [ 695.492482][ T30] audit: type=1400 audit(1757090524.456:1376): avc: denied { open } for pid=14832 comm="syz.3.1967" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 695.526405][ T30] audit: type=1400 audit(1757090524.466:1377): avc: denied { ioctl } for pid=14832 comm="syz.3.1967" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 695.552137][ T30] audit: type=1400 audit(1757090524.496:1378): avc: denied { create } for pid=14832 comm="syz.3.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 695.579950][ T30] audit: type=1400 audit(1757090524.496:1379): avc: denied { bind } for pid=14832 comm="syz.3.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 695.648204][T14834] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1967'. [ 695.877823][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 695.885113][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 695.893475][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 695.902043][ T10] usb 3-1: USB disconnect, device number 82 [ 695.910758][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 695.919852][ T10] em28xx 3-1:0.0: Freeing device [ 696.514559][T14858] batman_adv: batadv0: Adding interface: gretap0 [ 696.522186][T14858] batman_adv: batadv0: Interface activated: gretap0 [ 696.787443][T14860] Lens A: ================= START STATUS ================= [ 696.796178][T14860] Lens A: Focus, Absolute: 0 [ 696.801368][T14860] Lens A: ================== END STATUS ================== [ 697.743324][T14892] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1981'. [ 698.827034][T14916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14916 comm=syz.4.1990 [ 698.956695][ T5984] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 699.112556][ T5984] usb 3-1: Using ep0 maxpacket: 16 [ 699.119377][ T5984] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 699.128817][ T5984] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.140148][ T5984] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.154306][ T5984] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 699.164166][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.173009][ T5984] usb 3-1: Product: syz [ 699.177175][ T5984] usb 3-1: Manufacturer: syz [ 699.181765][ T5984] usb 3-1: SerialNumber: syz [ 699.212028][ T10] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 699.331949][T14330] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 699.361969][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 699.368537][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.379609][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.389399][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 699.404052][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 699.413167][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.424822][ T10] usb 5-1: config 0 descriptor?? [ 699.461968][T14330] usb 4-1: device descriptor read/64, error -71 [ 699.608247][T14914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.620313][T14914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.630532][ T5984] usb 3-1: 0:2 : does not exist [ 699.647351][ T5984] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 699.671095][ T5984] usb 3-1: USB disconnect, device number 83 [ 699.698886][T14355] udevd[14355]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.723020][T14330] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 699.846494][ T10] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 699.855591][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 699.863028][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 699.870254][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 699.877527][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 699.884800][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 699.892186][T14330] usb 4-1: device descriptor read/64, error -71 [ 699.898498][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 699.905794][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 699.913242][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 699.920476][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 699.927736][ T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 699.939802][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0014/input/input32 [ 700.002798][T14330] usb usb4-port1: attempt power cycle [ 700.060092][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 700.060108][ T30] audit: type=1400 audit(1757090529.096:1431): avc: denied { read } for pid=5204 comm="acpid" name="event4" dev="devtmpfs" ino=3635 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 700.063492][ T10] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 700.101714][ T30] audit: type=1400 audit(1757090529.096:1432): avc: denied { open } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3635 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 700.210382][ T30] audit: type=1400 audit(1757090529.096:1433): avc: denied { ioctl } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3635 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 700.492075][T14943] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1996'. [ 700.545056][ T30] audit: type=1400 audit(1757090529.516:1434): avc: denied { ioctl } for pid=14940 comm="syz.2.1996" path="socket:[42243]" dev="sockfs" ino=42243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 700.603387][T14330] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 700.642845][T14943] 0{X: entered promiscuous mode [ 700.664725][T14942] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1996'. [ 700.664942][T14943] 0{X: left allmulticast mode [ 700.847428][T14942] 1{X: renamed from 30{X [ 700.853473][T14330] usb 4-1: device descriptor read/8, error -71 [ 700.866769][T14942] 1{X: left promiscuous mode [ 700.874328][T14942] 1{X: entered allmulticast mode [ 700.906162][T14942] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 700.954619][ T30] audit: type=1326 audit(1757090529.996:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 701.003394][ T30] audit: type=1326 audit(1757090530.016:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 701.028288][ T30] audit: type=1326 audit(1757090530.016:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 701.058101][ T30] audit: type=1326 audit(1757090530.016:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 701.088803][ T30] audit: type=1326 audit(1757090530.016:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 701.122960][T14330] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 701.124233][ T30] audit: type=1326 audit(1757090530.026:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f08f398ebe9 code=0x7ffc0000 [ 701.132488][ T5893] usb 5-1: reset high-speed USB device number 90 using dummy_hcd [ 701.184350][T14330] usb 4-1: device descriptor read/8, error -71 [ 701.293952][T14330] usb usb4-port1: unable to enumerate USB device [ 701.615849][T14948] autofs: Unknown parameter '' [ 702.502252][ T979] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 702.676129][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 702.735540][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17970, setting to 64 [ 702.738003][T14969] netlink: 4528 bytes leftover after parsing attributes in process `syz.1.2004'. [ 702.757724][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 702.767079][T14969] netlink: 4528 bytes leftover after parsing attributes in process `syz.1.2004'. [ 702.797323][ T979] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 702.845467][ T979] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 702.868492][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.969297][ T979] usb 4-1: config 0 descriptor?? [ 703.027713][T14960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 703.404146][ T5893] usb 5-1: device descriptor read/64, error -71 [ 703.634444][ T979] aureal 0003:0755:2626.0015: report_id 29495 is invalid [ 703.656737][ T979] aureal 0003:0755:2626.0015: item 0 2 1 8 parsing failed [ 703.670707][ T979] aureal 0003:0755:2626.0015: probe with driver aureal failed with error -22 [ 703.682991][ T5893] usb 5-1: reset high-speed USB device number 90 using dummy_hcd [ 703.707184][ T5893] usb 5-1: device reset changed ep0 maxpacket size! [ 703.753092][ T10] usb 5-1: USB disconnect, device number 90 [ 704.159275][ T979] usb 4-1: USB disconnect, device number 74 [ 704.261927][ T10] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 704.434449][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.444775][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.982874][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 704.994571][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 705.003190][ T10] usb 5-1: SerialNumber: syz [ 705.029982][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2011'. [ 705.270237][ T10] usb 5-1: 0:2 : does not exist [ 705.284455][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 705.284470][ T30] audit: type=1400 audit(1757090534.326:1502): avc: denied { create } for pid=15001 comm="syz.3.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 705.300163][ T10] usb 5-1: USB disconnect, device number 91 [ 705.407773][T14355] udevd[14355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.448198][ T30] audit: type=1400 audit(1757090534.366:1503): avc: denied { getopt } for pid=15001 comm="syz.3.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 705.519218][ T30] audit: type=1400 audit(1757090534.436:1504): avc: denied { name_connect } for pid=15002 comm="syz.1.2015" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 705.585777][ T30] audit: type=1400 audit(1757090534.626:1505): avc: denied { create } for pid=15012 comm="syz.1.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 705.645234][ T30] audit: type=1400 audit(1757090534.686:1506): avc: denied { create } for pid=15010 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 705.716963][ T30] audit: type=1400 audit(1757090534.756:1507): avc: denied { create } for pid=15019 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 706.413281][T15034] lo: entered allmulticast mode [ 706.525392][T15034] dvmrp8: entered allmulticast mode [ 706.546424][ T30] audit: type=1400 audit(1757090535.576:1508): avc: denied { mount } for pid=15033 comm="syz.4.2021" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 706.620495][T15034] lo: left allmulticast mode [ 706.658352][T15034] dvmrp8: left allmulticast mode [ 706.706145][ T30] audit: type=1400 audit(1757090535.616:1509): avc: denied { unmount } for pid=15033 comm="syz.4.2021" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 707.952433][T15043] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2022'. [ 708.555589][ T30] audit: type=1400 audit(1757090537.596:1510): avc: denied { bind } for pid=15049 comm="syz.0.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 708.641148][ T30] audit: type=1400 audit(1757090537.596:1511): avc: denied { write } for pid=15049 comm="syz.0.2025" path="socket:[42559]" dev="sockfs" ino=42559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 709.013809][T15058] input: syz0 as /devices/virtual/input/input33 [ 709.918959][T15083] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[15083] [ 710.342372][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 710.342389][ T30] audit: type=1400 audit(1757090539.386:1522): avc: denied { bind } for pid=15086 comm="syz.4.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 710.441676][ T30] audit: type=1400 audit(1757090539.416:1523): avc: denied { listen } for pid=15086 comm="syz.4.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 710.543352][T15089] geneve2: entered promiscuous mode [ 710.630357][T15089] geneve2: entered allmulticast mode [ 710.733588][T15093] PKCS8: Unsupported PKCS#8 version [ 710.739333][ T30] audit: type=1400 audit(1757090539.776:1524): avc: denied { write } for pid=15091 comm="syz.3.2036" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 711.207351][ T30] audit: type=1400 audit(1757090540.236:1525): avc: denied { read write } for pid=15094 comm="syz.3.2037" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 711.441901][ T30] audit: type=1400 audit(1757090540.236:1526): avc: denied { open } for pid=15094 comm="syz.3.2037" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 711.925420][ T30] audit: type=1400 audit(1757090540.916:1527): avc: denied { firmware_load } for pid=15107 comm="syz.4.2040" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 712.594787][T15113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.247619][ T30] audit: type=1400 audit(1757090541.936:1528): avc: denied { execute } for pid=15114 comm="syz.4.2042" dev="tmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 713.305604][ T30] audit: type=1400 audit(1757090541.936:1529): avc: denied { execute_no_trans } for pid=15114 comm="syz.4.2042" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 713.340798][ T30] audit: type=1400 audit(1757090542.016:1530): avc: denied { sqpoll } for pid=15114 comm="syz.4.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 713.408305][ T30] audit: type=1400 audit(1757090542.446:1531): avc: denied { append } for pid=15116 comm="syz.3.2043" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 714.072185][ T979] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 714.210007][T15131] netlink: 'syz.1.2044': attribute type 10 has an invalid length. [ 714.252239][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 714.375372][ T979] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.386230][ T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 714.401428][T15133] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 714.408660][ T979] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 714.429409][ T979] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.513193][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 714.567239][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.606269][ T979] usb 4-1: Product: syz [ 714.625110][ T979] usb 4-1: Manufacturer: syz [ 714.649756][ T979] usb 4-1: SerialNumber: syz [ 716.748196][T15162] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 716.797984][T15162] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 716.810293][T15162] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 716.819179][T15162] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 716.886508][ T979] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 716.916925][ T979] cdc_ncm 4-1:1.0: bind() failure [ 717.021714][ T979] usb 4-1: USB disconnect, device number 75 [ 717.145521][T15168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.352523][ T24] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 717.593112][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 717.601274][ T24] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 717.625565][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.636315][ T24] usb 3-1: Product: syz [ 717.640626][ T24] usb 3-1: Manufacturer: syz [ 717.648005][ T24] usb 3-1: SerialNumber: syz [ 717.691289][ T24] usb 3-1: config 0 descriptor?? [ 717.721063][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 718.481929][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 718.481946][ T30] audit: type=1400 audit(1757090547.466:1538): avc: denied { map } for pid=15169 comm="syz.2.2053" path="socket:[43019]" dev="sockfs" ino=43019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 718.565589][ T24] gspca_se401: ExtraFeatures: 118 [ 718.570717][ T24] gspca_se401: Too many frame sizes [ 718.590175][ T24] usb 3-1: USB disconnect, device number 84 [ 718.618588][ T30] audit: type=1400 audit(1757090547.506:1539): avc: denied { setopt } for pid=15169 comm="syz.2.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 718.840503][ T30] audit: type=1400 audit(1757090547.876:1540): avc: denied { write } for pid=15190 comm="syz.4.2060" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 718.881259][ T5861] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 718.898506][ T30] audit: type=1400 audit(1757090547.936:1541): avc: denied { ioctl } for pid=15193 comm="syz.3.2061" path="socket:[42738]" dev="sockfs" ino=42738 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 718.935979][T15194] efs: device does not support 512 byte blocks [ 718.945157][ T30] audit: type=1400 audit(1757090547.966:1542): avc: denied { mounton } for pid=15193 comm="syz.3.2061" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 718.971730][T15194] device does not support 512 byte blocks [ 718.971730][T15194] [ 719.004550][ T30] audit: type=1400 audit(1757090548.036:1543): avc: denied { read } for pid=15195 comm="syz.4.2062" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 719.027822][ T30] audit: type=1400 audit(1757090548.046:1544): avc: denied { open } for pid=15195 comm="syz.4.2062" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 719.303624][T15202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.357602][T15212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2066'. [ 719.382322][ T30] audit: type=1400 audit(1757090548.426:1545): avc: denied { ioctl } for pid=15195 comm="syz.4.2062" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 719.434541][ T979] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 719.592004][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 719.598954][ T30] audit: type=1400 audit(1757090548.636:1546): avc: denied { read } for pid=15216 comm="syz.2.2068" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 719.622158][ C0] vkms_vblank_simulate: vblank timer overrun [ 719.635268][ T979] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 719.650558][ T979] usb 4-1: config 0 interface 0 has no altsetting 0 [ 719.658417][ T979] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 719.670267][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.681070][ T979] usb 4-1: config 0 descriptor?? [ 719.716657][ T30] audit: type=1400 audit(1757090548.666:1547): avc: denied { open } for pid=15216 comm="syz.2.2068" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 719.902108][T15220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.920862][T15220] random: crng reseeded on system resumption [ 719.995865][ T5861] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 720.129779][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'. [ 720.188356][ T979] aquacomputer_d5next 0003:0C70:F00E.0016: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.3-1/input0 [ 720.583917][T15222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.593359][T15222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.623645][ T979] usb 4-1: USB disconnect, device number 76 [ 720.700725][T15229] block nbd0: server does not support multiple connections per device. [ 720.778598][T15229] block nbd0: shutting down sockets [ 721.572771][T15259] loop7: detected capacity change from 0 to 7 [ 722.944912][ T5861] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 722.954578][ T5861] Bluetooth: hci3: Injecting HCI hardware error event [ 722.963659][ T5861] Bluetooth: hci3: hardware error 0x00 [ 723.065229][T15271] block nbd2: NBD_DISCONNECT [ 723.585682][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 723.585694][ T30] audit: type=1400 audit(1757090552.626:1556): avc: denied { open } for pid=15276 comm="syz.4.2082" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 723.658869][T15259] Dev loop7: unable to read RDB block 7 [ 723.668071][T15259] loop7: unable to read partition table [ 723.694562][T15259] loop7: partition table beyond EOD, truncated [ 723.711004][T15259] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 723.782066][ T979] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 723.997431][ T979] usb 3-1: device descriptor read/64, error -71 [ 724.051332][T15291] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2084'. [ 724.085945][ T30] audit: type=1400 audit(1757090553.086:1557): avc: denied { ioctl } for pid=15289 comm="syz.0.2084" path="socket:[43237]" dev="sockfs" ino=43237 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 724.262029][ T979] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 724.422235][ T979] usb 3-1: device descriptor read/64, error -71 [ 724.584589][ T979] usb usb3-port1: attempt power cycle [ 724.628060][T15302] overlayfs: failed to clone upperpath [ 724.847319][ T30] audit: type=1400 audit(1757090553.886:1558): avc: denied { create } for pid=15299 comm="syz.4.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 724.923106][ T30] audit: type=1400 audit(1757090553.926:1559): avc: denied { setopt } for pid=15299 comm="syz.4.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 724.951972][ T979] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 725.014585][ T979] usb 3-1: device descriptor read/8, error -71 [ 725.033013][ T5861] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 725.036656][ T30] audit: type=1400 audit(1757090553.936:1560): avc: denied { connect } for pid=15299 comm="syz.4.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 725.076311][ T30] audit: type=1400 audit(1757090554.006:1561): avc: denied { write } for pid=15299 comm="syz.4.2088" name="rt_cache" dev="proc" ino=4026532816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 725.205592][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'. [ 725.289369][ T30] audit: type=1400 audit(1757090554.326:1562): avc: denied { create } for pid=15304 comm="syz.1.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 725.342019][ T979] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 725.372409][ T979] usb 3-1: device descriptor read/8, error -71 [ 725.387565][ T30] audit: type=1400 audit(1757090554.346:1563): avc: denied { write } for pid=15304 comm="syz.1.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 725.512333][ T979] usb usb3-port1: unable to enumerate USB device [ 725.931870][ T979] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 726.002074][T15334] 9pnet_fd: Insufficient options for proto=fd [ 726.010087][T15335] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 726.016601][T15335] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 726.025085][T15335] vhci_hcd vhci_hcd.0: Device attached [ 726.111994][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 726.134058][ T979] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 726.146928][T15336] vhci_hcd: connection closed [ 726.154587][ T7446] vhci_hcd: stop threads [ 726.169913][ T979] usb 5-1: config 0 has no interface number 0 [ 726.173551][ T7446] vhci_hcd: release socket [ 726.181671][ T979] usb 5-1: config 0 interface 184 has no altsetting 0 [ 726.190879][ T7446] vhci_hcd: disconnect device [ 726.193886][ T979] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 726.213884][ T44] vhci_hcd: vhci_device speed not set [ 726.228139][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.252506][ T979] usb 5-1: Product: syz [ 726.258426][ T30] audit: type=1400 audit(1757090555.296:1564): avc: denied { unlink } for pid=15340 comm="syz.0.2100" name="#26" dev="tmpfs" ino=2166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 726.287388][ T30] audit: type=1400 audit(1757090555.326:1565): avc: denied { mount } for pid=15340 comm="syz.0.2100" name="/" dev="overlay" ino=2161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 726.288670][ T979] usb 5-1: Manufacturer: syz [ 726.337076][ T979] usb 5-1: SerialNumber: syz [ 726.367420][ T979] usb 5-1: config 0 descriptor?? [ 726.484354][ T979] smsc75xx v1.0.0 [ 726.573203][T15347] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2101'. [ 726.880477][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2104'. [ 726.989126][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2103'. [ 727.420099][T15365] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2106'. [ 727.448016][T15365] 1{X: entered promiscuous mode [ 727.455941][T15365] 1{X: left allmulticast mode [ 727.492180][T15365] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2106'. [ 727.503767][T15365] 0{X: renamed from 31{X [ 727.594966][T15375] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2108'. [ 727.699971][T15365] 0{X: left promiscuous mode [ 727.707413][T15365] 0{X: entered allmulticast mode [ 727.722283][T15327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.737987][ T979] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -32 [ 727.756474][T15365] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 727.774447][T15327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.782903][ T979] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 727.850590][ T979] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 727.921315][ T979] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 727.959398][ T979] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 727.994154][ T979] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 728.027122][ T979] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 728.203039][ T979] usb 5-1: USB disconnect, device number 92 [ 729.570363][T15398] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 729.576916][T15398] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 729.607892][T15398] vhci_hcd vhci_hcd.0: Device attached [ 729.627356][T15404] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 729.665572][T15398] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 729.772444][ T5984] vhci_hcd: vhci_device speed not set [ 729.792450][T15404] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 730.562513][ T5984] usb 41-1: new full-speed USB device number 15 using vhci_hcd [ 730.587899][T15411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2117'. [ 730.619441][T15413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2118'. [ 730.629099][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'. [ 730.646820][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 730.646838][ T30] audit: type=1400 audit(1757090559.686:1574): avc: denied { mount } for pid=15410 comm="syz.2.2117" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 730.651943][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2118'. [ 730.692176][ T10] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 730.693530][ T30] audit: type=1400 audit(1757090559.736:1575): avc: denied { remount } for pid=15412 comm="syz.3.2118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 731.383770][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 731.397127][ T10] usb 5-1: can't read configurations, error -61 [ 731.466365][ T30] audit: type=1400 audit(1757090560.496:1576): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 731.542218][ T30] audit: type=1400 audit(1757090560.576:1577): avc: denied { setopt } for pid=15417 comm="syz.1.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 731.599739][ T10] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 731.650687][ T30] audit: type=1400 audit(1757090560.686:1578): avc: denied { read write } for pid=15419 comm="syz.2.2120" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 731.710256][T15423] netlink: 'syz.2.2120': attribute type 10 has an invalid length. [ 731.724401][ T30] audit: type=1400 audit(1757090560.686:1579): avc: denied { open } for pid=15419 comm="syz.2.2120" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 731.771211][T15423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2120'. [ 731.792807][T15423] dummy0: entered promiscuous mode [ 731.805739][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 731.818165][T15423] bridge0: port 2(dummy0) entered blocking state [ 731.831881][ T10] usb 5-1: can't read configurations, error -61 [ 731.846453][T15423] bridge0: port 2(dummy0) entered disabled state [ 731.859535][ T10] usb usb5-port1: attempt power cycle [ 731.878179][ T30] audit: type=1400 audit(1757090560.726:1580): avc: denied { ioctl } for pid=15419 comm="syz.2.2120" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 731.905933][T15423] dummy0: entered allmulticast mode [ 731.911897][ T5893] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 731.915661][T15423] bridge0: port 2(dummy0) entered blocking state [ 731.925915][T15423] bridge0: port 2(dummy0) entered forwarding state [ 732.151967][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 732.183786][ T5893] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 732.209395][ T5893] usb 4-1: config 179 has no interface number 0 [ 732.226139][ T5893] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 732.283078][ T5893] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 732.321699][ T5893] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 732.341874][ T10] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 732.354479][ T5893] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 732.377645][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 732.393036][ T10] usb 5-1: can't read configurations, error -61 [ 732.409514][ T5893] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 732.586321][ T5893] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 732.610467][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.642751][T15399] vhci_hcd: connection reset by peer [ 732.680743][ T6187] vhci_hcd: stop threads [ 732.718322][ T6187] vhci_hcd: release socket [ 732.769887][T15422] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 732.791189][ T6187] vhci_hcd: disconnect device [ 733.001048][T15443] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2126'. [ 733.027258][T15445] netlink: 'syz.4.2125': attribute type 5 has an invalid length. [ 734.236846][T14330] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input34 [ 734.479363][T15460] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 735.450511][ T30] audit: type=1400 audit(1757090564.486:1581): avc: denied { setattr } for pid=15464 comm="syz.1.2131" name="PINGv6" dev="sockfs" ino=44325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 735.629144][ T5900] usb 4-1: USB disconnect, device number 77 [ 735.629237][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 735.643826][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 735.673056][ T5984] vhci_hcd: vhci_device speed not set [ 735.758659][ T30] audit: type=1400 audit(1757090564.796:1582): avc: denied { ioctl } for pid=15464 comm="syz.1.2131" path="socket:[44325]" dev="sockfs" ino=44325 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 736.513102][ T5900] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 736.519477][ T30] audit: type=1400 audit(1757090565.556:1583): avc: denied { listen } for pid=15488 comm="syz.1.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 736.552791][T15489] netlink: 'syz.1.2137': attribute type 6 has an invalid length. [ 736.630093][ T30] audit: type=1400 audit(1757090565.666:1584): avc: denied { shutdown } for pid=15488 comm="syz.1.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 736.674992][ T5900] usb 4-1: config 0 has an invalid interface number: 252 but max is 0 [ 736.690201][ T5900] usb 4-1: config 0 has no interface number 0 [ 736.709658][ T5900] usb 4-1: config 0 interface 252 altsetting 207 bulk endpoint 0x2 has invalid maxpacket 16 [ 736.737364][ T5900] usb 4-1: config 0 interface 252 altsetting 207 endpoint 0x5 has an invalid bInterval 181, changing to 11 [ 736.765857][ T5900] usb 4-1: config 0 interface 252 has no altsetting 0 [ 736.782510][ T5900] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=ea.ea [ 736.801455][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.826348][ T5900] usb 4-1: config 0 descriptor?? [ 736.839621][T15485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 736.981912][ T5893] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 737.050024][T15485] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2136'. [ 737.060402][ T30] audit: type=1400 audit(1757090566.086:1585): avc: denied { write } for pid=15484 comm="syz.3.2136" path="socket:[43694]" dev="sockfs" ino=43694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 737.425833][ T5900] usb 4-1: string descriptor 0 read error: -71 [ 737.497279][ T5900] kvaser_usb 4-1:0.252: error -ENODEV: Cannot get usb endpoint(s) [ 737.911842][T14330] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 738.065095][ T5893] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 738.099403][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.131935][T14330] usb 3-1: device descriptor read/64, error -71 [ 738.134379][ T5900] usb 4-1: USB disconnect, device number 78 [ 738.405466][ T5893] usb 5-1: Product: syz [ 738.409668][ T5893] usb 5-1: Manufacturer: syz [ 738.414369][ T5893] usb 5-1: SerialNumber: syz [ 738.422541][ T5893] usb 5-1: config 0 descriptor?? [ 738.507896][T15509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2144'. [ 738.541615][T15515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2146'. [ 738.568124][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 738.647402][T14330] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 738.791076][ T5893] usb 5-1: USB disconnect, device number 97 [ 738.842177][T14330] usb 3-1: device descriptor read/64, error -71 [ 739.068713][T15523] lo speed is unknown, defaulting to 1000 [ 739.089701][T14330] usb usb3-port1: attempt power cycle [ 739.097070][T15523] lo speed is unknown, defaulting to 1000 [ 739.119634][ T30] audit: type=1400 audit(1757090568.146:1586): avc: denied { write } for pid=15524 comm="syz.0.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 739.463129][T14330] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 739.504449][T14330] usb 3-1: device descriptor read/8, error -71 [ 739.595036][T15532] geneve3: entered promiscuous mode [ 739.600531][T15532] geneve3: entered allmulticast mode [ 739.768459][T14330] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 739.812530][T14330] usb 3-1: device descriptor read/8, error -71 [ 739.933564][T14330] usb usb3-port1: unable to enumerate USB device [ 740.094061][ T30] audit: type=1400 audit(1757090569.126:1587): avc: denied { ioctl } for pid=15544 comm="syz.3.2152" path="socket:[44587]" dev="sockfs" ino=44587 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 740.129771][T15545] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20001 [ 740.131537][T15543] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2151'. [ 740.198702][ T30] audit: type=1400 audit(1757090569.196:1588): avc: denied { append } for pid=15544 comm="syz.3.2152" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 740.258286][T15543] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2151'. [ 740.537095][ T30] audit: type=1400 audit(1757090569.196:1589): avc: denied { open } for pid=15544 comm="syz.3.2152" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 740.605471][ T30] audit: type=1400 audit(1757090569.196:1590): avc: denied { ioctl } for pid=15544 comm="syz.3.2152" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 740.640026][ T30] audit: type=1400 audit(1757090569.206:1591): avc: denied { setattr } for pid=15544 comm="syz.3.2152" name="RDS" dev="sockfs" ino=44587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 741.771294][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 741.771309][ T30] audit: type=1326 audit(1757090570.806:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15557 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d18ebe9 code=0x7ffc0000 [ 741.829055][T15562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2158'. [ 741.850259][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'. [ 741.894906][ T30] audit: type=1326 audit(1757090570.806:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15557 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188d18ebe9 code=0x7ffc0000 [ 741.989345][ T30] audit: type=1326 audit(1757090570.846:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15557 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f188d18ebe9 code=0x7ffc0000 [ 742.058329][ T30] audit: type=1400 audit(1757090570.846:1596): avc: denied { kexec_image_load } for pid=15557 comm="syz.3.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 742.852871][ T30] audit: type=1400 audit(1757090571.796:1597): avc: denied { accept } for pid=15581 comm="syz.3.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 743.087416][ T30] audit: type=1400 audit(1757090571.816:1598): avc: denied { read } for pid=15581 comm="syz.3.2162" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 743.187701][T15595] lo speed is unknown, defaulting to 1000 [ 743.195026][T15595] lo speed is unknown, defaulting to 1000 [ 743.675641][ T30] audit: type=1400 audit(1757090572.716:1599): avc: denied { create } for pid=15611 comm="syz.3.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 743.872993][T15613] geneve3: entered promiscuous mode [ 743.887684][T15613] geneve3: entered allmulticast mode [ 744.009537][T15615] netlink: 'syz.3.2171': attribute type 3 has an invalid length. [ 744.020155][T15615] netlink: 'syz.3.2171': attribute type 3 has an invalid length. [ 744.029828][ T30] audit: type=1400 audit(1757090573.026:1600): avc: denied { read } for pid=15614 comm="syz.3.2171" path="socket:[45071]" dev="sockfs" ino=45071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 744.070675][T15615] netlink: 'syz.3.2171': attribute type 3 has an invalid length. [ 744.081214][T15615] netlink: 'syz.3.2171': attribute type 3 has an invalid length. [ 744.090040][T15615] netlink: 'syz.3.2171': attribute type 3 has an invalid length. [ 744.098913][T15615] netlink: 'syz.3.2171': attribute type 3 has an invalid length. [ 744.107661][T15615] netlink: 'syz.3.2171': attribute type 3 has an invalid length. [ 744.118194][T15615] netlink: 'syz.3.2171': attribute type 3 has an invalid length. [ 744.134847][T15615] netlink: 'syz.3.2171': attribute type 3 has an invalid length. [ 744.158680][T15615] netlink: 'syz.3.2171': attribute type 3 has an invalid length. [ 744.239569][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2172'. [ 744.293721][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2172'. [ 744.883130][ T44] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 744.891573][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 744.909354][T15631] gfs2: gfs2 mount does not exist [ 745.054651][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 745.152629][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 745.203293][ T44] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 745.216939][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.284408][ T44] usb 4-1: Product: syz [ 745.304613][ T44] usb 4-1: Manufacturer: syz [ 745.328260][ T44] usb 4-1: SerialNumber: syz [ 745.370366][ T44] usb 4-1: config 0 descriptor?? [ 745.417075][ T44] aircable 4-1:0.0: aircable converter detected [ 745.447171][ T44] usb 4-1: aircable converter now attached to ttyUSB0 [ 745.740861][T15638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 745.753460][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2177'. [ 746.030077][ T30] audit: type=1400 audit(1757090575.066:1601): avc: denied { create } for pid=15641 comm="syz.4.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 746.267397][T15640] bond1 (unregistering): Released all slaves [ 746.389701][ T30] audit: type=1400 audit(1757090575.426:1602): avc: denied { read write } for pid=15645 comm="syz.2.2179" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 746.786032][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.796196][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.290615][T15661] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 747.302631][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 747.302643][ T30] audit: type=1400 audit(1757090576.326:1604): avc: denied { bind } for pid=15654 comm="syz.2.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 747.336039][T15661] vlan0: left allmulticast mode [ 747.341051][T15661] veth0_vlan: left allmulticast mode [ 747.350950][ T30] audit: type=1400 audit(1757090576.366:1605): avc: denied { listen } for pid=15654 comm="syz.2.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 747.375210][T15661] vlan0: left promiscuous mode [ 747.426362][T15659] mkiss: ax0: crc mode is auto. [ 747.426445][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.607251][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.620864][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.634729][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.649971][T15671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2185'. [ 747.678112][ T2149] usb 4-1: USB disconnect, device number 79 [ 747.688382][ T2149] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 747.706929][ T2149] aircable 4-1:0.0: device disconnected [ 747.780840][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'. [ 747.859963][T15677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.135659][ T2149] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 748.243456][T14430] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 748.275112][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2190'. [ 748.303738][ T2149] usb 4-1: Using ep0 maxpacket: 8 [ 748.324604][ T30] audit: type=1400 audit(1757090577.366:1606): avc: denied { write } for pid=15692 comm="syz.1.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 748.349673][ T2149] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 748.359496][ T2149] usb 4-1: config 179 has no interface number 0 [ 748.379430][ T30] audit: type=1400 audit(1757090577.416:1607): avc: denied { read } for pid=15692 comm="syz.1.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 748.399552][ T2149] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 748.417516][ T2149] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 748.451560][T14430] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 748.462954][T14430] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 748.488276][T14430] usb 3-1: config 220 has no interface number 2 [ 748.506335][ T2149] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 748.517659][T14430] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 748.517692][T14430] usb 3-1: config 220 interface 0 has no altsetting 0 [ 748.517711][T14430] usb 3-1: config 220 interface 76 has no altsetting 0 [ 748.517728][T14430] usb 3-1: config 220 interface 1 has no altsetting 0 [ 748.519915][T14430] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 748.543950][ T2149] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 748.577592][ T2149] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 748.600036][T14430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.608542][T14430] usb 3-1: Product: syz [ 748.613410][T14430] usb 3-1: Manufacturer: syz [ 748.618242][T14430] usb 3-1: SerialNumber: syz [ 748.623477][ T2149] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 748.643698][ T2149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.700334][T15674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 748.839959][T14430] usb 3-1: selecting invalid altsetting 0 [ 748.863756][T14430] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 748.870843][T14430] usb 3-1: No valid video chain found. [ 748.885290][T14430] usb 3-1: selecting invalid altsetting 0 [ 748.891293][T14430] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 748.909513][T14430] usb 3-1: USB disconnect, device number 93 [ 748.978361][ T44] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input35 [ 749.191106][T14430] usb 4-1: USB disconnect, device number 80 [ 749.191172][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 749.206925][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 749.235928][ T30] audit: type=1400 audit(1757090578.276:1608): avc: denied { bind } for pid=15707 comm="syz.1.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 749.343210][ T44] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 749.367139][T15715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2200'. [ 749.377293][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 749.492993][ T30] audit: type=1400 audit(1757090578.526:1609): avc: denied { connect } for pid=15719 comm="syz.2.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 749.513148][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 749.525549][ T44] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 749.536397][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.550030][ T44] usb 5-1: config 0 descriptor?? [ 749.569490][ T44] gspca_main: sunplus-2.14.0 probing 041e:400b [ 749.610721][ T30] audit: type=1400 audit(1757090578.646:1610): avc: denied { read } for pid=15719 comm="syz.2.2202" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 749.658094][ T30] audit: type=1400 audit(1757090578.646:1611): avc: denied { open } for pid=15719 comm="syz.2.2202" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 749.658099][T15725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2204'. [ 749.658140][ T30] audit: type=1400 audit(1757090578.646:1612): avc: denied { ioctl } for pid=15719 comm="syz.2.2202" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 749.681313][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.715961][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.820797][ T30] audit: type=1400 audit(1757090578.646:1613): avc: denied { write } for pid=15719 comm="syz.2.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 750.631220][ T44] gspca_sunplus: reg_r err -71 [ 750.643551][ T44] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 750.688670][ T44] usb 5-1: USB disconnect, device number 98 [ 751.254772][T15757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2212'. [ 751.268578][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'. [ 751.277850][T15732] geneve2: entered promiscuous mode [ 751.277872][T15732] geneve2: entered allmulticast mode [ 751.732406][T15762] veth0_to_team: entered promiscuous mode [ 752.677219][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 752.677232][ T30] audit: type=1400 audit(1757090581.716:1635): avc: denied { read } for pid=15771 comm="syz.0.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 752.806602][ T30] audit: type=1400 audit(1757090581.846:1636): avc: denied { lock } for pid=15781 comm="syz.2.2218" path="socket:[45368]" dev="sockfs" ino=45368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 752.830884][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.881534][T15778] 9pnet_fd: Insufficient options for proto=fd [ 753.244218][ T30] audit: type=1400 audit(1757090582.286:1637): avc: denied { read } for pid=15796 comm="syz.3.2224" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 753.313664][ T30] audit: type=1400 audit(1757090582.286:1638): avc: denied { open } for pid=15796 comm="syz.3.2224" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 754.078366][T15807] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 754.084917][T15807] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 754.116054][T15807] vhci_hcd vhci_hcd.0: Device attached [ 754.123604][T15807] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 754.141252][T15807] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 754.152983][T15807] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 754.212345][T14430] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 754.292734][ T5984] vhci_hcd: vhci_device speed not set [ 754.381830][T14430] usb 4-1: Using ep0 maxpacket: 16 [ 754.387219][ T5984] usb 41-1: new full-speed USB device number 16 using vhci_hcd [ 754.397314][T14430] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 754.406128][T14330] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 754.413854][T14430] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.442721][T14430] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 754.457841][T14430] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 754.481835][T14430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.489944][T14430] usb 4-1: Product: syz [ 754.494641][T14430] usb 4-1: Manufacturer: syz [ 754.500062][T14430] usb 4-1: SerialNumber: syz [ 754.583272][T14330] usb 5-1: config 0 has no interfaces? [ 754.590057][T14330] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 754.612836][T14330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.631458][T14330] usb 5-1: config 0 descriptor?? [ 754.755098][T15814] bridge0: entered promiscuous mode [ 754.760836][T15814] macvlan2: entered promiscuous mode [ 754.794673][T15815] macvlan3: entered promiscuous mode [ 754.878223][T15807] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 754.888570][T15807] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 754.902249][T15807] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(23) [ 754.908882][T15807] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 754.916718][T15807] vhci_hcd vhci_hcd.0: Device attached [ 754.925408][T15805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.935818][T15807] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 754.944324][ T30] audit: type=1400 audit(1757090583.986:1639): avc: denied { getopt } for pid=15819 comm="syz.2.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 754.965415][T15805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.976405][T15823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=15823 comm=syz.2.2231 [ 754.984092][T15807] vhci_hcd vhci_hcd.0: port 0 already used [ 755.007308][ T30] audit: type=1400 audit(1757090584.046:1640): avc: denied { shutdown } for pid=15806 comm="iou-wrk-15807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 755.034691][T15824] vhci_hcd: connection closed [ 755.034881][ T6187] vhci_hcd: stop threads [ 755.046519][ T5900] usb 5-1: USB disconnect, device number 99 [ 755.061722][T15808] vhci_hcd: connection reset by peer [ 755.075896][ T6187] vhci_hcd: release socket [ 755.081439][ T6187] vhci_hcd: disconnect device [ 755.087826][ T6187] vhci_hcd: stop threads [ 755.093390][ T6187] vhci_hcd: release socket [ 755.098120][ T6187] vhci_hcd: disconnect device [ 755.144958][T15830] geneve3: entered promiscuous mode [ 755.150427][T15830] geneve3: entered allmulticast mode [ 755.925552][T15844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.102709][ T5900] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 756.899083][T14430] usb 4-1: 0:2 : does not exist [ 756.913555][T14430] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 757.132743][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 757.550437][ T5900] usb 3-1: unable to get BOS descriptor or descriptor too short [ 757.566326][T14430] usb 4-1: USB disconnect, device number 81 [ 757.591171][ T5900] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 29440, setting to 1024 [ 757.660592][ T5900] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 757.757940][ T30] audit: type=1400 audit(1757090586.796:1641): avc: denied { watch } for pid=15855 comm="syz.0.2239" path="/435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 757.876812][ T5900] usb 3-1: config 8 interface 0 has no altsetting 0 [ 757.890409][ T30] audit: type=1400 audit(1757090586.796:1642): avc: denied { watch_sb watch_reads } for pid=15855 comm="syz.0.2239" path="/435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 757.961410][ T5900] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 757.976581][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.114290][ T5900] usb 3-1: Product: syz [ 758.164734][ T5900] usb 3-1: Manufacturer: syz [ 758.190703][ T5900] usb 3-1: SerialNumber: syz [ 758.245026][T15841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 758.487193][T15841] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2235'. [ 759.233186][T15868] sch_fq: defrate 6 ignored. [ 759.583119][ T5984] vhci_hcd: vhci_device speed not set [ 759.847198][ T30] audit: type=1400 audit(1757090588.886:1643): avc: denied { create } for pid=15857 comm="syz.3.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 761.054245][ T5900] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 761.061315][ T5900] usb 3-1: selecting invalid altsetting 0 [ 761.126830][ T30] audit: type=1400 audit(1757090590.166:1644): avc: denied { setopt } for pid=15888 comm="syz.1.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 761.146486][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.300987][ T5900] usb 3-1: USB disconnect, device number 94 [ 761.526356][ T30] audit: type=1400 audit(1757090590.166:1645): avc: denied { connect } for pid=15888 comm="syz.1.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 762.103102][ T30] audit: type=1400 audit(1757090590.206:1646): avc: denied { name_connect } for pid=15888 comm="syz.1.2247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 762.159501][T14465] udevd[14465]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.188735][ T30] audit: type=1400 audit(1757090590.366:1647): avc: denied { read } for pid=15888 comm="syz.1.2247" laddr=::ac14:14aa lport=55507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 762.736147][T15911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2252'. [ 762.746182][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2252'. [ 762.761685][T15909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2251'. [ 762.765988][ T30] audit: type=1400 audit(1757090591.796:1648): avc: denied { write } for pid=15906 comm="syz.0.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 763.216119][ T30] audit: type=1326 audit(1757090592.256:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ea98ebe9 code=0x7ffc0000 [ 763.338858][ T30] audit: type=1326 audit(1757090592.256:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ea98ebe9 code=0x7ffc0000 [ 763.518615][ T30] audit: type=1326 audit(1757090592.256:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2ea98d550 code=0x7ffc0000 [ 763.558096][ T30] audit: type=1326 audit(1757090592.256:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd2ea990417 code=0x7ffc0000 [ 763.582147][T14430] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 763.621544][ T30] audit: type=1326 audit(1757090592.256:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2ea98ebe9 code=0x7ffc0000 [ 763.681334][T15927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2256'. [ 763.731189][ T30] audit: type=1326 audit(1757090592.256:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd2ea990417 code=0x7ffc0000 [ 763.770840][T14430] usb 3-1: Using ep0 maxpacket: 8 [ 763.787462][T14430] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 763.808746][ T30] audit: type=1326 audit(1757090592.256:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd2ea98d84a code=0x7ffc0000 [ 763.829022][T14430] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 763.837736][ T30] audit: type=1326 audit(1757090592.256:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ea98ebe9 code=0x7ffc0000 [ 763.920960][ T30] audit: type=1326 audit(1757090592.256:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.2.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ea98ebe9 code=0x7ffc0000 [ 763.921818][T14430] usb 3-1: config 0 interface 0 has no altsetting 0 [ 763.944570][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.001852][T14430] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 764.021721][T14430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.048163][T14430] usb 3-1: config 0 descriptor?? [ 764.475794][T14430] gt683r_led 0003:1770:FF00.0017: collection stack underflow [ 764.495908][T14430] gt683r_led 0003:1770:FF00.0017: item 0 4 0 12 parsing failed [ 764.514793][T14430] gt683r_led 0003:1770:FF00.0017: hid parsing failed [ 764.529736][T14430] gt683r_led 0003:1770:FF00.0017: probe with driver gt683r_led failed with error -22 [ 764.835704][ T5900] usb 3-1: USB disconnect, device number 95 [ 869.731700][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 869.738674][ C1] rcu: 0-...!: (1 ticks this GP) idle=d92c/1/0x4000000000000000 softirq=75425/75425 fqs=30 [ 869.749784][ C1] rcu: (detected by 1, t=10502 jiffies, g=69633, q=386 ncpus=2) [ 869.757521][ C1] Sending NMI from CPU 1 to CPUs 0: [ 869.757565][ C0] NMI backtrace for cpu 0 [ 869.757579][ C0] CPU: 0 UID: 0 PID: 15933 Comm: syz.3.2258 Not tainted syzkaller #0 PREEMPT(full) [ 869.757596][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 869.757604][ C0] RIP: 0010:__lock_acquire+0x402/0x1ce0 [ 869.757631][ C0] Code: 00 4c 89 e6 4c 89 ef e8 8c f3 ff ff 85 c0 74 62 ba 08 00 00 00 4c 89 e6 4c 89 ef e8 78 f3 ff ff 85 c0 74 4e 8b 15 fe 68 4e 19 <85> d2 74 74 8b 44 24 08 49 8b 8d e0 0a 00 00 85 c0 0f 85 54 03 00 [ 869.757643][ C0] RSP: 0018:ffffc90000007c38 EFLAGS: 00000002 [ 869.757656][ C0] RAX: 0000000000000001 RBX: ffff88802dee8af0 RCX: 0000000000000008 [ 869.757665][ C0] RDX: 0000000000000000 RSI: ffff88802dee8af0 RDI: ffff88802dee8000 [ 869.757674][ C0] RBP: 0000000000000000 R08: 0000000000080000 R09: 0000000000000001 [ 869.757682][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802dee8af0 [ 869.757690][ C0] R13: ffff88802dee8000 R14: 0000000000000000 R15: 0000000000000003 [ 869.757698][ C0] FS: 00007f188e00d6c0(0000) GS:ffff8881246b6000(0000) knlGS:0000000000000000 [ 869.757712][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 869.757722][ C0] CR2: 00002000003ab030 CR3: 000000005573e000 CR4: 00000000003526f0 [ 869.757731][ C0] Call Trace: [ 869.757738][ C0] [ 869.757749][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 869.757765][ C0] lock_acquire+0x179/0x350 [ 869.757784][ C0] ? advance_sched+0xd9/0xc80 [ 869.757803][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 869.757818][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 869.757834][ C0] ? __pfx_advance_sched+0x10/0x10 [ 869.757851][ C0] _raw_spin_lock+0x2e/0x40 [ 869.757870][ C0] ? advance_sched+0xd9/0xc80 [ 869.757887][ C0] advance_sched+0xd9/0xc80 [ 869.757904][ C0] ? find_held_lock+0x2b/0x80 [ 869.757921][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 869.757936][ C0] ? __pfx_advance_sched+0x10/0x10 [ 869.757952][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 869.757972][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 869.757987][ C0] ? read_tsc+0x9/0x20 [ 869.758008][ C0] hrtimer_interrupt+0x397/0x8e0 [ 869.758028][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 869.758044][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 869.758060][ C0] [ 869.758065][ C0] [ 869.758070][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 869.758085][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 869.758107][ C0] Code: 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 85 92 db 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 869.758120][ C0] RSP: 0018:ffffc900047ef9f8 EFLAGS: 00000293 [ 869.758130][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff896336c8 [ 869.758139][ C0] RDX: ffff88802dee8000 RSI: ffffffff896336d6 RDI: 0000000000000007 [ 869.758147][ C0] RBP: ffffc900047efd98 R08: 0000000000000007 R09: 0000000000000000 [ 869.758156][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 869.758164][ C0] R13: 00002000003ab580 R14: ffffc900047efddc R15: 0000000000000002 [ 869.758175][ C0] ? ____sys_recvmsg+0x348/0x6b0 [ 869.758193][ C0] ? ____sys_recvmsg+0x356/0x6b0 [ 869.758211][ C0] ____sys_recvmsg+0x356/0x6b0 [ 869.758230][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 869.758255][ C0] ? kfree+0x24f/0x4d0 [ 869.758277][ C0] ___sys_recvmsg+0x114/0x1a0 [ 869.758292][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 869.758311][ C0] ? __pfx___might_resched+0x10/0x10 [ 869.758330][ C0] do_recvmmsg+0x2fe/0x750 [ 869.758345][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 869.758360][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 869.758383][ C0] ? find_held_lock+0x2b/0x80 [ 869.758399][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 869.758415][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 869.758433][ C0] do_syscall_64+0xcd/0x4c0 [ 869.758449][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.758462][ C0] RIP: 0033:0x7f188d18ebe9 [ 869.758475][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.758487][ C0] RSP: 002b:00007f188e00d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 869.758499][ C0] RAX: ffffffffffffffda RBX: 00007f188d3c6180 RCX: 00007f188d18ebe9 [ 869.758508][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 869.758516][ C0] RBP: 00007f188d211e19 R08: 0000000000000000 R09: 0000000000000000 [ 869.758532][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 869.758541][ C0] R13: 00007f188d3c6218 R14: 00007f188d3c6180 R15: 00007ffd2741b3e8 [ 869.758554][ C0] [ 869.759560][ C1] rcu: rcu_preempt kthread starved for 10439 jiffies! g69633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 870.227524][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 870.237481][ C1] rcu: RCU grace-period kthread stack dump: [ 870.243352][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 870.256832][ C1] Call Trace: [ 870.260100][ C1] [ 870.263026][ C1] __schedule+0x1190/0x5de0 [ 870.267544][ C1] ? __pfx___schedule+0x10/0x10 [ 870.272428][ C1] ? find_held_lock+0x2b/0x80 [ 870.277101][ C1] ? schedule+0x2d7/0x3a0 [ 870.281427][ C1] schedule+0xe7/0x3a0 [ 870.285484][ C1] schedule_timeout+0x123/0x290 [ 870.290331][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 870.295699][ C1] ? __pfx_process_timeout+0x10/0x10 [ 870.300983][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 870.306777][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 870.312235][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 870.316990][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 870.322266][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 870.327454][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 870.332378][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 870.337221][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 870.343020][ C1] rcu_gp_kthread+0x270/0x380 [ 870.347686][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 870.352869][ C1] ? rcu_is_watching+0x12/0xc0 [ 870.357624][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 870.362813][ C1] ? __kthread_parkme+0x19e/0x250 [ 870.367833][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 870.373111][ C1] kthread+0x3c2/0x780 [ 870.377171][ C1] ? __pfx_kthread+0x10/0x10 [ 870.381750][ C1] ? rcu_is_watching+0x12/0xc0 [ 870.386504][ C1] ? __pfx_kthread+0x10/0x10 [ 870.391085][ C1] ret_from_fork+0x5d4/0x6f0 [ 870.395662][ C1] ? __pfx_kthread+0x10/0x10 [ 870.400242][ C1] ret_from_fork_asm+0x1a/0x30 [ 870.405013][ C1] [ 870.408016][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 870.414322][ C1] CPU: 1 UID: 0 PID: 15912 Comm: syz.2.2254 Not tainted syzkaller #0 PREEMPT(full) [ 870.423676][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 870.433719][ C1] RIP: 0010:smp_call_function_many_cond+0xdfb/0x1600 [ 870.440390][ C1] Code: ed 74 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 b5 ff 0b 00 90 41 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 [ 870.459985][ C1] RSP: 0018:ffffc90004b7f5c0 EFLAGS: 00000293 [ 870.466041][ C1] RAX: 0000000000000000 RBX: ffff8880b8442000 RCX: ffffffff81af8ea1 [ 870.473998][ C1] RDX: ffff88802ed54880 RSI: ffffffff81af8e7b RDI: 0000000000000005 [ 870.481958][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 870.489913][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 870.497869][ C1] R13: ffffed1017088401 R14: 0000000000000001 R15: 0000000000000000 [ 870.505832][ C1] FS: 0000000000000000(0000) GS:ffff8881247b6000(0000) knlGS:0000000000000000 [ 870.514751][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 870.521321][ C1] CR2: 000000110c45c12e CR3: 0000000035379000 CR4: 00000000003526f0 [ 870.529282][ C1] Call Trace: [ 870.532549][ C1] [ 870.535474][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 870.540839][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 870.546041][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 870.552357][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 870.557296][ C1] ? lock_acquire+0x179/0x350 [ 870.561971][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 870.567162][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 870.572526][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 870.577638][ C1] flush_tlb_mm_range+0x4a0/0x17a0 [ 870.582743][ C1] ? folio_mark_accessed+0xc1/0xc00 [ 870.587932][ C1] ? __pfx_folio_mark_accessed+0x10/0x10 [ 870.593555][ C1] ? arch_check_zapped_pte+0x9d/0x140 [ 870.598921][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 870.604466][ C1] ? rcu_is_watching+0x12/0xc0 [ 870.609221][ C1] unmap_page_range+0x20b2/0x42c0 [ 870.614262][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 870.619627][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 870.624564][ C1] ? uprobe_munmap+0x20/0x5c0 [ 870.629235][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 870.635126][ C1] unmap_vmas+0x218/0x470 [ 870.639450][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 870.644322][ C1] exit_mmap+0x1b9/0xb90 [ 870.648558][ C1] ? trace_contention_end+0xdd/0x130 [ 870.653838][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 870.658602][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 870.663553][ C1] __mmput+0x12a/0x410 [ 870.667622][ C1] mmput+0x62/0x70 [ 870.671334][ C1] do_exit+0x7c7/0x2bf0 [ 870.675491][ C1] ? __pfx_do_exit+0x10/0x10 [ 870.680162][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 870.685536][ C1] do_group_exit+0xd3/0x2a0 [ 870.690041][ C1] __x64_sys_exit_group+0x3e/0x50 [ 870.695061][ C1] x64_sys_call+0x14fa/0x1720 [ 870.699729][ C1] do_syscall_64+0xcd/0x4c0 [ 870.704226][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.710105][ C1] RIP: 0033:0x7fd2ea98ebe9 [ 870.714504][ C1] Code: Unable to access opcode bytes at 0x7fd2ea98ebbf. [ 870.721504][ C1] RSP: 002b:00007ffedf2e8e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 870.729904][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd2ea98ebe9 [ 870.737862][ C1] RDX: 00007fd2e9bf9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 870.745820][ C1] RBP: 00007ffedf2e8efc R08: 0000000000000268 R09: 00000000000927c0 [ 870.753786][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001a5 [ 870.761744][ C1] R13: 00000000000927c0 R14: 00000000000ba2fd R15: 00007ffedf2e8f50 [ 870.769717][ C1]