last executing test programs: 2m16.833364719s ago: executing program 2 (id=961): r0 = syz_open_dev$video4linux(&(0x7f0000000440), 0x40, 0x121000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000180)={0x0, 0x0, 0x2007, 0x1}) 2m16.769430323s ago: executing program 2 (id=963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c9bc204bc0af2e94"], 0x50}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x13b0, &(0x7f0000000100)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0xba, 0x6, 0x0, {0x0, 0x100, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x2, 0x7, 0x8000, 0x0, 0x0, r6, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x10001, 0x12006606}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r4, &(0x7f0000008400)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb57788d725f6f8fd495a58d88d55ab8467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f09358d998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46250e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caaf01d8e3417f768ab08f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128317d9a56e63a4808ed6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbf53426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55e652eb6b2e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec15e7e8664d7bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d325896a1b32e9fb4f9d67a903946b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf05df5dd03cd8a553e7ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45e4ff75c5d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a1031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f75", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x2, {{0x1, 0x0, 0x0, 0x10000000000, 0xfffffffd, 0x0, {0x0, 0x7fffffffffffffff, 0xfffffffffffffffe, 0xffff, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0xc000, 0x0, 0x0, 0xee01, 0xfffffffd}}}}, 0x0, 0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') io_uring_setup(0x17c7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 2m12.296870542s ago: executing program 2 (id=981): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) lgetxattr(0x0, &(0x7f00000003c0)=@random={'os2.', '[-.^\x00'}, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000fdba538284a551251ec8186b26725f4bddfeb76335d6a182e451085d8f05b3fa4b730c4aaf3631224a43f8fa1878957368964b4f6d9bf59cba3bf41faf4ba27f540ceffbb6ca69cafc2fe60e493db389d46e4d9d202add355b27eade860176802b2707abc4f9825f916e381a02e946"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xd, &(0x7f0000001480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2m11.070089767s ago: executing program 2 (id=983): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000002580)='./file0/../file0\x00', 0x9) linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = fanotify_init(0x8, 0x800) fanotify_mark(r1, 0x200, 0x4800003a, 0xffffffffffffff9c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x800}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, &(0x7f0000000100)=0x6, 0x4) read$FUSE(r1, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x3, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) 2m10.179541609s ago: executing program 2 (id=986): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x80, 0x10e) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @timestamp, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m9.952703461s ago: executing program 2 (id=990): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket(0x40000000015, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) userfaultfd(0x801) mkdir(&(0x7f0000000040)='./file1\x00', 0x85) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f00000005c0), 0x5005) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="f3", 0x1}, {&(0x7f00000003c0)="23b5db3ae6d4", 0x6}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240), 0x646a82, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x21) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = open(&(0x7f0000000600)='.\x00', 0x840, 0x243) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 2m9.80335727s ago: executing program 32 (id=990): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket(0x40000000015, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) userfaultfd(0x801) mkdir(&(0x7f0000000040)='./file1\x00', 0x85) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f00000005c0), 0x5005) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="f3", 0x1}, {&(0x7f00000003c0)="23b5db3ae6d4", 0x6}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240), 0x646a82, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x21) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = open(&(0x7f0000000600)='.\x00', 0x840, 0x243) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 8.958030363s ago: executing program 3 (id=1452): socket$kcm(0xa, 0x922000000003, 0x11) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000280)=0xfffc) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd6e0cb005b1abd4d879a097dd9d3e6e12f85505cd45c840f9503b2fff6c33e6a675512ab99729da82acc41b65a398d515700ba76224267cdabfb9576027eb82a82c337e379c488d47691d7fe2c55bbe29a7a37633648559a31b90f145d0f5a2d8d9499f100ba95da30ce9df964d2af22e6551f8a35878071d2b5477c0f1c0ab067a8bd9368c04ed9b6e1547f04d022d726bb32daf66bded05624baa409848f50d96df5d0a86c6ce2b9b0767e85c5233c1e30aaad953301d7294b375db43804290971c857070e9d2c8b6397ab8d56358476fc0359ee79b7956f0ef1ce2edefc6bd340037706a57aa98105019c21be58ce8c868c90db57bfe8304416b3e7e02837ea3ce01ce463321f2ea429ee0c42b27d28c2b6063eb5cd746e26ade0c9ae3049ebb8c5038b01281f26c9777fb1263a5ba1262fa783e07ef5ded966eb85a4a811f5aab0d9575551239e9b0f76e5217744b0a8edcb1504774e36818033e3ab03ca6164df64fdf4352b9c88bfa91add131e13bee44e7eb4e38e613f3bab3c6c8a5038e446d57c9058b975f05f36e0e49171b426b99aa82a0656d7ffc46169ee20456aab06ee429bff9408fb1961e3976e288bee69e9ec6dc72862e1cfcc6c4804457285efcb056b0d834666748129994a3fc172c4c9c622a0c4ddd84bce972d56c70f3687222e5857f9a24b0e138a8359409f5b4ba3206c1a7f35c9e90f3ad903715ab7283e700f9ec2c641f38e998122266a8b1731ce1f03d12a643f281b3ace22f1e403dfe05052fdca3da258f8f1bd7c88949d2a14510b4116c5e403b6cee434d4969113ff8eebc1052e6a1dfa710cadfa0dbd96afa3dd1ab32b10e97d4c015e357bb938d5c2420ed83fff6a17ca9c334fc1b1a3b171f3ca2f4f88a66c59477a73265a8dc10c6d0e5ab2f595e4b9bdd160f35a7917d46df4a50b7651a5991f2444fc0a235f210e8ce8afede0b725d0cabfa20e4d36a836314d180f66614db4fbbd15ef7a947247f7f6f0eb34af0b7aeaaa9210154285dcd0389de273ad3459a1d87f062d9a050c57b6325750aeb9f47d7242117d8e0d38ae1e6cef179809d422ae852bf41f8d5ec42fac487ed46e0511a1f554cd6181e6c81dfdafa7c69daa2ba822e22e305b4b8f34c20fcc8e50cf451f053df249a7f5b20cbc0bc127f55d80bc9c0ba3cf9f0a9c56286215c20f9d60cb61276c6bbf772c151be2520e22b8f6daea2aa1f9e1b30bbeed092d3c2fb92a10fb71e7fea336a0258620c918581487ec04c54ca4e9811a83a6bf39dca6a4e89092cdee6e40024bd7c1ae7b3a8cdbb38c21ccb1de68f7fc9fa4726b832cedcfdd22b71f37d66f350e78e3c19bcae0322f8f070c316bc3c2ba0cb12a43746bd8aaa1645e3f8800b93722ac1791396bb3def1678cb5ab3f42c097c4c3684ea61dc89209ae57906bd4577a93b14eceff6f18893064198d9141a927ced2af06226011187f1851d6a5c1b5ff78a4c6d8b387a781c06a286f052d2e828ed94110cd7b9e6cfcb840e12019678080a6e9e517ce8ba6276c5a919197fd0adf86547135fcec083f2c1fea0e40564f279ceec580e827e39fa77bfa823d6e08aa7bd320491381f21be8b10dc2ed7fee1524680a52bb1e14cb6248519100edd7df29bac5c4ad1c893ee99db03aa7e077ba6608b0db797f31a6cd6d5a01077a41df98fc373ac5c149b87c55bb73bb17b09dffa7847b134b866b9ce179d547750dd2fb9c280e2003d132c87e2535f31232a32d738aeedeff052f256a9c866b6c2cb880d15f1acca7396a8f6113afe45e46e96a6c7762eb09d2c568df561d5484356b4ae71f89bf0126c6670c4fbeee59a89e20206401ef85f083039aa9ceacc2912427b031c35e29c7a702e0054f4dbb01062c0daab2a5faa49a86cd5d48d64bbee12f60ee529a00ad13a579934faff4ec12778038a3e48217fc4eb97ebe3dec9ecdfc0af3e722ed7ca0f12952c2902b0db061098d4bf14664104c440c9d07af7fbaa375274f61b04c17050a3e139dcce999071f18468139182cfe78a84c90c0428d7c75a621a6eaa69e028ce47626235ca3edbbb53e15afebebb25e18c732a820edca2f60be8c0ecd7e5a30282a0add95c6eb43b0afea34d91de7b20f4fb999d17c7fc418738f61cce38d656ce86e2d0a97f31dad0296ee63fb48e859003f88d0a27c874a47301dc0f1fd4f4e9b1bcd7806f715c751b94e182307d2d01278eb0ad2e1a48c3cac80ea5ec28b9b52f5cf6ea8b5611be5a24f91545cae2f581fd58fd47e6aa3b88b380442f21739319050ef702ffe604d7b1341013d330ad4e8d7c3cec17da298b4fcf1205e156f30642d654384d4be8b9eb4add6d9603e8fe122b9d70171d6f8ea5", 0xfffffdef}], 0x1}}], 0x1, 0x0) r6 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x81) openat$cgroup_ro(r7, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r8, &(0x7f00000003c0), 0x0, 0x0, 0x0) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) exit(0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000380)=""/252, 0xfc}], 0x1, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.771780596s ago: executing program 1 (id=1456): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, 0x8) socket$kcm(0x10, 0x400000002, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x3f6466771417aa5a, './file0\x00'}, 0x6e) open(0x0, 0x145142, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x800020, &(0x7f0000000680)=ANY=[@ANYBLOB=',rootmode=000000000000000\"', @ANYBLOB=',default_permissions,blksize=0x0000000000000600,default_permissions,permit_directio,s']) pipe2$watch_queue(&(0x7f0000000080), 0x80) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x2, 0xfa, 0xb7, 0x7fff, 0x2, 0x3, 0xfffffeff, 0x2df, 0x40, 0x303, 0x0, 0x4, 0x38, 0x1, 0x4, 0x4, 0xd}, [{0x6, 0x8000, 0x0, 0x7, 0x40000000000008, 0x5, 0x402, 0xca8}]}, 0x78) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r6, 0x8}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x4, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) close_range(r1, 0xffffffffffffffff, 0x0) 7.593102757s ago: executing program 1 (id=1457): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x48142) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000000)) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000100)={0x2, 0xfe}, 0x2) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000300000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 5.865449008s ago: executing program 0 (id=1462): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xbe03, 0x800, 0x2, 0x2ae}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000000)={0x0, 0x30, 0x2, "01ab"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) getpid() sendmmsg(0xffffffffffffffff, &(0x7f0000006180), 0x0, 0xd0ab09364dde5ace) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c000714"], 0xf) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x4}}, 0x9) getpid() syz_open_dev$MSR(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1c9, &(0x7f0000000280)={0x0, 0x8101, 0x0, 0x0, 0x3ce}, 0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x5, r6, 0x0, 0x0, 0x0, 0x80000, 0x1}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r9, &(0x7f0000002840)=""/4103, 0x1007) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500020000000800124000000000050004000000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 5.824914498s ago: executing program 3 (id=1463): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x6, 0x0, &(0x7f0000000780)) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000000)=0x73) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101302, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4080100000000000000030109022200010000000009"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000430007010000000000000000047c000008"], 0x1c}}, 0x48844) getdents64(r7, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x514, 0xc00}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r10, 0x0, 0x0, 0x0, 0x101, 0x0, {0x1}}) io_uring_enter(r11, 0x8aa, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={@empty, @loopback, 0x1b, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="6b9a54c19e1487320b87f5bd52645350b9c1451bb708f01f805e49d1ae6db0fb20bcc010db55d4c25b485c1f7289e5e72e91c978191cb4de7d14defe", @ANYBLOB="01000000000000010000000100030038ecd64c8f1876533f56b8b7d45ff3b2f5ea9dad62c113f4b78ef908a53dd064c7a4c6b5365d0caeb184fe627763acd1e1f8c459c6f4f9082b35f83479039130695a96c073534a2ff5a3706765bd2b0b81f92372db5d31b3ddc2c23808a4b2a54fcfe8fa7b6f8f74c1e2f64c538c42594340e48310174accce616716b4aa56832a856642d6f4ffd2eb33b3f4cb74a1b6933128ca4061bc6a372bc752cb2792d304badbcaf2fbbb04fca6a9645f0658070901816bfbda46d817", @ANYRES32=r7, @ANYBLOB="bc7672b7a062173c36bebc041dc841fdf4cbd7c779ac2cf70f753cd546037143b13f9b999182d23eb796fd2ed47e2412c9b5dafccf85d62190c05cec6791"], 0x5c}}, 0x8010) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000540000042abd7000fbdbdf2507000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="010104007fff00000000000000000000008000000000000071103d51dd58915f61b1ddbd767227b352492b5fa21e283e93e8f5df0877bd14b2235e8b8126371d629331290336c63ed579cc637f84fa36059c243669cf0909517d"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xf763b84c8547fb58) socket$inet_mptcp(0x2, 0x1, 0x106) r14 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r14, {0xee00, 0xee01}}, './file1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000008000000070000000101000000100000", @ANYRES32=r0, @ANYBLOB="620600"/20, @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="ffffff00000000000000000646000000000000000000000000000000f633350b3ac00fdb7baab690377de3dcc89daeb3dd33260ba6045608b4231f21e339e96b7ea9755b"], 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x0, 0x0, 0x2a, 0x0, "410145b4850b0e70b83cb23e3da1f303bd67204079eb493673203ea07725ed5258670767f255a6275771c27e6fe165a861d8f27b2f42efe08a1e8ad0a922cb2f47b78ebd4c4cba77cb78e439c46df996"}, 0xd8) 5.725244132s ago: executing program 4 (id=1464): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x41, 0x4}}}}]}, 0x44}}, 0x44080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x20, 0x7ffc0002}]}) r3 = memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\xa6Ey\xdb\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = dup(r3) readv(r1, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f00000004c0)=""/193, 0xc1}, {&(0x7f00000005c0)=""/237, 0xed}, {&(0x7f0000000280)=""/114, 0x72}, {&(0x7f0000000140)=""/18, 0x12}, {&(0x7f00000006c0)=""/183, 0xb7}, {&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/67, 0x43}, {&(0x7f0000000ac0)=""/231, 0xe7}], 0xa) r5 = fanotify_init(0x1, 0x1) fanotify_mark(r5, 0x601, 0x30, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0x0, 0xa}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xc}}]}, 0x38}}, 0x4000) getpeername$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001900)=0x14) 4.654349844s ago: executing program 4 (id=1466): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0x15, 0x1c, "72157bb3251071a6f3626cf59dc41b94b1297463a21f5088e9633a11"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x73}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000003c0)={0x20, 0x1, 0x4d, "aa467065ffbed7b651a0410fae67f53ea57749d33dfe05202d1bd3b57ed11ba394a5bd73c1b4d71a4459ffbda8b198e290017c3ced1a459420fc7c65ea96d37b33324bed71d4dd8c7de69c3c18"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x9}}) 4.521702503s ago: executing program 1 (id=1467): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x1c, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003180)=ANY=[@ANYBLOB="12010000000000403810b6121f00000000010902240001000000000904000001030000000921000000012207000905810300000000004dc1153d1407b5e041eb506f9fb08b4867321ec90d714c70facbf5e4393737dc8f70a722254894444984b3ccb9fbf4"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000071401"], 0x30}}, 0x94) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) lstat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$IPC_SET(0x0, 0x0, 0x13, &(0x7f0000000600)={{0x3, 0x0, 0x0, 0x0, 0xee00, 0x100, 0xa}, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}) read$FUSE(r2, &(0x7f0000001140)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.47634231s ago: executing program 0 (id=1468): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) (fail_nth: 3) 4.334053038s ago: executing program 0 (id=1469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r1, 0x401, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4005840}, 0x24004040) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000140)={0x300, 0x1, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x280, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb70}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x80, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x151f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2a7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe04}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xca71}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x20001000}, 0x0) 4.327995918s ago: executing program 5 (id=1470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000000c0), &(0x7f0000000600)}, 0xffffffffffffff31) bind$rds(r1, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x32) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_map={0x0, 0x114, 0x3, {{&(0x7f0000000800)=""/143}, &(0x7f00000001c0), 0x20}}], 0x5e}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 4.289403561s ago: executing program 0 (id=1471): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xa, &(0x7f0000000400)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x21, 0x9, 0x5, 0x8, 0x5}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcd, &(0x7f0000000200)=""/205, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x2622, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0, 0x0, 0x3}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 4.066872721s ago: executing program 5 (id=1472): ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5415, 0x0) r0 = inotify_init() r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(r0, 0x0, 0x84000100) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) getresgid(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x25, 0x0, &(0x7f0000000140)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000640)={0x0, 0x6c8}, 0x8) 4.066244868s ago: executing program 0 (id=1473): socket$kcm(0xa, 0x922000000003, 0x11) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000280)=0xfffc) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) r6 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x81) openat$cgroup_ro(r7, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) preadv(r8, &(0x7f00000003c0), 0x0, 0x0, 0x0) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) exit(0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000380)=""/252, 0xfc}], 0x1, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.742634458s ago: executing program 3 (id=1474): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x80204) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x5) 3.707137801s ago: executing program 5 (id=1475): r0 = socket(0x28, 0x5, 0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') rmdir(&(0x7f0000000080)='./file0\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x11, 0x6, "a419000e7878"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x41, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 3.158648452s ago: executing program 3 (id=1476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = fanotify_init(0x0, 0x1000) fanotify_mark(r5, 0x1, 0x40000000, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000010c0)="172f9946"}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, 0x0) ppoll(&(0x7f0000000040)=[{r9, 0x80db}], 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r10) 2.428154091s ago: executing program 4 (id=1477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x15, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x597}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60156909005c2f00fc02000000000000000000000000eea1807ca1d17a2993a28c660000ff020000280000090000000000000001242088a8000000000000080007d4ce8a3d64b442c70c3e6ce8f4d5fb1f83433f07000000000086dd88a888be81000000100000000100000000000000080022eb00000000200000000200000000000000d241386953beecb052c5e93b0017ebf2b0aa4dc06d2441ac145daa92fdf99c4647b6cbfbaef463eb13bf7c2813085bcb2368855b933c3dad9f8599079fae1559f3314c6604751bf31a3763d72b303865cc60c28919caa3b6043ba04892d3f95e33dbc5addbeaa7d6893d14"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) socket(0x2, 0x80805, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r2, 0xfffffffc}}, 0x48) 2.074188023s ago: executing program 3 (id=1478): madvise(&(0x7f0000347000/0x4000)=nil, 0x4000, 0x14) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00004f1000/0x3000)=nil) r0 = socket(0x2, 0x80805, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='x'], 0x14}, 0x1, 0x0, 0x0, 0x4c004044}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001040)=""/4101, &(0x7f0000001000)=0x1005) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x6, @empty}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x14, 0x26, 0x2, 0x70bd25, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 1.929770733s ago: executing program 4 (id=1479): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x35a2902f9268d7f1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x4, 0xe, 0x6, 0x2}]}) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r3, &(0x7f00000002c0)=""/59, 0x3b) 1.710082887s ago: executing program 3 (id=1480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/78, 0x0, 0x0, 0x4}, 0x20) pwrite64(r0, &(0x7f0000000180)="7b8662281e1752bd", 0x8, 0x90) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x684c1, 0x40) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f00000001c0)={0x5d, 0x7f, 0x4, 0xc, 0x400, 0x81}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 1.404727431s ago: executing program 1 (id=1481): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x2000000000000103, &(0x7f00000031c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000280)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x65, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='consume_skb\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x2010, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x2, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000380)={0x0, 0x144}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3, 0x0, 0xfa}, 0x18) r4 = socket$caif_seqpacket(0x25, 0x5, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r7, r8, 0x5, 0x5, 0x4, 0x5, {0x7, 0x5, 0x5, 0x6, 0x6, 0x9, 0x2, 0x5, 0xb, 0xd25, 0x9, 0x60b, 0xffffffff, 0x10001, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f00000001c0)=0x6, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x155e83, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYRES16=r2, @ANYRES64=r4, @ANYRES16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000008000000000000000000000000000600"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001880)={{r10}, "051e938da9bee1e52c6a169266e9ab95d8383bc54ab9ae82c5de6f4a5d553da74ef5f293fde4753ca4a1201528510db4230421a3d9be4e50af3e372129713cf23791fea0ee2c035b215cadd34134521d9b2e5a6373ed979ecc20e8df2fdce39fdeb7ddc148f93735973e4563fe67843d8b54e707826cc9629b25aaaf6c2e02504b8c42b041d67d103e32c21475cce5f97605d6116bcf2b60e52ed3e2a0944535257e5d44382cf23e31d1788f4d81df17fcf9a223dae0e79b262035813edc0b46b8d35b4f15d9b56beef34af2dbbd507aefb1e38e7ab7904e728f68386b59a78038433b13cc205c8b60cf84b9014e260c94ff0ceecd85f0f69a30c07cfa1e3e0858f4e902d779317b5c5a618c4ceeb00ccda93b82d9923ec52709c3f74a136d026be580491cbf4ca3bcf1f1ca12e3cbb6fd4c55493d05b65c27e04a208ace7bf57d4d0ed8424efb4d36563b76b98d8c30491ac6c388dae318728e297bd4cd499c0aa51921658c185ea384cd62bb62295c752ddab9755cb8a7f916a02b5d8b405a766da7c0a5c33a4b8b218957077e03212a78a533dda4e2216bef0ed46dc2d1e58b28a12d13b1641d84884cc695b625356d4a28c3a6d2974f583f1f44a1115138d8d1bba21b7d752a4da2c7b93345baab7af6c03e696260b63140f9263fa4a03c1dfc25a4b7de04af745930b5d73430ef543b3abcde7c5ea1e13448c138829a862a8126db2670939eb1874e3c257ced398a0200defde03ee8f561b83d2fe1c28200cea40c0af7720cdad493ab404bcd076716d560eaada76420f016f8a5463260401b2c696b35a1a03dff046049122a330940eb5f387cebe812a2c9e0d31c86914edda86f816abf0f8289218f657f6321d5456b64da130fde3d12ce2ab8f80a775267c0d89eea985c481a2bc87d6a40635e9811807ff313ea8ac243b2c944713bb328199360e100037d18c35009bfdf6c13e58c141aaa50303e6d687ca3785503ec4a0b71bcde072e8d9ea21eac264edc8cbfd83d0fe5df104ff75233e736950638bca70214e7729ee8f3556ff2259d1742f40d9073e23ee9de483cd14a1c69556eb18072e8d1ba8f725ac3954217999680cca401bb0d0bbabee6098c1830c3a60de55116b8b34c2cdb405493fa7f5bb234e35d1ec49b46e49b430dfe04e8cb064ba229a18047380834a4a91747cc53c75f4d09faee5c2b3cd1fe7cfe7f881b8228f243c3d969f74742742e16cf8328543b895f8101c030e71945806ba3d282ce06568e872327b7cbcf2fdde10d83ae08c4a8b1fedd5446c03c933bb597f860beb16d7053cf7a414a41c639fd405574ba5679eca16d43f97392a794971d525ce9122d06f1a13309f3b50bd023deccd5ca30c70480cd748501442ecaffa9ed81c54a33807e014a306b32d84f5ab1eb58bf7eddf085a7f608de8ef7c7c231c30a293fe3212042d700c3722b0ed1877052d79f96752645802013ce929f65a6945071673c6fc07e3138595d85a03dd1d3dc3d9dce24bb7818697d6cd46793389bbc79ae598714fdc84bbb3eccf9e43334d71f41855f081edfe81a3c7c65e19ae1527e488628306b82faddc41f3aa27b6dc2a58429d141a31751eda9fab15ef791062822df956a7973cc0bbcacf1c0b670dae9e4dcb77934cb8bd7bbe527822840e3ee23f1111c337ff584bf41f485c8c12c69fe9dcda9cfba6254ec0ba60c19c6e7c297fee96d0c2d537bfcb336f9168073322f7d91e104b01146068335891be9442832f1a0a26b66d1cd1c70f6476aea51e05d5cb4ff711435bb2d758b189e22270be897715066a8fa86f75147d18111301e0ecbf83ccb92083e30daa7b24add743f22ab0731054dafadb171b04c8bf570dd313f7a7fa55e428750afb8887467da14fa44d138a2ebb75270c1445ab9d5b2fe6dbceafbf73cb12a037a9d44019c8945d1c1f847d9d86f5a750012a8f93377d34bed87e43e773cb8c4ceac53d33e13d08bd63f8af4ef442d2efd8eacde53443a0c80fe5a06bf58674fc9abf5a88276268c0e7e38c16dd3bf7c65fd6f4e7b07433b2dec00785fbbc6823c3f730de344545c4260a713c702a5c81b217690421a224cf780ea2d3d146dc17c1fdacc984f7a88be04b408bb7ce175e365430cc9f109d1e3ef7ef7b2270e6157268d40caa8024dceaf8379b35f76816772cb6d12dd7d85d439de94601b8c2d8ce96523defb424b15bc9a6fd485bd4901fd867e1fa7a407262bd5a68a4ef3db7b705a390cbaba11b1bd7bcad6c97460a0096a73cc2758f2eac9792faac9464a3883761dc4fff2e18fdc2cd2f7002455124b25b4537429dc46e83ec7f9eb3dec1465b83c4aa5de10baad051576d09a3d640b7e27af7cb09eaf91b7a25e6db0019591c6489acdf3949394fb22527b973348addf2980a2b8aceb179c17a987103ce2469750a1f94fc9645e5783723c80e6bddebae1cf88c87e2e8304bf65b4ab9f7a791908966b3d01e262fa5efa48d119b23dd64ba78233563f383980939338c79d668d83f0b815fbe20023feec37e64f55dcee4f6d34a7a01b777f3edc074c8128748c9254d5757c6e41460ce7db1740638500e697102bbfddf6c14b811b8b417f8a1970c348d996a7c9973c77586b64d2c3db448aec1817c5b02f90ff91f7eaecb8a88d9bd70ff0633b30212930c198920905884de20dbddacba8bedb3631fefdc49602289296d4e478ed8b76a79cae9c60f1aead27d61e8a3a536457fe2049f6ec7fe501c476f570e834a25ab0dd7246ef4a9cfb983baf7e8e8c38d47c7f11d18caf7cb3c67479a532f0748604fc114e8a40cbc875443d50489ccec02b004e9311b1f8f49f149fbdb877f40392e2a92e26576d4cd177bdff3c69bab761979ac5a8e659c1cd0e42d477f9a653530f9dc40cb4088b34f442e7e37883b9b3b9228ec9e9d293c290e901c38b474181d067a39e04cead77226dfc596f8321549d94603e5299351199e9c392ff7dc762906fa6c296e361cc19bd8625c0496385b9c28a6003a5ec8d3ae6c7492ae3ef76125e5db726bb6a195de32a42cf903cb65e4d81f72ce4838f2e237a743a7c44998032fc8443b5aacd9abd00ba1f78da6a83181ff79afe69683888dc0605292dcc5fc05360604b0c5ab661bee918df6ca0fb16f6bd0d0e9ced7aca8bab618439f8d1915df74102f0dda2ba62e3faea5fc4f1117607c78b70a785ffea565e139e5a68655911386175a53ec331755bd661b494783af56ff23a3f650a52fb5ebb354e95e048a4d166fc7a79f959708fa32e6490f2e45c5d5602dbfd58a03f66ebc0399a770148aab95b5c40bf6c0582f0fbed214ae1bca69a39ea7804d0f6b869ccf26e50d13689f91b6967d822fc12931100292ed53446879b76c8fcbda924ad804ad50e9f79b070da932e565e468806eb3bf73ad2e94a7b90e095cc25714eb76b54f7c1d381ddc3f4af4f0b1a3bbfbb97d0dbffbc16f407fe8463418697f696d045cf56dbfb3b24eb817ffe390c9604ba24b64b79fbedfb231c4a1a9cee0b41102e388d1ffc455bf0a9aa5595336a3dba6af7cf56f3fa699586b287334f6e7192fc738d7268b674b247c6103a3dbab611bfa35e51d9f73925eb9aaeac6517b5873e27da6884926a8a75eee499de343337b460676df720852c70f41f2c4ae516a72b75df7c252826cc47184ea13d0d2616c0872d88b2419f596ffbfd77e4fa8582de964f71392af36cb0a8784139b170cb638c34f8b7904bc629ab3c501ba366e7219dee3b8a3dd1bc8fb9afdf362ddd613a6d63d8894c43326b7c2f19e98ec987bba39ad9d7b8f7f2b34e912695f4700c09e858ff251b13d58e98139e19b8871e283f82c253f955d41841e96747e1591c8a085ab6dfa127b22668464763ef867acd831303a0b6581581ff755c6c7f47f86e7cb9844ce0c9eb1fcd25c9d0b0aed73b9df3539aa9a4372f44b24152c849dc161593850c671fdcebcfa3163f67e8827080f6bfb2250393dc4d5998c444845582551d9875932e5805407a8ffb626d2b0946be5eaef91063cf2b5602263445da983cece744b098ce514702a4ff50ac807f25e13ec013b64497332c72d2ba5b3a1657d145e02b6433d2bbfa739ff5e6bf6044d5d9ca1e8cc5402305addfbfd1ca7813824b99e13facb9e85aee4621ed17fbb16eac8242a79f722ae9359cd989b6a80584577f71f1e16bb71e88deffc1627a59ba8f891e367d3d66bb0fb0adc987475615b608db95cc9c14ff938bf561a4f199a7d366507bbae07dc78dcf6adbc1720856fd4d1b4738aa4e25e6ab23eb9cf0304f3b6210d5783a2be760888c477fb23a590947a1a8289a71cb4a38e9998fab6cf18ec03152a15be909afad43220c38bcfaf2acae491fdef6ea48a30654b38d0f741addd184d8025ad5aefa391dd822d89cb158188f9715575ea67197c7414d26ae549db863e0956181405fb6616b24de77bb35fa39a2df46df918a87419a61f1bf56d84bb6da22b655d9a8d22d9a1fc8b1ccf94f4bfcb95f4f4f92f567fc3f578fa773c0ad87c5088998fc6d38ae9f283921ee219b179b70a1cd2f215c684df877bd8173dea28ae3f858394fca25efaf51711fd4e560297ab7d6b31694eb2536929ff3da9725864cf435c069569c1155713020aa82e6371096b01b98f196650ce12db5440efa863c74bbdb1b2ff485482f755676e663114dc9001910aa70bf34fcad039d75c06a84d8122b920624970523d02fe7e37809a1306c9f33beef904cbf9aa804c3ca1f545356c7ebffc32f4793c1fba7bca3a52724a65fa9105875162c375bfd50bfdbc898b06eba73dd57e0abbbbbbd944eb03878c0a74738d2ec1b9d2ae0398e15ef39dfa4d60fdcc4ef7e8935e906a3bb1a9c46513c15fe36e0dd2660c60ab31a270f627584d8d000392b3fd3580c8efecec8ad89e8a8eeb8d48167fa34a466334bc7e273888b5b72bf1e3e57e8e6a6b05e8557984d200e2b69c4881b8fab9925832e27979684e00cfea7812b803387510de13b3b57ae81514d7f01f473c84af5102045338aa44f9a9ce964609fa72679b2a5c553ba9c7daa4d3fd7b9938df323cacc5d79aee397f2c6d4ea0588986a11d4691864088d36f7bd3fd98a20aaa2c3f6d12e00d67af530f7e64a0cb5f03d6d18453afe7ab287eff37f82f6d2d11ff7ce8d88ac32a728c292cf2073d80326eb30a612d19908491f4a486f6cec0e5ff037b9e72504c954718ee60d49d829596d0cda8182aa2bc26ad3649967066ddfa616f04b408a59ed200f7d8f7f7955a2c87285b6d30d4b191d27e880dc8cbbec23604f080c3f4a1412964b3c9cf56e4746792b596dfbca25bd637e7416a39ec0c966b45eff6b7aba2df31b91816bdba85385d27dba8cfd8120648e4ff4eb2dba4c5a977937a88f5c207a87a0ef160fe0e565b1ee7554e60d9d9313a7e6d47d4ab05daafdffa284c16d599fb0f78d78ed1d9d81a3109042cebd285873dde020bdf05ec99fd9cd5e29474d2f70f934a391dad38c814999c8115a3dd814ff50c4eac4aa8c00151aaaa70d3823f4d96cb8343144978da1bddd17e7f68f7c23104ec3916f09b93e639f2ce1246d189e53cf87699168258758c2b9e4be4d80b64e9bf479c15f31496eaaeef1b16726940ec31185ce3a96aaea9ab163373bb4eb7cc9147e910a36258e812971fed3a33c9a210a9c5bd90fb054781d012e33761cd68383377f59cf2f7cd88e143cecb35e1d465ada66ad059a146ab19b0b1a7b578c1ef5cf63e74802925dfdbb4ba3"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f00000002c0)) 1.032170811s ago: executing program 1 (id=1482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bind$rds(r1, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x32) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_map={0x0, 0x114, 0x3, {{&(0x7f0000000800)=""/143}, &(0x7f00000001c0), 0x20}}], 0x5e}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 997.586899ms ago: executing program 5 (id=1483): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r1 = socket$inet(0x2, 0xa, 0xfffffffd) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000001fc0)=""/4110, &(0x7f0000000340)=0x100e) 907.982857ms ago: executing program 0 (id=1484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) syz_io_uring_setup(0x112, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ebff000000000000490000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100008c8ecea08d19305b5c20a0843bfd3c3d470c6e0863dde4d9c701281202dd12"], 0x3c}}, 0x0) 817.823707ms ago: executing program 1 (id=1485): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "00fa00"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="00008000"}) r3 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="800003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 742.286157ms ago: executing program 5 (id=1486): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x80204) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x5) 332.633578ms ago: executing program 4 (id=1487): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mount_setattr(r0, &(0x7f0000000580)='./file0/file0\x00', 0x8100, &(0x7f0000000440)={0x1000f2, 0x4, 0xc0000, {r0}}, 0x20) bind$inet6(r3, &(0x7f0000000740)={0xa, 0x4e26, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000300000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='\v\x00\x00\x00\a'], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000004850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000b00)={r7, 0x2, 0x0}, 0x47) sendto$packet(r1, &(0x7f00000000c0)="3f030e03f007120006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x40000}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r8, 0x58, &(0x7f0000000480)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e26, @local}, @in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x1}, @in6={0xa, 0x4e21, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}]}, &(0x7f0000000680)=0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@mcast2}, &(0x7f00000001c0)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r0) 139.652142ms ago: executing program 4 (id=1488): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) rt_sigaction(0x3f, &(0x7f0000000240)={&(0x7f0000000100)="3ef24f0f2d4302c4c1cdea51ffc4c1e8157245f30f1ac3c423c90af6aef3420faed741dc96a1000000ff34b4c4a17912b628000000c42129c43674", 0x1, 0x0, {[0x4]}}, 0x0, 0x0, 0x0) connect$can_bcm(r3, &(0x7f0000000080), 0x10) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 0s ago: executing program 5 (id=1489): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x5) kernel console output (not intermixed with test programs): id=8559 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc306d8cd29 code=0x7ffc0000 [ 247.569396][ T29] audit: type=1326 audit(1737918083.007:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc306d8cd29 code=0x7ffc0000 [ 247.653056][ T29] audit: type=1326 audit(1737918083.007:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc306d8cd29 code=0x7ffc0000 [ 247.722472][ T29] audit: type=1326 audit(1737918083.007:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc306d8cd29 code=0x7ffc0000 [ 247.755991][ T29] audit: type=1326 audit(1737918083.007:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc306d8cd29 code=0x7ffc0000 [ 247.815005][ T29] audit: type=1326 audit(1737918083.007:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc306d8cd29 code=0x7ffc0000 [ 247.897135][ T29] audit: type=1326 audit(1737918083.007:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc306d8cd29 code=0x7ffc0000 [ 247.938022][ T29] audit: type=1326 audit(1737918083.007:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc306d8cd29 code=0x7ffc0000 [ 247.964719][ T29] audit: type=1326 audit(1737918083.007:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc306d8cd29 code=0x7ffc0000 [ 247.992917][ T29] audit: type=1326 audit(1737918083.007:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc306d8cd29 code=0x7ffc0000 [ 248.371742][ T79] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 249.348309][ T79] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.359862][ T79] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.419399][ T79] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 249.484634][ T79] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.512403][ T79] usb 3-1: config 0 descriptor?? [ 249.520294][ T5895] usbhid 5-1:0.0: can't add hid device: -71 [ 249.526355][ T5895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 249.565754][ T5895] usb 5-1: USB disconnect, device number 17 [ 250.367150][ T79] cougar 0003:060B:700A.000E: hidraw0: USB HID vff.fc Device [HID 060b:700a] on usb-dummy_hcd.2-1/input0 [ 250.654097][ T79] usb 3-1: USB disconnect, device number 17 [ 252.727606][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 252.993330][ T8623] kernel profiling enabled (shift: 9) [ 254.331443][ T8642] FAULT_INJECTION: forcing a failure. [ 254.331443][ T8642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.360637][ T8642] CPU: 1 UID: 0 PID: 8642 Comm: syz.3.817 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 254.360665][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 254.360683][ T8642] Call Trace: [ 254.360688][ T8642] [ 254.360696][ T8642] dump_stack_lvl+0x16c/0x1f0 [ 254.360727][ T8642] should_fail_ex+0x497/0x5b0 [ 254.360753][ T8642] _copy_from_iter+0x2a1/0x1560 [ 254.360778][ T8642] ? trace_lock_acquire+0x14e/0x1f0 [ 254.360798][ T8642] ? __alloc_skb+0x1fe/0x380 [ 254.360826][ T8642] ? __pfx__copy_from_iter+0x10/0x10 [ 254.360847][ T8642] ? __virt_addr_valid+0x1a4/0x590 [ 254.360869][ T8642] ? __virt_addr_valid+0x5e/0x590 [ 254.360885][ T8642] ? __phys_addr_symbol+0x30/0x80 [ 254.360902][ T8642] ? __check_object_size+0x488/0x710 [ 254.360924][ T8642] netlink_sendmsg+0x813/0xd70 [ 254.360955][ T8642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.360989][ T8642] ____sys_sendmsg+0xaaf/0xc90 [ 254.361011][ T8642] ? copy_msghdr_from_user+0x10b/0x160 [ 254.361028][ T8642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.361060][ T8642] ___sys_sendmsg+0x135/0x1e0 [ 254.361078][ T8642] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.361104][ T8642] ? __pfx_lock_release+0x10/0x10 [ 254.361127][ T8642] ? trace_lock_acquire+0x14e/0x1f0 [ 254.361153][ T8642] ? __fget_files+0x206/0x3a0 [ 254.361185][ T8642] __sys_sendmsg+0x16e/0x220 [ 254.361201][ T8642] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.361233][ T8642] do_syscall_64+0xcd/0x250 [ 254.361260][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.361284][ T8642] RIP: 0033:0x7f6b29b8cd29 [ 254.361299][ T8642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.361315][ T8642] RSP: 002b:00007f6b2aab9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.361332][ T8642] RAX: ffffffffffffffda RBX: 00007f6b29da5fa0 RCX: 00007f6b29b8cd29 [ 254.361343][ T8642] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 254.361353][ T8642] RBP: 00007f6b2aab9090 R08: 0000000000000000 R09: 0000000000000000 [ 254.361362][ T8642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.361371][ T8642] R13: 0000000000000000 R14: 00007f6b29da5fa0 R15: 00007fff0ebcc1a8 [ 254.361393][ T8642] [ 255.731518][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.737959][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.132344][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 256.132384][ T29] audit: type=1400 audit(1737918092.197:843): avc: denied { read write } for pid=8659 comm="syz.3.822" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 256.167687][ T5865] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 256.193299][ T29] audit: type=1400 audit(1737918092.197:844): avc: denied { open } for pid=8659 comm="syz.3.822" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 256.495506][ T8666] FAULT_INJECTION: forcing a failure. [ 256.495506][ T8666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.499678][ T8664] 9pnet_fd: Insufficient options for proto=fd [ 256.509193][ T8666] CPU: 0 UID: 0 PID: 8666 Comm: syz.2.824 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 256.509222][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 256.509232][ T8666] Call Trace: [ 256.509238][ T8666] [ 256.509244][ T8666] dump_stack_lvl+0x16c/0x1f0 [ 256.509273][ T8666] should_fail_ex+0x497/0x5b0 [ 256.509296][ T8666] _copy_from_user+0x2e/0xd0 [ 256.509317][ T8666] clear_refs_write+0xeb/0xc10 [ 256.509336][ T8666] ? __lock_acquire+0x15a9/0x3c40 [ 256.509358][ T8666] ? __pfx___lock_acquire+0x10/0x10 [ 256.509379][ T8666] ? __pfx_clear_refs_write+0x10/0x10 [ 256.509406][ T8666] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 256.509432][ T8666] ? rcu_is_watching+0x12/0xc0 [ 256.509448][ T8666] ? trace_lock_acquire+0x14e/0x1f0 [ 256.509470][ T8666] ? __pfx_clear_refs_write+0x10/0x10 [ 256.509489][ T8666] vfs_writev+0x6da/0xdd0 [ 256.509508][ T8666] ? fdget_pos+0x267/0x390 [ 256.509534][ T8666] ? __pfx_vfs_writev+0x10/0x10 [ 256.509551][ T8666] ? __mutex_lock+0x1cc/0xb10 [ 256.509571][ T8666] ? find_held_lock+0x2d/0x110 [ 256.509589][ T8666] ? __pfx___mutex_lock+0x10/0x10 [ 256.509609][ T8666] ? trace_lock_acquire+0x14e/0x1f0 [ 256.509632][ T8666] ? __fget_files+0x206/0x3a0 [ 256.509658][ T8666] ? do_writev+0x133/0x340 [ 256.509675][ T8666] do_writev+0x133/0x340 [ 256.509693][ T8666] ? __pfx_do_writev+0x10/0x10 [ 256.509718][ T8666] do_syscall_64+0xcd/0x250 [ 256.509740][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.509760][ T8666] RIP: 0033:0x7f85caf8cd29 [ 256.509772][ T8666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.509786][ T8666] RSP: 002b:00007f85cbda2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 256.509801][ T8666] RAX: ffffffffffffffda RBX: 00007f85cb1a5fa0 RCX: 00007f85caf8cd29 [ 256.509811][ T8666] RDX: 0000000000000001 RSI: 00000000200002c0 RDI: 0000000000000005 [ 256.509819][ T8666] RBP: 00007f85cbda2090 R08: 0000000000000000 R09: 0000000000000000 [ 256.509828][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.509837][ T8666] R13: 0000000000000000 R14: 00007f85cb1a5fa0 R15: 00007ffcc4508858 [ 256.509857][ T8666] [ 256.735426][ T5865] usb 5-1: Using ep0 maxpacket: 8 [ 256.923660][ T5865] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.947165][ T5865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.598288][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 257.646662][ T5865] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 257.670423][ T5865] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.711806][ T5865] usb 5-1: string descriptor 0 read error: -71 [ 257.718078][ T5865] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.733474][ T8676] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 257.753081][ T29] audit: type=1400 audit(1737918093.817:845): avc: denied { ioctl } for pid=8678 comm="syz.1.828" path="socket:[21633]" dev="sockfs" ino=21633 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 257.774411][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.216876][ T29] audit: type=1400 audit(1737918093.967:846): avc: denied { getopt } for pid=8678 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 258.327454][ T8689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.830'. [ 258.949138][ T29] audit: type=1400 audit(1737918094.997:847): avc: denied { read } for pid=8685 comm="syz.4.831" path="socket:[20954]" dev="sockfs" ino=20954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 258.966384][ T5865] usb 5-1: can't set config #1, error -71 [ 258.992744][ T5865] usb 5-1: USB disconnect, device number 18 [ 259.077169][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.833'. [ 260.636134][ T8718] syz.3.840(8718): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 261.408792][ T5863] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 261.620459][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 261.694258][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 262.018836][ T5863] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.029610][ T5863] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 262.045994][ T5863] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.109329][ T5863] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.124582][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.163241][ T5863] usb 3-1: Product: syz [ 262.167498][ T5863] usb 3-1: Manufacturer: syz [ 262.180086][ T5863] usb 3-1: SerialNumber: syz [ 263.117190][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 263.290721][ T5863] cdc_ncm 3-1:1.0: skipping garbage [ 263.301310][ T5863] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 263.344272][ T5863] cdc_ncm 3-1:1.0: bind() failure [ 263.353184][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 263.364107][ T5863] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 263.373729][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 263.381148][ T5863] cdc_ncm 3-1:1.1: bind() failure [ 263.390998][ T5863] usb 3-1: USB disconnect, device number 18 [ 264.289867][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 264.308735][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 264.357420][ T29] audit: type=1400 audit(1737918100.417:848): avc: denied { mounton } for pid=8762 comm="syz.3.852" path="/proc/550/task" dev="proc" ino=21127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 264.423687][ T8779] tmpfs: Bad value for 'mpol' [ 264.451522][ T8764] ceph: No mds server is up or the cluster is laggy [ 264.714277][ T8789] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 264.761157][ T8789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.800680][ T8789] overlayfs: failed to clone upperpath [ 264.808286][ T29] audit: type=1400 audit(1737918100.867:849): avc: denied { read } for pid=8787 comm="syz.0.856" path="socket:[21179]" dev="sockfs" ino=21179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 264.940494][ T5865] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 265.091982][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.103378][ T5865] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 265.112733][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.126925][ T5865] usb 2-1: config 0 descriptor?? [ 265.217598][ T29] audit: type=1400 audit(1737918101.277:850): avc: denied { write } for pid=8802 comm="syz.3.861" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 265.243944][ T29] audit: type=1400 audit(1737918101.307:851): avc: denied { ioctl } for pid=8802 comm="syz.3.861" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 265.548879][ T5865] kye 0003:0458:5017.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 265.581172][ T5865] kye 0003:0458:5017.000F: ignoring exceeding usage max [ 265.696154][ T29] audit: type=1400 audit(1737918101.647:852): avc: denied { read } for pid=8807 comm="syz.2.864" laddr=127.0.0.1 lport=60594 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 265.732011][ T5865] kye 0003:0458:5017.000F: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.1-1/input0 [ 265.732049][ T5865] kye 0003:0458:5017.000F: tablet-enabling feature report not found [ 265.732063][ T5865] kye 0003:0458:5017.000F: tablet enabling failed [ 266.820548][ T5862] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 267.525687][ T5862] usb 5-1: not running at top speed; connect to a high speed hub [ 267.885432][ T5862] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 267.968238][ T5862] usb 5-1: config 95 has no interface number 0 [ 267.975745][ T5862] usb 5-1: config 95 interface 1 has no altsetting 0 [ 267.995183][ T5862] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 268.007080][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.019446][ T5862] usb 5-1: Product: syz [ 268.024065][ T5862] usb 5-1: Manufacturer: syz [ 268.028779][ T5862] usb 5-1: SerialNumber: syz [ 268.139459][ T29] audit: type=1400 audit(1737918104.197:853): avc: denied { getopt } for pid=8828 comm="syz.2.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 268.192815][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.867'. [ 268.287890][ T5862] usb 5-1: USB disconnect, device number 19 [ 268.311839][ T5806] udevd[5806]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 268.324524][ T5806] udevd[5806]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 268.338979][ T8835] netlink: 'syz.2.867': attribute type 8 has an invalid length. [ 268.533183][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.652876][ T5862] usb 2-1: USB disconnect, device number 21 [ 268.674335][ T8843] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 268.778870][ T8843] CIFS mount error: No usable UNC path provided in device string! [ 268.778870][ T8843] [ 269.650349][ C0] hrtimer: interrupt took 32760 ns [ 269.670960][ T8843] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 269.963856][ T29] audit: type=1400 audit(1737918106.027:854): avc: denied { ioctl } for pid=8853 comm="syz.3.875" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 270.130507][ T1201] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 270.875313][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.892925][ T29] audit: type=1400 audit(1737918106.937:855): avc: denied { write } for pid=8865 comm="syz.4.879" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 270.918781][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.929833][ T1201] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 270.946787][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.961064][ T1201] usb 3-1: config 0 descriptor?? [ 271.141432][ T5862] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 271.424622][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'. [ 271.515768][ T5862] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.531666][ T5862] usb 2-1: config 0 has no interface number 0 [ 271.537915][ T5862] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 271.670858][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.693548][ T5862] usb 2-1: config 0 descriptor?? [ 271.705130][ T29] audit: type=1326 audit(1737918107.767:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.3.883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b29b8cd29 code=0x0 [ 271.753842][ T1201] cougar 0003:060B:700A.0010: hidraw0: USB HID vff.fc Device [HID 060b:700a] on usb-dummy_hcd.2-1/input0 [ 272.087919][ T5862] usb 2-1: string descriptor 0 read error: -71 [ 272.151314][ T5862] usb 2-1: selecting invalid altsetting 1 [ 272.252967][ T5862] dvb_ttusb_budget: ttusb_init_controller: error [ 272.307824][ T5862] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 272.577762][ T5862] DVB: Unable to find symbol cx22700_attach() [ 272.594950][ T1201] usb 3-1: USB disconnect, device number 19 [ 272.697953][ T5862] DVB: Unable to find symbol tda10046_attach() [ 272.707116][ T5862] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 272.772697][ T5862] usb 2-1: USB disconnect, device number 22 [ 273.962229][ T8900] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 273.983064][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 274.053617][ T29] audit: type=1326 audit(1737918110.117:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.2.893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85caf8cd29 code=0x0 [ 274.076320][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.176537][ T8923] fuse: Bad value for 'group_id' [ 274.182027][ T8923] fuse: Bad value for 'group_id' [ 274.230930][ T970] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 274.257051][ T8928] fuse: Bad value for 'group_id' [ 274.265132][ T8928] fuse: Bad value for 'group_id' [ 274.285552][ T8914] Bluetooth: MGMT ver 1.23 [ 274.403452][ T29] audit: type=1400 audit(1737918110.447:858): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 274.680528][ T970] usb 4-1: Using ep0 maxpacket: 8 [ 274.688656][ T970] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 274.700826][ T970] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 274.713130][ T970] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.289087][ T970] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.302584][ T970] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.311896][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.451287][ T29] audit: type=1400 audit(1737918111.437:859): avc: denied { append } for pid=8939 comm="syz.1.902" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.456983][ T8943] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 275.481011][ T8943] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.488588][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.530266][ T970] usb 4-1: GET_CAPABILITIES returned 0 [ 275.531847][ T8942] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 275.536030][ T970] usbtmc 4-1:16.0: can't read capabilities [ 275.542440][ T8942] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 275.690772][ T8948] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 275.697306][ T8948] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 275.706243][ T8948] vhci_hcd vhci_hcd.0: Device attached [ 275.710696][ T8942] vhci_hcd vhci_hcd.0: Device attached [ 276.271794][ T5862] usb 35-2: new low-speed USB device number 2 using vhci_hcd [ 276.310283][ T8949] vhci_hcd: connection closed [ 276.313157][ T8945] vhci_hcd: connection reset by peer [ 276.313759][ T8944] vhci_hcd: connection closed [ 276.324701][ T5905] vhci_hcd: stop threads [ 276.339703][ T8943] vhci_hcd vhci_hcd.0: Device attached [ 276.472415][ T5905] vhci_hcd: release socket [ 276.488432][ T5905] vhci_hcd: disconnect device [ 276.499648][ T5905] vhci_hcd: stop threads [ 276.510105][ T5905] vhci_hcd: release socket [ 276.526703][ T5863] usb 4-1: USB disconnect, device number 23 [ 276.544164][ T5905] vhci_hcd: disconnect device [ 276.561646][ T5905] vhci_hcd: stop threads [ 276.571495][ T5905] vhci_hcd: release socket [ 276.576219][ T5905] vhci_hcd: disconnect device [ 277.426504][ T8976] 9p: Unknown access argument 18446744073709551615: -34 [ 278.655638][ T8992] binder: BINDER_SET_CONTEXT_MGR already set [ 278.689762][ T8992] binder: 8990:8992 ioctl 4018620d 20000040 returned -16 [ 279.379545][ T8998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.918'. [ 279.450388][ T29] audit: type=1400 audit(1737918115.507:860): avc: denied { write } for pid=8990 comm="syz.4.915" name="net" dev="proc" ino=22450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 279.500382][ T29] audit: type=1400 audit(1737918115.507:861): avc: denied { add_name } for pid=8990 comm="syz.4.915" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 279.587473][ T29] audit: type=1400 audit(1737918115.507:862): avc: denied { create } for pid=8990 comm="syz.4.915" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 279.611878][ T29] audit: type=1400 audit(1737918115.507:863): avc: denied { associate } for pid=8990 comm="syz.4.915" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 280.279737][ T29] audit: type=1400 audit(1737918115.537:864): avc: denied { accept } for pid=8997 comm="syz.0.918" lport=35869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 280.323425][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 280.513970][ T29] audit: type=1400 audit(1737918115.587:865): avc: denied { write } for pid=8997 comm="syz.0.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 280.542856][ T29] audit: type=1400 audit(1737918115.967:866): avc: denied { listen } for pid=9006 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 280.762522][ T29] audit: type=1400 audit(1737918116.807:867): avc: denied { module_request } for pid=9013 comm="syz.0.921" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 280.975411][ T29] audit: type=1400 audit(1737918116.827:868): avc: denied { nlmsg_write } for pid=9013 comm="syz.0.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 281.710529][ T5862] vhci_hcd: vhci_device speed not set [ 281.750223][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'. [ 281.764990][ T9029] vlan0: entered promiscuous mode [ 281.779522][ T9029] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 281.833886][ T9034] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 281.851340][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.861284][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.006089][ T9029] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 282.042841][ T9029] netlink: 134712 bytes leftover after parsing attributes in process `syz.4.926'. [ 282.380649][ T79] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 283.612434][ T79] usb 2-1: Using ep0 maxpacket: 32 [ 283.651160][ T79] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 92, changing to 10 [ 283.676064][ T79] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.696941][ T79] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 283.718045][ T79] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 283.887798][ T79] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.910577][ T79] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.872146][ T79] usb 2-1: Product: 槑椔뵹黐ʫ唛ᖫ䝡ﲅᇬ뢟ⓌFꚲ쏻魹ၤꦹⴛ攥뻱鋈鑙뻟㳚程餜쎉봐⹻笴廁ꏚ磉瘗긗顠쓜쪢ⳳ폋翧伒재궲Ϟ퐱㕋䣚䮸熰ꐀ饋⓲Ӟꉇ㨎鐐袣膲젢阍 [ 284.911563][ T79] usb 2-1: Manufacturer: 㵩煢ꏶ㆖딾笤ಚ殡饅ﴪ欏ࢥ朢읞꫊랓↭娃蠁껣ᵯ㗒ꝯ寽艹ೃ态栅퓙솩윿ㄆㅮ꟤蘛㪧ꨍĦ탣馇絃虺엽尢鼺ရ밬ᚒᵺ✏洃뛲޸ଲ誧뺠開ಟᙕ੔렦垌웯闓ℌ軯郠ꭧ쫰댳䖒뗝逎ꈊ鶔汆诒췺 [ 285.821778][ T970] usb usb36-port1: attempt power cycle [ 285.895351][ T79] usb 2-1: SerialNumber: 剬ꢎ꜈谰녨鰼퀻逦꼷싻볁찏ℷ驼岡ൕ옎톀遖㩐 [ 286.253846][ T29] audit: type=1400 audit(1737918122.317:869): avc: denied { ioctl } for pid=9068 comm="syz.3.935" path="socket:[23058]" dev="sockfs" ino=23058 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 286.586707][ T29] audit: type=1400 audit(1737918122.647:870): avc: denied { read write } for pid=9080 comm="syz.4.938" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 286.721438][ T970] usb usb36-port1: unable to enumerate USB device [ 286.879716][ T29] audit: type=1400 audit(1737918122.647:871): avc: denied { open } for pid=9080 comm="syz.4.938" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 288.297173][ T29] audit: type=1400 audit(1737918124.357:872): avc: denied { accept } for pid=9078 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 288.319550][ T9091] No control pipe specified [ 288.352715][ T79] usb 2-1: can't set config #1, error -71 [ 288.374279][ T79] usb 2-1: USB disconnect, device number 23 [ 289.066492][ T9080] delete_channel: no stack [ 289.474963][ T29] audit: type=1400 audit(1737918125.537:873): avc: denied { getopt } for pid=9107 comm="syz.0.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 289.652742][ T9115] FAULT_INJECTION: forcing a failure. [ 289.652742][ T9115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.656458][ T9116] devpts: called with bogus options [ 289.682348][ T9115] CPU: 1 UID: 0 PID: 9115 Comm: syz.2.948 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 289.682382][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 289.682392][ T9115] Call Trace: [ 289.682398][ T9115] [ 289.682405][ T9115] dump_stack_lvl+0x16c/0x1f0 [ 289.682439][ T9115] should_fail_ex+0x497/0x5b0 [ 289.682464][ T9115] _copy_from_user+0x2e/0xd0 [ 289.682494][ T9115] get_user_ifreq+0xf1/0x250 [ 289.682517][ T9115] sock_do_ioctl+0x16c/0x280 [ 289.682539][ T9115] ? __pfx_sock_do_ioctl+0x10/0x10 [ 289.682564][ T9115] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 289.682588][ T9115] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 289.682611][ T9115] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 289.682637][ T9115] sock_ioctl+0x228/0x6c0 [ 289.682660][ T9115] ? __pfx_sock_ioctl+0x10/0x10 [ 289.682688][ T9115] ? selinux_file_ioctl+0x180/0x270 [ 289.682707][ T9115] ? selinux_file_ioctl+0xb4/0x270 [ 289.682729][ T9115] ? __pfx_sock_ioctl+0x10/0x10 [ 289.682752][ T9115] __x64_sys_ioctl+0x190/0x200 [ 289.682776][ T9115] do_syscall_64+0xcd/0x250 [ 289.682805][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.682829][ T9115] RIP: 0033:0x7f85caf8cd29 [ 289.682844][ T9115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.682861][ T9115] RSP: 002b:00007f85cbda2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.682879][ T9115] RAX: ffffffffffffffda RBX: 00007f85cb1a5fa0 RCX: 00007f85caf8cd29 [ 289.682890][ T9115] RDX: 0000000020000180 RSI: 00000000000089b0 RDI: 0000000000000003 [ 289.682900][ T9115] RBP: 00007f85cbda2090 R08: 0000000000000000 R09: 0000000000000000 [ 289.682910][ T9115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.682920][ T9115] R13: 0000000000000000 R14: 00007f85cb1a5fa0 R15: 00007ffcc4508858 [ 289.682942][ T9115] [ 289.879770][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.268265][ T9150] trusted_key: syz.2.956 sent an empty control message without MSG_MORE. [ 292.781044][ T79] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 292.951250][ T79] usb 5-1: Using ep0 maxpacket: 8 [ 292.974379][ T79] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.987553][ T79] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.005047][ T79] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 293.014882][ T79] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.039229][ T79] usb 5-1: Product: syz [ 293.043941][ T79] usb 5-1: Manufacturer: syz [ 293.049688][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 293.053802][ T79] usb 5-1: SerialNumber: syz [ 293.075031][ T79] usb 5-1: config 0 descriptor?? [ 293.082974][ T79] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 293.094244][ T79] imon 5-1:0.0: unable to initialize intf0, err -19 [ 293.101664][ T79] imon:imon_probe: failed to initialize context! [ 293.108257][ T79] imon 5-1:0.0: unable to register, err -19 [ 293.117277][ T29] audit: type=1400 audit(1737918129.177:874): avc: denied { append } for pid=9166 comm="syz.3.965" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 293.210914][ T5863] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 294.015020][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 294.322951][ T5863] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 294.342172][ T5863] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 294.370488][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.388437][ T5863] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 294.415912][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.490490][ T5863] usb 3-1: config 1 has no interface number 0 [ 294.583304][ T5863] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.794568][ T5863] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 294.865406][ T5863] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 294.910227][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.938436][ T5863] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 295.141141][ T5863] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 296.218380][ T5862] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 296.258891][ T970] usb 5-1: USB disconnect, device number 20 [ 296.490556][ T5863] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 296.547818][ T5862] usb 3-1: USB disconnect, device number 20 [ 296.555320][ T5862] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 297.190466][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 297.262372][ T5863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 297.303173][ T5863] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.477016][ T5863] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 297.489865][ T5863] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.495649][ T29] audit: type=1326 audit(1737918133.557:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.1.980" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad2db8cd29 code=0x0 [ 297.530453][ T5863] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.549459][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.645952][ T5863] usb 4-1: Product: syz [ 298.110601][ T5863] usb 4-1: Manufacturer: syz [ 298.234853][ T9225] bridge0: port 3(erspan0) entered blocking state [ 298.242225][ T9225] bridge0: port 3(erspan0) entered disabled state [ 298.249941][ T9225] erspan0: entered allmulticast mode [ 298.282080][ T9225] erspan0: entered promiscuous mode [ 298.289701][ T5863] usb 4-1: SerialNumber: syz [ 298.656386][ T9230] netlink: 192 bytes leftover after parsing attributes in process `syz.0.978'. [ 298.673770][ T5863] cdc_ncm 4-1:1.0: skipping garbage [ 298.679117][ T5863] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 298.690387][ T5863] cdc_ncm 4-1:1.0: bind() failure [ 298.699010][ T5863] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 298.710435][ T5863] cdc_ncm 4-1:1.1: bind() failure [ 298.726081][ T5863] usb 4-1: USB disconnect, device number 24 [ 299.951420][ T5862] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 300.122208][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 300.135875][ T5862] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 300.148467][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.168368][ T5862] usb 5-1: Product: syz [ 300.758065][ T5862] usb 5-1: Manufacturer: syz [ 300.762821][ T5862] usb 5-1: SerialNumber: syz [ 300.770129][ T5862] usb 5-1: config 0 descriptor?? [ 300.891139][ T9260] 9pnet_fd: Insufficient options for proto=fd [ 300.926587][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.936479][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.945987][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.958890][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.966854][ T5827] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 300.985614][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.009289][ T29] audit: type=1400 audit(1737918137.067:876): avc: denied { mounton } for pid=9261 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 301.529752][ T9273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.998'. [ 301.601775][ T9261] chnl_net:caif_netlink_parms(): no params data found [ 301.646877][ T29] audit: type=1400 audit(1737918137.707:877): avc: denied { relabelfrom } for pid=9274 comm="syz.3.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 301.680171][ T29] audit: type=1400 audit(1737918137.707:878): avc: denied { relabelto } for pid=9274 comm="syz.3.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 301.823675][ T5862] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 301.861400][ T9261] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.869795][ T5862] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 301.879650][ T9261] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.887436][ T5862] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 301.899352][ T9261] bridge_slave_0: entered allmulticast mode [ 301.911928][ T9261] bridge_slave_0: entered promiscuous mode [ 302.065512][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.176785][ T9261] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.260509][ T9261] bridge_slave_1: entered allmulticast mode [ 302.339711][ T9261] bridge_slave_1: entered promiscuous mode [ 302.378833][ T9261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.399741][ T9261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.456610][ T9261] team0: Port device team_slave_0 added [ 302.469132][ T9261] team0: Port device team_slave_1 added [ 302.529004][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 302.605375][ T9261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.617725][ T9261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.737637][ T9261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.011290][ T9261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.018801][ T9261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.070472][ T5819] Bluetooth: hci3: command tx timeout [ 303.090662][ T9261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.853788][ T9261] hsr_slave_0: entered promiscuous mode [ 303.878844][ T9261] hsr_slave_1: entered promiscuous mode [ 303.911948][ T9261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.921467][ T29] audit: type=1400 audit(1737918139.967:879): avc: denied { ioctl } for pid=9309 comm="syz.0.1008" path="socket:[23546]" dev="sockfs" ino=23546 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 304.073548][ T9261] Cannot create hsr debugfs directory [ 304.665253][ T9321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.801908][ T9321] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 305.075081][ T5863] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 305.199231][ T5827] Bluetooth: hci3: command tx timeout [ 305.218402][ T9331] input: syz0 as /devices/virtual/input/input15 [ 305.350526][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 305.365340][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 305.394689][ T5863] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 305.430825][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.459007][ T5863] usb 4-1: config 0 descriptor?? [ 305.508863][ T9261] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 305.555015][ T9261] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 305.662482][ T9261] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 305.794709][ T9261] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.890588][ T5863] holtek_mouse 0003:04D9:A072.0011: collection stack underflow [ 306.232417][ T5863] holtek_mouse 0003:04D9:A072.0011: item 0 4 0 12 parsing failed [ 306.836651][ T5917] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 307.047105][ T5863] holtek_mouse 0003:04D9:A072.0011: hid parse failed: -22 [ 307.054419][ T5863] holtek_mouse 0003:04D9:A072.0011: probe with driver holtek_mouse failed with error -22 [ 307.230733][ T5827] Bluetooth: hci3: command 0x040f tx timeout [ 307.303086][ T9261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.571665][ T5917] usb 2-1: not running at top speed; connect to a high speed hub [ 307.581593][ T5917] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 307.590009][ T5917] usb 2-1: config 95 has no interface number 0 [ 307.597375][ T5917] usb 2-1: config 95 interface 1 has no altsetting 0 [ 307.607834][ T5917] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 307.617686][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.624893][ T9261] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.626381][ T5917] usb 2-1: Product: syz [ 307.643222][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.650397][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.802270][ T970] usb 4-1: USB disconnect, device number 25 [ 307.810382][ T5917] usb 2-1: Manufacturer: syz [ 307.819311][ T5917] usb 2-1: SerialNumber: syz [ 307.864116][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.871261][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.900264][ T9261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.914076][ T9261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.059761][ T9261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.160444][ T970] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 308.310884][ T970] usb 4-1: Using ep0 maxpacket: 16 [ 308.401052][ T970] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.422720][ T970] usb 4-1: config 0 interface 0 has no altsetting 0 [ 308.429401][ T970] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 308.463188][ T5917] usb 2-1: USB disconnect, device number 24 [ 308.493630][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.547845][ T970] usb 4-1: config 0 descriptor?? [ 308.630036][ T9261] veth0_vlan: entered promiscuous mode [ 308.646188][ T9261] veth1_vlan: entered promiscuous mode [ 308.695268][ T9261] veth0_macvtap: entered promiscuous mode [ 308.706800][ T9261] veth1_macvtap: entered promiscuous mode [ 308.736016][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.751434][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.752579][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.762091][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.799285][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.818071][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.929608][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.940190][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.950575][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.961525][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.993587][ T970] usbhid 4-1:0.0: can't add hid device: -71 [ 308.999954][ T970] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 309.360463][ T5819] Bluetooth: hci3: command 0x040f tx timeout [ 309.527219][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.560244][ T970] usb 4-1: USB disconnect, device number 26 [ 309.564705][ T9261] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.597540][ T9261] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.616470][ T9261] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.625967][ T9261] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.193757][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.215477][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.443136][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.454948][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.451580][ T5819] Bluetooth: hci3: command 0x040f tx timeout [ 312.155186][ T29] audit: type=1400 audit(1737918148.217:880): avc: denied { mounton } for pid=9261 comm="syz-executor" path="/root/syzkaller.kXIo2k/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 312.218676][ T29] audit: type=1400 audit(1737918148.267:881): avc: denied { mount } for pid=9261 comm="syz-executor" name="/" dev="gadgetfs" ino=7303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 312.292347][ T9412] FAULT_INJECTION: forcing a failure. [ 312.292347][ T9412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.306158][ T9412] CPU: 1 UID: 0 PID: 9412 Comm: syz.5.991 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 312.306181][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 312.306192][ T9412] Call Trace: [ 312.306197][ T9412] [ 312.306203][ T9412] dump_stack_lvl+0x16c/0x1f0 [ 312.306243][ T9412] should_fail_ex+0x497/0x5b0 [ 312.306266][ T9412] _copy_from_user+0x2e/0xd0 [ 312.306291][ T9412] kstrtouint_from_user+0xd7/0x1c0 [ 312.306310][ T9412] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 312.306335][ T9412] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 312.306362][ T9412] proc_fail_nth_write+0x84/0x250 [ 312.306385][ T9412] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 312.306404][ T9412] ? ksys_write+0x12b/0x250 [ 312.306433][ T9412] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 312.306452][ T9412] vfs_write+0x24c/0x1150 [ 312.306475][ T9412] ? __fget_files+0x1fc/0x3a0 [ 312.306500][ T9412] ? __pfx___mutex_lock+0x10/0x10 [ 312.306524][ T9412] ? __pfx_vfs_write+0x10/0x10 [ 312.306553][ T9412] ? __fget_files+0x206/0x3a0 [ 312.306583][ T9412] ksys_write+0x12b/0x250 [ 312.306604][ T9412] ? __pfx_ksys_write+0x10/0x10 [ 312.306634][ T9412] do_syscall_64+0xcd/0x250 [ 312.306660][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.306683][ T9412] RIP: 0033:0x7f7aa098b7df [ 312.306699][ T9412] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 312.306715][ T9412] RSP: 002b:00007f7aa176e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 312.306731][ T9412] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7aa098b7df [ 312.306741][ T9412] RDX: 0000000000000001 RSI: 00007f7aa176e0a0 RDI: 0000000000000005 [ 312.306750][ T9412] RBP: 00007f7aa176e090 R08: 0000000000000000 R09: 0000000000000000 [ 312.306759][ T9412] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 312.306769][ T9412] R13: 0000000000000000 R14: 00007f7aa0ba5fa0 R15: 00007fffd7a8a7c8 [ 312.306791][ T9412] [ 312.650594][ T5917] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 312.869139][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 312.876286][ T5917] usb 2-1: config 64 has an invalid interface number: 110 but max is 0 [ 312.885018][ T5917] usb 2-1: config 64 has no interface number 0 [ 312.891331][ T5917] usb 2-1: config 64 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.902423][ T5917] usb 2-1: config 64 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 312.914418][ T5917] usb 2-1: config 64 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 312.925958][ T5917] usb 2-1: config 64 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 313.525379][ T5917] usb 2-1: config 64 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 313.601503][ T5917] usb 2-1: config 64 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 313.636579][ T5917] usb 2-1: config 64 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 313.677798][ T5917] usb 2-1: string descriptor 0 read error: -71 [ 313.694351][ T5917] usb 2-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 313.740448][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.749426][ T9432] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1037'. [ 313.771452][ T5917] usb 2-1: can't set config #64, error -71 [ 313.813503][ T5917] usb 2-1: USB disconnect, device number 25 [ 313.867278][ T9433] dccp_close: ABORT with 52 bytes unread [ 314.140588][ T5917] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 314.371056][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 314.472688][ T5917] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 314.488522][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.496658][ T5917] usb 2-1: Product: syz [ 314.501131][ T5917] usb 2-1: Manufacturer: syz [ 314.505833][ T5917] usb 2-1: SerialNumber: syz [ 314.512942][ T5917] usb 2-1: config 0 descriptor?? [ 314.519386][ T5917] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 314.570496][ T1201] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 314.700453][ T1201] usb 6-1: device descriptor read/64, error -71 [ 314.720454][ T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 314.729488][ T5917] ssu100 2-1:0.0: probe with driver ssu100 failed with error -5 [ 314.880843][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 314.888505][ T8] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 314.897690][ T8] usb 4-1: config 0 has no interface number 0 [ 314.904095][ T8] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 314.915863][ T8] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 314.931650][ T8] usb 4-1: config 0 interface 48 has no altsetting 0 [ 314.955001][ T1201] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 314.970425][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 315.005562][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.021465][ T8] usb 4-1: Product: syz [ 315.025873][ T8] usb 4-1: Manufacturer: syz [ 315.034209][ T8] usb 4-1: SerialNumber: syz [ 315.140978][ T1201] usb 6-1: device descriptor read/64, error -71 [ 315.148043][ T8] usb 4-1: config 0 descriptor?? [ 315.272879][ T1201] usb usb6-port1: attempt power cycle [ 315.368505][ T5866] usb 2-1: USB disconnect, device number 26 [ 315.428338][ T8] usb 4-1: USB disconnect, device number 27 [ 315.545991][ T9453] fuse: Bad value for 'fd' [ 315.692612][ T1201] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 315.890382][ T1201] usb 6-1: device descriptor read/8, error -71 [ 316.003274][ T9461] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1046'. [ 316.901899][ T1201] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 317.075904][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.088319][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.536551][ T1201] usb 6-1: device descriptor read/8, error -71 [ 317.660647][ T1201] usb usb6-port1: unable to enumerate USB device [ 317.709571][ T9479] netlink: 'syz.5.1050': attribute type 1 has an invalid length. [ 318.311938][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 318.364081][ T29] audit: type=1400 audit(1737918154.417:882): avc: denied { create } for pid=9476 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 318.495382][ T9491] FAULT_INJECTION: forcing a failure. [ 318.495382][ T9491] name failslab, interval 1, probability 0, space 0, times 0 [ 318.550459][ T9491] CPU: 1 UID: 0 PID: 9491 Comm: syz.5.1055 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 318.550488][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 318.550497][ T9491] Call Trace: [ 318.550503][ T9491] [ 318.550510][ T9491] dump_stack_lvl+0x16c/0x1f0 [ 318.550543][ T9491] should_fail_ex+0x497/0x5b0 [ 318.550570][ T9491] should_failslab+0xc2/0x120 [ 318.550589][ T9491] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 318.550610][ T9491] ? sidtab_sid2str_get+0x17a/0x680 [ 318.550636][ T9491] kmemdup_noprof+0x29/0x60 [ 318.550659][ T9491] sidtab_sid2str_get+0x17a/0x680 [ 318.550682][ T9491] sidtab_entry_to_string+0x33/0x110 [ 318.550704][ T9491] security_sid_to_context_core+0x35c/0x640 [ 318.550727][ T9491] avc_audit_post_callback+0x10b/0x8c0 [ 318.550751][ T9491] ? audit_log_format+0xe9/0x130 [ 318.550775][ T9491] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 318.550796][ T9491] ? skb_put+0x138/0x1b0 [ 318.550820][ T9491] ? audit_log_n_string+0x253/0x540 [ 318.550846][ T9491] ? audit_log_n_untrustedstring+0xf2/0x100 [ 318.550872][ T9491] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 318.550893][ T9491] common_lsm_audit+0x33e/0x2290 [ 318.550914][ T9491] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 318.550936][ T9491] ? __pfx_common_lsm_audit+0x10/0x10 [ 318.550955][ T9491] ? find_held_lock+0x2d/0x110 [ 318.550978][ T9491] ? avc_denied+0x434/0x780 [ 318.550998][ T9491] ? __pfx_lock_release+0x10/0x10 [ 318.551020][ T9491] ? __pfx_avc_node_free+0x10/0x10 [ 318.551039][ T9491] ? rcu_is_watching+0x12/0xc0 [ 318.551064][ T9491] ? slow_avc_audit+0x17d/0x210 [ 318.551084][ T9491] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 318.551107][ T9491] slow_avc_audit+0x17d/0x210 [ 318.551130][ T9491] ? __pfx_slow_avc_audit+0x10/0x10 [ 318.551168][ T9491] ? avc_has_perm_noaudit+0x2fa/0x3a0 [ 318.551195][ T9491] avc_has_perm+0x18d/0x1c0 [ 318.551220][ T9491] ? __pfx_avc_has_perm+0x10/0x10 [ 318.551245][ T9491] ? hlock_class+0x4e/0x130 [ 318.551261][ T9491] ? __lock_acquire+0xcc5/0x3c40 [ 318.551288][ T9491] sock_has_perm+0x253/0x2f0 [ 318.551315][ T9491] ? __pfx_sock_has_perm+0x10/0x10 [ 318.551337][ T9491] ? ksys_write+0x12b/0x250 [ 318.551362][ T9491] ? __pfx___lock_acquire+0x10/0x10 [ 318.551395][ T9491] ? find_held_lock+0x2d/0x110 [ 318.551414][ T9491] security_socket_getsockopt+0x211/0x240 [ 318.551443][ T9491] do_sock_getsockopt+0xf5/0x800 [ 318.551463][ T9491] ? trace_lock_acquire+0x14e/0x1f0 [ 318.551483][ T9491] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 318.551506][ T9491] ? lock_acquire+0x2f/0xb0 [ 318.551526][ T9491] ? __fget_files+0x40/0x3a0 [ 318.551555][ T9491] ? __fget_files+0x206/0x3a0 [ 318.551584][ T9491] __sys_getsockopt+0x12f/0x260 [ 318.551616][ T9491] __x64_sys_getsockopt+0xbd/0x160 [ 318.551641][ T9491] ? do_syscall_64+0x91/0x250 [ 318.551665][ T9491] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.551688][ T9491] do_syscall_64+0xcd/0x250 [ 318.551713][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.551737][ T9491] RIP: 0033:0x7f7aa098cd29 [ 318.551750][ T9491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.551766][ T9491] RSP: 002b:00007f7aa176e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 318.551782][ T9491] RAX: ffffffffffffffda RBX: 00007f7aa0ba5fa0 RCX: 00007f7aa098cd29 [ 318.551794][ T9491] RDX: 0000000000000008 RSI: 0000000000000065 RDI: 0000000000000003 [ 318.551803][ T9491] RBP: 00007f7aa176e090 R08: 0000000020001008 R09: 0000000000000000 [ 318.551813][ T9491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.551823][ T9491] R13: 0000000000000000 R14: 00007f7aa0ba5fa0 R15: 00007fffd7a8a7c8 [ 318.551847][ T9491] [ 318.660642][ T29] audit: type=1400 audit(1737918154.627:884): avc: denied { read } for pid=9494 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.975660][ T29] audit: type=1400 audit(1737918154.627:885): avc: denied { open } for pid=9494 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.030579][ T5863] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 319.072926][ T29] audit: type=1400 audit(1737918154.627:886): avc: denied { getattr } for pid=9494 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.121644][ T9509] overlayfs: overlapping lowerdir path [ 319.167684][ T29] audit: type=1400 audit(1737918154.557:883): avc: denied { getopt } for pid=9490 comm="syz.5.1055" ssid=146 tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 319.190560][ T5863] usb 4-1: device descriptor read/64, error -71 [ 319.230448][ T29] audit: type=1400 audit(1737918154.927:887): avc: denied { write } for pid=9493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.302395][ T29] audit: type=1400 audit(1737918154.927:888): avc: denied { add_name } for pid=9493 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.440542][ T5863] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 319.478193][ T29] audit: type=1400 audit(1737918154.927:889): avc: denied { create } for pid=9493 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 319.501347][ T29] audit: type=1400 audit(1737918154.927:890): avc: denied { write } for pid=9493 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=5482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 319.535183][ T5819] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 319.551830][ T29] audit: type=1400 audit(1737918154.927:891): avc: denied { append } for pid=9493 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=5482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 319.590525][ T5863] usb 4-1: device descriptor read/64, error -71 [ 319.800909][ T5863] usb usb4-port1: attempt power cycle [ 321.212601][ T5863] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 321.243140][ T5863] usb 4-1: device descriptor read/8, error -71 [ 324.205796][ T9569] overlayfs: missing 'workdir' [ 324.221218][ T5819] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 324.230064][ T5819] Bluetooth: hci3: Injecting HCI hardware error event [ 324.249346][ T5819] Bluetooth: hci3: hardware error 0x00 [ 325.937991][ T9571] XFS (nullb0): Invalid superblock magic number [ 326.350821][ T5819] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 326.410784][ T79] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 326.732268][ T9598] FAULT_INJECTION: forcing a failure. [ 326.732268][ T9598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.767679][ T9598] CPU: 1 UID: 0 PID: 9598 Comm: syz.4.1079 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 326.767709][ T9598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 326.767718][ T9598] Call Trace: [ 326.767724][ T9598] [ 326.767730][ T9598] dump_stack_lvl+0x16c/0x1f0 [ 326.767759][ T9598] should_fail_ex+0x497/0x5b0 [ 326.767782][ T9598] _copy_to_user+0x32/0xd0 [ 326.767807][ T9598] simple_read_from_buffer+0xd0/0x160 [ 326.767832][ T9598] proc_fail_nth_read+0x198/0x270 [ 326.767853][ T9598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.767873][ T9598] ? rw_verify_area+0xcf/0x680 [ 326.767893][ T9598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.767911][ T9598] vfs_read+0x1df/0xbf0 [ 326.767933][ T9598] ? __fget_files+0x1fc/0x3a0 [ 326.767956][ T9598] ? __pfx___mutex_lock+0x10/0x10 [ 326.767979][ T9598] ? __pfx_vfs_read+0x10/0x10 [ 326.768006][ T9598] ? __fget_files+0x206/0x3a0 [ 326.768032][ T9598] ksys_read+0x12b/0x250 [ 326.768052][ T9598] ? __pfx_ksys_read+0x10/0x10 [ 326.768079][ T9598] do_syscall_64+0xcd/0x250 [ 326.768104][ T9598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.768127][ T9598] RIP: 0033:0x7f9d9438b73c [ 326.768142][ T9598] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 326.768158][ T9598] RSP: 002b:00007f9d9526f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.768176][ T9598] RAX: ffffffffffffffda RBX: 00007f9d945a5fa0 RCX: 00007f9d9438b73c [ 326.768187][ T9598] RDX: 000000000000000f RSI: 00007f9d9526f0a0 RDI: 0000000000000006 [ 326.768205][ T9598] RBP: 00007f9d9526f090 R08: 0000000000000000 R09: 0000000000000000 [ 326.768215][ T9598] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000001 [ 326.768224][ T9598] R13: 0000000000000000 R14: 00007f9d945a5fa0 R15: 00007ffc2feec688 [ 326.768245][ T9598] [ 327.034639][ T79] usb 4-1: Using ep0 maxpacket: 32 [ 327.052958][ T79] usb 4-1: config 82 interface 0 has no altsetting 0 [ 327.066196][ T79] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=be.3a [ 327.075596][ T79] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.084217][ T79] usb 4-1: Product: syz [ 327.088643][ T79] usb 4-1: Manufacturer: syz [ 327.093325][ T79] usb 4-1: SerialNumber: syz [ 327.103900][ T79] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 327.115578][ T79] usb 4-1: no configuration chosen from 1 choice [ 327.425776][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 327.425798][ T29] audit: type=1400 audit(1737918163.487:898): avc: denied { read write } for pid=9599 comm="syz.1.1081" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.464130][ T29] audit: type=1400 audit(1737918163.487:899): avc: denied { open } for pid=9599 comm="syz.1.1081" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.489266][ T29] audit: type=1400 audit(1737918163.517:900): avc: denied { map } for pid=9599 comm="syz.1.1081" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.802605][ T29] audit: type=1400 audit(1737918163.857:901): avc: denied { create } for pid=9595 comm="syz.0.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 328.160788][ T29] audit: type=1400 audit(1737918163.857:902): avc: denied { write } for pid=9595 comm="syz.0.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 328.223954][ T5866] usb 4-1: USB disconnect, device number 32 [ 328.673051][ T9625] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 328.748309][ T9624] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1084'. [ 328.757529][ T9624] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1084'. [ 331.031528][ T9675] can: request_module (can-proto-3) failed. [ 331.244859][ T9675] xt_ecn: cannot match TCP bits for non-tcp packets [ 331.500442][ T79] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 331.671653][ T79] usb 6-1: Using ep0 maxpacket: 8 [ 331.689976][ T79] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 331.703749][ T79] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.714158][ T79] usb 6-1: Product: syz [ 331.720417][ T5917] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 331.732024][ T79] usb 6-1: Manufacturer: syz [ 331.748668][ T79] usb 6-1: SerialNumber: syz [ 331.800814][ T79] usb 6-1: config 0 descriptor?? [ 331.850499][ T5917] usb 2-1: device descriptor read/64, error -71 [ 332.090502][ T5917] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 332.287401][ T79] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 332.466585][ T9701] veth0_vlan: entered allmulticast mode [ 332.802085][ T5917] usb 2-1: device descriptor read/64, error -71 [ 332.854865][ T9702] veth0_vlan: left promiscuous mode [ 332.861374][ T9702] veth0_vlan: entered promiscuous mode [ 332.913836][ T5917] usb usb2-port1: attempt power cycle [ 332.947276][ T29] audit: type=1400 audit(1737918169.007:903): avc: denied { mount } for pid=9703 comm="syz.3.1097" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 333.216010][ T9712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1099'. [ 333.242465][ T9709] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.270397][ T5917] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 333.275764][ T29] audit: type=1400 audit(1737918169.307:904): avc: denied { write } for pid=9703 comm="syz.3.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 333.321112][ T5917] usb 2-1: device descriptor read/8, error -71 [ 333.333912][ T9712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.488455][ T9716] tipc: Enabling of bearer rejected, failed to enable media [ 333.518961][ T29] audit: type=1400 audit(1737918169.557:905): avc: denied { setopt } for pid=9715 comm="syz.0.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 333.735612][ T79] gspca_sunplus: reg_w_riv err -110 [ 333.762826][ T79] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 334.070596][ T5917] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 334.389066][ T29] audit: type=1400 audit(1737918170.447:906): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 334.403481][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 334.424929][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.480777][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.490990][ T5917] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 334.500157][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.528397][ T5917] usb 2-1: config 0 descriptor?? [ 334.739352][ T9732] bridge2: entered promiscuous mode [ 334.744685][ T9732] bridge2: entered allmulticast mode [ 334.756503][ T9732] team0: Port device bridge2 added [ 335.285484][ T29] audit: type=1400 audit(1737918170.797:907): avc: denied { setopt } for pid=9727 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 335.592255][ T5866] IPVS: starting estimator thread 0... [ 335.874444][ T9735] IPVS: using max 25 ests per chain, 60000 per kthread [ 336.010758][ T5917] corsair 0003:1B1C:1B02.0012: unknown main item tag 0x0 [ 336.017880][ T5917] corsair 0003:1B1C:1B02.0012: unknown main item tag 0x0 [ 336.026109][ T5917] corsair 0003:1B1C:1B02.0012: unknown main item tag 0x0 [ 336.033544][ T5917] corsair 0003:1B1C:1B02.0012: unknown main item tag 0x0 [ 336.046062][ T5917] corsair 0003:1B1C:1B02.0012: unknown main item tag 0x0 [ 336.084127][ T5917] corsair 0003:1B1C:1B02.0012: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 336.190151][ T9739] netlink: 'syz.3.1108': attribute type 12 has an invalid length. [ 336.201026][ T9739] netlink: 'syz.3.1108': attribute type 29 has an invalid length. [ 336.210468][ T9739] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1108'. [ 336.219675][ T5917] corsair 0003:1B1C:1B02.0012: Failed to get K90 initial state (error -32). [ 336.267127][ T9739] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 336.269757][ T5917] usb 2-1: USB disconnect, device number 30 [ 336.285301][ T9739] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1108'. [ 336.460676][ T5912] usb 6-1: USB disconnect, device number 6 [ 336.600643][ T5866] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 336.772312][ T5866] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 336.812881][ T5866] usb 4-1: config 0 has no interface number 0 [ 337.060594][ T5866] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 337.071694][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.096250][ T5866] usb 4-1: Product: syz [ 337.203915][ T5866] usb 4-1: Manufacturer: syz [ 337.209030][ T5866] usb 4-1: SerialNumber: syz [ 337.236175][ T5866] usb 4-1: config 0 descriptor?? [ 337.849726][ T5866] yurex 4-1:0.50: Could not find endpoints [ 338.243486][ T5912] usb 4-1: USB disconnect, device number 33 [ 338.881091][ T5917] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 339.110899][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 339.248258][ T5917] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 339.257322][ T5917] usb 2-1: config 0 has no interface number 0 [ 339.263919][ T5917] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 339.275580][ T5917] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 339.315538][ T5917] usb 2-1: config 0 interface 48 has no altsetting 0 [ 339.397882][ T5917] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 339.941676][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.949734][ T5917] usb 2-1: Product: syz [ 339.963187][ T5917] usb 2-1: Manufacturer: syz [ 339.971022][ T5917] usb 2-1: SerialNumber: syz [ 339.987281][ T5917] usb 2-1: config 0 descriptor?? [ 340.215643][ T5917] usb 2-1: USB disconnect, device number 31 [ 340.380451][ T5912] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 340.530481][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 340.539143][ T5912] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 340.548617][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.556880][ T5912] usb 4-1: Product: syz [ 340.561205][ T5912] usb 4-1: Manufacturer: syz [ 340.565803][ T5912] usb 4-1: SerialNumber: syz [ 340.572276][ T5912] usb 4-1: config 0 descriptor?? [ 340.579829][ T5912] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 340.796601][ T5912] ssu100 4-1:0.0: probe with driver ssu100 failed with error -5 [ 341.673933][ T9796] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 341.834568][ T9812] fuse: Bad value for 'user_id' [ 341.852640][ T9812] fuse: Bad value for 'user_id' [ 341.864392][ T9812] 9pnet_fd: Insufficient options for proto=fd [ 341.877695][ T29] audit: type=1400 audit(1737918177.937:908): avc: denied { shutdown } for pid=9811 comm="syz.5.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 341.897958][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1132'. [ 342.299700][ T1201] usb 4-1: USB disconnect, device number 34 [ 342.953775][ T29] audit: type=1400 audit(1737918178.997:909): avc: denied { ioctl } for pid=9821 comm="syz.1.1135" path="socket:[26817]" dev="sockfs" ino=26817 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 343.006235][ T9828] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 343.045743][ T9828] batman_adv: batadv0: Adding interface: gretap1 [ 343.052416][ T9828] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.080176][ T9828] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 343.177991][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 343.676072][ T9835] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 344.295819][ T29] audit: type=1400 audit(1737918180.357:910): avc: denied { mount } for pid=9845 comm="syz.4.1142" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 346.360182][ T9870] bridge0: entered promiscuous mode [ 346.387700][ T9870] macvlan2: entered promiscuous mode [ 346.401363][ T9870] macvlan2: entered allmulticast mode [ 346.427238][ T9870] bridge0: entered allmulticast mode [ 347.297154][ T9884] netem: incorrect gi model size [ 347.340530][ T9884] netem: change failed [ 347.480979][ T9895] fuse: Unknown parameter 'group_id00000000000000000000' [ 347.529001][ T9898] fuse: Bad value for 'fd' [ 348.221609][ T9915] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1156'. [ 348.284876][ T9916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9916 comm=syz.3.1157 [ 348.304128][ T9916] netlink: 'syz.3.1157': attribute type 1 has an invalid length. [ 348.337913][ T9916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.402614][ T9916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.449722][ T9916] bond2: (slave batadv0): making interface the new active one [ 348.476053][ T9916] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 348.615342][ T5912] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 348.696380][ T9940] fuse: Unknown parameter 'group_id00000000000000000000' [ 348.780538][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 348.944487][ T1201] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 348.948248][ T5912] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 349.115506][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.132100][ T5912] usb 6-1: Product: syz [ 349.137154][ T5912] usb 6-1: Manufacturer: syz [ 349.142455][ T5912] usb 6-1: SerialNumber: syz [ 349.157950][ T5912] usb 6-1: config 0 descriptor?? [ 349.176099][ T5912] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 349.178157][ T9953] fuse: Bad value for 'fd' [ 349.210194][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 349.230648][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'. [ 349.250466][ T1201] usb 2-1: Using ep0 maxpacket: 8 [ 349.258875][ T1201] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 349.269397][ T1201] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 349.292262][ T1201] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 349.299486][ T9958] fuse: Invalid rootmode [ 349.328491][ T1201] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 349.353505][ T1201] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.365154][ T1201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 349.378209][ T5912] ssu100 6-1:0.0: probe with driver ssu100 failed with error -5 [ 349.381253][ T1201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 349.402115][ T1201] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 349.432414][ T1201] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 349.450523][ T1201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.458576][ T1201] usb 2-1: Product: syz [ 349.475361][ T1201] usb 2-1: Manufacturer: syz [ 349.480009][ T1201] usb 2-1: SerialNumber: syz [ 349.553801][ T29] audit: type=1400 audit(1737918185.617:911): avc: denied { append } for pid=9964 comm="syz.3.1170" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 349.561063][ T1201] usb 2-1: config 0 descriptor?? [ 349.905732][ T9969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1168'. [ 350.576614][ T9934] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 350.586543][ T1201] hub 2-1:0.0: bad descriptor, ignoring hub [ 350.595963][ T1201] hub 2-1:0.0: probe with driver hub failed with error -5 [ 350.605149][ T1201] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 352.056325][ T5912] usb 2-1: USB disconnect, device number 32 [ 352.056325][ C0] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -19 [ 352.176663][ T5895] usb 6-1: USB disconnect, device number 7 [ 352.400569][ T29] audit: type=1326 audit(1737918188.457:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.0.1172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc306d8cd29 code=0x0 [ 352.698796][ T9980] XFS (nullb0): Invalid superblock magic number [ 352.825962][ T9989] fuse: Unknown parameter 'group_id00000000000000000000' [ 353.521943][ T29] audit: type=1400 audit(1737918188.977:913): avc: denied { execute } for pid=9990 comm="syz.3.1175" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 353.599270][ T29] audit: type=1400 audit(1737918189.107:914): avc: denied { ioctl } for pid=9990 comm="syz.3.1175" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 353.774362][T10003] fuse: Bad value for 'fd' [ 353.957054][T10005] futex_wake_op: syz.5.1178 tries to shift op by -1; fix this program [ 355.183895][T10005] uprobe: syz.5.1178:10005 failed to unregister, leaking uprobe [ 355.398398][ T29] audit: type=1326 audit(1737918191.457:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9996 comm="syz.5.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa098cd29 code=0x7fc00000 [ 355.634810][T10017] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1182'. [ 356.316812][T10030] fuse: Bad value for 'user_id' [ 356.322143][T10034] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1189'. [ 356.334375][T10030] fuse: Bad value for 'user_id' [ 356.660412][ T79] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 356.740590][ T5863] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 356.789467][T10043] can: request_module (can-proto-3) failed. [ 356.829867][T10043] xt_ecn: cannot match TCP bits for non-tcp packets [ 356.851996][ T79] usb 4-1: Using ep0 maxpacket: 16 [ 356.913287][ T79] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 356.929004][ T79] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.939151][ T79] usb 4-1: Product: syz [ 356.943709][ T79] usb 4-1: Manufacturer: syz [ 356.948326][ T79] usb 4-1: SerialNumber: syz [ 356.953023][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 356.956230][ T79] usb 4-1: config 0 descriptor?? [ 356.973425][ T5863] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 356.982688][ T5863] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 356.994498][ T5863] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 356.999321][ T79] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 357.010558][ T5863] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 357.067180][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 357.092663][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 357.116395][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 357.130370][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 357.153212][ T5863] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 357.166088][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.175802][ T5863] usb 2-1: Product: syz [ 357.175920][ T79] ssu100 4-1:0.0: probe with driver ssu100 failed with error -5 [ 357.180008][ T5863] usb 2-1: Manufacturer: syz [ 357.180027][ T5863] usb 2-1: SerialNumber: syz [ 357.183687][ T5863] usb 2-1: config 0 descriptor?? [ 357.216275][T10041] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 357.233407][ T29] audit: type=1400 audit(1737918193.277:916): avc: denied { override_creds } for pid=10053 comm="syz.5.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 357.257630][ T5863] hub 2-1:0.0: bad descriptor, ignoring hub [ 357.264245][ T5863] hub 2-1:0.0: probe with driver hub failed with error -5 [ 357.277329][ T5863] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 357.294982][ C0] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 357.546066][T10059] bond_slave_0: entered promiscuous mode [ 357.552278][T10059] bond_slave_1: entered promiscuous mode [ 357.558293][T10059] macvlan3: entered promiscuous mode [ 357.563783][T10059] bond0: entered promiscuous mode [ 357.571687][T10059] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 358.388385][ T79] usb 2-1: USB disconnect, device number 33 [ 358.388418][ C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -19 [ 358.832612][ T5912] usb 4-1: USB disconnect, device number 35 [ 358.922993][T10067] fuse: Bad value for 'user_id' [ 358.939863][T10067] fuse: Bad value for 'user_id' [ 359.877111][T10086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10086 comm=syz.1.1205 [ 359.894976][T10086] netlink: 'syz.1.1205': attribute type 1 has an invalid length. [ 359.938253][T10086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.993033][T10090] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 360.011288][T10090] bond1: (slave batadv1): making interface the new active one [ 360.019848][T10090] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 360.701754][T10110] fuse: Bad value for 'user_id' [ 360.708585][T10110] fuse: Bad value for 'user_id' [ 361.664548][T10118] can: request_module (can-proto-3) failed. [ 361.708642][T10118] xt_ecn: cannot match TCP bits for non-tcp packets [ 362.443981][T10135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10135 comm=syz.3.1221 [ 362.504348][T10135] netlink: 'syz.3.1221': attribute type 1 has an invalid length. [ 362.557786][T10135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.594920][T10147] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 362.606641][T10147] bond3: (slave batadv1): making interface the new active one [ 362.616052][T10147] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 362.732648][ T29] audit: type=1400 audit(1737918198.797:917): avc: denied { nlmsg_write } for pid=10121 comm="syz.0.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 363.178254][ T5862] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 363.249469][ T29] audit: type=1400 audit(1737918199.287:918): avc: denied { sqpoll } for pid=10170 comm="syz.5.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 363.330900][ T5862] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 363.371018][ T5862] usb 5-1: USB disconnect, device number 21 [ 366.690462][ T79] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 366.855820][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.864554][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.883036][ T79] usb 2-1: unable to get BOS descriptor or descriptor too short [ 366.893334][ T79] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 366.902315][ T79] usb 2-1: can't read configurations, error -71 [ 368.700408][ T79] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 368.880633][ T79] usb 5-1: Using ep0 maxpacket: 16 [ 368.910033][ T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.986689][ T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.096940][ T79] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 369.177259][ T79] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.293805][T10276] loop9: detected capacity change from 0 to 6 [ 369.321515][ T79] usb 5-1: config 0 descriptor?? [ 369.756245][ T79] corsair 0003:1B1C:1B02.0013: unknown main item tag 0x0 [ 369.774380][ T79] corsair 0003:1B1C:1B02.0013: unknown main item tag 0x0 [ 369.790615][ T79] corsair 0003:1B1C:1B02.0013: unknown main item tag 0x0 [ 369.809012][ T79] corsair 0003:1B1C:1B02.0013: unknown main item tag 0x0 [ 369.877298][ T79] corsair 0003:1B1C:1B02.0013: unknown main item tag 0x0 [ 370.481962][ T79] corsair 0003:1B1C:1B02.0013: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 370.911478][ T79] corsair 0003:1B1C:1B02.0013: Failed to get K90 initial state (error 0). [ 371.146966][ T79] usb 5-1: USB disconnect, device number 22 [ 371.614526][ T29] audit: type=1400 audit(1737918207.667:919): avc: denied { mount } for pid=10313 comm="syz.3.1261" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 372.134098][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1266'. [ 372.931960][T10340] XFS (nullb0): Invalid superblock magic number [ 375.254251][ T29] audit: type=1326 audit(1737918211.317:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa098cd29 code=0x7ffc0000 [ 375.431972][ T29] audit: type=1326 audit(1737918211.337:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7aa098cd29 code=0x7ffc0000 [ 375.456021][ T29] audit: type=1326 audit(1737918211.337:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa098cd29 code=0x7ffc0000 [ 375.479665][ T29] audit: type=1326 audit(1737918211.337:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa098cd29 code=0x7ffc0000 [ 375.504153][ T29] audit: type=1326 audit(1737918211.387:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f7aa098cd29 code=0x7ffc0000 [ 375.528233][ T29] audit: type=1326 audit(1737918211.387:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa098cd29 code=0x7ffc0000 [ 375.552088][ T29] audit: type=1326 audit(1737918211.387:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7aa098cd29 code=0x7ffc0000 [ 375.883212][ T79] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 375.897008][ T29] audit: type=1326 audit(1737918211.387:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa098cd29 code=0x7ffc0000 [ 375.923616][ T29] audit: type=1326 audit(1737918211.387:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7aa098cd29 code=0x7ffc0000 [ 376.659391][T10391] netlink: 'syz.4.1282': attribute type 4 has an invalid length. [ 376.684687][T10391] netlink: 'syz.4.1282': attribute type 4 has an invalid length. [ 376.730560][ T5863] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 376.731637][ T29] audit: type=1326 audit(1737918211.387:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa098cd29 code=0x7ffc0000 [ 376.762241][ T29] audit: type=1326 audit(1737918211.387:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.5.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa098cd29 code=0x7ffc0000 [ 376.786713][ T29] audit: type=1400 audit(1737918211.787:931): avc: denied { create } for pid=10371 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 376.895602][ T5863] usb 6-1: not running at top speed; connect to a high speed hub [ 376.916508][ T5863] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 376.938190][ T5863] usb 6-1: config 95 has no interface number 0 [ 376.942228][ T79] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.955743][ T5863] usb 6-1: config 95 interface 1 has no altsetting 0 [ 376.957711][ T79] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.977493][ T5863] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 376.983230][ T79] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.995664][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.995693][ T5863] usb 6-1: Product: syz [ 377.003783][ T79] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.005801][ T79] usb 4-1: config 0 descriptor?? [ 377.024860][ T79] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 377.026351][ T5863] usb 6-1: Manufacturer: syz [ 377.650446][ T5863] usb 6-1: SerialNumber: syz [ 377.817015][ T29] audit: type=1400 audit(1737918213.877:932): avc: denied { getopt } for pid=10367 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 378.014803][ T5863] usb 6-1: USB disconnect, device number 8 [ 378.221222][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.512606][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.622086][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.955758][T10413] XFS (nullb0): Invalid superblock magic number [ 379.020791][ T5862] usb 4-1: USB disconnect, device number 36 [ 381.037399][ T29] audit: type=1326 audit(1737918217.097:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.1.1296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad2db8cd29 code=0x0 [ 381.077537][T10451] netlink: 'syz.3.1298': attribute type 4 has an invalid length. [ 381.103174][T10453] overlayfs: failed to clone upperpath [ 381.125696][T10451] FAULT_INJECTION: forcing a failure. [ 381.125696][T10451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.180518][T10451] CPU: 1 UID: 0 PID: 10451 Comm: syz.3.1298 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 381.180546][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 381.180556][T10451] Call Trace: [ 381.180561][T10451] [ 381.180566][T10451] dump_stack_lvl+0x16c/0x1f0 [ 381.180595][T10451] should_fail_ex+0x497/0x5b0 [ 381.180620][T10451] _copy_from_iter+0x2a1/0x1560 [ 381.180644][T10451] ? trace_lock_acquire+0x14e/0x1f0 [ 381.180664][T10451] ? __alloc_skb+0x1fe/0x380 [ 381.180690][T10451] ? __pfx__copy_from_iter+0x10/0x10 [ 381.180711][T10451] ? __virt_addr_valid+0x1a4/0x590 [ 381.180732][T10451] ? __virt_addr_valid+0x5e/0x590 [ 381.180748][T10451] ? __phys_addr_symbol+0x30/0x80 [ 381.180763][T10451] ? __check_object_size+0x488/0x710 [ 381.180784][T10451] netlink_sendmsg+0x813/0xd70 [ 381.180813][T10451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.180846][T10451] sock_write_iter+0x4fe/0x5b0 [ 381.180868][T10451] ? __pfx_sock_write_iter+0x10/0x10 [ 381.180898][T10451] ? __pfx_file_has_perm+0x10/0x10 [ 381.180949][T10451] do_iter_readv_writev+0x655/0x950 [ 381.180973][T10451] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 381.180994][T10451] ? selinux_file_permission+0x11f/0x580 [ 381.181020][T10451] ? rw_verify_area+0xcf/0x680 [ 381.181043][T10451] vfs_writev+0x363/0xdd0 [ 381.181063][T10451] ? find_held_lock+0x2d/0x110 [ 381.181086][T10451] ? __pfx_vfs_writev+0x10/0x10 [ 381.181107][T10451] ? find_held_lock+0x2d/0x110 [ 381.181128][T10451] ? __pfx_lock_release+0x10/0x10 [ 381.181150][T10451] ? trace_lock_acquire+0x14e/0x1f0 [ 381.181175][T10451] ? __fget_files+0x206/0x3a0 [ 381.181206][T10451] ? do_writev+0x297/0x340 [ 381.181224][T10451] do_writev+0x297/0x340 [ 381.181245][T10451] ? __pfx_do_writev+0x10/0x10 [ 381.181273][T10451] do_syscall_64+0xcd/0x250 [ 381.181299][T10451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.181324][T10451] RIP: 0033:0x7f6b29b8cd29 [ 381.181339][T10451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.181354][T10451] RSP: 002b:00007f6b2aab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 381.181372][T10451] RAX: ffffffffffffffda RBX: 00007f6b29da5fa0 RCX: 00007f6b29b8cd29 [ 381.181383][T10451] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000003 [ 381.181392][T10451] RBP: 00007f6b2aab9090 R08: 0000000000000000 R09: 0000000000000000 [ 381.181402][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.181412][T10451] R13: 0000000000000000 R14: 00007f6b29da5fa0 R15: 00007fff0ebcc1a8 [ 381.181432][T10451] [ 381.390584][ T29] audit: type=1400 audit(1737918217.357:934): avc: denied { create } for pid=10455 comm="syz.5.1299" name="#a" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 381.469550][T10457] FAULT_INJECTION: forcing a failure. [ 381.469550][T10457] name failslab, interval 1, probability 0, space 0, times 0 [ 381.482788][T10457] CPU: 1 UID: 0 PID: 10457 Comm: syz.5.1299 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 381.482807][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 381.482816][T10457] Call Trace: [ 381.482821][T10457] [ 381.482826][T10457] dump_stack_lvl+0x16c/0x1f0 [ 381.482852][T10457] should_fail_ex+0x497/0x5b0 [ 381.482870][T10457] ? fs_reclaim_acquire+0xae/0x150 [ 381.482892][T10457] should_failslab+0xc2/0x120 [ 381.482916][T10457] __kmalloc_noprof+0xcb/0x510 [ 381.482940][T10457] ? hlock_class+0x4e/0x130 [ 381.482960][T10457] ovl_lookup+0x116a/0x21f0 [ 381.482994][T10457] ? __pfx_ovl_lookup+0x10/0x10 [ 381.483020][T10457] ? lock_acquire.part.0+0x11b/0x380 [ 381.483043][T10457] ? find_held_lock+0x2d/0x110 [ 381.483062][T10457] ? d_alloc+0x176/0x1e0 [ 381.483077][T10457] ? __pfx_lock_release+0x10/0x10 [ 381.483098][T10457] ? do_raw_spin_lock+0x12d/0x2c0 [ 381.483119][T10457] ? do_raw_spin_unlock+0x172/0x230 [ 381.483135][T10457] ? _raw_spin_unlock+0x28/0x50 [ 381.483158][T10457] lookup_one_qstr_excl+0x11d/0x190 [ 381.483176][T10457] ? mnt_want_write+0x161/0x450 [ 381.483197][T10457] filename_create+0x1ed/0x530 [ 381.483219][T10457] ? __pfx_filename_create+0x10/0x10 [ 381.483244][T10457] ? __phys_addr_symbol+0x30/0x80 [ 381.483260][T10457] ? __check_object_size+0x488/0x710 [ 381.483279][T10457] do_mkdirat+0xab/0x3a0 [ 381.483303][T10457] ? __pfx_do_mkdirat+0x10/0x10 [ 381.483326][T10457] ? getname_flags.part.0+0x1c5/0x550 [ 381.483349][T10457] __x64_sys_mkdirat+0x83/0xb0 [ 381.483373][T10457] do_syscall_64+0xcd/0x250 [ 381.483397][T10457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.483419][T10457] RIP: 0033:0x7f7aa098cd29 [ 381.483432][T10457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.483447][T10457] RSP: 002b:00007f7aa174d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 381.483462][T10457] RAX: ffffffffffffffda RBX: 00007f7aa0ba6080 RCX: 00007f7aa098cd29 [ 381.483472][T10457] RDX: 0000000000000000 RSI: 0000000020002040 RDI: ffffffffffffff9c [ 381.483481][T10457] RBP: 00007f7aa174d090 R08: 0000000000000000 R09: 0000000000000000 [ 381.483490][T10457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.483498][T10457] R13: 0000000000000001 R14: 00007f7aa0ba6080 R15: 00007fffd7a8a7c8 [ 381.483520][T10457] [ 381.736997][ T29] audit: type=1400 audit(1737918217.357:935): avc: denied { link } for pid=10455 comm="syz.5.1299" name="#a" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 381.790471][ T29] audit: type=1400 audit(1737918217.357:936): avc: denied { rename } for pid=10455 comm="syz.5.1299" name="#b" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 381.969716][ T29] audit: type=1400 audit(1737918218.027:937): avc: denied { append } for pid=10465 comm="syz.5.1303" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 382.865502][ T29] audit: type=1400 audit(1737918218.067:938): avc: denied { map } for pid=10465 comm="syz.5.1303" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 383.071567][ T8] libceph: connect (1)[c::]:6789 error -101 [ 383.079501][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 383.376175][ T8] libceph: connect (1)[c::]:6789 error -101 [ 383.378114][T10466] ceph: No mds server is up or the cluster is laggy [ 383.391030][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 383.435082][ T29] audit: type=1400 audit(1737918218.067:939): avc: denied { write execute } for pid=10465 comm="syz.5.1303" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 384.616215][T10504] /dev/nullb0: Can't open blockdev [ 385.371401][ T8] IPVS: starting estimator thread 0... [ 385.551176][T10514] IPVS: using max 35 ests per chain, 84000 per kthread [ 386.595495][ T29] audit: type=1326 audit(1737918222.657:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.1.1319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad2db8cd29 code=0x0 [ 388.943390][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1327'. [ 388.998253][T10559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10559 comm=syz.4.1325 [ 389.060712][T10559] netlink: 'syz.4.1325': attribute type 1 has an invalid length. [ 389.605063][T10559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.621727][T10569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.635466][T10569] bond1: (slave batadv0): making interface the new active one [ 389.644360][T10569] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 389.720422][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 389.988972][ T8] usb 4-1: too many configurations: 18, using maximum allowed: 8 [ 390.224042][ T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 390.236003][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.246988][ T8] usb 4-1: config 0 descriptor?? [ 390.289602][ T8] gspca_main: 0c45:8001 too many config [ 390.635351][T10590] XFS (nullb0): Invalid superblock magic number [ 390.674422][T10596] overlayfs: conflicting options: userxattr,redirect_dir=on [ 390.738384][T10581] evm: overlay not supported [ 392.009436][ T8] usb 4-1: USB disconnect, device number 37 [ 392.088268][T10615] fuse: Unknown parameter '0x0000000000000003' [ 392.220832][ T5912] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 392.391627][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 392.409452][ T5912] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 392.425624][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.436710][ T5912] usb 6-1: Product: syz [ 392.444106][ T5912] usb 6-1: Manufacturer: syz [ 392.449141][ T5912] usb 6-1: SerialNumber: syz [ 392.465975][ T5912] usb 6-1: config 0 descriptor?? [ 392.477358][ T5912] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 392.681906][ T5912] ssu100 6-1:0.0: probe with driver ssu100 failed with error -5 [ 394.598430][ T79] usb 6-1: USB disconnect, device number 9 [ 395.312596][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 395.322313][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1347'. [ 395.345195][T10643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=10643 comm=syz.0.1347 [ 395.403775][T10643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=10643 comm=syz.0.1347 [ 395.417377][T10643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10643 comm=syz.0.1347 [ 395.432877][ T8] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 395.570550][ T5895] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 395.770572][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 395.794683][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 395.819287][T10648] XFS (nullb0): Invalid superblock magic number [ 395.825633][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.828668][ T5895] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 395.840299][ T8] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 395.853630][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.861749][ T8] usb 4-1: Product: syz [ 395.865952][ T8] usb 4-1: Manufacturer: syz [ 395.887406][ T8] usb 4-1: SerialNumber: syz [ 395.891255][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.894708][ T8] usb 4-1: config 0 descriptor?? [ 395.905114][ T5895] usb 5-1: Product: syz [ 395.905139][ T5895] usb 5-1: Manufacturer: syz [ 395.940692][ T5895] usb 5-1: SerialNumber: syz [ 395.982173][ T5895] usb 5-1: config 0 descriptor?? [ 396.034191][ T5895] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 396.053642][T10661] fuse: Unknown parameter '0x0000000000000003' [ 396.066142][T10659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1350'. [ 396.078051][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 396.089198][T10662] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1350'. [ 396.331487][ T5895] ssu100 5-1:0.0: probe with driver ssu100 failed with error -5 [ 396.334766][ T8] gs_usb 4-1:0.0: Configuring for 12 interfaces [ 396.351108][ T8] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 396.359156][ T8] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 396.554885][ T5895] usb 5-1: USB disconnect, device number 23 [ 397.097478][ T29] audit: type=1400 audit(1737918233.157:941): avc: denied { write } for pid=10634 comm="syz.3.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 397.264983][ T29] audit: type=1400 audit(1737918233.157:942): avc: denied { write } for pid=10634 comm="syz.3.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 397.588185][T10681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10681 comm=syz.4.1355 [ 397.639278][T10684] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 397.801894][T10684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.822376][T10686] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 398.015214][ T29] audit: type=1326 audit(1737918234.047:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10683 comm="syz.0.1356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc306d8cd29 code=0x0 [ 398.016524][T10686] bond2: (slave batadv1): making interface the new active one [ 398.038109][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.758217][T10686] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 398.807806][ T5912] usb 4-1: USB disconnect, device number 38 [ 399.720773][ T29] audit: type=1400 audit(1737918235.787:944): avc: denied { getopt } for pid=10702 comm="syz.4.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 399.820545][T10708] netlink: 'syz.3.1361': attribute type 4 has an invalid length. [ 399.934091][T10712] binder: BINDER_SET_CONTEXT_MGR already set [ 399.963625][T10712] binder: 10711:10712 ioctl 4018620d 20000040 returned -16 [ 400.035523][T10718] fuse: Unknown parameter '0x0000000000000003' [ 400.079138][T10721] sp0: Synchronizing with TNC [ 400.085008][T10721] sp0: Found TNC [ 400.102279][T10721] Bluetooth: MGMT ver 1.23 [ 401.208537][T10732] syz.3.1369 (10732): /proc/10731/oom_adj is deprecated, please use /proc/10731/oom_score_adj instead. [ 401.432533][T10735] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 401.492644][T10735] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.499945][T10735] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.523370][T10735] bridge0: entered allmulticast mode [ 402.427395][T10755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.647483][T10757] fuse: Unknown parameter 'fsuuid' [ 403.033461][ T29] audit: type=1326 audit(1737918239.087:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10770 comm="syz.5.1380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7aa098cd29 code=0x0 [ 405.918933][ T29] audit: type=1400 audit(1737918241.977:946): avc: denied { ioctl } for pid=10818 comm="syz.1.1393" path="socket:[29551]" dev="sockfs" ino=29551 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 406.184838][ T5862] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 406.355452][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 406.402685][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 406.497533][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.516990][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.552590][ T5862] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 406.563428][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.614515][ T5862] usb 4-1: config 0 descriptor?? [ 406.670684][ T8] usb 5-1: device descriptor read/64, error -71 [ 407.130470][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 407.175746][ T29] audit: type=1400 audit(1737918243.237:947): avc: denied { connect } for pid=10838 comm="syz.5.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 407.203775][ T29] audit: type=1400 audit(1737918243.247:948): avc: denied { setopt } for pid=10838 comm="syz.5.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 407.211488][T10836] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 407.300878][ T8] usb 5-1: device descriptor read/64, error -71 [ 407.308944][ T5862] corsair 0003:1B1C:1B02.0014: unknown main item tag 0x0 [ 407.340371][ T5862] corsair 0003:1B1C:1B02.0014: unknown main item tag 0x0 [ 407.379125][ T5862] corsair 0003:1B1C:1B02.0014: unknown main item tag 0x0 [ 407.482094][ T8] usb usb5-port1: attempt power cycle [ 407.522080][ T5862] corsair 0003:1B1C:1B02.0014: unknown main item tag 0x0 [ 407.773402][ T5862] corsair 0003:1B1C:1B02.0014: unknown main item tag 0x0 [ 407.798352][ T5862] corsair 0003:1B1C:1B02.0014: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 407.855627][ T5862] corsair 0003:1B1C:1B02.0014: Read invalid backlight brightness: 25. [ 408.050469][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 408.089729][ T8] usb 5-1: device descriptor read/8, error -71 [ 408.139077][ T1201] usb 4-1: USB disconnect, device number 39 [ 408.818721][ T8] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 408.848485][ T8] usb 5-1: device descriptor read/8, error -71 [ 408.960550][ T8] usb usb5-port1: unable to enumerate USB device [ 409.432800][ T29] audit: type=1400 audit(1737918245.487:949): avc: denied { write } for pid=10884 comm="syz.4.1407" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 409.530549][ T29] audit: type=1326 audit(1737918245.527:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10876 comm="syz.3.1406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b29b8cd29 code=0x0 [ 412.941220][ T1201] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 413.249790][ T1201] usb 6-1: Using ep0 maxpacket: 8 [ 413.286266][ T1201] usb 6-1: unable to get BOS descriptor or descriptor too short [ 413.306555][ T1201] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.317439][ T1201] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 413.723239][ T1201] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.759966][ T1201] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.804182][ T1201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.830489][ T1201] usb 6-1: Product: syz [ 413.834717][ T1201] usb 6-1: Manufacturer: syz [ 413.849190][ T1201] usb 6-1: SerialNumber: syz [ 414.224798][ T29] audit: type=1400 audit(1737918250.287:951): avc: denied { execute } for pid=10952 comm="syz.0.1424" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 414.400178][ T1201] cdc_ncm 6-1:1.0: skipping garbage [ 414.405543][ T1201] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 414.413346][ T1201] cdc_ncm 6-1:1.0: bind() failure [ 414.421718][ T1201] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 414.429929][ T1201] cdc_ncm 6-1:1.1: bind() failure [ 414.442464][ T1201] usb 6-1: USB disconnect, device number 10 [ 415.390175][ T29] audit: type=1326 audit(1737918251.447:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.3.1428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b29b8cd29 code=0x0 [ 416.660544][ T5895] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 416.872620][ T5895] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 416.896280][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.974809][ T5895] usb 5-1: config 0 descriptor?? [ 417.633874][ T1201] libceph: connect (1)[c::]:6789 error -99 [ 417.652280][ T1201] libceph: mon0 (1)[c::]:6789 connect error [ 417.920441][ T1201] libceph: connect (1)[c::]:6789 error -99 [ 417.926393][ T1201] libceph: mon0 (1)[c::]:6789 connect error [ 418.370675][ T29] audit: type=1400 audit(1737918254.347:953): avc: denied { nlmsg_read } for pid=11007 comm="syz.0.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 418.640659][ T5862] libceph: connect (1)[c::]:6789 error -99 [ 418.646643][ T5862] libceph: mon0 (1)[c::]:6789 connect error [ 418.856904][T10973] ceph: No mds server is up or the cluster is laggy [ 419.479869][ T5895] kaweth 5-1:0.0: Firmware present in device. [ 419.550102][ T5895] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 419.890622][ T5895] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 419.920563][T11047] fuse: Invalid rootmode [ 419.939129][ T5895] usb 5-1: USB disconnect, device number 28 [ 420.550521][ T79] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 420.700487][ T79] usb 6-1: Using ep0 maxpacket: 16 [ 420.713278][ T79] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 420.733412][ T79] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.748341][ T79] usb 6-1: Product: syz [ 420.760495][ T79] usb 6-1: Manufacturer: syz [ 420.765138][ T79] usb 6-1: SerialNumber: syz [ 420.782781][ T79] usb 6-1: config 0 descriptor?? [ 420.791662][ T79] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 420.816150][ T29] audit: type=1326 audit(1737918256.877:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11072 comm="syz.3.1452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b29b8cd29 code=0x0 [ 420.843069][ T5895] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 421.157528][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 421.204248][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 421.216509][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.230921][ T5895] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.241014][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.283054][ T5895] usb 5-1: config 0 descriptor?? [ 421.322166][T11066] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 421.795188][ T5895] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd [ 421.804413][ T5895] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 421.815574][ T5895] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 422.059946][ T5895] usb 5-1: USB disconnect, device number 29 [ 423.174289][ T29] audit: type=1400 audit(1737918259.237:955): avc: denied { unmount } for pid=9261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 423.611582][ T5862] usb 6-1: USB disconnect, device number 11 [ 423.735956][T11102] overlayfs: missing 'lowerdir' [ 423.749644][ T29] audit: type=1400 audit(1737918259.797:956): avc: denied { append } for pid=11101 comm="syz.5.1461" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.198449][ T79] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 424.396360][ T29] audit: type=1326 audit(1737918260.457:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.4.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9438cd29 code=0x7ffc0000 [ 424.645792][ T79] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.692484][ T79] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 424.710708][ T29] audit: type=1326 audit(1737918260.487:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.4.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9d9438cd29 code=0x7ffc0000 [ 424.711226][ T79] usb 4-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 0.00 [ 424.758179][ T79] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.789884][ T79] usb 4-1: SerialNumber: syz [ 424.799549][ T29] audit: type=1326 audit(1737918260.487:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.4.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9438cd29 code=0x7ffc0000 [ 424.808973][ T79] usb 4-1: config 0 descriptor?? [ 424.871754][ T29] audit: type=1326 audit(1737918260.497:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.4.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9d9438cd29 code=0x7ffc0000 [ 424.908435][ T29] audit: type=1326 audit(1737918260.497:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.4.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9438cd29 code=0x7ffc0000 [ 424.941917][ T29] audit: type=1326 audit(1737918260.497:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.4.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f9d9438cd29 code=0x7ffc0000 [ 425.157326][ T5912] usb 4-1: USB disconnect, device number 40 [ 425.320463][ T79] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 425.480392][ T79] usb 5-1: Using ep0 maxpacket: 16 [ 425.493164][ T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.508807][ T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.542552][ T79] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 425.552191][ T79] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.661920][ T79] usb 5-1: config 0 descriptor?? [ 425.865669][ T29] audit: type=1326 audit(1737918261.927:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.0.1473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc306d8cd29 code=0x0 [ 426.116959][ T79] corsair 0003:1B1C:1B02.0016: unknown main item tag 0x0 [ 426.131143][ T79] corsair 0003:1B1C:1B02.0016: unknown main item tag 0x0 [ 426.175101][ T79] corsair 0003:1B1C:1B02.0016: unknown main item tag 0x0 [ 426.199071][ T79] corsair 0003:1B1C:1B02.0016: unknown main item tag 0x0 [ 426.240786][ T79] corsair 0003:1B1C:1B02.0016: unknown main item tag 0x0 [ 426.286934][ T79] corsair 0003:1B1C:1B02.0016: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 426.298875][ T5912] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 426.343873][ T79] corsair 0003:1B1C:1B02.0016: Read invalid backlight brightness: 25. [ 426.480892][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 426.497612][ T5912] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 426.508879][ T5912] usb 6-1: config 8 has no interface number 0 [ 426.517046][ T5912] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 426.529123][ T5912] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 426.539586][ T5912] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 426.549940][ T5912] usb 6-1: config 8 interface 39 has no altsetting 0 [ 426.558463][ T5912] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 426.565197][ T5862] usb 5-1: USB disconnect, device number 30 [ 426.567832][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.581780][ T5912] usb 6-1: Product: syz [ 426.588184][ T5912] usb 6-1: Manufacturer: syz [ 426.592994][ T5912] usb 6-1: SerialNumber: syz [ 426.874415][ T29] audit: type=1400 audit(1737918262.907:964): avc: denied { watch } for pid=11145 comm="syz.3.1476" path="pipe:[30594]" dev="pipefs" ino=30594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 427.598280][ T5912] ipheth 6-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 427.699611][ T5912] ipheth 6-1:8.39: Apple iPhone USB Ethernet device attached [ 427.880535][ T29] audit: type=1400 audit(1737918263.947:965): avc: denied { read } for pid=11142 comm="syz.5.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 427.882234][ T5862] usb 6-1: USB disconnect, device number 12 [ 428.043719][ T5862] ipheth 6-1:8.39: Apple iPhone USB Ethernet now disconnected [ 428.565660][T11181] capability: warning: `syz.1.1481' uses 32-bit capabilities (legacy support in use) [ 428.578677][ T29] audit: type=1400 audit(1737918264.637:966): avc: denied { create } for pid=11177 comm="syz.1.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 428.806547][ T29] audit: type=1400 audit(1737918264.867:967): avc: denied { compute_member } for pid=11183 comm="syz.5.1483" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 429.637671][ T29] audit: type=1400 audit(2000000000.000:968): avc: denied { bind } for pid=11163 comm="syz.3.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 534.610236][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 534.617227][ C0] rcu: 1-...!: (1 ticks this GP) idle=8c24/1/0x4000000000000000 softirq=41343/41343 fqs=0 [ 534.628833][ C0] rcu: (detected by 0, t=10502 jiffies, g=36233, q=814 ncpus=2) [ 534.636564][ C0] Sending NMI from CPU 0 to CPUs 1: [ 534.636588][ C1] NMI backtrace for cpu 1 [ 534.636598][ C1] CPU: 1 UID: 0 PID: 5912 Comm: kworker/1:6 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 534.636612][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 534.636623][ C1] Workqueue: rcu_gp process_srcu [ 534.636647][ C1] RIP: 0010:__lock_acquire+0x53a/0x3c40 [ 534.636671][ C1] Code: 92 4d 8d a4 d5 01 0b 00 00 eb 10 83 eb 01 49 83 ec 28 83 fb ff 0f 84 a2 0b 00 00 49 8d 4c 24 df 4c 89 e2 4c 89 e6 48 c1 ea 03 <83> e6 07 0f b6 14 2a 40 38 f2 7f 08 84 d2 0f 85 19 23 00 00 0f b6 [ 534.636683][ C1] RSP: 0018:ffffc90000a18af0 EFLAGS: 00000806 [ 534.636693][ C1] RAX: 0000000000000002 RBX: 0000000000000002 RCX: ffff888022378b30 [ 534.636701][ C1] RDX: 1ffff1100446f16a RSI: ffff888022378b51 RDI: ffff888022378b79 [ 534.636709][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: fffffbfff2dd6f98 [ 534.636718][ C1] R10: ffffffff96eb7cc7 R11: 0000000000000003 R12: ffff888022378b51 [ 534.636726][ C1] R13: ffff888022378000 R14: 0000000000000040 R15: ffff888022378b58 [ 534.636734][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 534.636748][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.636757][ C1] CR2: 0000001b2f51eff8 CR3: 000000002a4bc000 CR4: 00000000003526f0 [ 534.636765][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 534.636773][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 534.636780][ C1] Call Trace: [ 534.636787][ C1] [ 534.636793][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 534.636810][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 534.636827][ C1] ? nmi_handle+0x1ac/0x5d0 [ 534.636845][ C1] ? __lock_acquire+0x53a/0x3c40 [ 534.636860][ C1] ? default_do_nmi+0x6a/0x160 [ 534.636874][ C1] ? exc_nmi+0x170/0x1e0 [ 534.636886][ C1] ? end_repeat_nmi+0xf/0x53 [ 534.636907][ C1] ? __lock_acquire+0x53a/0x3c40 [ 534.636923][ C1] ? __lock_acquire+0x53a/0x3c40 [ 534.636939][ C1] ? __lock_acquire+0x53a/0x3c40 [ 534.636955][ C1] [ 534.636959][ C1] [ 534.636965][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 534.636982][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 534.636998][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 534.637016][ C1] lock_acquire.part.0+0x11b/0x380 [ 534.637032][ C1] ? debug_object_deactivate+0x13b/0x370 [ 534.637052][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 534.637069][ C1] ? rcu_is_watching+0x12/0xc0 [ 534.637082][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 534.637095][ C1] ? debug_object_activate+0x149/0x4a0 [ 534.637113][ C1] ? debug_object_deactivate+0x13b/0x370 [ 534.637131][ C1] ? lock_acquire+0x2f/0xb0 [ 534.637146][ C1] ? debug_object_deactivate+0x13b/0x370 [ 534.637165][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 534.637180][ C1] ? debug_object_deactivate+0x13b/0x370 [ 534.637197][ C1] debug_object_deactivate+0x13b/0x370 [ 534.637216][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 534.637235][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 534.637248][ C1] ? __pfx_advance_sched+0x10/0x10 [ 534.637262][ C1] __hrtimer_run_queues+0x47c/0xae0 [ 534.637278][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 534.637290][ C1] ? read_tsc+0x9/0x20 [ 534.637304][ C1] hrtimer_interrupt+0x392/0x8e0 [ 534.637320][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 534.637341][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 534.637357][ C1] [ 534.637361][ C1] [ 534.637366][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 534.637383][ C1] RIP: 0010:queue_delayed_work_on+0x9d/0x150 [ 534.637402][ C1] Code: e8 48 bf 36 00 48 85 ed 75 46 e8 0e c4 36 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 2c bf 36 00 48 85 db 0f 85 92 00 00 00 ee c3 36 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc [ 534.637413][ C1] RSP: 0018:ffffc9000440fc28 EFLAGS: 00000293 [ 534.637422][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8182f3ff [ 534.637429][ C1] RDX: ffff888022378000 RSI: ffffffff8182f409 RDI: 0000000000000007 [ 534.637437][ C1] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 534.637445][ C1] R10: 0000000000000000 R11: 0000000000002ba2 R12: 0000000000000001 [ 534.637452][ C1] R13: ffff88801b07ac00 R14: 0000000000000000 R15: 0000000000000000 [ 534.637462][ C1] ? queue_delayed_work_on+0xdf/0x150 [ 534.637478][ C1] ? queue_delayed_work_on+0xe9/0x150 [ 534.637496][ C1] ? queue_delayed_work_on+0xe9/0x150 [ 534.637513][ C1] process_one_work+0x9c5/0x1ba0 [ 534.637532][ C1] ? __pfx_process_srcu+0x10/0x10 [ 534.637549][ C1] ? __pfx_process_one_work+0x10/0x10 [ 534.637564][ C1] ? rcu_is_watching+0x12/0xc0 [ 534.637578][ C1] ? assign_work+0x1a0/0x250 [ 534.637593][ C1] worker_thread+0x6c8/0xf00 [ 534.637611][ C1] ? __kthread_parkme+0x148/0x220 [ 534.637624][ C1] ? __pfx_worker_thread+0x10/0x10 [ 534.637639][ C1] kthread+0x3af/0x750 [ 534.637661][ C1] ? __pfx_kthread+0x10/0x10 [ 534.637674][ C1] ? lock_acquire+0x2f/0xb0 [ 534.637691][ C1] ? __pfx_kthread+0x10/0x10 [ 534.637705][ C1] ret_from_fork+0x45/0x80 [ 534.637721][ C1] ? __pfx_kthread+0x10/0x10 [ 534.637736][ C1] ret_from_fork_asm+0x1a/0x30 [ 534.637754][ C1] [ 534.638584][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g36233 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 535.156500][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=24772 [ 535.164416][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g36233 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 535.175791][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 535.185758][ C0] rcu: RCU grace-period kthread stack dump: [ 535.191648][ C0] task:rcu_preempt state:I stack:28376 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 535.201833][ C0] Call Trace: [ 535.205111][ C0] [ 535.208068][ C0] __schedule+0x1142/0x5b60 [ 535.212593][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 535.217809][ C0] ? __pfx___schedule+0x10/0x10 [ 535.222668][ C0] ? schedule+0x298/0x350 [ 535.227001][ C0] ? __pfx_lock_release+0x10/0x10 [ 535.232059][ C0] ? lock_acquire+0x2f/0xb0 [ 535.236567][ C0] ? schedule+0x1fd/0x350 [ 535.240915][ C0] schedule+0xe7/0x350 [ 535.244992][ C0] schedule_timeout+0x124/0x280 [ 535.249859][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 535.255248][ C0] ? __pfx_process_timeout+0x10/0x10 [ 535.260547][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 535.266362][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 535.271839][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 535.276617][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 535.281906][ C0] ? rcu_gp_init+0xc82/0x1630 [ 535.286595][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 535.291804][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 535.297620][ C0] rcu_gp_kthread+0x271/0x380 [ 535.302302][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 535.307507][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 535.312713][ C0] ? __kthread_parkme+0x148/0x220 [ 535.317747][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 535.322966][ C0] kthread+0x3af/0x750 [ 535.327042][ C0] ? __pfx_kthread+0x10/0x10 [ 535.331646][ C0] ? __pfx_kthread+0x10/0x10 [ 535.336240][ C0] ret_from_fork+0x45/0x80 [ 535.340662][ C0] ? __pfx_kthread+0x10/0x10 [ 535.345322][ C0] ret_from_fork_asm+0x1a/0x30 [ 535.350097][ C0]