last executing test programs: 14m2.834353611s ago: executing program 3 (id=24): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) (fail_nth: 1) 13m58.279238593s ago: executing program 3 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x30e0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}]}, 0x44}}, 0x0) (fail_nth: 5) 13m55.948342826s ago: executing program 3 (id=44): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0fa1aa08bf000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), 0x0}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0xc, &(0x7f0000000040), 0x0) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000280)={0x1, 0x1, 0xd, 0x12, 0x63, 0x0}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000140)={'veth1_macvtap\x00', 0x100}) 13m54.745372218s ago: executing program 3 (id=47): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102396, 0x18ffc) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x4, 0x34, 0x8a, 0xc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x200002a3, 0x0, &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x8f) (fail_nth: 3) 13m53.984911174s ago: executing program 3 (id=49): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffe14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(r1, 0x5, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="00000000c891000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x2000005c, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[], 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) close(r7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create(0x5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 13m52.371214358s ago: executing program 3 (id=54): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe0ec}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x20008401}, 0x4008040) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x0, 0x3c48, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000280)={'dummy0\x00', 0x8000000000000001, 0x2}) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1c0000001d008102e00f80ecdb7d58f207c804a01000000088080ef3", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_usb_connect(0x6, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x5a, 0x28, 0x7e, 0x20, 0x19d2, 0x1141, 0x4276, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x10}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) 13m37.2511434s ago: executing program 32 (id=54): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe0ec}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x20008401}, 0x4008040) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x0, 0x3c48, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000280)={'dummy0\x00', 0x8000000000000001, 0x2}) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1c0000001d008102e00f80ecdb7d58f207c804a01000000088080ef3", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_usb_connect(0x6, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x5a, 0x28, 0x7e, 0x20, 0x19d2, 0x1141, 0x4276, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x10}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) 10m56.555151044s ago: executing program 4 (id=649): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0xfffffff9]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}, @rr={0x7, 0xf, 0x0, [@dev, @multicast1, @private=0xa010102]}]}}}}}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) (async, rerun: 32) r4 = dup(r1) (rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000860000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x0, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x34, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x24, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r8}, @nested={0xc, 0xa5, 0x0, 0x1, [@typed={0x8, 0x149, 0x0, 0x0, @pid}]}]}]}, 0x34}], 0x1}, 0x0) (async) getsockopt$inet_dccp_buf(r4, 0x21, 0xe, &(0x7f00000000c0)=""/55, &(0x7f0000000100)=0x37) 10m56.027209458s ago: executing program 4 (id=652): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x4, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0x1000, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r5, 0x4b36) sysfs$2(0x4, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008020}, 0x0) 10m55.014738879s ago: executing program 4 (id=655): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000180)=""/142) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x3, 0xac}, @rr={0x7, 0x3, 0xcc}]}}, @echo={0x8, 0x0, 0x0, 0xaad, 0x3}}}}}, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000140)={0x11, 0x20}) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff7) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) 10m51.802910747s ago: executing program 4 (id=661): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa0201, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x90) io_setup(0x19, &(0x7f00000009c0)) r4 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcb}, 0x8) 10m49.847013838s ago: executing program 4 (id=665): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) socket(0x1f, 0x4, 0x9) read$char_usb(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffffffff}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000580)=0xc, 0x4) 10m46.816730322s ago: executing program 4 (id=670): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000000180)='qnx4\x00', 0x200000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x5) ioctl$KDGETKEYCODE(r2, 0x4b4c, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000280)=0x8, 0x4) landlock_restrict_self(r7, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={r8, 0x3, r0, 0xab}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x1a}]}, 0x18}], 0x1, 0x0, 0x0, 0x40000}, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x3, 0x5}, {0x4}, {0xf}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {0x7}, {0x2}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0x2}, {0x0, 0x8}, {}, @control={0x0, 0xfffffffd}}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 10m46.33905982s ago: executing program 33 (id=670): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000000180)='qnx4\x00', 0x200000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x5) ioctl$KDGETKEYCODE(r2, 0x4b4c, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000280)=0x8, 0x4) landlock_restrict_self(r7, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={r8, 0x3, r0, 0xab}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x1a}]}, 0x18}], 0x1, 0x0, 0x0, 0x40000}, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x3, 0x5}, {0x4}, {0xf}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {0x7}, {0x2}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0x2}, {0x0, 0x8}, {}, @control={0x0, 0xfffffffd}}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 7m27.244317997s ago: executing program 2 (id=1219): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000001, 0x4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x8}}, 0x1c}}, 0x2002c810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2b, &(0x7f0000000040)) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f00000101c0)={@hyper, 0x1}) 7m23.13186442s ago: executing program 2 (id=1231): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(0x0, 0x0, 0x0, 0x0) r6 = msgget(0x0, 0x28c) msgctl$IPC_RMID(r6, 0x0) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f00000004c0)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000240)=""/98) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"000100"}, 0x2}}}, 0x118) 7m22.109216772s ago: executing program 2 (id=1237): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x61d2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() (async) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace_dev_match', 0x400000, 0x161) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace_dev_match', 0x400000, 0x161) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x4, 0xc, 0x76, 0x1000b, 0x8000000000000001, r1}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x2}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x2}}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000680)=""/214) connect$inet(r0, &(0x7f0000000100)={0x2, 0xfffe, @remote}, 0x10) (async) connect$inet(r0, &(0x7f0000000100)={0x2, 0xfffe, @remote}, 0x10) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) (async) fchdir(r6) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') socket$l2tp6(0xa, 0x2, 0x73) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x3ff, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0xffffffffffffff55, 0x0}, 0x1}], 0x1, 0x45833af92e4b39fd, 0x0) 7m19.509241326s ago: executing program 2 (id=1243): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000580)='./file1\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f00000005c0)='yDXq,\xdb\x86\xc1\xe1\xaf%q\x13\x91OK\x06\x98\bH\xado\xc4\x97{\xcb\b\xc6\xad\xf9\x03\xe2\x90\xf3\x85\xcci\xc0Z\x87\xc2,\xab\x84\xd0j\f\t\"\xcfB\x95z\xbb\xaa&\x9a\xc1\x8c\xca\x93\xb2\xa0\x03\xaboG\xccV\xf9\xf0\xd7\x1dE\xc7(iJ') (fail_nth: 7) 7m17.362033395s ago: executing program 2 (id=1246): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(r3, 0xfffffe25, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f00000003c0)='./file1\x00', 0x16) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400"], 0xb0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, 0x0, 0x0) chown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x1b}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m13.04694984s ago: executing program 2 (id=1260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x6, 0x2, "1952"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, 'X'}]}]]}, 0x74}}, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffeeff0000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r9, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f00000000c0)="01", 0x24}]) io_destroy(r9) mount(0x0, &(0x7f0000000580)='./file1\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f00000005c0)='yDXq,\xdb\x86\xc1\xe1\xaf%q\x13\x91OK\x06\x98\bH\xado\xc4\x97{\xcb\b\xc6\xad\xf9\x03\xe2\x90\xf3\x85\xcci\xc0Z\x87\xc2,\xab\x84\xd0j\f\t\"\xcfB\x95z\xbb\xaa&\x9a\xc1\x8c\xca\x93\xb2\xa0\x03\xaboG\xccV\xf9\xf0\xd7\x1dE\xc7(iJ') 6m57.23897302s ago: executing program 34 (id=1260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x6, 0x2, "1952"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, 'X'}]}]]}, 0x74}}, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffeeff0000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r9, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f00000000c0)="01", 0x24}]) io_destroy(r9) mount(0x0, &(0x7f0000000580)='./file1\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f00000005c0)='yDXq,\xdb\x86\xc1\xe1\xaf%q\x13\x91OK\x06\x98\bH\xado\xc4\x97{\xcb\b\xc6\xad\xf9\x03\xe2\x90\xf3\x85\xcci\xc0Z\x87\xc2,\xab\x84\xd0j\f\t\"\xcfB\x95z\xbb\xaa&\x9a\xc1\x8c\xca\x93\xb2\xa0\x03\xaboG\xccV\xf9\xf0\xd7\x1dE\xc7(iJ') 39.891097925s ago: executing program 6 (id=2011): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x21, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r5, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000480)={{0x4, 0x2}, 0x100, './file0\x00'}) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r8, r9) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0300003d000900000000000000000001000000040000002c0301802803108022035e801c003f8014004200fe800000000000000000000000002af20400b280c200d1800400d5801b00e5003a1a7bd87dc1da0e92962d424d6aa2e3f211d3a0120a1f000400be807a5bf5064cd1c94f9c6e9bd51aca2d97b286d62cce9395f91ca0470cdb7846ce1ecb0cb842e263262d20e135558972e558fda7c712e5ba316d070d7076e29651a06ae6516c4014f306d1cfaae9acb963a43dca3363f08d816de52e21c7cdcb2da3854ac2f0e1346e3738a68384031664dc126f7a0d8a495ea4f0e1f14a36dfdb22bcaae62ba1f11887a351a8514fc71f4081cbbd0d73c3abd02c00000800c400640101004871b017bcd42eb5b1a11105b039db694e02002ae2e9d7471f3dfe622a0d8687e6ce31e0d7e7e5ec23b7e7cce0b7e3082fd9ab0d9365f20b2e49b8691fe8db4aad32ef4b55eb7db6ec13e32ecf41fc750b3e581c2212500517c6a1587285cd039fd939038c311e6dd4c108000700", @ANYRES32=r8, @ANYBLOB="0c0007800800f500", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x009\x00', @ANYRES32=0x0, @ANYBLOB="000008000200", @ANYRES32, @ANYBLOB], 0x34c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 38.615603015s ago: executing program 6 (id=2015): r0 = syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x3, 0x20000000, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x701, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) shutdown(r7, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000240)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', r8, r0, 0x6, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000000026c00004100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000002001600000000000000000000005800f8ff0000000000000007bad9f441c32eff8c159cb3993d75bcf4dab40756295022b6fc1bf9635844902dc260dfa1a59c8931afc25d52be6dabb1e317787cdb7b88aa0fc9f7186aaf8155ee8357ab3fb8b7e7e7ecf05663002a37f590a6542de46986d9bdfa77ebc2874d42f1f0a0caa2cf1565eada34023d7274f4ef57c7fb1e8721f1"], 0x50) 37.576920379s ago: executing program 6 (id=2017): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private, @multicast2, 0x0, "941621a61c5815f4678d8fd4a8e14b0447113c694d1fd55708018620fd419884"}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x157, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f388238e8971f660f383e265900f30fc77002ba4300ec0fc7192e360f79a530000f214a3e0fc7bd000016", 0x2c}], 0x1, 0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1802009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 36.754631579s ago: executing program 6 (id=2020): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x2) (async) ioctl$TCFLSH(r1, 0x540b, 0x2) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000020000100ffffffef000000000a0000000000000312000000080017004e224e"], 0x24}}, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xd050, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='autofs\x00', 0xcba9b6aaae13f914, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='autofs\x00', 0xcba9b6aaae13f914, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000001c0)={0x1, 0x1, 0x1b, 0x7, 0x1c0, &(0x7f0000000680)}) 36.613619941s ago: executing program 6 (id=2022): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@fadd={0x58, 0x114, 0x6, {{0xfffffffe, 0x8}, &(0x7f0000000300)=0x7, 0x0, 0x3, 0x1, 0x3ff, 0x2, 0x28, 0x754faab1}}], 0x58, 0x24008041}, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x24}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0x84}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'lo\x00'}) (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000046842, 0x0) io_setup(0x222, &(0x7f0000000280)=0x0) io_getevents(r11, 0x2, 0xd, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0) (async, rerun: 64) r12 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 64) ioctl$FBIOPAN_DISPLAY(r12, 0x4606, &(0x7f0000000000)={0xf00, 0x1000, 0x0, 0x0, 0x0, 0xfffffffd, 0x20, 0x0, {}, {0x0, 0x0, 0x20000000}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x4}, 0x1, 0x0, 0x5, 0x0, 0x1, 0x2000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3, 0x3}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r13 = memfd_create(&(0x7f0000000100)='\xf3u\t\x9f\x918\xc0ud\xb0l \xfd\xd7\x03\x00\x898\xf8\xb5\x90Xp\xe3$\x1c\x9b\a\x92H\x00\x00\x00\x00\x81\f\x1et\x10\x0e\xcfV9\xbe*\xd2d\xc8}\xd6\xdb\x88\xfb\xc7B\x8c\xa8\xb3~\x14\x11\xe3', 0x0) pwrite64(r13, 0x0, 0x0, 0x0) (async) io_submit(r11, 0x4, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r10, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 35.245587627s ago: executing program 6 (id=2028): sync() sync() sync() r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1410, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) sync() sync() sync() r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)={r0, 0x8, 0xfff, "e3d32f35f005ddf1bddb3b0083d8613f7875c2e660b3881934f39b2450048e9f4a"}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000240), 0xca1, 0x6283) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000280)={0x0, 0x2, @start={0x100, 0x1}}) r4 = dup3(r2, r2, 0x80000) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r4, 0x4068aea3, &(0x7f0000000300)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, r2, 0x4eeae000) sync() ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000003c0)=0x1e, 0x4) r7 = syz_open_dev$loop(&(0x7f0000000400), 0x1, 0x9791b55dcdf6bf74) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f0000000440)={0x9, 0x1, 0x1}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000480)=0x80000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/stat\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f0000000500)=""/186) sync() getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000005c0)={0x0, 0x7}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000640)={r9, @in6={{0xa, 0x4e20, 0x1, @remote, 0x787f}}}, &(0x7f0000000700)=0x84) sync() 34.922261311s ago: executing program 35 (id=2028): sync() sync() sync() r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1410, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) sync() sync() sync() r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)={r0, 0x8, 0xfff, "e3d32f35f005ddf1bddb3b0083d8613f7875c2e660b3881934f39b2450048e9f4a"}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000240), 0xca1, 0x6283) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000280)={0x0, 0x2, @start={0x100, 0x1}}) r4 = dup3(r2, r2, 0x80000) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r4, 0x4068aea3, &(0x7f0000000300)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, r2, 0x4eeae000) sync() ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000003c0)=0x1e, 0x4) r7 = syz_open_dev$loop(&(0x7f0000000400), 0x1, 0x9791b55dcdf6bf74) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f0000000440)={0x9, 0x1, 0x1}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000480)=0x80000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/stat\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f0000000500)=""/186) sync() getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000005c0)={0x0, 0x7}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000640)={r9, @in6={{0xa, 0x4e20, 0x1, @remote, 0x787f}}}, &(0x7f0000000700)=0x84) sync() 12.934553513s ago: executing program 1 (id=2103): r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d240600000308000000001b000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001000000090401000001020000090401010101020000090501090000400002072501000080000904020000010200000904020101010220000905820940"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b1, &(0x7f00000000c0)={'vlan1\x00', @multicast}) syz_usb_disconnect(r0) 9.682500466s ago: executing program 8 (id=2111): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x800, 0x8, 0x200040}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000540)="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"/609, 0x261}, {&(0x7f0000000100)="2f154450edaa2c697e6e75245b5df88e1e145acec8b8e5252990da35e155478ac85cd2bf018d9bc2cb396c4c48e0909e793544e8adef2b4a51f33ab795d5f71138ecea58095983802667e887caa80b5e99d042a196ed1884e7742fc8bd8030ea4df834f66a446d85fe185f4d14a1c62ac5d9669ffd397ea81f8933a4928f14305285b86a005aec7f9ee4e8157607674a42f5b3c473ec361bea13ea8cd081569a4e4c3029cdc096b21b042e7334a639921c6b672468395ee1544f01436dc0b42135c893c11c3ff1a793d861169ada8fcb359dbd8baddbfcd15ab7acb798faf5711fc46500"/251, 0xfb}, {&(0x7f0000000200)="2518", 0x2}, {&(0x7f00000007c0)="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", 0x222}, {&(0x7f0000000340)="eb32cab64208635aba64c9aa3b1cac1efcacd9b52cd19865d8c3930c517e4e35b11bb5eacb06beb1994c8ccca2493108d8b0f8ea23d9f04ee89259509fb255e28653c1f80c7e81f0a7f84bf0644b8aa672b490db6062280b37c769af3568c87b2dc1fb71e2e05cf8e8ebc862", 0x6c}], 0x5) 8.943142819s ago: executing program 8 (id=2112): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) listen(r1, 0x8) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x12, @string={0x12, 0x3, "27709e67a039ed8d571d79ff090ace52"}}, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) 8.418751993s ago: executing program 1 (id=2119): syz_usbip_server_init(0x5) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x208000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000000)='U', &(0x7f0000000300)=""/154, &(0x7f0000000600)="99a8263c0e920935afec5d2b40ec1e6024b6b423cb4ae62095b291596638fa03cebd23c2617e0087e57d797b1900efd90cab55ea577476f904b54fbed7474e877f55766a39948a058967b2e04122661b5fcc8fe7e3e6f1100000dcc9cc21000000d4194e777307b3092e2c53f35d9c12300155205d2564e54b4e7f3f917be5529c04dee6946b9aa14e64176f555558e1cac0024aeef9e303bd79e3c791b6b518143ff87cdda63fb9fd116c6765b51d515048423b3fe5c8304eb8345882b873709788bee8ad2b2221b900", &(0x7f0000000700)="6e864eab4c5ed3866cbf82f9a4d42c64d30dca029f90935aec9552721a2884e71f455df72f5c3b1da447a48d9e0ec98987e1626d696bb177866e264233ad3df0ed0970443048588bf734f2ba837be4be694dfa04311955e5ad9718dcd3b20b8f5008bd5d504163e1de656545656659deedbd57782f7dd1a74722bf88d8db973e2f5302857b1782b0ee940b5c", 0x2, 0xffffffffffffffff, 0x4}, 0x38) r1 = add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000180), &(0x7f00000003c0)="0b42e03312b25c0c00c76a05864c0c874f0d24e89dc088efe0609aa910fb5e9f9e380a6dc881419964cbbd40d0d99c97760b96c9231d06a77cda110ba7fb49fb4312ea6c646e8c", 0x47, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x2b, 0x5, 0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r4, &(0x7f0000001dc0), 0x0, 0x2022, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='bcache_btree_write\x00', r0, 0x0, 0x10}, 0x18) r5 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000140)={&(0x7f0000000000)=[{0x0, 0xaa01, 0x0, 0x0}], 0x1}) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff3b, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) keyctl$read(0x2, r1, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x8, 0x2) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f00000005c0)=@usbdevfs_disconnect={0xd4e}) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 7.859078819s ago: executing program 5 (id=2122): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000080)=0x80000002, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r2 = open(&(0x7f0000001180)='./bus\x00', 0x400101042, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './bus\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) keyctl$join(0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000940), 0x80000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket(0x400000000010, 0x3, 0xd) 7.03107139s ago: executing program 1 (id=2125): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0x9, 0xf}, {0x2, 0x9}, 0x10, [0x3ff, 0x5, 0x400000000000, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0x2c4, 0x5, 0x4, 0x40, 0xdaa, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000200)=r2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) poll(0x0, 0x0, 0x6) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x23b) open(0x0, 0x143c62, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$sysctl(r7, 0x0, 0x0) open(0x0, 0xec902, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0f0000001d00040028bd7000fddbdf2514000e00fe80003d155982a5eebf6ef100000000"], 0x24}}, 0x0) 6.883354073s ago: executing program 5 (id=2126): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x10000000000001, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (rerun: 64) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) (async) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x22080) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x202000, &(0x7f0000000440)={[{@default_permissions, 0x3a}], [{@audit}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfsdef}], 0x2f}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x2c) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x254}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000040)={0x1, r3}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f00000022c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xc0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e01400000000010902240003000000000904"], 0x0) 6.395168443s ago: executing program 0 (id=2127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) close(r2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.762939913s ago: executing program 8 (id=2128): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000001a000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1d9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x409, 0x0, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x84, 0xc000}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x9f4a}, @IFLA_PORT_SELF={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x40}}, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100001082a7b3a09bd70000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c002b80080003001900000008000800", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000d0000100000"], 0x44}}, 0x0) 5.601309414s ago: executing program 5 (id=2130): connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0xff) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000a40)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)={0x20, 0x1, 0x3, 0x301, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4080) ppoll(&(0x7f0000006580)=[{r0, 0x410c}], 0x1, 0x0, 0x0, 0x0) 5.352353786s ago: executing program 0 (id=2131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) poll(&(0x7f00000000c0)=[{r0, 0x90a0}, {r1}, {r0, 0x20}, {r1, 0x140}], 0x4, 0xc) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r3}) keyctl$read(0x2, r2, &(0x7f0000001940)=""/4066, 0xfe2) 5.351640697s ago: executing program 7 (id=2132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa}}) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (rerun: 64) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd, 0x8, 0x0, 0x0, 0x16, 0x1}) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r7) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) (async, rerun: 64) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) (async, rerun: 64) r9 = memfd_secret(0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0xec, 0x30, 0x1, 0x0, 0x0, {}, [{0xd8, 0x1, [@m_mpls={0xd4, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x14, {{0x1}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x90}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x7b, 0x4, "6fa497831b1f6222d2cd87756830547a7e18b92535f1156412c3f5ecfe6c88ec342406124ca23d0b30102e7411949d9d2fed6ac4854c10572e3213de2d2c5e18e4a37cd84d50dcfd9eaa28453bc29f60203b84708516879e176e64f534f43eb79bf44cfcf625714adfe048be30ad36e6efa2ba7eb13963"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xec}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r9, 0x0) 4.774556185s ago: executing program 7 (id=2133): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet(0x2, 0x4, 0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, r3, 0x800, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4048800) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004800) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 4.595308664s ago: executing program 0 (id=2134): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000008000000fccce5ac0642c9e964d700000055d401004095c3a53b5adaafef00"/50], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061198c000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000006800010000000000000000000a00000000000000280008802400010000000000000000000000040000000000fe8000000000000000000000000000aa060007000500000008000500", @ANYRES8=r3], 0x50}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8100) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bb5, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 4.426581771s ago: executing program 8 (id=2135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000180)=@isofs_parent={0x14, 0x2, {0x26, 0x2, 0x7, 0xdc2, 0xfffffffb, 0x8fc4}}, 0x2100) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x28, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x78, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x807a}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_OKEY={0x8, 0x5, 0x8e}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xc442b}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x78}}, 0x8080) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180), &(0x7f0000000240)={'enc=', 'raw', ' hash=', {'sha3-384-generic\x00'}}, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [], 0xa, "992d42d7480ae3b9dd99b1651e9eee36a52e130e3ace28982b9ea750f39a47ea53f20f1fc2abd2b9204da1d373f7374467a7060bd4fd53eb0755ebb743a5610102984ceb8215746725fb91eb5e654b7588200ddf18ae47b11b074d7fda1f4155700712475fd80012a6745cf681b1b88eab66b9576e9d0cd9af540db7576626dba5fb2432334fb6eaec098fbd3bf15fdd71a60495f3970a56c7b832f0fd7a001a67a7c61e843a5568d6353fe28956e2683e923721a1204bc44c706476c84fe8384da1d497083664ca4b876c7584e1cb21413fd29a5c70e0ca6f67efb8f77d8ab19450195c7cd7472d019a"}, 0xf5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) 3.736938105s ago: executing program 5 (id=2136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0xa6, 0xff, 0x5, 0x40, 0xabcd, 0xcdee, 0x5b9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9c, 0x0, 0x0, 0x1, 0x3, 0x51}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x2a, 0xb, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, 0x20}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000000000020000000008510000006000000180000005538ad5173161b2b", @ANYRES32, @ANYBLOB="00000000000000002f0000000000000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000c000000009500007000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r3 = openat$drirender128(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x801) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc0106442, &(0x7f0000000000)) io_setup(0xb621, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 3.623175422s ago: executing program 0 (id=2137): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000880)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f00000003c0), 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast1, @dev}}}], 0x20}, 0x0) ioctl$sock_netdev_private(r1, 0x89fe, &(0x7f0000000200)="360dd55e8cef26b6af5d41120d57bae9a1fe62336cf17d2789f144d00247a78cde4b840b3ef1b9163cf0239a01cf6d0b867f3b1704646dd8f4daab610c8e5b15c0a2d6e00f34de691ecfd82eabda33cfcc288ee9393dc0d5b9a95735dc33bc463e7bf52e3420938bfb3e27d71fa716a5c6e5a8f63145f482e96dfb2b4ced1bfeed5def28e6a176591d977ee675b261431b5d62cfd36e1b08d53321159f7e70a6df1cfe6915b14e39f0d82a997b42516b3a426bba89be5a6a81ef48af6127ec9e27b3b9cc7ed0af3170bbd93b8fe1602f9d74334ce3de") add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='bfs\x00', 0x208000, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) 3.619879446s ago: executing program 1 (id=2138): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, &(0x7f0000000040)='--\x00') r4 = getuid() mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@uid_eq={'uid', 0x3d, r4}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000100)='./file0/../file0\x00') 3.558573045s ago: executing program 8 (id=2139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f00000000c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d8) clock_gettime(0x2, &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x8900, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_SREG={0x8}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x60040, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xe) kcmp(r0, r1, 0x4, r3, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000460000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.610989107s ago: executing program 7 (id=2140): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x80002, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000001300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008095}, 0x8014) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[], 0x1c}}, 0x24008805) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = epoll_create1(0x80000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x882c0, 0x0) poll(&(0x7f0000000040)=[{r8, 0x2000}], 0x1, 0x10000) (async) poll(&(0x7f0000000040)=[{r8, 0x2000}], 0x1, 0x10000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x20000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x20000000}) 2.524293316s ago: executing program 1 (id=2141): r0 = semget$private(0x0, 0x207, 0x0) semtimedop(r0, &(0x7f00000002c0)=[{}, {0x0, 0xff78}], 0x2, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) syz_emit_ethernet(0x204, &(0x7f0000000180)={@broadcast, @multicast, @void, {@mpls_uc={0x8847, {[{0xd5}, {0x200}, {0x1ff}], @ipv4=@igmp={{0x3a, 0x4, 0x1, 0x14, 0x1ea, 0x64, 0x0, 0x9, 0x2, 0x0, @empty, @rand_addr=0x64010102, {[@generic={0x89, 0x11, "b20d0847c10c7a1a5676ef2675406a"}, @rr={0x7, 0x13, 0xfc, [@empty, @multicast2, @private=0xa010100, @local]}, @cipso={0x86, 0x66, 0x1, [{0x1, 0xd, "e5ea875be8013f58ac31f3"}, {0x2, 0xb, "ad2b3a8daaa7a0f35b"}, {0x2, 0x8, "01399eb0559c"}, {0x1, 0x10, "4c97750b7844b9305409ea0aaa01"}, {0x2, 0x3, "f1"}, {0x6, 0x4, "0d1d"}, {0x0, 0xf, "9e6b526a2c6fe5a7fe2a6b21eb"}, {0x6, 0x6, "84d6888a"}, {0x5, 0x2}, {0x5, 0x12, "b26a90e70e99799238500176d9283f84"}]}, @noop, @cipso={0x86, 0x45, 0x1, [{0x6, 0xf, "788298758fe1e9721c975b612a"}, {0x6, 0x7, "4d39d1f899"}, {0x7, 0x11, "0955e667125ecfb054e412576d5363"}, {0x51810b412c74ce9c, 0x5, "730676"}, {0x5, 0xf, "47f5e64108640a88abd3816f01"}, {0x7, 0x4, "d85f"}]}, @generic={0x94, 0x4, "ccb2"}]}}, {0x5, 0x3, 0x0, @broadcast, "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"}}}}}}, 0x0) 2.148203296s ago: executing program 0 (id=2142): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r3) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000200)={0x14, r4, 0x701, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 2.144033298s ago: executing program 7 (id=2143): r0 = syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x3, 0x20000000, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x701, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) shutdown(r6, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000240)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', r7, r0, 0x6, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000000026c00004100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000002001600000000000000000000005800f8ff0000000000000007bad9f441c32eff8c159cb3993d75bcf4dab40756295022b6fc1bf9635844902dc260dfa1a59c8931afc25d52be6dabb1e317787cdb7b88aa0fc9f7186aaf8155ee8357ab3fb8b7e7e7ecf05663002a37f590a6542de46986d9bdfa77ebc2874d42f1f0a0caa2cf1565eada34023d7274f4ef57c7fb1e8721f1"], 0x50) 1.779141321s ago: executing program 0 (id=2144): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x1800, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYRES64=0x0]) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = eventfd(0x0) read$eventfd(r2, 0x0, 0x59) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x20000000}) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0xbac3) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x301, 0x0, 0x1, 0xfe, 0x0}) 1.063222992s ago: executing program 1 (id=2145): socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000280)={0x0, 0x6, 0x5f, {0x5f, 0x1, "a7ea3163fd3bc5b9b7d692a85eee6338bd30656949d6f6a3fd8859ccb712860810c7e7e1c187cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a7e24288982d5337c364daf03bd400d66293b0a2b103dd93f54cd5d79e29f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1) r4 = add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="8672a9e417ecf91b9455972d", 0xfffffffffffffddb, r3) keyctl$read(0x2, r4, &(0x7f0000001940)=""/4075, 0xfeb) 1.05930143s ago: executing program 5 (id=2146): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x9, 0x4c002) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/249, &(0x7f0000000140)=0xf9) (async) readv(r1, &(0x7f0000002680)=[{&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/213, 0xd5}, {&(0x7f0000001380)=""/23, 0x17}, {&(0x7f00000013c0)=""/224, 0xe0}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/248, 0xf8}, {&(0x7f00000025c0)=""/131, 0x83}], 0x8) (async) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002700), 0xc0300, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002740)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002780)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002b40)={'syztnl2\x00', &(0x7f0000002ac0)={'sit0\x00', 0x0, 0x8000, 0x20, 0x0, 0x4, {{0xb, 0x4, 0x3, 0x31, 0x2c, 0x65, 0x0, 0x2f, 0x29, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@timestamp={0x44, 0x14, 0x90, 0x0, 0x8, [0x9, 0xfffffffd, 0x8, 0x438e]}, @noop]}}}}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002b80)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002cc0)={0x14, 0x35, &(0x7f00000027c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x1, 0x9, 0x4, 0xe0fd, 0xfff}, @generic={0x1, 0x9, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002980)='GPL\x00', 0x8, 0xeb, &(0x7f00000029c0)=""/235, 0x41100, 0x5c, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000002bc0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000002c00)={0x0, 0x3, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000002c40)=[{0x1, 0x3, 0x2, 0x9}, {0x0, 0x1, 0x5, 0x9}, {0x3, 0x3, 0xd, 0x6}, {0x0, 0x4, 0xb, 0x8}, {0x4, 0x3, 0xf, 0x5}, {0x1, 0x4, 0x7, 0x1}], 0x10, 0x4, @void, @value}, 0x94) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000002d80)={"b67a37037f4aedcab1e4efdfa6c9ccb0e506551d288efad8877a5b981c83df5f", r2, 0xffffffffffffffff}) ftruncate(r7, 0x9) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x24, 0xf, 0x6, 0x204, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1012) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x38, 0x140f, 0x400, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4004) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000030c0)={0x40, 0x0, &(0x7f0000002fc0)=[@exit_looper, @free_buffer, @dead_binder_done, @request_death={0x400c630e, 0x3}, @increfs, @increfs={0x40046304, 0x3}, @enter_looper], 0x97, 0x0, &(0x7f0000003000)="8328f78edae54b3d81f81fa58d222c4d9cec6c438a2f8d24769de6b10af3091c1f05f0d08f2436cd2096532a196688e34d9d758281c6e0c998923f0e62c1d0eb0668e78aff21212c834aed019a615336cfd94108150f8d6f6540d24bee41ecd3f1b16d8b0ccf53b47e8b8ce7fb2ddd4b91a17e1594fb0a3513c5b49112f2e09d96b8c65a6765e1f5298536d3def56dbd493bcfd6fcc60b"}) (async, rerun: 64) syz_clone(0x2000000, &(0x7f0000003100)="51e2865481d770005a679bccfcf271b853bec29047c00938c9c2ef1eeb94d92edf0db6d7b0ac7ee08e0d89725534dcd579b5251f0672ea47023f682087ed245b5edfc603794d0ef9d21114b0888599facb6186d07775d0c0b4f0256e1d620c314e808e7a9b613c3ed90e837e69cc60f2941f3d7779d5c626759636f840659f9e740ea6", 0x83, &(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240)="cba7075426cf829fa373110864fd9144c5388aeb448117332a8a3c7d5b009b118afb2d73b5dae50fb156af072781a0737cfb72e9ce9167f5c5e874") bpf$OBJ_PIN_PROG(0x6, &(0x7f00000032c0)=@generic={&(0x7f0000003280)='./file0\x00'}, 0x18) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000301, 0xee00, 0x0) (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000005440)={&(0x7f0000003300)="006e05c2bb4d7be5ad6f827b4986758e3a65faee7a83e030ea847b740d641733828642b927be4349096b0bc5e99b8d778885e03af6ba00861bc77af0d90faf3a8035df269ac9da03380d570099f070bddcb91f09a2561cfa2d611a94034682f30658bc486dc295be4101220fd2166a34f001061f08d03be70ed50317e4d016d7b777cff6b54654a06eeadffd62466e8c5ed9e8062bea4520", &(0x7f00000033c0)=""/65, &(0x7f0000003440)="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", &(0x7f0000004440)="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", 0x2, r2}, 0x38) (rerun: 64) r8 = geteuid() (async) r9 = add_key$keyring(&(0x7f0000005480), &(0x7f00000054c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_persistent(0x16, r8, r9) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000005500)=""/202, &(0x7f0000005600)=0xca) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000005640)={0x0, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000005700)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000005740)={0xb, 0x1, 0x2, 0x9, r10}, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000057c0), r2) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000005bc0)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005b80)={&(0x7f0000005800)={0x350, r11, 0x984, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0xdc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd8, 0x5, "6fff0756cdec611b2978ef5d17cf752980b7fe301bd40d0740eda4c1e646202641e96ae3cf2c2767306ec6cfc02d45538c4fd291222f822b649f6a8868139f8159606c1b60471f4bfb58267b7ca939112ee1d41927297cb9c50bb85f2b0b5e0a1cf792bdff5c5c761663dd6ef1cf6b834af0ed290068203206974c5d8c1e03359f4bedafa4baf6acab802add3a7a6fa68f6e977a762f4b1ee7b59aaa3020b0fd2b00e0a3df41d41f94d7b4f6663ebe421a0ca220a5940bbc0a64e14dddd19d8f912637726e296ea1c9732e5e472e3c53df81fe47"}]}, @ETHTOOL_A_WOL_SOPASS={0xbe, 0x3, "4ba632a2477f7fa52321f366ad8a3eb7bf2ba0cfa7414ebb5f27da752e06f6255eff080b03d541e4bef488a21a8e15a5a8fe3c18b4ab9ccce48273d2e094bd6fdd9e49671a3f68af447ed3ce08c15d9793894cf60cbebb8f0b27425862757bf621c59eb52cd5d02d1eefaa72898b755b94ce49188dcaf968dbc54d02f5fd176bc62c154727f5f42234afac268854ac286f92945c4256a40c2939bc4d7999d2b1887da9e58832c0effb1c7ec9c1e93fdb41b79cf157121e5c5d42"}, @ETHTOOL_A_WOL_SOPASS={0xb2, 0x3, "469a8acf809a4ca3ecb8b9b0b5ee54746c0815e6a738930ed8c61ac226b00d847b4079e8969776f40f7f4e181417598eaf02ea044713c6f92c2feecd66583ed3edc8bf683dce3441c0b4e16521a098ce20c367c59f09817f8848f25ba9a8ac87dafc0eefae4180cbab728d1d8f46d27251f9f371a79f556f9018f61526e38bacc5bf3d00167d765122b1dffaa2f003aa5e8dda873770072dbec50fb111112c2285f793b43873d876d88b1c1a774b"}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x4e, 0x3, "51527ac311fd5d7272657ba93e9f522c7780e757c86ca399c17520a57ec469141a5fd376250d796537ef6b4fdd7da095a2ddefff8a6ad5bf98de154185e66571a47791e5a135f2f7b880"}, @ETHTOOL_A_WOL_SOPASS={0x47, 0x3, "92b94294582d00b844638cde9b96ffccd1b97f1dee67a642e8c253a8dcc90fa00feb451c171a92cee615d6687df1fedc24a40fe08b1aa8190e7fde32e26944842ab9e8"}]}, 0x350}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000810) (async, rerun: 32) socket$inet6(0xa, 0x6, 0x400) (async, rerun: 32) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000006300)={0x24, &(0x7f00000060c0)={0x40, 0x5, 0x69, {0x69, 0x5, "a0a45136bf600880ac427cecb26a881b7ada41765df4a403c7b79f5bf6c21350f1a7b04b58fb8c30ff1cbb20ff4e5b77e1dcce624ce0a669c168c5050ced1978a846a56a243856165cec7017e400a558184b099ae6956773f73516d478fead3d7795a0b6118395"}}, &(0x7f0000006140)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f0000006280)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0x4, "96d530e7"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xc, "3895346a"}, @local=@item_012={0x1, 0x2, 0x5, "d5"}, @global=@item_012={0x1, 0x1, 0x8, 's'}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "6529eee7"}, @local=@item_012={0x2, 0x2, 0x8, '|m'}, @local=@item_4={0x3, 0x2, 0x5, "39008528"}, @global=@item_4={0x3, 0x1, 0x2, "3db652a7"}]}}, &(0x7f00000062c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7f, 0x0, 0x1, {0x22, 0x4c2}}}}, &(0x7f0000006600)={0x2c, &(0x7f0000006340)={0x20, 0xd, 0xe6, "38507d4fd69d34330c69f502d1ca92499ff4cbc5a222a3413e8f2a33f640e619ee04e430c5e7f39c7079de9a0d583f3af8956200e655f9e22beeb038fc0a91fe4f8565175fd6070a96307f8b78f4eb722cac79752622a7967c3cbf0b6f42b3a9f2b653ac06ceb25e4248b3af24566653d997dd061a458f7203611d96cc76a95f60d477702a885007be4befd0bc185877f0a0555cd6fe0afac8ec3619ef918afcfe9b4057e5d34d57fa6fec24c4ebd766bbbebca8ae4724bf02bf7e32ad6d05b855f9c471dd45bac53cef77ac837907fecf257d9933f73e07ab385a13354381a312dd86bcac31"}, &(0x7f0000006440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000006480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000064c0)={0x20, 0x1, 0xc8, "66b6df17bf46b6cbe2e698269314fb9341f253612ce53746970079810876e9de6f599130b622a7345b9377c4a88cb17ed414ef295796edd6d50e650dab5ade30ad5e63345974b8462b79ead598197b9de7a3409a18d877673c9c2504983017a1710893dd016d7208a5d976e28cb7358674a1e3093146224c54b940b5dbb2da23fe984fa0bfee68742f29e926e1e0cbdf7bc1d67e2161987a0019bed4a3287195510e45f7485f3a2cad05bc8f6ba24441f60d4c0c0661940f9dfef02d4574c53d699fc35f4b498bc1"}, &(0x7f00000065c0)={0x20, 0x3, 0x1, 0x9}}) 1.042315756s ago: executing program 7 (id=2147): connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0xff) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000a40)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)={0x20, 0x1, 0x3, 0x301, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4080) ppoll(&(0x7f0000006580)=[{r0, 0x410c}], 0x1, 0x0, 0x0, 0x0) 432.086423ms ago: executing program 7 (id=2148): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r1, 0x6, 0x0, @void}, 0x10) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xff, 0x8, 0xa, {0x7, 0x25, 0x1, 0x80, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3e, 0x0, 0x5, 0x0, {0x7, 0x25, 0x1, 0x2, 0x3, 0x7}}}}}}}]}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x1e, 0x1, 0x70bd29, 0x25dfdbfb, {0x18}, [@nested={0x9, 0xad, 0x0, 0x1, [@generic="0976f873d5"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008001}, 0x4040) 335.122506ms ago: executing program 5 (id=2149): waitid(0x0, 0x0, 0x0, 0x4, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000040), 0x84000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x40, 0x17, 0x39, "c85dbc55191071ea3326109e8f235d4122df2d4fb0450d7f5ad016dc646365671c5948bce90f26d6098d1bb789a0a9111e42e99f6ff1658300"}, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0x0, 0x5eb, 0xe9, 0xfffd, 0x4, 0x3, 0x0, 0xffffffff, 0x1, 0x9, 0xb, 0x1}}, 0x0, &(0x7f0000000680)={0x20, 0x83, 0x2}, &(0x7f00000006c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000700)={0x20, 0x89, 0x2}}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 0s ago: executing program 8 (id=2150): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRESDEC, @ANYBLOB="253a574b6a82f3103e121e3432ccefbf8f0ea5e950399b89330cdc896ee35e0d326388ad7b59556a0492b33ecb9f70d0a8f6c1cff1d5f069a55b7b921070af89d1a1548ad233ba7690d0e0ab9404126ab0b4c611eec9b4345538da3a42209a188f1bf32ddb4bba4f147b1658efb5cd6f8f7269cd5d5e16c3d7594625ebf03356b7344ca79abdf7593200984ad0396e7bcf0ab88f79ef61acbf9711e2142fc9ed4055a17d280a01704d11e716d621c307ab3e4580", @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESHEX=0x0], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0xa02, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000001140)={0x27, {0x0, 0x7, 0x200, 0xfffffffc}}) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYBLOB='N9', @ANYBLOB="020000000400000008001b0010000080", @ANYRES16=r0], 0x28}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) socket(0x10, 0x3, 0x0) socket(0x2a, 0x80006, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000001040)=0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getpid() mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x59eea000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_xfrm(0x10, 0x3, 0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = memfd_create(&(0x7f00000014c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00.q\x04\x06!\xf2L\xa7\xa7D(k\xcb\x92:\x9d\xaf\xad\xfd\x0e\xee\xf9\x13\x00\t&9Q2\x9a\x97\xf2\xe1\xcc\x87\x8b\x8e\xd8\xe3y\xae\ai\x0e\x1d\xf2\xcd\xfb\x95\xb6+\x87\xc1-0Z`|\xe2\xaa\x87\x18\xb8V\xc6\xea$}\x8bO\xfb\x9b\xc3\x98\xfd\x01>\x12\xa28\xbeM\x92^]\xd1C\x8e$q\xb7.\xcb\x03-\x82\x1b\x96\xf3QOd\xff\xc1\xbf5\x88l\xda\xcd{\xe0\xe0\xd8\xfe\xe16\t\x02{{5\xab\x80\x91\xbf\xa3\f\x1a\xac\x93!\xd2\x8f^)\xde\xbe\xc2\v\xf5\x03[\xf3\x97i\xe3\xaf\xd5\x7f\xb1n\xb53\xc3y`', 0x4) ftruncate(r5, 0xffff) kernel console output (not intermixed with test programs): 920] usb 2-1: Manufacturer: syz [ 779.936517][ T5920] usb 2-1: SerialNumber: syz [ 780.020732][ T78] usb 6-1: new low-speed USB device number 81 using dummy_hcd [ 780.041334][ T78] usb 6-1: Invalid ep0 maxpacket: 32 [ 780.167686][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1700'. [ 780.185511][ T78] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 780.225495][ T78] usb 6-1: Invalid ep0 maxpacket: 32 [ 780.233783][ T5920] usb 2-1: USB disconnect, device number 90 [ 780.235757][ T78] usb usb6-port1: unable to enumerate USB device [ 780.897471][T12774] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1704'. [ 780.920071][ T29] audit: type=1804 audit(2000000446.227:2035): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1704" name="/newroot/200/bus/bus" dev="overlay" ino=1079 res=1 errno=0 [ 780.948262][ T29] audit: type=1400 audit(2000000446.257:2036): avc: denied { module_load } for pid=12773 comm="syz.6.1704" path="/200/bus/bus" dev="overlay" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 780.973945][T12774] Invalid ELF header magic: != ELF [ 781.989001][ T5920] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 782.042654][ T29] audit: type=1400 audit(2000000446.817:2037): avc: denied { ioctl } for pid=12775 comm="syz.6.1705" path="socket:[41988]" dev="sockfs" ino=41988 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 782.140875][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 782.150079][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.187567][ T5920] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 782.213338][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.231269][T12793] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.238359][T12793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.263336][ T5920] usb 2-1: Product: syz [ 782.267504][ T5920] usb 2-1: Manufacturer: syz [ 782.377104][ T5920] usb 2-1: SerialNumber: syz [ 782.383557][ T5920] usb 2-1: config 0 descriptor?? [ 782.392997][ T5920] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 782.558426][T12793] xt_socket: unknown flags 0xc [ 783.640992][ T5920] gspca_sunplus: reg_w_1 err -110 [ 783.718476][T12806] SELinux: syz.1.1703 (12806) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 784.111726][ T29] audit: type=1400 audit(2000000449.407:2038): avc: denied { bind } for pid=12807 comm="syz.5.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 784.450823][ T5901] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 784.610680][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 784.625772][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.646557][ T5901] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 784.687019][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.700903][ T29] audit: type=1400 audit(2000000449.997:2039): avc: denied { map } for pid=12810 comm="syz.6.1713" path="socket:[42090]" dev="sockfs" ino=42090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 784.724720][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.731387][ T5901] usb 6-1: config 0 descriptor?? [ 784.738601][ T5901] hub 6-1:0.0: USB hub found [ 784.809916][ T29] audit: type=1400 audit(2000000450.117:2040): avc: denied { read } for pid=12810 comm="syz.6.1713" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 784.858331][ T29] audit: type=1400 audit(2000000450.157:2041): avc: denied { create } for pid=12810 comm="syz.6.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 784.898816][ T29] audit: type=1400 audit(2000000450.157:2042): avc: denied { ioctl } for pid=12810 comm="syz.6.1713" path="socket:[41698]" dev="sockfs" ino=41698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 784.964981][T12816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.977387][T12816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.994545][ T29] audit: type=1400 audit(2000000450.157:2043): avc: denied { bind } for pid=12810 comm="syz.6.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 785.015376][ T29] audit: type=1400 audit(2000000450.157:2044): avc: denied { connect } for pid=12810 comm="syz.6.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 785.319422][ T29] audit: type=1400 audit(2000000450.627:2045): avc: denied { bind } for pid=12814 comm="syz.5.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 785.571150][ T5920] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 785.638462][ T5920] usb 2-1: USB disconnect, device number 91 [ 786.445295][ T29] audit: type=1400 audit(2000000451.757:2046): avc: denied { read } for pid=12833 comm="syz.0.1717" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 786.480267][ T29] audit: type=1400 audit(2000000451.787:2047): avc: denied { ioctl } for pid=12833 comm="syz.0.1717" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 786.505766][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.780798][ T25] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 786.943958][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 786.964311][ T25] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 786.984469][ T25] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 786.995068][ T25] usb 2-1: Product: syz [ 786.999331][ T25] usb 2-1: Manufacturer: syz [ 787.004049][ T25] usb 2-1: SerialNumber: syz [ 787.010934][ T25] usb 2-1: config 0 descriptor?? [ 787.017301][T12837] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 787.432704][ T78] usb 2-1: USB disconnect, device number 92 [ 787.699076][ T5901] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 787.736625][ T5901] usbhid 6-1:0.0: can't add hid device: -71 [ 787.755989][ T5901] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 787.805298][ T5901] usb 6-1: USB disconnect, device number 83 [ 787.882573][ T5920] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 788.091845][ T5920] usb 7-1: device descriptor read/64, error -71 [ 788.434919][T12871] tipc: Started in network mode [ 788.440033][T12871] tipc: Node identity 080211, cluster identity 4711 [ 788.451379][ T5920] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 788.457825][T12871] tipc: Enabled bearer , priority 0 [ 788.515180][T12876] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 788.524631][T12876] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 788.591243][ T5920] usb 7-1: device descriptor read/64, error -71 [ 788.701089][ T5920] usb usb7-port1: attempt power cycle [ 789.487485][ T25] tipc: Node number set to 134353152 [ 789.531250][ T5920] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 789.551763][ T5920] usb 7-1: device descriptor read/8, error -71 [ 790.724714][T12896] ALSA: mixer_oss: invalid OSS volume '' [ 790.755927][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 790.755946][ T29] audit: type=1400 audit(2000000455.837:2062): avc: denied { write } for pid=12886 comm="syz.1.1733" path="socket:[42296]" dev="sockfs" ino=42296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 791.681618][ T5920] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 791.709168][ T5920] usb 7-1: device descriptor read/8, error -71 [ 791.832397][ T5920] usb usb7-port1: unable to enumerate USB device [ 792.043034][ T78] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 792.254679][ T5920] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 792.437279][ T5920] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.470303][ T5920] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 792.604301][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.699788][ T5920] usb 7-1: config 0 descriptor?? [ 792.775946][ T78] usb 1-1: Using ep0 maxpacket: 32 [ 792.793122][ T78] usb 1-1: unable to get BOS descriptor or descriptor too short [ 792.797746][ T5920] pwc: Askey VC010 type 2 USB webcam detected. [ 792.839349][ T29] audit: type=1400 audit(2000000458.147:2063): avc: denied { ioctl } for pid=12927 comm="syz.7.1742" path="socket:[42343]" dev="sockfs" ino=42343 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 792.868422][ T78] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 792.897017][ T78] usb 1-1: can't read configurations, error -71 [ 792.985439][T12932] netlink: 'syz.0.1743': attribute type 1 has an invalid length. [ 793.103914][T12932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 793.144098][T12936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 793.151233][T12936] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 793.162551][T12936] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 793.229143][ T5920] pwc: recv_control_msg error -32 req 02 val 2b00 [ 793.256612][ T5920] pwc: recv_control_msg error -32 req 02 val 2700 [ 793.276405][ T5920] pwc: recv_control_msg error -32 req 02 val 2c00 [ 793.290945][ T5920] pwc: recv_control_msg error -32 req 04 val 1000 [ 793.311824][ T5920] pwc: recv_control_msg error -32 req 04 val 1300 [ 793.328790][T12912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.333215][ T5920] pwc: recv_control_msg error -32 req 04 val 1400 [ 793.340703][T12912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.367550][ T5920] pwc: recv_control_msg error -71 req 02 val 2000 [ 793.377133][ T5920] pwc: recv_control_msg error -71 req 02 val 2100 [ 793.409090][ T5920] pwc: recv_control_msg error -71 req 04 val 1500 [ 793.416241][ T5920] pwc: recv_control_msg error -71 req 02 val 2500 [ 793.446965][ T5920] pwc: recv_control_msg error -71 req 02 val 2400 [ 793.461907][ T5920] pwc: recv_control_msg error -71 req 02 val 2600 [ 793.480700][ T5920] pwc: recv_control_msg error -71 req 02 val 2900 [ 793.489735][ T5920] pwc: recv_control_msg error -71 req 02 val 2800 [ 793.633619][ T5920] pwc: recv_control_msg error -71 req 04 val 1100 [ 793.642291][ T5920] pwc: recv_control_msg error -71 req 04 val 1200 [ 793.656383][ T5920] pwc: Registered as video103. [ 793.661856][ T5920] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input40 [ 793.675783][ T5920] usb 7-1: USB disconnect, device number 50 [ 793.952673][T12953] overlayfs: failed to resolve './file1': -2 [ 794.629271][ T29] audit: type=1400 audit(2000000459.937:2064): avc: denied { bind } for pid=12964 comm="syz.0.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 795.760751][ T29] audit: type=1400 audit(2000000461.067:2065): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.10.48 dest=55158 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 795.795323][ T29] audit: type=1400 audit(2000000461.097:2066): avc: denied { setopt } for pid=12948 comm="syz.1.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 795.911218][ T29] audit: type=1400 audit(2000000461.097:2067): avc: denied { connect } for pid=12948 comm="syz.1.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 795.916493][T12983] sp0: Synchronizing with TNC [ 796.087251][T12983] xt_socket: unknown flags 0x50 [ 796.246109][ T5901] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 797.033751][ T29] audit: type=1400 audit(2000000462.047:2068): avc: denied { write } for pid=12995 comm="syz.7.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 797.292825][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 797.304160][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.315273][ T5901] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 797.324573][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.342403][ T5901] usb 7-1: config 0 descriptor?? [ 797.641870][ T5908] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 797.703143][T13014] Cannot find add_set index 0 as target [ 797.807980][ T5908] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 797.827752][ T5908] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 797.840250][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=8, SerialNumber=3 [ 797.851821][ T5908] usb 6-1: Product: syz [ 797.856081][ T5908] usb 6-1: Manufacturer: syz [ 797.860882][ T5908] usb 6-1: SerialNumber: syz [ 797.867726][ T5908] usb 6-1: config 0 descriptor?? [ 797.950769][ T5920] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 797.986636][ T5901] isku 0003:1E7D:319C.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 798.055666][ T7318] Bluetooth: hci6: command 0x0405 tx timeout [ 798.167601][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.179950][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.191413][ T5901] isku 0003:1E7D:319C.002B: couldn't init struct isku_device [ 798.198830][ T5901] isku 0003:1E7D:319C.002B: couldn't install keyboard [ 798.212606][ T5901] isku 0003:1E7D:319C.002B: probe with driver isku failed with error -71 [ 798.226559][ T5920] usb 1-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 798.237637][ T5901] usb 7-1: USB disconnect, device number 51 [ 798.255734][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.267458][ T5920] usb 1-1: config 0 descriptor?? [ 798.688590][ T5920] wacom 0003:056A:00BC.002C: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 798.709305][ T5920] wacom 0003:056A:00BC.002C: hidraw0: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.0-1/input0 [ 798.725630][ T5920] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BC.002C/input/input41 [ 798.825194][ T29] audit: type=1400 audit(2000000464.137:2069): avc: denied { mount } for pid=13021 comm="syz.6.1769" name="/" dev="rpc_pipefs" ino=43197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 798.893184][ T5920] usb 1-1: USB disconnect, device number 94 [ 800.317412][ T5920] usb 6-1: USB disconnect, device number 84 [ 800.462793][ T5901] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 800.514620][ T29] audit: type=1400 audit(2000000465.827:2070): avc: denied { create } for pid=13034 comm="syz.5.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 800.610742][ T5901] usb 7-1: device descriptor read/64, error -71 [ 800.881939][ T5901] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 801.043577][ T5901] usb 7-1: device descriptor read/64, error -71 [ 801.171929][ T5901] usb usb7-port1: attempt power cycle [ 802.380966][ T5901] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 802.593422][ T5901] usb 7-1: device not accepting address 54, error -71 [ 803.010975][ T5920] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 803.154201][T13039] syz.0.1773 (13039): drop_caches: 1 [ 803.209689][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1779'. [ 803.220485][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1779'. [ 803.220749][ T5901] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 803.242275][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 803.243666][T13064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1779'. [ 803.250477][ T5920] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 803.256810][T13064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1779'. [ 803.272868][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.276891][T13064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1779'. [ 803.283019][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 803.293118][T13064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1779'. [ 803.298226][ T5920] usb 6-1: Product: syz [ 803.309968][T13063] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1779'. [ 803.311489][ T5920] usb 6-1: Manufacturer: syz [ 803.320820][T13063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1779'. [ 803.326002][ T5920] usb 6-1: SerialNumber: syz [ 803.343889][T13063] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1779'. [ 803.352332][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.367495][ T5901] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 803.377196][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.387438][T13063] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1779'. [ 803.445006][ T5920] r8152-cfgselector 6-1: Unknown version 0x0000 [ 803.451482][ T5920] r8152-cfgselector 6-1: config 0 descriptor?? [ 803.459240][ T5901] usb 7-1: config 0 descriptor?? [ 803.490856][ T7318] Bluetooth: hci6: command 0x0405 tx timeout [ 803.926988][ T29] audit: type=1400 audit(2000000469.237:2071): avc: denied { bind } for pid=13054 comm="syz.6.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 803.931380][ T5901] input: HID 041e:3100 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:041E:3100.002D/input/input44 [ 803.955348][ T29] audit: type=1400 audit(2000000469.237:2072): avc: denied { listen } for pid=13054 comm="syz.6.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 803.972744][T13068] syzkaller1: entered promiscuous mode [ 803.985045][T13068] syzkaller1: entered allmulticast mode [ 803.996870][ T29] audit: type=1400 audit(2000000469.237:2073): avc: denied { connect } for pid=13054 comm="syz.6.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 804.018523][ T29] audit: type=1400 audit(2000000469.287:2074): avc: denied { create } for pid=13067 comm="syz.7.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 804.027313][ T5901] creative-sb0540 0003:041E:3100.002D: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.6-1/input0 [ 804.038070][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.232413][T13055] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 804.239043][T13055] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 804.261894][T13055] vhci_hcd vhci_hcd.0: Device attached [ 804.441797][ T5901] vhci_hcd: vhci_device speed not set [ 804.510762][ T5901] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 804.884527][T13080] vhci_hcd: connection reset by peer [ 805.386038][ T29] audit: type=1400 audit(2000000470.187:2075): avc: denied { getopt } for pid=13086 comm="syz.7.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 805.410785][ T9326] vhci_hcd: stop threads [ 805.410874][ T9326] vhci_hcd: release socket [ 805.411001][ T9326] vhci_hcd: disconnect device [ 805.420727][ T5868] usb 7-1: USB disconnect, device number 55 [ 805.870808][ T5908] r8152-cfgselector 6-1: USB disconnect, device number 85 [ 807.507128][T13099] netlink: 'syz.5.1787': attribute type 10 has an invalid length. [ 807.751818][ T5920] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 807.881785][ T5920] usb 7-1: device descriptor read/64, error -71 [ 808.181387][ T5864] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 808.285471][T13124] __nla_validate_parse: 1 callbacks suppressed [ 808.285511][T13124] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1793'. [ 808.351544][ T5920] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 808.754642][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.761129][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.820703][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 808.916745][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 808.919064][ T5920] usb 7-1: device descriptor read/64, error -71 [ 808.931748][ T5864] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 0 [ 808.957056][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 809.001906][ T5864] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 809.057690][ T5920] usb usb7-port1: attempt power cycle [ 809.087803][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.095919][ T5864] usb 1-1: Product: syz [ 809.100103][ T5864] usb 1-1: Manufacturer: syz [ 809.104749][ T5864] usb 1-1: SerialNumber: syz [ 809.115231][ T5864] usb 1-1: config 0 descriptor?? [ 809.121764][ T5864] gs_usb 1-1:0.0: Required endpoints not found [ 809.415838][ T78] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 809.570666][ T78] usb 6-1: Using ep0 maxpacket: 16 [ 809.582126][ T78] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 809.626395][ T78] usb 6-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 809.702873][ T78] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 809.819195][ T78] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.962490][ T78] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.002734][ T78] usb 6-1: config 0 interface 0 has no altsetting 0 [ 810.071185][ T5901] vhci_hcd: vhci_device speed not set [ 810.111025][ T78] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 810.130410][ T78] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.144451][ T78] usb 6-1: config 0 descriptor?? [ 810.153036][ T29] audit: type=1400 audit(2000000475.467:2076): avc: denied { read } for pid=13151 comm="syz.1.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 810.172317][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.258145][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1803'. [ 810.399154][T13126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 810.471272][ T5920] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 810.523679][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.541715][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.567725][ T5920] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 810.595963][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.645118][ T5920] usb 7-1: config 0 descriptor?? [ 810.900509][ T29] audit: type=1400 audit(2000000476.207:2077): avc: denied { setopt } for pid=13153 comm="syz.6.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 810.985097][ T5901] usb 1-1: USB disconnect, device number 95 [ 811.007254][T13126] team0: Port device vxcan1 added [ 811.072465][ T78] kye 0003:0458:0138.002E: unknown main item tag 0x0 [ 811.079202][ T78] kye 0003:0458:0138.002E: unknown main item tag 0x0 [ 811.085993][ T78] kye 0003:0458:0138.002E: unknown main item tag 0x0 [ 811.092789][ T78] kye 0003:0458:0138.002E: report_id 915 is invalid [ 811.099405][ T78] kye 0003:0458:0138.002E: item 0 4 1 8 parsing failed [ 811.106732][ T78] kye 0003:0458:0138.002E: parse failed [ 811.112400][ T78] kye 0003:0458:0138.002E: probe with driver kye failed with error -22 [ 811.206583][ T5920] itetech 0003:06CB:73F6.002F: hidraw0: USB HID v0.00 Device [HID 06cb:73f6] on usb-dummy_hcd.6-1/input0 [ 811.462463][ T5868] usb 7-1: USB disconnect, device number 58 [ 811.476923][ T29] audit: type=1400 audit(2000000476.787:2078): avc: denied { listen } for pid=13175 comm="syz.1.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 811.564277][T13173] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1806'. [ 811.659183][ T5901] usb 6-1: USB disconnect, device number 86 [ 811.680828][ T5920] usb 1-1: new low-speed USB device number 96 using dummy_hcd [ 811.769013][ T29] audit: type=1400 audit(2000000477.077:2079): avc: denied { accept } for pid=13175 comm="syz.1.1807" lport=53025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 811.789697][ C0] vkms_vblank_simulate: vblank timer overrun [ 811.822741][ T5920] usb 1-1: device descriptor read/64, error -71 [ 812.071578][ T5920] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 812.227355][ T5920] usb 1-1: device descriptor read/64, error -71 [ 813.327836][ T5920] usb usb1-port1: attempt power cycle [ 813.820753][ T29] audit: type=1400 audit(2000000479.127:2080): avc: denied { egress } for pid=16 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 813.844309][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.845534][ T5868] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 813.914650][ T29] audit: type=1400 audit(2000000479.127:2081): avc: denied { sendto } for pid=16 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 814.282849][T13196] tipc: Enabling of bearer rejected, already enabled [ 814.468822][ T5920] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 814.742189][ T5868] usb 7-1: config index 0 descriptor too short (expected 200, got 144) [ 814.750697][ T5868] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 814.759392][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.784523][ T5868] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 814.881375][ T5920] usb 1-1: device descriptor read/8, error -71 [ 814.938436][ T5868] usb 7-1: config 1 has no interface number 1 [ 814.944963][ T5868] usb 7-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 814.955924][ T5868] usb 7-1: config 1 interface 2 has no altsetting 1 [ 814.964391][ T5868] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.974108][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.982916][ T5868] usb 7-1: Product: syz [ 814.987091][ T5868] usb 7-1: Manufacturer: syz [ 815.121037][ T5920] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 815.145185][ T5920] usb 1-1: device descriptor read/8, error -71 [ 815.228371][ T5868] usb 7-1: SerialNumber: syz [ 815.323393][ T5868] usb 7-1: 2:2 : no or invalid class specific endpoint descriptor [ 815.418086][ T5868] usb 7-1: USB disconnect, device number 59 [ 815.497071][ T5920] usb usb1-port1: unable to enumerate USB device [ 816.000705][ T29] audit: type=1400 audit(2000000481.197:2082): avc: denied { append } for pid=13202 comm="syz.7.1814" name="sg0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 816.024415][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.088931][T13206] Cannot find set identified by id 0 to match [ 816.142328][ T29] audit: type=1400 audit(2000000481.447:2083): avc: denied { getopt } for pid=13205 comm="syz.1.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 816.403301][ T29] audit: type=1400 audit(2000000481.717:2084): avc: denied { write } for pid=13211 comm="syz.0.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 816.422682][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.430433][ T29] audit: type=1400 audit(2000000481.717:2085): avc: denied { map } for pid=13211 comm="syz.0.1818" path="pipe:[43655]" dev="pipefs" ino=43655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 816.770707][ T5901] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 816.936120][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 816.954731][ T5901] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 816.981418][ T5901] usb 1-1: config 0 has no interface number 0 [ 817.009440][ T5901] usb 1-1: config 0 interface 184 has no altsetting 0 [ 817.404530][ T5901] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 817.424457][ T29] audit: type=1326 audit(2000000482.737:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.5.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5944185d29 code=0x7ffc0000 [ 817.459522][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.481381][ T5901] usb 1-1: Product: syz [ 817.485581][ T5901] usb 1-1: Manufacturer: syz [ 817.506774][ T5901] usb 1-1: SerialNumber: syz [ 817.516743][ T29] audit: type=1326 audit(2000000482.737:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.5.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5944185d29 code=0x7ffc0000 [ 817.517528][ T5901] usb 1-1: config 0 descriptor?? [ 817.541017][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.554211][ T29] audit: type=1326 audit(2000000482.737:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.5.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5944185d29 code=0x7ffc0000 [ 817.577743][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.591727][ T29] audit: type=1326 audit(2000000482.737:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.5.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5944185d29 code=0x7ffc0000 [ 817.623452][ T29] audit: type=1326 audit(2000000482.737:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.5.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f5944185d29 code=0x7ffc0000 [ 817.698126][ T29] audit: type=1326 audit(2000000482.737:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.5.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5944185d29 code=0x7ffc0000 [ 817.721685][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.790718][ T5901] usb 1-1: can't set config #0, error -71 [ 818.806816][ T5901] usb 1-1: USB disconnect, device number 100 [ 819.783868][ T5908] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 820.196439][ T5908] usb 2-1: device descriptor read/64, error -71 [ 820.248558][T13258] batman_adv: batadv0: Adding interface: netdevsim0 [ 820.265518][T13258] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.312083][T13258] batman_adv: batadv0: Interface activated: netdevsim0 [ 820.428399][T13270] openvswitch: netlink: Tunnel attr 94 out of range max 16 [ 820.440928][ T5908] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 820.441307][T13271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 820.738118][T13279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.752577][T13279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.990716][ T5868] usb 7-1: new low-speed USB device number 60 using dummy_hcd [ 821.148768][ T5868] usb 7-1: too many configurations: 146, using maximum allowed: 8 [ 821.165543][ T5868] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 821.178541][ T5868] usb 7-1: can't read configurations, error -61 [ 821.321696][ T5868] usb 7-1: new low-speed USB device number 61 using dummy_hcd [ 821.736820][ T5868] usb 7-1: too many configurations: 146, using maximum allowed: 8 [ 821.780171][ T5868] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 821.825976][ T5868] usb 7-1: can't read configurations, error -61 [ 821.848213][ T5868] usb usb7-port1: attempt power cycle [ 822.112042][ T5920] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 822.310677][ T5868] usb 7-1: new low-speed USB device number 62 using dummy_hcd [ 822.339212][ T5868] usb 7-1: too many configurations: 146, using maximum allowed: 8 [ 822.349604][ T5868] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 822.357543][ T5868] usb 7-1: can't read configurations, error -61 [ 822.431665][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 822.475810][ T25] usb 6-1: new low-speed USB device number 87 using dummy_hcd [ 822.510701][ T5868] usb 7-1: new low-speed USB device number 63 using dummy_hcd [ 822.521698][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 822.531756][ T5868] usb 7-1: too many configurations: 146, using maximum allowed: 8 [ 822.541362][ T5868] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 822.550207][ T5868] usb 7-1: can't read configurations, error -61 [ 822.561301][ T5920] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 822.570104][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.580418][ T5920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 822.583277][ T5868] usb usb7-port1: unable to enumerate USB device [ 822.640831][ T25] usb 6-1: Invalid ep0 maxpacket: 32 [ 822.671720][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 822.681475][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.689511][ T5920] usb 1-1: Product: 钄腽众Ḣਸ਼檑㼑⯎ﶟ뷦㵰춪㴣乽蹼릺䍵⁸ⶼ䢤㏡츔똊띻嬤䐖䴜痕ﱅ辳靈ഩ䜃뿴⛣㏘❫鳳㑁뇴荶쐰찊蕊᱁ⱓ냧ř酁￬퉮剀鯞䲖㊹ⅾ⹕鹫⭽뮪챨⣗ꓵ럚ꮝ뀩ݑ봎ꬤ롊ᯙ [ 822.715849][ T5920] usb 1-1: Manufacturer: 氩䙩댼 [ 822.721355][ T5920] usb 1-1: SerialNumber: о [ 822.783781][ T25] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 822.940867][ T25] usb 6-1: Invalid ep0 maxpacket: 32 [ 822.947865][ T25] usb usb6-port1: attempt power cycle [ 822.957965][ T5920] usb 1-1: 0:2 : does not exist [ 822.971629][ T5920] usb 1-1: USB disconnect, device number 101 [ 823.228824][T13313] openvswitch: netlink: Tunnel attr 94 out of range max 16 [ 823.397988][ T25] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 823.431179][ T25] usb 6-1: Invalid ep0 maxpacket: 32 [ 824.490700][ T25] usb 6-1: new low-speed USB device number 90 using dummy_hcd [ 824.511164][ T25] usb 6-1: Invalid ep0 maxpacket: 32 [ 824.516680][ T25] usb usb6-port1: unable to enumerate USB device [ 824.728936][T13323] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 824.728936][T13323] program syz.1.1847 not setting count and/or reply_len properly [ 824.830782][ T5901] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 824.962363][ T5901] usb 1-1: device descriptor read/64, error -71 [ 825.115881][T13337] netlink: 'syz.6.1850': attribute type 1 has an invalid length. [ 825.147208][T13337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 825.172666][T13337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 825.179760][T13337] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 825.194225][T13337] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 825.205613][ T5901] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 825.272172][T13341] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=58 (116 ns) > initial count (56 ns). Using initial count to start timer. [ 825.360926][ T5901] usb 1-1: device descriptor read/64, error -71 [ 825.527567][ T5901] usb usb1-port1: attempt power cycle [ 825.670777][ T5920] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 825.753987][T13353] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1854'. [ 825.862310][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 825.880682][ T5901] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 825.900748][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 825.922631][ T5901] usb 1-1: device descriptor read/8, error -71 [ 825.929747][ T5920] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 825.953071][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.976367][ T5920] usb 7-1: config 0 descriptor?? [ 825.992884][ T5920] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input45 [ 826.162219][ T5901] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 826.193390][ T5901] usb 1-1: device descriptor read/8, error -71 [ 826.207345][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 826.207362][ T29] audit: type=1400 audit(2000000491.517:2173): avc: denied { append } for pid=13343 comm="syz.6.1852" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 826.255646][T13344] bcm5974 7-1:0.0: could not read from device [ 826.263141][ T5920] usb 7-1: USB disconnect, device number 64 [ 826.312578][ T5901] usb usb1-port1: unable to enumerate USB device [ 826.852362][ T5920] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 827.010415][ T5901] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 827.116296][ T5920] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 827.177198][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 827.195851][ T5901] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 827.256524][T13371] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1858'. [ 827.265785][T13371] openvswitch: netlink: Flow actions attr not present in new flow. [ 827.610408][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.620878][ T5901] usb 6-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 827.630050][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.652161][ T5901] usb 6-1: config 0 descriptor?? [ 827.664776][ T5901] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 827.672387][ T5920] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 827.682701][ T5920] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 827.692070][ T5920] usb 7-1: Manufacturer: syz [ 827.705755][ T5920] usb 7-1: config 0 descriptor?? [ 827.832436][ T5920] rc_core: IR keymap rc-hauppauge not found [ 827.838386][ T5920] Registered IR keymap rc-empty [ 827.854611][ T5920] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 827.872876][ T5920] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input46 [ 827.883100][T13362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.918829][T13362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.925537][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 827.976452][ T29] audit: type=1400 audit(2000000493.287:2174): avc: denied { ioctl } for pid=13375 comm="syz.0.1859" path="socket:[44473]" dev="sockfs" ino=44473 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 828.496859][T13362] dvmrp5: entered allmulticast mode [ 828.509186][ T78] usb 7-1: USB disconnect, device number 65 [ 828.547619][ T25] usb 6-1: USB disconnect, device number 91 [ 829.872385][ T29] audit: type=1400 audit(2000000495.167:2175): avc: denied { getopt } for pid=13392 comm="syz.7.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.897481][ T7318] Bluetooth: hci6: command 0x0405 tx timeout [ 831.756429][ T29] audit: type=1400 audit(2000000497.067:2176): avc: denied { map } for pid=13422 comm="syz.7.1872" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 831.806267][T13432] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 832.135562][ T5920] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 833.745766][ T78] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 833.847668][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 834.010732][ T5920] usb 6-1: device descriptor read/all, error -71 [ 834.048905][T13435] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1874'. [ 834.077827][ T29] audit: type=1400 audit(2000000499.387:2177): avc: denied { connect } for pid=13434 comm="syz.0.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 834.272364][ T29] audit: type=1400 audit(2000000499.407:2178): avc: denied { shutdown } for pid=13434 comm="syz.0.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 834.387402][ T29] audit: type=1326 audit(2000000499.427:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fad85d29 code=0x7ffc0000 [ 834.891602][ T29] audit: type=1326 audit(2000000499.427:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc3fad85d29 code=0x7ffc0000 [ 834.915063][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.922112][ T29] audit: type=1326 audit(2000000499.427:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fad85d29 code=0x7ffc0000 [ 834.945556][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.951817][ T29] audit: type=1326 audit(2000000499.527:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fad85d29 code=0x7ffc0000 [ 834.975778][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.982009][ T29] audit: type=1326 audit(2000000499.607:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3fad85d29 code=0x7ffc0000 [ 835.005996][ T29] audit: type=1326 audit(2000000499.617:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fad85d29 code=0x7ffc0000 [ 835.029449][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.035707][ T29] audit: type=1326 audit(2000000499.617:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.0.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fad85d29 code=0x7ffc0000 [ 835.059177][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.143253][ T6695] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:10: bg 1: bad block bitmap checksum [ 835.159631][ T6695] EXT4-fs (sda1): Delayed block allocation failed for inode 1938 at logical offset 1438 with max blocks 23 with error 74 [ 835.198165][T13452] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1876'. [ 835.210391][ T6695] EXT4-fs (sda1): This should not happen!! Data will be lost [ 835.210391][ T6695] [ 835.951084][ T78] usb 1-1: device descriptor read/64, error -71 [ 836.217347][T13466] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1881'. [ 836.800785][ T78] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 838.280100][ T78] usb 1-1: Using ep0 maxpacket: 16 [ 838.302739][ T78] usb 1-1: device descriptor read/all, error -71 [ 838.309318][ T78] usb usb1-port1: attempt power cycle [ 839.471244][T11812] usb 7-1: new low-speed USB device number 66 using dummy_hcd [ 839.634280][T11812] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 839.653097][T11812] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 839.683506][T11812] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 839.704954][T11812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.133135][T11812] usb 7-1: string descriptor 0 read error: -71 [ 840.139811][T11812] hub 7-1:32.0: USB hub found [ 840.148049][T11812] hub 7-1:32.0: config failed, can't read hub descriptor (err -22) [ 840.205296][T11812] usb 7-1: USB disconnect, device number 66 [ 840.233647][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 840.233663][ T29] audit: type=1400 audit(2000000505.387:2211): avc: denied { mount } for pid=13488 comm="syz.7.1888" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 840.343378][ T29] audit: type=1400 audit(2000000505.497:2212): avc: denied { unmount } for pid=11133 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 840.643226][T13495] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1889'. [ 840.880748][ T29] audit: type=1400 audit(2000000506.177:2213): avc: denied { override_creds } for pid=13499 comm="syz.7.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 840.977228][ T29] audit: type=1400 audit(2000000506.287:2214): avc: denied { open } for pid=13499 comm="syz.7.1891" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 841.100787][T11812] usb 7-1: new low-speed USB device number 67 using dummy_hcd [ 841.135468][ T29] audit: type=1400 audit(2000000506.447:2215): avc: denied { ioctl } for pid=13504 comm="syz.1.1892" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 841.192836][ T78] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 841.281775][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 841.305895][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 841.329856][T13506] netlink: 'syz.1.1892': attribute type 11 has an invalid length. [ 841.357168][T13506] netlink: 'syz.1.1892': attribute type 12 has an invalid length. [ 841.362516][T11812] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 841.365209][ T78] usb 1-1: Using ep0 maxpacket: 32 [ 841.377044][T11812] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 841.391927][T11812] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 841.396633][ T78] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 841.401953][T11812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.488743][T13514] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1894'. [ 841.913302][ T78] usb 1-1: config 0 has no interface number 0 [ 841.922539][ T78] usb 1-1: config 0 interface 184 has no altsetting 0 [ 841.938939][ T78] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 841.948164][ T78] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.956214][ T78] usb 1-1: Product: syz [ 841.960392][ T78] usb 1-1: Manufacturer: syz [ 841.965036][ T78] usb 1-1: SerialNumber: syz [ 841.995775][T11812] usb 7-1: can't set config #32, error -71 [ 842.011630][ T78] usb 1-1: config 0 descriptor?? [ 842.019848][ T78] smsc75xx v1.0.0 [ 842.105684][T11812] usb 7-1: USB disconnect, device number 67 [ 843.328371][T13513] syz.7.1895 (13513): drop_caches: 2 [ 843.716935][ T78] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 843.727905][ T78] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 843.762970][ T78] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 843.774112][ T78] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 843.784002][ T78] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 843.794491][ T78] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 843.804321][ T78] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 843.871418][ T5868] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 844.010677][ T5868] usb 6-1: device descriptor read/64, error -71 [ 844.191214][ T78] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 844.250701][ T5868] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 844.352162][ T78] usb 2-1: config 0 has an invalid interface number: 149 but max is 0 [ 844.361041][ T78] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 844.375750][ T78] usb 2-1: config 0 has no interface number 0 [ 844.382106][ T78] usb 2-1: config 0 interface 149 has no altsetting 0 [ 844.390805][ T5868] usb 6-1: device descriptor read/64, error -71 [ 844.397594][ T78] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 844.406850][ T78] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.415086][ T78] usb 2-1: Product: syz [ 844.419534][ T78] usb 2-1: Manufacturer: syz [ 844.424255][ T78] usb 2-1: SerialNumber: syz [ 844.443703][ T78] usb 2-1: config 0 descriptor?? [ 844.501142][ T5868] usb usb6-port1: attempt power cycle [ 844.665995][T13543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.677960][T13543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.693395][T13543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.704710][T13543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.719026][ T78] kvaser_usb 2-1:0.149: error -ENODEV: Cannot get usb endpoint(s) [ 844.735461][ T78] usb 2-1: USB disconnect, device number 95 [ 844.871163][ T5868] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 844.899762][ T29] audit: type=1400 audit(2000000510.207:2216): avc: denied { mounton } for pid=13547 comm="syz.6.1906" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 844.901379][ T5868] usb 6-1: device descriptor read/8, error -71 [ 844.973318][T13549] input: syz1 as /devices/virtual/input/input48 [ 845.249372][ T5868] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 845.379429][ T5920] usb 1-1: USB disconnect, device number 109 [ 845.396532][T13554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1908'. [ 845.432732][ T29] audit: type=1400 audit(2000000510.727:2217): avc: denied { getopt } for pid=13556 comm="syz.0.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 845.476766][ T29] audit: type=1400 audit(2000000510.787:2218): avc: denied { append } for pid=13556 comm="syz.0.1910" name="v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 845.480669][ T5868] usb 6-1: device not accepting address 97, error -71 [ 845.516402][ T5868] usb usb6-port1: unable to enumerate USB device [ 845.810749][ T7318] Bluetooth: hci6: command 0x0405 tx timeout [ 845.821158][ T5868] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 845.970098][ T5920] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 846.132739][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.155801][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.166894][ T5868] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 846.176085][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.185947][ T5868] usb 6-1: config 0 descriptor?? [ 846.206666][ T29] audit: type=1400 audit(2000000511.517:2219): avc: denied { ioctl } for pid=13566 comm="syz.1.1912" path="socket:[44863]" dev="sockfs" ino=44863 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 846.240555][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.254348][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.295313][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 846.333083][ T5920] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 846.347657][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.367564][ T5920] usb 1-1: config 0 descriptor?? [ 846.472627][ T5908] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 846.525937][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.536079][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.635683][ T5908] usb 2-1: config 0 has an invalid interface number: 27 but max is 0 [ 846.644723][ T5908] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 846.656369][ T5908] usb 2-1: config 0 has no interface number 0 [ 846.663358][ T5908] usb 2-1: config 0 interface 27 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 846.686944][ T5908] usb 2-1: config 0 interface 27 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 846.698320][ T5908] usb 2-1: config 0 interface 27 altsetting 5 endpoint 0x5 has an invalid bInterval 89, changing to 4 [ 846.712577][ T5908] usb 2-1: config 0 interface 27 altsetting 5 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 846.723751][ T5908] usb 2-1: config 0 interface 27 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 846.734857][ T5908] usb 2-1: config 0 interface 27 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 846.748705][ T5908] usb 2-1: config 0 interface 27 altsetting 5 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 846.759784][ T5908] usb 2-1: config 0 interface 27 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 846.787208][ T5920] acrux 0003:1A34:0802.0030: unknown main item tag 0x1 [ 846.796373][ T5908] usb 2-1: config 0 interface 27 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 846.817337][ T5920] acrux 0003:1A34:0802.0030: unknown main item tag 0x1 [ 846.832245][ T5908] usb 2-1: config 0 interface 27 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 846.856496][ T5908] usb 2-1: config 0 interface 27 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 846.873080][ T5920] acrux 0003:1A34:0802.0030: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 846.899424][ T5920] acrux 0003:1A34:0802.0030: no inputs found [ 846.910406][ T5908] usb 2-1: config 0 interface 27 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 846.929869][ T5920] acrux 0003:1A34:0802.0030: Failed to enable force feedback support, error: -19 [ 846.948090][ T5908] usb 2-1: config 0 interface 27 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 846.959833][ T29] audit: type=1400 audit(2000000512.257:2220): avc: denied { listen } for pid=13576 comm="syz.7.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 846.980241][ T5908] usb 2-1: config 0 interface 27 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 846.993699][ T29] audit: type=1400 audit(2000000512.267:2221): avc: denied { accept } for pid=13576 comm="syz.7.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 847.018278][ T5908] usb 2-1: config 0 interface 27 has no altsetting 0 [ 847.019135][ T5868] usbhid 6-1:0.0: can't add hid device: -71 [ 847.026060][ T5908] usb 2-1: New USB device found, idVendor=20d6, idProduct=4847, bcdDevice=c7.ef [ 847.043976][ T5868] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 847.045442][ T5920] usb 1-1: USB disconnect, device number 110 [ 847.055980][ T5868] usb 6-1: USB disconnect, device number 98 [ 847.065326][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.096891][ T29] audit: type=1400 audit(2000000512.407:2222): avc: denied { create } for pid=13576 comm="syz.7.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 847.104476][ T5908] usb 2-1: config 0 descriptor?? [ 847.117333][ C1] vkms_vblank_simulate: vblank timer overrun [ 847.118636][ T29] audit: type=1400 audit(2000000512.417:2223): avc: denied { write } for pid=13576 comm="syz.7.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 847.149928][ C1] vkms_vblank_simulate: vblank timer overrun [ 847.185575][ T29] audit: type=1400 audit(2000000512.417:2224): avc: denied { create } for pid=13576 comm="syz.7.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 847.362581][ T5908] usb 2-1: string descriptor 0 read error: -71 [ 847.390834][ T5920] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 847.408780][ T5908] usb 2-1: USB disconnect, device number 96 [ 847.639331][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 847.840677][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 847.867737][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 847.891729][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 847.918264][ T5920] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 847.959971][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.975069][ T5920] usb 1-1: config 0 descriptor?? [ 848.006398][T13579] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 848.146300][ T29] audit: type=1400 audit(2000000513.457:2225): avc: denied { ioctl } for pid=13590 comm="syz.5.1918" path="/dev/sg0" dev="devtmpfs" ino=726 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 848.171761][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.180853][ T29] audit: type=1400 audit(2000000513.497:2226): avc: denied { mounton } for pid=13590 comm="syz.5.1918" path="/proc/1386/cgroup" dev="proc" ino=44892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 849.231534][ T5908] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 849.566139][ T7318] Bluetooth: hci6: command 0x0405 tx timeout [ 849.572632][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 849.601903][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 849.631445][ T5908] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 849.639103][ T5908] usb 2-1: can't read configurations, error -61 [ 849.828328][ T5920] plantronics 0003:047F:FFFF.0031: unknown main item tag 0xd [ 849.837511][ T5920] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 849.852275][ T5920] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 850.020740][ T5868] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 850.109625][ T5908] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 850.170769][ T5868] usb 7-1: Using ep0 maxpacket: 16 [ 850.177587][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 850.189106][ T5868] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 850.268446][T13609] overlayfs: missing 'lowerdir' [ 850.277260][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 850.355047][T13609] tmpfs: Bad value for 'mpol' [ 850.385779][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 850.401093][ T5908] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 850.409489][ T5908] usb 2-1: can't read configurations, error -61 [ 850.417278][ T5908] usb usb2-port1: attempt power cycle [ 850.607714][ T5920] usb 1-1: USB disconnect, device number 111 [ 850.749807][ T5868] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 850.759125][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.767348][ T5868] usb 7-1: Product: syz [ 850.771769][ T5868] usb 7-1: Manufacturer: syz [ 850.776386][ T5868] usb 7-1: SerialNumber: syz [ 850.800519][ T5868] usb 7-1: config 0 descriptor?? [ 850.801427][ T5908] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 850.806403][T13603] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 850.823901][ T5868] hub 7-1:0.0: bad descriptor, ignoring hub [ 850.829869][ T5868] hub 7-1:0.0: probe with driver hub failed with error -5 [ 850.838517][ T5868] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input50 [ 850.847707][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 850.849333][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 850.929125][ T5908] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 850.941304][ T5908] usb 2-1: can't read configurations, error -61 [ 851.071285][ T5908] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 851.121123][T13616] binder_alloc: binder_alloc_mmap_handler: 13615 20ffb000-20ffd000 already mapped failed -16 [ 851.220737][T11812] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 851.300273][ T5908] usb 2-1: device not accepting address 100, error -71 [ 851.369319][ T5908] usb usb2-port1: unable to enumerate USB device [ 851.480184][T13612] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 851.658019][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 851.658067][ T29] audit: type=1400 audit(2000000516.967:2228): avc: denied { write } for pid=13611 comm="syz.5.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 851.704562][T13612] x_tables: duplicate underflow at hook 3 [ 851.921324][T13612] netlink: 4079 bytes leftover after parsing attributes in process `syz.5.1924'. [ 851.960246][ T29] audit: type=1400 audit(2000000517.267:2229): avc: denied { ioctl } for pid=13613 comm="syz.7.1925" path="socket:[45320]" dev="sockfs" ino=45320 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 852.142977][T11812] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 852.174195][T11812] usb 6-1: can't read configurations, error -71 [ 852.420656][ T5901] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 852.650782][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 852.672310][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 852.690911][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 852.753035][T13632] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 852.792318][ T5901] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 852.810844][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.822329][ T5901] usb 1-1: Product: syz [ 852.826997][ T5901] usb 1-1: Manufacturer: syz [ 852.840632][ T5901] usb 1-1: SerialNumber: syz [ 852.842563][ T5864] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 852.894149][ T5901] usb 1-1: config 0 descriptor?? [ 852.914678][ T5901] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 852.930888][ T5901] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 853.204431][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 853.976716][ T5864] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 853.999895][ T5864] usb 2-1: config 0 has no interface number 0 [ 854.006052][ T5864] usb 2-1: too many endpoints for config 0 interface 63 altsetting 117: 223, using maximum allowed: 30 [ 854.017202][ T5864] usb 2-1: config 0 interface 63 altsetting 117 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 854.030824][ T5864] usb 2-1: config 0 interface 63 has no altsetting 0 [ 854.232855][ T5864] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=22.a7 [ 854.242812][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.251962][ T5864] usb 2-1: Product: syz [ 854.253042][ T5901] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 854.256493][ T5864] usb 2-1: Manufacturer: syz [ 854.267883][ T5864] usb 2-1: SerialNumber: syz [ 854.268006][ T5901] em28xx 1-1:0.0: Config register raw data: 0xac [ 854.277640][ T5864] usb 2-1: config 0 descriptor?? [ 854.312952][T13641] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 854.402293][ T5901] em28xx 1-1:0.0: I2S Audio (1 sample rate(s)) [ 854.438819][ T5901] em28xx 1-1:0.0: No AC97 audio processor [ 854.462752][T13641] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 854.506081][T13623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.642673][T13623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.644058][ T5864] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 854.696755][ T5864] gspca_sn9c2028: read1 error -71 [ 854.747297][ T5864] gspca_sn9c2028: read1 error -71 [ 854.755349][ T5864] gspca_sn9c2028: read1 error -71 [ 854.763038][T11812] usb 7-1: USB disconnect, device number 68 [ 854.763056][ C1] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 854.783131][ T5864] sn9c2028 2-1:0.63: probe with driver sn9c2028 failed with error -71 [ 854.856054][ T5901] usb 1-1: USB disconnect, device number 112 [ 854.877805][ T5864] usb 2-1: USB disconnect, device number 101 [ 854.894617][T13641] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 855.029558][ T7318] Bluetooth: hci6: command 0x0405 tx timeout [ 855.287604][ T29] audit: type=1400 audit(2000000520.597:2230): avc: denied { accept } for pid=13650 comm="syz.5.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 855.496907][ T29] audit: type=1400 audit(2000000520.807:2231): avc: denied { ioctl } for pid=13659 comm="syz.7.1938" path="socket:[45039]" dev="sockfs" ino=45039 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 855.794464][T13679] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1941'. [ 856.337353][ T29] audit: type=1400 audit(2000000521.637:2232): avc: denied { ioctl } for pid=13672 comm="syz.6.1942" path="socket:[45049]" dev="sockfs" ino=45049 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 856.495367][ T29] audit: type=1326 audit(2000000521.797:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 856.501845][T13692] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1946'. [ 856.533722][ T29] audit: type=1326 audit(2000000521.797:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 856.558688][ T29] audit: type=1326 audit(2000000521.867:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 856.582333][ T29] audit: type=1326 audit(2000000521.867:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 856.686636][ T29] audit: type=1326 audit(2000000521.867:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 857.221844][T13700] openvswitch: netlink: Tunnel attr 94 out of range max 16 [ 857.606054][ T29] audit: type=1326 audit(2000000521.867:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 857.649289][ T29] audit: type=1326 audit(2000000521.867:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 857.706747][ T29] audit: type=1326 audit(2000000521.867:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 857.739502][ T29] audit: type=1326 audit(2000000521.887:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 857.765220][ T29] audit: type=1326 audit(2000000521.887:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 857.788943][ T29] audit: type=1326 audit(2000000521.887:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 857.840215][ T29] audit: type=1326 audit(2000000521.887:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 857.865401][ T29] audit: type=1326 audit(2000000521.887:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 857.899699][ T29] audit: type=1326 audit(2000000521.887:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa936985d29 code=0x7ffc0000 [ 858.961774][T11135] Bluetooth: hci6: command 0x0405 tx timeout [ 859.116255][T13727] netlink: 'syz.7.1953': attribute type 21 has an invalid length. [ 859.209056][T13727] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1953'. [ 859.438331][T13740] dvmrp0: entered allmulticast mode [ 859.556389][T13744] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1957'. [ 861.323888][ T5864] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 861.700693][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 861.707353][ T5864] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 861.717286][ T5864] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.735237][ T5864] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 861.746258][ T5864] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 861.759566][ T5864] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 861.768814][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.776909][ T5864] usb 2-1: Product: syz [ 861.781187][ T5864] usb 2-1: Manufacturer: syz [ 861.785791][ T5864] usb 2-1: SerialNumber: syz [ 862.011061][ T5901] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 862.115176][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 862.115239][ T29] audit: type=1400 audit(2000000527.427:2277): avc: denied { bind } for pid=13765 comm="syz.1.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 862.181954][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 862.190073][ T5901] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 862.198612][ T5901] usb 1-1: config 0 has no interface number 0 [ 862.221400][ T5901] usb 1-1: config 0 interface 12 has no altsetting 0 [ 862.253998][ T5901] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 862.271272][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.279364][ T5901] usb 1-1: Product: syz [ 862.310745][ T5901] usb 1-1: Manufacturer: syz [ 862.315454][ T5901] usb 1-1: SerialNumber: syz [ 862.341587][ T5901] usb 1-1: config 0 descriptor?? [ 863.486606][ T29] audit: type=1400 audit(2000000528.737:2278): avc: denied { block_suspend } for pid=13779 comm="syz.0.1969" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 863.660908][ T5864] usb 2-1: USB disconnect, device number 102 [ 863.746071][T13804] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1974'. [ 865.575282][T13809] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 865.597726][T13809] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 865.630235][T13809] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 865.674772][ T5901] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 865.682425][ T5901] f81534 1-1:0.12: f81534_find_config_idx: read failed: -32 [ 865.689736][ T5901] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 865.698909][ T5901] f81534 1-1:0.12: probe with driver f81534 failed with error -32 [ 865.813341][ T25] usb 1-1: USB disconnect, device number 113 [ 866.964507][T13829] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 866.977617][T13829] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 866.999562][T13829] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 867.020395][T13575] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:0: bg 2: bad block bitmap checksum [ 867.036116][T13575] EXT4-fs (sda1): Delayed block allocation failed for inode 1938 at logical offset 3433 with max blocks 151 with error 74 [ 867.049335][T13575] EXT4-fs (sda1): This should not happen!! Data will be lost [ 867.049335][T13575] [ 867.105894][T13833] netlink: 'syz.0.1981': attribute type 2 has an invalid length. [ 867.113712][ T29] audit: type=1400 audit(2000000532.417:2279): avc: denied { read write } for pid=13821 comm="syz.0.1981" path="socket:[45875]" dev="sockfs" ino=45875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 867.137428][ C0] vkms_vblank_simulate: vblank timer overrun [ 867.148506][ T29] audit: type=1326 audit(2000000532.417:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13821 comm="syz.0.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fad85d29 code=0x7fc00000 [ 867.226976][T13839] @: renamed from vlan0 (while UP) [ 867.268750][ T29] audit: type=1326 audit(2000000532.577:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13821 comm="syz.0.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc3fad85d29 code=0x7fc00000 [ 867.721484][T13850] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1987'. [ 868.520063][T13837] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.672416][T13865] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 870.132360][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.138725][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.221186][T13865] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 870.254891][T13865] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 870.338073][T13837] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.354847][T13877] binder: 13870:13877 ioctl c0306201 20000140 returned -14 [ 870.393356][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1983'. [ 870.466963][T13837] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.583553][T13837] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 870.614886][T13837] batman_adv: batadv0: Removing interface: netdevsim0 [ 870.639740][T13837] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.866603][ T29] audit: type=1400 audit(2000000536.167:2282): avc: denied { ioctl } for pid=13884 comm="syz.7.1995" path="socket:[47184]" dev="sockfs" ino=47184 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 870.953741][ T29] audit: type=1400 audit(2000000536.177:2283): avc: denied { bind } for pid=13884 comm="syz.7.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 871.030866][ T25] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 871.171452][T13837] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.193976][ T29] audit: type=1400 audit(2000000536.177:2284): avc: denied { execute_no_trans } for pid=13884 comm="syz.7.1995" path="/146/file1" dev="tmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 871.230815][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 871.300032][ T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 871.311518][T13837] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.313698][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.327935][ T25] usb 2-1: Product: syz [ 871.332420][ T25] usb 2-1: Manufacturer: syz [ 871.337085][ T25] usb 2-1: SerialNumber: syz [ 871.338104][T13837] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.346422][ T25] usb 2-1: config 0 descriptor?? [ 871.358432][ T25] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 871.376125][T13837] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.496795][ T25] gspca_sonixj: reg_r err -110 [ 873.501739][ T25] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 873.622124][T13911] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1999'. [ 873.950493][ T5864] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 874.096939][T13922] EXT4-fs error: 3 callbacks suppressed [ 874.096958][T13922] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 874.149965][T13922] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 874.176779][T13922] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 874.250782][ T5864] usb 7-1: device descriptor read/64, error -71 [ 874.490742][ T5864] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 874.849046][ T29] audit: type=1400 audit(2000000540.157:2285): avc: denied { name_bind 0x1000000 } for pid=13931 comm="syz.0.2005" path="socket:[46658]" dev="sockfs" ino=46658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 874.938822][ T29] audit: type=1400 audit(2000000540.247:2286): avc: denied { listen } for pid=13920 comm="syz.5.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 875.119540][ T5864] usb 7-1: device descriptor read/64, error -71 [ 875.149703][T11812] usb 2-1: USB disconnect, device number 103 [ 875.173733][ T5901] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 875.230948][ T5864] usb usb7-port1: attempt power cycle [ 875.583536][T13941] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2009'. [ 875.592658][ T5864] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 875.601467][ T29] audit: type=1400 audit(2000000540.897:2287): avc: denied { bind } for pid=13940 comm="syz.5.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 875.643642][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 875.682161][ T5901] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 875.686326][ T29] audit: type=1400 audit(2000000540.937:2288): avc: denied { shutdown } for pid=13942 comm="syz.1.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 875.690322][ T5901] usb 1-1: config 0 has no interface number 0 [ 875.758419][ T5901] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 875.789966][ T5901] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 875.810718][ T5901] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 875.819982][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 875.882589][ T5901] usb 1-1: Product: syz [ 875.891185][ T5864] usb 7-1: device not accepting address 71, error -71 [ 875.922145][ T5901] usb 1-1: SerialNumber: syz [ 875.940535][ T5901] usb 1-1: config 0 descriptor?? [ 875.956380][ T5901] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 876.583506][T13954] openvswitch: netlink: Tunnel attr 94 out of range max 16 [ 876.592807][ T78] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 876.760831][ T78] usb 6-1: Using ep0 maxpacket: 16 [ 876.773344][ T78] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 876.786757][ T78] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.807695][ T78] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 876.832563][ T78] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 876.851613][ T5901] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input51 [ 876.860644][ T78] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.885319][ T78] usb 6-1: Product: syz [ 876.890099][ T78] usb 6-1: Manufacturer: syz [ 876.902574][ T78] usb 6-1: SerialNumber: syz [ 876.922532][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 877.148792][T13961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.158389][T13961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.194165][T13935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.202887][T13935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.310956][T13964] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2015'. [ 877.533965][ T29] audit: type=1400 audit(2000000542.817:2289): avc: denied { ioctl } for pid=13955 comm="syz.1.2014" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 877.885293][ T78] usb 6-1: 0:2 : does not exist [ 878.198195][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 878.198512][ T5901] usb 1-1: USB disconnect, device number 114 [ 878.205170][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 878.233444][ T5901] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 878.349811][T13976] fuse: Unknown parameter 'fd<0x0000000000000007' [ 878.851246][T11135] Bluetooth: hci6: command 0x0405 tx timeout [ 878.955256][ T29] audit: type=1400 audit(2000000544.247:2290): avc: denied { read } for pid=13987 comm="syz.7.2023" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 879.847287][T13999] openvswitch: netlink: Tunnel attr 94 out of range max 16 [ 880.028090][ T78] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 880.281410][ T78] usb 6-1: USB disconnect, device number 101 [ 880.410680][ T29] audit: type=1400 audit(2000000545.677:2291): avc: denied { ioctl } for pid=14002 comm="syz.5.2027" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 880.480878][ T29] audit: type=1400 audit(2000000545.677:2292): avc: denied { map } for pid=14002 comm="syz.5.2027" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 880.743917][ T29] audit: type=1400 audit(2000000546.057:2293): avc: denied { mount } for pid=14009 comm="syz.5.2031" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 880.860687][ T29] audit: type=1400 audit(2000000546.167:2294): avc: denied { unmount } for pid=6287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 880.880974][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.189546][T14027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 881.209526][T14028] Invalid logical block size (-9) [ 881.376216][T14034] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 881.413026][T14034] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 881.496273][T14034] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 881.579442][T14037] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 881.597925][T14037] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 881.598195][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 881.652850][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 881.670827][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 881.683087][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 881.692889][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 881.700308][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 881.720982][ T5864] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 881.721447][ T29] audit: type=1400 audit(2000000547.027:2295): avc: denied { mounton } for pid=14038 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 881.761597][T14037] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 881.888290][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.910241][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.939157][ T5864] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 882.049918][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.112855][ T5864] usb 1-1: config 0 descriptor?? [ 882.440267][T14047] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 882.458782][T14047] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 882.491257][T14047] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 883.004611][T14038] chnl_net:caif_netlink_parms(): no params data found [ 883.501431][T14065] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2040'. [ 883.837366][T14038] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.929835][ T5825] Bluetooth: hci0: command tx timeout [ 884.035927][T14038] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.068326][T14038] bridge_slave_0: entered allmulticast mode [ 884.079759][T14038] bridge_slave_0: entered promiscuous mode [ 884.095501][T14038] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.106641][T14038] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.116222][T14038] bridge_slave_1: entered allmulticast mode [ 884.129133][T14038] bridge_slave_1: entered promiscuous mode [ 884.135192][T11812] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 884.264090][ T29] audit: type=1400 audit(2000000549.577:2296): avc: denied { read append } for pid=14056 comm="syz.1.2041" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 884.382233][ T29] audit: type=1400 audit(2000000549.577:2297): avc: denied { open } for pid=14056 comm="syz.1.2041" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 884.432856][T14038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.463356][ T5864] appletouch 1-1:0.0: Failed to read mode from device. [ 884.491637][T14038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.500947][ T5864] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 884.552436][T11812] usb 6-1: unable to get BOS descriptor or descriptor too short [ 884.561314][T11812] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 884.584362][T14038] team0: Port device team_slave_0 added [ 884.594009][ T5864] usb 1-1: USB disconnect, device number 115 [ 884.619339][T11812] usb 6-1: config 1 interface 1 has no altsetting 0 [ 884.630437][T11812] usb 6-1: string descriptor 0 read error: -22 [ 884.633081][T14038] team0: Port device team_slave_1 added [ 884.651042][T11812] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 884.666896][T11812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.679404][T14063] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 884.710144][T11812] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 884.721742][T14038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.728820][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.757528][T14038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.774829][T14038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.787889][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.845033][T14038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.167566][T11812] usb 6-1: USB disconnect, device number 102 [ 885.279678][T14038] hsr_slave_0: entered promiscuous mode [ 885.293248][T14038] hsr_slave_1: entered promiscuous mode [ 885.474596][T14080] syz.1.2047 (14080): drop_caches: 1 [ 885.531498][T14080] syz.1.2047 (14080): drop_caches: 1 [ 885.589288][T14038] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 885.607449][T14038] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 885.620298][T14038] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 885.639177][T14038] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 885.749212][ T5864] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 885.808127][T14038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.998759][ T5825] Bluetooth: hci0: command tx timeout [ 886.019930][T14038] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.080873][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 886.095608][ T5864] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 886.105560][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.127630][ T5864] usb 1-1: config 0 descriptor?? [ 886.357372][ T5864] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 886.366170][T13575] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.372975][T14090] bio_check_eod: 2 callbacks suppressed [ 886.372991][T14090] syz.0.2044: attempt to access beyond end of device [ 886.372991][T14090] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 886.374086][T13575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.420536][T13575] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.427666][T13575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.593156][ T5864] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 886.618333][T14090] qnx6: unable to read the first superblock [ 886.620818][ T5864] asix 1-1:0.0: probe with driver asix failed with error -61 [ 886.644193][T14090] syz.0.2044: attempt to access beyond end of device [ 886.644193][T14090] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 886.657331][T14090] qnx6: unable to read the first superblock [ 886.881005][T14090] qnx6: unable to read the first superblock [ 887.029167][T14093] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 887.130415][T14093] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 887.284564][T14098] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 887.310077][T14098] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 887.555602][T14098] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 887.569346][T14093] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 887.597523][T14102] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 887.613621][T14104] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 887.630769][T14104] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 887.645956][T14102] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 887.806636][T14038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.961161][ T5864] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 888.017978][ T29] audit: type=1400 audit(2000000553.327:2298): avc: denied { mounton } for pid=14128 comm="syz.7.2058" path="/proc/600/task" dev="proc" ino=47717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 888.050894][ T5825] Bluetooth: hci0: command tx timeout [ 888.077386][ T29] audit: type=1400 audit(2000000553.327:2299): avc: denied { mount } for pid=14128 comm="syz.7.2058" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 888.099196][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.139463][T14038] veth0_vlan: entered promiscuous mode [ 888.157724][T14038] veth1_vlan: entered promiscuous mode [ 888.201723][T14038] veth0_macvtap: entered promiscuous mode [ 888.231314][ T5908] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 888.274488][T14038] veth1_macvtap: entered promiscuous mode [ 888.298250][ T5901] usb 1-1: USB disconnect, device number 116 [ 888.302676][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.315578][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.333032][ T5864] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 888.342139][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.352065][ T5864] usb 2-1: config 0 descriptor?? [ 888.371478][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.389086][T14140] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2060'. [ 888.417302][ T5908] usb 6-1: config 8 interface 0 has no altsetting 0 [ 888.439152][ T5908] usb 6-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=fb.bc [ 888.454689][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.483146][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.503280][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.526936][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 888.540198][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.561886][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.578912][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.604137][T14038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.686925][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.732722][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.743979][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.754894][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.766821][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.779209][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.794941][T14038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.862397][T14144] tc_dump_action: action bad kind [ 888.865201][ T5908] usb 6-1: string descriptor 0 read error: -71 [ 888.878089][T14038] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.894240][ T5908] pwc: Logitech QuickCam detected (reserved ID). [ 888.900961][T14038] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.918525][T14038] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.927646][ T5908] pwc: Failed to set LED on/off time (-71) [ 888.934307][T14038] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.944656][ T5908] pwc: send_video_command error -71 [ 888.949899][ T5908] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 888.966670][ T5908] Philips webcam 6-1:8.0: probe with driver Philips webcam failed with error -71 [ 889.024732][ T5908] usb 6-1: USB disconnect, device number 103 [ 889.073276][ T9321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.085588][ T9321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.122515][T13575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.130395][T13575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.163431][ T29] audit: type=1400 audit(2000000554.477:2300): avc: denied { mounton } for pid=14038 comm="syz-executor" path="/root/syzkaller.lvMgwf/syz-tmp" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 889.227214][ T29] audit: type=1400 audit(2000000554.507:2301): avc: denied { mounton } for pid=14038 comm="syz-executor" path="/root/syzkaller.lvMgwf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 889.288251][ T29] audit: type=1400 audit(2000000554.507:2302): avc: denied { mounton } for pid=14038 comm="syz-executor" path="/root/syzkaller.lvMgwf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=48390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 889.320382][ T29] audit: type=1400 audit(2000000554.527:2303): avc: denied { mounton } for pid=14038 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 889.428815][ T29] audit: type=1400 audit(2000000554.537:2304): avc: denied { mounton } for pid=14038 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 889.452866][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.738670][T14153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.761953][T14153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.962977][ T29] audit: type=1400 audit(2000000555.257:2305): avc: denied { write } for pid=14159 comm="syz.7.2065" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 890.007823][T14166] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 890.020984][ T5868] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 890.027136][T14168] binder: 14167:14168 ioctl c0306201 20000080 returned -22 [ 890.046899][ T29] audit: type=1400 audit(2000000555.337:2306): avc: denied { setopt } for pid=14167 comm="syz.0.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 890.157916][ T5825] Bluetooth: hci0: command tx timeout [ 890.272412][ T29] audit: type=1400 audit(2000000555.477:2307): avc: denied { write } for pid=14177 comm="syz.0.2070" path="socket:[48432]" dev="sockfs" ino=48432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 891.110671][ T5864] appletouch 2-1:0.0: Failed to read mode from device. [ 891.117679][ T5864] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 891.588946][ T5864] usb 2-1: USB disconnect, device number 104 [ 892.724392][T14205] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2075'. [ 892.890778][T11812] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 893.179419][T11812] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 893.315491][T11812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.328906][T11812] usb 6-1: config 0 descriptor?? [ 893.362643][T11812] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 893.397821][T14213] netlink: 'syz.8.2079': attribute type 1 has an invalid length. [ 893.902010][T11812] cpia1 6-1:0.0: unexpected state after lo power cmd: d0 [ 893.970984][ T29] audit: type=1400 audit(2000000559.277:2308): avc: denied { execute } for pid=14221 comm="syz.8.2081" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=48124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 894.064696][ T29] audit: type=1326 audit(2000000559.307:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab1985d29 code=0x7ffc0000 [ 894.116361][ T29] audit: type=1326 audit(2000000559.307:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab1985d29 code=0x7ffc0000 [ 894.116398][ T29] audit: type=1326 audit(2000000559.307:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fdab1985d29 code=0x7ffc0000 [ 894.116447][ T29] audit: type=1326 audit(2000000559.307:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab1985d29 code=0x7ffc0000 [ 894.116476][ T29] audit: type=1326 audit(2000000559.307:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14221 comm="syz.8.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab1985d29 code=0x7ffc0000 [ 894.335359][T11812] gspca_cpia1: usb_control_msg 02, error -71 [ 894.341594][T11812] gspca_cpia1: usb_control_msg 05, error -71 [ 894.341607][T11812] cpia1 6-1:0.0: unexpected systemstate: d0 [ 894.342753][T11812] usb 6-1: USB disconnect, device number 104 [ 895.745326][T14245] EXT4-fs error: 35 callbacks suppressed [ 895.745340][T14245] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 896.136800][T14245] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 896.274587][T14245] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 896.407532][T14248] trusted_key: encrypted_key: insufficient parameters specified [ 896.500159][T14251] gfs2: path_lookup on ./file0 returned error -2 [ 896.741571][T11812] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 896.810037][ T29] audit: type=1400 audit(2000000562.107:2314): avc: denied { mount } for pid=14254 comm="syz.8.2086" name="/" dev="autofs" ino=48584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 896.954947][T11812] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 896.964594][T11812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.974629][T11812] usb 6-1: Product: syz [ 896.978834][T11812] usb 6-1: Manufacturer: syz [ 896.984268][T11812] usb 6-1: SerialNumber: syz [ 896.994818][T11812] usb 6-1: config 0 descriptor?? [ 897.502089][ T29] audit: type=1400 audit(2000000562.757:2315): avc: denied { write } for pid=14249 comm="syz.5.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 897.528554][T11812] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 897.542816][T11812] peak_usb 6-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 897.613699][T11812] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 897.624147][T11812] usb 6-1: USB disconnect, device number 105 [ 897.690903][ T29] audit: type=1400 audit(2000000562.997:2316): avc: denied { unmount } for pid=14038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 898.020714][ T5901] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 898.180717][ T5901] usb 9-1: Using ep0 maxpacket: 16 [ 898.188025][ T5901] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 898.208066][ T5901] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 898.235843][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 898.250045][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 898.264989][ T5901] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 898.598518][ T5901] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 898.618790][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.627631][ T5901] usb 9-1: Product: syz [ 898.635174][ T5901] usb 9-1: Manufacturer: syz [ 898.639758][ T5901] usb 9-1: SerialNumber: syz [ 898.645450][ T5901] usb 9-1: config 0 descriptor?? [ 898.721120][T11812] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 898.900813][T11812] usb 6-1: Using ep0 maxpacket: 32 [ 898.910968][T11812] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 898.920119][T11812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.933224][ T5901] appledisplay 9-1:0.0: Error while getting initial brightness: -110 [ 898.954109][ T5901] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -110 [ 899.018216][T11812] usb 6-1: Product: syz [ 899.044474][T11812] usb 6-1: Manufacturer: syz [ 899.054453][T11812] usb 6-1: SerialNumber: syz [ 899.167020][T11812] usb 6-1: config 0 descriptor?? [ 899.188096][T11812] hdpvr 6-1:0.0: Could not find bulk-in endpoint [ 899.200796][T11812] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 899.458315][T14280] openvswitch: netlink: Tunnel attr 94 out of range max 16 [ 900.114153][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2093'. [ 900.909762][T14287] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 900.930373][T14287] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 901.012086][T14287] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 901.030123][ T8] usb 9-1: USB disconnect, device number 3 [ 901.266706][ T8] usb 6-1: USB disconnect, device number 106 [ 901.395537][T14295] xt_CT: You must specify a L4 protocol and not use inversions on it [ 901.432457][T14292] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 901.447762][T14292] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 901.485555][T14292] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 901.507050][T14300] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 901.524195][T14300] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 901.558482][T14300] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 901.987511][ T29] audit: type=1400 audit(2000000567.287:2317): avc: denied { write } for pid=14299 comm="syz.0.2100" laddr=172.20.20.11 lport=55052 faddr=172.20.20.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 902.470015][T13575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.486453][T13575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.867641][T14320] netlink: 'syz.7.2105': attribute type 1 has an invalid length. [ 903.378649][T14320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 903.594491][ T5864] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 903.607643][ T29] audit: type=1400 audit(2000000568.907:2318): avc: denied { ioctl } for pid=14324 comm="syz.5.2106" path="socket:[48852]" dev="sockfs" ino=48852 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 903.696025][T14323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 903.703291][T14323] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 903.896161][T14333] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 903.907234][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 904.607842][T14323] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 904.865421][ T5864] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.875631][ T5864] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 904.886680][ T5864] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 904.896388][ T5864] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 904.909158][ T5864] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 905.135638][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.143745][ T5864] usb 2-1: Product: syz [ 905.147916][ T5864] usb 2-1: Manufacturer: syz [ 905.152817][ T5864] usb 2-1: SerialNumber: syz [ 905.482815][ T5864] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 906.548312][ T5864] usb 2-1: USB disconnect, device number 105 [ 906.661504][T14355] netlink: 'syz.5.2115': attribute type 1 has an invalid length. [ 906.672454][T14355] netlink: 'syz.5.2115': attribute type 1 has an invalid length. [ 906.697158][T14358] EXT4-fs error: 2 callbacks suppressed [ 906.697176][T14358] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 906.713983][T14358] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 906.742009][T14358] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 906.767199][T14361] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 906.791170][ T5868] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 906.809273][T14361] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 907.011356][T14361] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 907.011855][ T5868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.033177][ T5868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.043165][ T5868] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 907.052296][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.281363][ T5868] usb 9-1: config 0 descriptor?? [ 907.303074][T14373] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 907.309625][T14373] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 907.318619][T14373] vhci_hcd vhci_hcd.0: Device attached [ 907.605194][ T5864] usb 36-1: SetAddress Request (2) to port 0 [ 907.613843][T14380] netlink: 'syz.7.2121': attribute type 1 has an invalid length. [ 907.614652][T14374] vhci_hcd: connection closed [ 907.621849][ T5864] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 907.646576][ T9331] vhci_hcd: stop threads [ 907.648341][T14380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 907.651079][ T9331] vhci_hcd: release socket [ 907.662151][ T9331] vhci_hcd: disconnect device [ 907.667472][ T5864] usb 36-1: enqueue for inactive port 0 [ 907.680002][T14380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 907.695242][T14380] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 907.772387][T14380] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 908.076883][ T5864] usb usb36-port1: attempt power cycle [ 908.082796][T14388] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 908.232285][T14388] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 908.399702][T14393] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 908.416824][ T5868] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0032/input/input55 [ 908.449478][T14393] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 908.467641][ T5868] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0032/input/input56 [ 908.516857][ T5868] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0032/input/input57 [ 908.607594][ T5868] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.0032/input/input58 [ 908.623144][ T5868] uclogic 0003:256C:006D.0032: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.8-1/input0 [ 908.711639][ T5864] usb usb36-port1: unable to enumerate USB device [ 908.799285][ T5864] usb 9-1: USB disconnect, device number 4 [ 908.859290][T14399] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 909.198237][T14401] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 909.587807][T14404] syz.1.2125 (14404): drop_caches: 2 [ 909.593870][T14404] syz.1.2125 (14404): drop_caches: 2 [ 909.625507][T14398] syz.1.2125 (14398): drop_caches: 2 [ 909.750219][T14412] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 909.864286][ T29] audit: type=1400 audit(2000000575.177:2319): avc: denied { connect } for pid=14414 comm="syz.7.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 909.985646][ T29] audit: type=1400 audit(2000000575.197:2320): avc: denied { write } for pid=14414 comm="syz.7.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 910.088414][ T29] audit: type=1400 audit(2000000575.337:2321): avc: denied { getopt } for pid=14414 comm="syz.7.2129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 910.840733][ T29] audit: type=1400 audit(2000000576.137:2322): avc: denied { ioctl } for pid=14435 comm="syz.0.2131" path="socket:[50284]" dev="sockfs" ino=50284 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 911.439567][T14444] netlink: 'syz.8.2135': attribute type 1 has an invalid length. [ 911.792720][T14452] EXT4-fs error: 23 callbacks suppressed [ 911.792738][T14452] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 911.844989][T14452] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 911.880794][T14452] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 912.159294][ T8] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 912.328135][T14463] overlay: Unknown parameter 'fsmagic' [ 912.445421][ T8] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 912.466279][ T8] usb 6-1: config 0 has no interface number 1 [ 912.542896][ T8] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 912.782611][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.901523][T14471] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 912.927746][ T8] usb 6-1: config 0 descriptor?? [ 912.933476][ T29] audit: type=1400 audit(2000000578.247:2323): avc: denied { ioctl } for pid=14453 comm="syz.0.2137" path="socket:[49411]" dev="sockfs" ino=49411 ioctlcmd=0x89fe scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 912.942939][T14471] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 912.987016][T14471] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 913.006569][T14473] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 913.019608][T14473] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 913.046174][T14473] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 913.063449][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 913.070441][ T8] usb 6-1: MIDIStreaming interface descriptor not found [ 913.112880][T14475] EXT4-fs error (device sda1): ext4_lookup:1813: inode #115: comm modprobe: iget: checksum invalid [ 913.181470][ T8] gspca_main: spca561-2.14.0 probing abcd:cdee [ 913.214460][T14451] netlink: 'syz.5.2136': attribute type 1 has an invalid length. [ 913.318825][ T8] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 913.334628][ T8] usb 6-1: USB disconnect, device number 107 [ 913.548753][T14490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2142'. [ 913.749719][T14493] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2143'. [ 914.902369][ T5864] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 914.947170][ T29] audit: type=1400 audit(2000000580.257:2324): avc: denied { read } for pid=14502 comm="syz.5.2146" path="socket:[50349]" dev="sockfs" ino=50349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 915.089888][ T5864] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 915.111986][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.150673][ T5864] usb 2-1: config 0 descriptor?? [ 915.382271][ T5901] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 915.542348][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.562186][ T5901] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 915.567071][ T5864] playstation 0003:054C:0DF2.0033: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 915.584629][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.598328][ T5901] usb 6-1: config 0 descriptor?? [ 915.767577][ T5864] playstation 0003:054C:0DF2.0033: Invalid byte count transferred, expected 20 got 0 [ 915.790663][ T5864] playstation 0003:054C:0DF2.0033: Failed to retrieve DualSense pairing info: -22 [ 915.820301][ T5864] playstation 0003:054C:0DF2.0033: Failed to get MAC address from DualSense [ 915.839330][ T5864] playstation 0003:054C:0DF2.0033: Failed to create dualsense. [ 915.847084][ T78] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 915.867873][ T5864] playstation 0003:054C:0DF2.0033: probe with driver playstation failed with error -22 [ 915.990675][ T78] usb 9-1: device descriptor read/64, error -71 [ 915.997407][ T5864] usb 2-1: USB disconnect, device number 106 [ 916.030109][ T5901] keytouch 0003:0926:3333.0034: fixing up Keytouch IEC report descriptor [ 916.062789][ T5901] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0034/input/input59 [ 916.177566][ T5901] keytouch 0003:0926:3333.0034: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 916.230793][ T78] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 916.312748][ T29] audit: type=1400 audit(2000000581.617:2325): avc: denied { mount } for pid=14509 comm="syz.5.2149" name="/" dev="configfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 916.352322][ T5901] [ 916.352331][ T5901] ====================================================== [ 916.352339][ T5901] WARNING: possible circular locking dependency detected [ 916.352349][ T5901] 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 916.352361][ T5901] ------------------------------------------------------ [ 916.352368][ T5901] kworker/0:3/5901 is trying to acquire lock: [ 916.352379][ T5901] ffff88801b0990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 916.352431][ T5901] [ 916.352431][ T5901] but task is already holding lock: [ 916.352438][ T5901] ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 916.352484][ T5901] [ 916.352484][ T5901] which lock already depends on the new lock. [ 916.352484][ T5901] [ 916.352491][ T5901] [ 916.352491][ T5901] the existing dependency chain (in reverse order) is: [ 916.352498][ T5901] [ 916.352498][ T5901] -> #2 (console_lock){+.+.}-{0:0}: [ 916.352526][ T5901] console_lock+0x7a/0xa0 [ 916.352550][ T5901] con_flush_chars+0x5e/0x80 [ 916.352576][ T5901] n_tty_write+0xe17/0x1140 [ 916.352598][ T5901] file_tty_write.constprop.0+0x506/0x9a0 [ 916.352626][ T5901] vfs_write+0x5ae/0x1150 [ 916.352645][ T5901] ksys_write+0x12b/0x250 [ 916.352663][ T5901] do_syscall_64+0xcd/0x250 [ 916.352688][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.352714][ T5901] [ 916.352714][ T5901] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 916.352742][ T5901] down_write+0x93/0x200 [ 916.352767][ T5901] n_tty_flush_buffer+0x25/0x1b0 [ 916.352788][ T5901] tty_buffer_flush+0x236/0x310 [ 916.352806][ T5901] tty_ldisc_flush+0x64/0xe0 [ 916.352830][ T5901] tty_port_close_start+0x337/0x540 [ 916.352851][ T5901] tty_port_close+0x26/0x160 [ 916.352871][ T5901] tty_release+0x3a8/0x1410 [ 916.352888][ T5901] __fput+0x3f8/0xb60 [ 916.352910][ T5901] task_work_run+0x14e/0x250 [ 916.352930][ T5901] syscall_exit_to_user_mode+0x27b/0x2a0 [ 916.352961][ T5901] do_syscall_64+0xda/0x250 [ 916.352985][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.353009][ T5901] [ 916.353009][ T5901] -> #0 (&buf->lock){+.+.}-{4:4}: [ 916.353036][ T5901] __lock_acquire+0x249e/0x3c40 [ 916.353058][ T5901] lock_acquire.part.0+0x11b/0x380 [ 916.353079][ T5901] __mutex_lock+0x19b/0xa60 [ 916.353102][ T5901] tty_buffer_flush+0x72/0x310 [ 916.353119][ T5901] tty_ldisc_flush+0x64/0xe0 [ 916.353144][ T5901] __do_SAK+0x6a1/0x800 [ 916.353162][ T5901] vc_SAK+0x7f/0x310 [ 916.353184][ T5901] process_one_work+0x9c5/0x1ba0 [ 916.353205][ T5901] worker_thread+0x6c8/0xf00 [ 916.353225][ T5901] kthread+0x2c1/0x3a0 [ 916.353248][ T5901] ret_from_fork+0x45/0x80 [ 916.353267][ T5901] ret_from_fork_asm+0x1a/0x30 [ 916.353293][ T5901] [ 916.353293][ T5901] other info that might help us debug this: [ 916.353293][ T5901] [ 916.353300][ T5901] Chain exists of: [ 916.353300][ T5901] &buf->lock --> &tty->termios_rwsem --> console_lock [ 916.353300][ T5901] [ 916.353331][ T5901] Possible unsafe locking scenario: [ 916.353331][ T5901] [ 916.353337][ T5901] CPU0 CPU1 [ 916.353343][ T5901] ---- ---- [ 916.353348][ T5901] lock(console_lock); [ 916.353361][ T5901] lock(&tty->termios_rwsem); [ 916.353376][ T5901] lock(console_lock); [ 916.353390][ T5901] lock(&buf->lock); [ 916.353403][ T5901] [ 916.353403][ T5901] *** DEADLOCK *** [ 916.353403][ T5901] [ 916.353408][ T5901] 4 locks held by kworker/0:3/5901: [ 916.353421][ T5901] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 916.353471][ T5901] #1: ffffc900033f7d80 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 916.353521][ T5901] #2: ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 916.353572][ T5901] #3: ffff8880798210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 916.353625][ T5901] [ 916.353625][ T5901] stack backtrace: [ 916.353633][ T5901] CPU: 0 UID: 0 PID: 5901 Comm: kworker/0:3 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 916.353658][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 916.353671][ T5901] Workqueue: events vc_SAK [ 916.353694][ T5901] Call Trace: [ 916.353702][ T5901] [ 916.353710][ T5901] dump_stack_lvl+0x116/0x1f0 [ 916.353737][ T5901] print_circular_bug+0x419/0x5d0 [ 916.353760][ T5901] check_noncircular+0x31a/0x400 [ 916.353782][ T5901] ? __pfx_check_noncircular+0x10/0x10 [ 916.353807][ T5901] ? lockdep_lock+0xc6/0x200 [ 916.353838][ T5901] ? __pfx_lockdep_lock+0x10/0x10 [ 916.353867][ T5901] __lock_acquire+0x249e/0x3c40 [ 916.353894][ T5901] ? __pfx___lock_acquire+0x10/0x10 [ 916.353920][ T5901] lock_acquire.part.0+0x11b/0x380 [ 916.353947][ T5901] ? tty_buffer_flush+0x72/0x310 [ 916.353968][ T5901] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 916.353992][ T5901] ? rcu_is_watching+0x12/0xc0 [ 916.354019][ T5901] ? trace_lock_acquire+0x14e/0x1f0 [ 916.354046][ T5901] ? __pfx___lock_acquire+0x10/0x10 [ 916.354068][ T5901] ? tty_buffer_flush+0x72/0x310 [ 916.354088][ T5901] ? lock_acquire+0x2f/0xb0 [ 916.354108][ T5901] ? tty_buffer_flush+0x72/0x310 [ 916.354129][ T5901] __mutex_lock+0x19b/0xa60 [ 916.354154][ T5901] ? tty_buffer_flush+0x72/0x310 [ 916.354175][ T5901] ? tty_buffer_flush+0x72/0x310 [ 916.354193][ T5901] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 916.354217][ T5901] ? __pfx___mutex_lock+0x10/0x10 [ 916.354242][ T5901] ? trace_lock_acquire+0x14e/0x1f0 [ 916.354270][ T5901] ? lock_acquire.part.0+0x11b/0x380 [ 916.354292][ T5901] ? tty_ldisc_flush+0x1c/0xe0 [ 916.354321][ T5901] ? ldsem_down_read_trylock+0x11b/0x180 [ 916.354347][ T5901] ? tty_buffer_flush+0x72/0x310 [ 916.354366][ T5901] tty_buffer_flush+0x72/0x310 [ 916.354387][ T5901] tty_ldisc_flush+0x64/0xe0 [ 916.354414][ T5901] __do_SAK+0x6a1/0x800 [ 916.354434][ T5901] ? lock_acquire+0x2f/0xb0 [ 916.354455][ T5901] ? vc_SAK+0x13/0x310 [ 916.354481][ T5901] vc_SAK+0x7f/0x310 [ 916.354504][ T5901] process_one_work+0x9c5/0x1ba0 [ 916.354530][ T5901] ? __pfx_console_callback+0x10/0x10 [ 916.354551][ T5901] ? __pfx_process_one_work+0x10/0x10 [ 916.354573][ T5901] ? rcu_is_watching+0x12/0xc0 [ 916.354602][ T5901] ? assign_work+0x1a0/0x250 [ 916.354623][ T5901] worker_thread+0x6c8/0xf00 [ 916.354649][ T5901] ? __kthread_parkme+0x148/0x220 [ 916.354676][ T5901] ? __pfx_worker_thread+0x10/0x10 [ 916.354698][ T5901] kthread+0x2c1/0x3a0 [ 916.354723][ T5901] ? _raw_spin_unlock_irq+0x23/0x50 [ 916.354745][ T5901] ? __pfx_kthread+0x10/0x10 [ 916.354772][ T5901] ret_from_fork+0x45/0x80 [ 916.354792][ T5901] ? __pfx_kthread+0x10/0x10 [ 916.354817][ T5901] ret_from_fork_asm+0x1a/0x30 [ 916.354849][ T5901] [ 916.357306][ T5901] tty tty1: SAK: killed process 6137 (syz.3.54): by fd#4 [ 916.372340][ T29] audit: type=1400 audit(2000000581.637:2326): avc: denied { read } for pid=14509 comm="syz.5.2149" name="/" dev="configfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 916.372375][ T29] audit: type=1400 audit(2000000581.637:2327): avc: denied { open } for pid=14509 comm="syz.5.2149" path="/416/file0" dev="configfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 916.390660][ T78] usb 9-1: device descriptor read/64, error -71 [ 916.426389][ T29] audit: type=1400 audit(2000000581.737:2328): avc: denied { write } for pid=5801 comm="syz-executor" path="pipe:[4820]" dev="pipefs" ino=4820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 916.436994][ T29] audit: type=1400 audit(2000000581.747:2329): avc: denied { recv } for pid=14492 comm="syz.0.2144" saddr=10.128.0.169 src=46434 daddr=10.128.10.48 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 916.510849][ T78] usb usb9-port1: attempt power cycle [ 916.526463][ T29] audit: type=1400 audit(2000000581.837:2330): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 916.526502][ T29] audit: type=1400 audit(2000000581.837:2331): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.526531][ T29] audit: type=1400 audit(2000000581.837:2332): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 917.332223][ T29] audit: type=1400 audit(2000000581.837:2333): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 917.448915][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.605536][ T25] usb 6-1: USB disconnect, device number 108 [ 917.611521][ C0] keytouch 0003:0926:3333.0034: usb_submit_urb(ctrl) failed: -19 [ 917.620650][ T78] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 917.751996][ T78] usb 9-1: device descriptor read/8, error -71 [ 917.765059][ T6360] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.823999][ T6360] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.884497][ T6360] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.924098][ T6360] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.974306][ T6360] bridge_slave_1: left allmulticast mode [ 917.979959][ T6360] bridge_slave_1: left promiscuous mode [ 917.985739][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.994106][ T6360] bridge_slave_0: left allmulticast mode [ 917.999777][ T6360] bridge_slave_0: left promiscuous mode [ 918.006151][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.070374][ T6360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.080687][ T6360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.089888][ T6360] bond0 (unregistering): Released all slaves [ 918.254986][ T6360] hsr_slave_0: left promiscuous mode [ 918.261813][ T6360] hsr_slave_1: left promiscuous mode [ 918.267492][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.275480][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.283830][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.291590][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.300029][ T6360] veth1_macvtap: left promiscuous mode [ 918.306767][ T6360] veth0_macvtap: left promiscuous mode [ 918.312484][ T6360] veth1_vlan: left promiscuous mode [ 918.317717][ T6360] veth0_vlan: left promiscuous mode [ 918.444463][ T6360] team0 (unregistering): Port device team_slave_1 removed [ 918.473976][ T6360] team0 (unregistering): Port device team_slave_0 removed [ 918.660771][T13575] EXT4-fs error: 14 callbacks suppressed [ 918.660790][T13575] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:0: bg 3: bad block bitmap checksum [ 918.678713][T13575] EXT4-fs (sda1): Delayed block allocation failed for inode 1938 at logical offset 1457 with max blocks 4 with error 74 [ 918.691348][T13575] EXT4-fs (sda1): This should not happen!! Data will be lost [ 918.691348][T13575]