sync page read [ 582.604725][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.604756][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 582.604819][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.604848][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 582.604928][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.604957][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 582.605032][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.605060][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 582.605123][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.605153][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 582.605200][ T7120] ldm_validate_partition_table(): Disk read failed. [ 582.605290][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.605319][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 582.605751][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.605785][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 582.605919][ T7120] Dev loop1: unable to read RDB block 0 [ 582.606253][ T7120] loop1: unable to read partition table [ 582.626374][T11741] EXT4-fs (loop2): mount failed [ 582.983217][ T3773] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 583.354845][ T3773] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 583.365691][ T3773] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.376822][ T3773] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 583.387028][ T3773] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.535376][ T3773] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 583.545150][ T3773] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 583.551438][ T3773] usb 8-1: Product: syz [ 583.554650][ T3773] usb 8-1: Manufacturer: syz [ 583.603964][ T3773] cdc_wdm 8-1:1.0: skipping garbage [ 583.607142][ T3773] cdc_wdm 8-1:1.0: skipping garbage [ 583.610595][ T3773] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 585.497407][ T172] usb 8-1: USB disconnect, device number 41 09:31:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB='s'], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 09:31:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f", 0x14, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:31:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x5412, 0x0) [ 585.528568][T11756] loop1: detected capacity change from 0 to 264192 09:31:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 09:31:17 executing program 2: add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000002700), &(0x7f0000002740)={'syz', 0x0}, &(0x7f0000002780)="95", 0x1, 0xfffffffffffffffd) 09:31:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 09:31:17 executing program 2: io_submit(0x0, 0xfffffffffffffdc9, 0x0) [ 586.003528][ T6243] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 586.373261][ T6243] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 586.380027][ T6243] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.389532][ T6243] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 586.397997][ T6243] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.408275][ T6243] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.533571][ T6243] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 586.539784][ T6243] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 586.547427][ T6243] usb 8-1: Product: syz [ 586.551636][ T6243] usb 8-1: Manufacturer: syz [ 586.594297][ T6243] cdc_wdm 8-1:1.0: skipping garbage [ 586.598410][ T6243] cdc_wdm 8-1:1.0: skipping garbage [ 586.629704][ T6243] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 586.634820][ T6243] cdc_wdm 8-1:1.0: Unknown control protocol [ 587.147592][T11766] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 588.534960][ T1268] usb 8-1: USB disconnect, device number 42 09:31:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB='s'], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setuid(0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 09:31:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', 0x0, 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f", 0x14, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:31:20 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x63, 0xac, 0x92, 0x10, 0xbb4, 0xa1e, 0xdc42, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5a, 0x7c, 0xa}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x26, &(0x7f0000000940)={0x5, 0xf, 0x26, 0x3, [@generic={0xa, 0x10, 0x3, "e14fca721a1eef"}, @wireless={0xb}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x3f}]}}) [ 588.561873][T11771] loop1: detected capacity change from 0 to 264192 09:31:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setuid(0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 09:31:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setuid(0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 09:31:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) 09:31:20 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) [ 588.843178][ T3763] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 589.033182][ T1268] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 589.103191][ T3763] usb 7-1: Using ep0 maxpacket: 16 [ 589.403629][ T1268] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 589.409704][ T1268] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.418241][ T1268] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 589.425881][ T1268] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.434755][ T1268] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.473345][ T3763] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a1e, bcdDevice=dc.42 [ 589.479443][ T3763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.484170][ T3763] usb 7-1: Product: syz [ 589.487255][ T3763] usb 7-1: Manufacturer: syz [ 589.490538][ T3763] usb 7-1: SerialNumber: syz [ 589.497835][ T3763] usb 7-1: config 0 descriptor?? [ 589.563291][ T1268] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 589.570903][ T1268] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 589.577717][ T1268] usb 8-1: Product: syz [ 589.580595][ T1268] usb 8-1: Manufacturer: syz [ 589.624211][ T1268] cdc_wdm 8-1:1.0: skipping garbage [ 589.628316][ T1268] cdc_wdm 8-1:1.0: skipping garbage [ 589.633361][ T1268] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 589.637536][ T1268] cdc_wdm 8-1:1.0: Unknown control protocol [ 589.736447][ T1268] usb 7-1: USB disconnect, device number 12 [ 590.178971][T11783] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 591.574869][ T3773] usb 8-1: USB disconnect, device number 43 09:31:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB='s'], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) 09:31:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 09:31:23 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='ext4_allocate_inode\x00', r1}, 0x10) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00') 09:31:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) 09:31:23 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 09:31:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f", 0x14, 0x1510}], 0x0, &(0x7f0000000000)=ANY=[]) 09:31:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "848800000000e90000000000000000000400"}) r1 = syz_open_pts(r0, 0x0) ioctl$KDSETMODE(r1, 0x5405, 0x0) [ 591.644867][T11797] loop1: detected capacity change from 0 to 21 [ 591.656046][T11797] loop1: unable to read partition table [ 591.660821][T11797] loop1: partition table beyond EOD, truncated [ 591.670248][T11797] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (10 blocks) [ 591.735304][ T7120] blk_print_req_error: 7 callbacks suppressed [ 591.735319][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.745890][ T7120] buffer_io_error: 7 callbacks suppressed [ 591.745940][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 591.754724][ T7120] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.760628][ T7120] Buffer I/O error on dev loop1, logical block 2, async page read [ 591.766048][ T7120] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.772063][ T7120] Buffer I/O error on dev loop1, logical block 3, async page read [ 592.073169][ T971] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 592.434272][ T971] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 592.439987][ T971] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.450357][ T971] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 592.458193][ T971] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.467248][ T971] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.593297][ T971] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 592.599490][ T971] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 592.605908][ T971] usb 8-1: Product: syz [ 592.608740][ T971] usb 8-1: Manufacturer: syz [ 592.656187][ T971] cdc_wdm 8-1:1.0: skipping garbage [ 592.661862][ T971] cdc_wdm 8-1:1.0: skipping garbage [ 592.672045][ T971] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 592.677796][ T971] cdc_wdm 8-1:1.0: Unknown control protocol [ 593.207724][T11800] cdc_wdm 8-1:1.0: Error submitting int urb - -90 09:31:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$bt_hci(r0, 0x0, 0x0) 09:31:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, "848800000000e90000000000000000000400"}) r1 = syz_open_pts(r0, 0x0) ioctl$KDSETMODE(r1, 0x5456, 0x0) 09:31:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f", 0x14, 0x1510}], 0x0, &(0x7f0000000000)=ANY=[]) [ 594.608784][ T3153] usb 8-1: USB disconnect, device number 44 09:31:26 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 594.649756][T11807] loop1: detected capacity change from 0 to 21 09:31:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$bt_hci(r0, 0x0, 0x0) [ 594.664816][T11807] loop1: unable to read partition table [ 594.669877][T11807] loop1: partition table beyond EOD, truncated 09:31:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000005", 0x5, 0x640}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {0x0, 0x0, 0x6700000}, {&(0x7f0000000580)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:31:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$bt_hci(r0, 0x0, 0x0) [ 594.682522][T11807] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (10 blocks) [ 594.700084][T11816] loop2: detected capacity change from 0 to 264192 09:31:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) [ 594.717647][T11816] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 09:31:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) [ 594.724923][T11816] EXT4-fs warning (device loop2): ext4_enable_quotas:6818: Failed to enable quota tracking (type=1, err=-22). Please run e2fsck to fix. [ 594.758288][T11816] EXT4-fs (loop2): mount failed [ 595.143134][ T3153] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 595.333149][ T3153] usb 8-1: device descriptor read/64, error 18 [ 595.623197][ T3153] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 595.833184][ T3153] usb 8-1: device descriptor read/64, error 18 [ 595.953389][ T3153] usb usb8-port1: attempt power cycle [ 596.373148][ T3153] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 596.563365][ T3153] usb 8-1: device descriptor read/8, error -61 [ 596.843254][ T3153] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 597.023384][ T3153] usb 8-1: device descriptor read/8, error -61 [ 597.148254][ T3153] usb usb8-port1: unable to enumerate USB device 09:31:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f", 0x14, 0x1510}], 0x0, &(0x7f0000000000)=ANY=[]) 09:31:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) 09:31:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) [ 597.667942][T11826] loop1: detected capacity change from 0 to 21 09:31:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) [ 597.676757][T11826] loop1: unable to read partition table [ 597.682205][T11826] loop1: partition table beyond EOD, truncated 09:31:29 executing program 2: syz_genetlink_get_family_id$nbd(&(0x7f0000001680), 0xffffffffffffffff) [ 597.688441][T11826] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (10 blocks) 09:31:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) 09:31:29 executing program 2: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) 09:31:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f", 0x14, 0x1510}, {0x0}], 0x0, &(0x7f0000000000)=ANY=[]) [ 597.769686][T11840] loop1: detected capacity change from 0 to 21 [ 597.775234][ T3132] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.775270][ T3132] Buffer I/O error on dev loop1, logical block 0, async page read [ 597.775333][ T3132] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.775359][ T3132] Buffer I/O error on dev loop1, logical block 0, async page read [ 597.775422][ T3132] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.775582][ T3132] Buffer I/O error on dev loop1, logical block 0, async page read [ 597.775653][ T3132] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.818164][ T3132] Buffer I/O error on dev loop1, logical block 0, async page read [ 597.825184][ T3132] loop1: unable to read partition table [ 597.829577][ T3132] loop1: partition table beyond EOD, truncated [ 597.840978][T11840] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (10 blocks) [ 597.898338][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.906652][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 597.912281][ T7120] I/O error, dev loop1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.922618][ T7120] Buffer I/O error on dev loop1, logical block 2, async page read [ 597.928302][ T7120] I/O error, dev loop1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.935150][ T7120] Buffer I/O error on dev loop1, logical block 3, async page read [ 598.173201][ T34] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 598.363179][ T34] usb 8-1: device descriptor read/64, error 18 [ 598.633237][ T34] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 598.823213][ T34] usb 8-1: device descriptor read/64, error 18 [ 598.943433][ T34] usb usb8-port1: attempt power cycle [ 599.363254][ T34] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 599.574008][ T34] usb 8-1: device descriptor read/8, error -61 [ 599.853156][ T34] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 600.023486][ T34] usb 8-1: device descriptor read/8, error -61 [ 600.143319][ T34] usb usb8-port1: unable to enumerate USB device 09:31:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) 09:31:32 executing program 2: socket(0x0, 0x1, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x40400e4) io_setup(0xa401, &(0x7f0000000000)) 09:31:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f", 0x14, 0x1510}, {0x0}], 0x0, &(0x7f0000000000)=ANY=[]) [ 600.705089][T11845] loop1: detected capacity change from 0 to 21 [ 600.713864][T11845] loop1: unable to read partition table [ 600.719568][T11845] loop1: partition table beyond EOD, truncated 09:31:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000002540)={0x14, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) [ 600.729721][T11845] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (10 blocks) 09:31:32 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000002f00), 0xffffffffffffffff) 09:31:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f", 0x14, 0x1510}, {0x0}], 0x0, &(0x7f0000000000)=ANY=[]) 09:31:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000025c0)={&(0x7f00000024c0), 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x28, r1, 0x9, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) [ 600.818636][T11855] loop1: detected capacity change from 0 to 21 [ 600.825456][T11855] loop1: unable to read partition table [ 600.829815][T11855] loop1: partition table beyond EOD, truncated [ 600.848280][T11855] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (10 blocks) [ 601.223350][ T3947] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 601.413671][ T3947] usb 8-1: device descriptor read/64, error 18 [ 601.693221][ T3947] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 601.883323][ T3947] usb 8-1: device descriptor read/64, error 18 [ 602.003667][ T3947] usb usb8-port1: attempt power cycle [ 602.423207][ T3947] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 602.593610][ T3947] usb 8-1: device descriptor read/8, error -61 [ 602.863234][ T3947] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 603.045091][ T3947] usb 8-1: device descriptor read/8, error -61 [ 603.163434][ T3947] usb usb8-port1: unable to enumerate USB device 09:31:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:35 executing program 0: sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x40400e4) sync() sync() sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 09:31:35 executing program 2: r0 = socket(0x2, 0x3, 0x1) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 09:31:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 603.741517][T11865] loop1: detected capacity change from 0 to 264192 09:31:35 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)='6', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) [ 603.756817][T11865] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated [ 603.770065][T11865] EXT4-fs (loop1): get root inode failed [ 603.776891][T11865] EXT4-fs (loop1): mount failed 09:31:35 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000a40)=[{&(0x7f0000010000)="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", 0x12b, 0x10000}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='space_cache==']) 09:31:35 executing program 0: sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x40400e4) sync() sync() sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 603.841030][T11872] loop2: detected capacity change from 0 to 256 [ 603.841593][ T7120] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.854011][ T7120] Buffer I/O error on dev loop2, logical block 0, async page read [ 603.875497][ T7120] loop2: unable to read partition table 09:31:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 603.884665][T11872] BTRFS: device fsid e76ed352-74d7-4461-bdaa-670e3acfe92b devid 1 transid 7 /dev/loop2 scanned by syz-executor.2 (11872) [ 603.907326][T11876] loop1: detected capacity change from 0 to 264192 [ 603.908447][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 603.919080][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 603.936827][ T7120] loop1: unable to read partition table [ 603.950551][T11876] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated [ 603.956300][T11872] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 603.960876][T11876] EXT4-fs (loop1): get root inode failed [ 603.971085][T11872] BTRFS error (device loop2): superblock checksum mismatch [ 603.973737][T11876] EXT4-fs (loop1): mount failed [ 604.006579][T11872] BTRFS error (device loop2): open_ctree failed [ 604.223320][ T3947] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 604.423243][ T3947] usb 8-1: device descriptor read/64, error 18 [ 604.693257][ T3947] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 604.902157][ T3947] usb 8-1: device descriptor read/64, error 18 [ 605.035556][ T3947] usb usb8-port1: attempt power cycle [ 605.453500][ T3947] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 605.643790][ T3947] usb 8-1: device descriptor read/8, error -61 [ 605.913130][ T3947] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 606.083503][ T3947] usb 8-1: device descriptor read/8, error -61 [ 606.213498][ T3947] usb usb8-port1: unable to enumerate USB device 09:31:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0xc0189436, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, r1}) 09:31:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:31:38 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010700)="1020f5f201000b0009000e00030000000c00000009", 0x15, 0x1400}], 0x0, &(0x7f0000015000)) [ 606.784912][T11883] loop1: detected capacity change from 0 to 264192 [ 606.785386][T11884] loop2: detected capacity change from 0 to 20 09:31:38 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x1, 0x1, [@loopback]}, 0x14) [ 606.797455][T11883] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated [ 606.808898][T11884] loop2: unable to read partition table [ 606.816753][T11883] EXT4-fs (loop1): get root inode failed [ 606.818157][T11884] loop2: partition table beyond EOD, truncated [ 606.821872][T11883] EXT4-fs (loop1): mount failed 09:31:38 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @loopback, @empty, 0x20, 0x1, 0x1, 0x7}}) [ 606.848116][T11884] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 606.865475][T11884] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 606.873489][T11884] F2FS-fs (loop2): Invalid log sectorsize (917513) 09:31:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, 0x0, 0x0) [ 606.879067][T11884] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 09:31:38 executing program 0: r0 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000140)=[0x5, 0x2]) [ 606.951368][ T39] audit: type=1400 audit(1662111098.566:379): avc: denied { read } for pid=11894 comm="syz-executor.0" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 606.975214][ T39] audit: type=1400 audit(1662111098.566:380): avc: denied { open } for pid=11894 comm="syz-executor.0" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 606.997155][ T39] audit: type=1400 audit(1662111098.566:381): avc: denied { ioctl } for pid=11894 comm="syz-executor.0" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 607.283424][ T6243] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 607.474519][ T6243] usb 8-1: device descriptor read/64, error 18 [ 607.743292][ T6243] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 607.934273][ T6243] usb 8-1: device descriptor read/64, error 18 [ 608.053339][ T6243] usb usb8-port1: attempt power cycle [ 608.463182][ T6243] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 608.644431][ T6243] usb 8-1: device descriptor read/8, error -61 [ 608.913265][ T6243] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 609.093364][ T6243] usb 8-1: device descriptor read/8, error -61 [ 609.213370][ T6243] usb usb8-port1: unable to enumerate USB device 09:31:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:31:41 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @loopback=0xac14143d}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)='6', 0x1}], 0x1}, 0x0) 09:31:41 executing program 0: r0 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000140)=[0x5, 0x2]) [ 609.813711][T11901] loop1: detected capacity change from 0 to 264192 09:31:41 executing program 0: r0 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000140)=[0x5, 0x2]) 09:31:41 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x15, &(0x7f0000000080)={@multicast1, @loopback}, 0x3) [ 609.836087][T11901] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated [ 609.847515][T11901] EXT4-fs (loop1): get root inode failed [ 609.852292][T11901] EXT4-fs (loop1): mount failed 09:31:41 executing program 0: r0 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000140)=[0x5, 0x2]) 09:31:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 610.303246][ T6243] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 610.493152][ T6243] usb 8-1: device descriptor read/64, error 18 [ 610.773183][ T6243] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 610.963228][ T6243] usb 8-1: device descriptor read/64, error 18 [ 611.083349][ T6243] usb usb8-port1: attempt power cycle [ 611.513263][ T6243] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 611.683693][ T6243] usb 8-1: device descriptor read/8, error -61 [ 611.953359][ T6243] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 612.123646][ T6243] usb 8-1: device descriptor read/8, error -61 [ 612.244729][ T6243] usb usb8-port1: unable to enumerate USB device 09:31:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:31:44 executing program 0: r0 = epoll_create(0x4) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000000}) 09:31:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x101, 0x8202, 0x7f, 0x0, 0x1}, 0x48) [ 612.844819][T11923] loop1: detected capacity change from 0 to 264192 09:31:44 executing program 0: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x2, &(0x7f0000004540)=[{&(0x7f0000004240)='}', 0x1, 0x8000000000000001}, {&(0x7f0000004300)="93", 0x1}], 0x0, 0x0) 09:31:44 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001840)=[{{&(0x7f0000000080)=@abs, 0x6e, 0x0}}], 0x1, 0x20000840) [ 612.860533][T11923] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated [ 612.873782][T11923] EXT4-fs (loop1): get root inode failed [ 612.878106][T11923] EXT4-fs (loop1): mount failed 09:31:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @local}, 0x1c) 09:31:44 executing program 2: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[], [{@context={'context', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) [ 613.363631][ T6243] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 613.733208][ T6243] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 613.739271][ T6243] usb 8-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 613.749697][ T6243] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 613.758070][ T6243] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 613.883330][ T6243] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 613.889472][ T6243] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 613.895356][ T6243] usb 8-1: Product: syz [ 613.898419][ T6243] usb 8-1: Manufacturer: syz [ 613.944246][ T6243] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 615.859893][ T3947] usb 8-1: USB disconnect, device number 69 09:31:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:47 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 09:31:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @local}, 0x1c) 09:31:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 615.884142][T11942] loop1: detected capacity change from 0 to 264192 09:31:47 executing program 2: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) 09:31:47 executing program 0: pselect6(0x70, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, &(0x7f00000001c0), 0x0, 0x0) [ 615.909558][T11942] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated [ 615.919955][T11942] EXT4-fs (loop1): get root inode failed 09:31:47 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003400)={0x19, 0x3, &(0x7f0000002240)=@framed, &(0x7f00000022c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 615.938196][T11942] EXT4-fs (loop1): mount failed 09:31:47 executing program 0: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000033c0)=[{&(0x7f00000012c0)="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", 0xd41}], 0x0, 0x0) [ 616.373894][ T34] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 616.763199][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 616.768202][ T34] usb 8-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 616.776590][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 616.782163][ T34] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.923483][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 616.929977][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 616.935851][ T34] usb 8-1: Product: syz [ 616.938640][ T34] usb 8-1: Manufacturer: syz [ 617.003654][ T34] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 618.900222][ T34] usb 8-1: USB disconnect, device number 70 09:31:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreq(r0, 0x0, 0xa, 0x0, &(0x7f0000000040)) 09:31:50 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 09:31:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00), 0x0, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:31:50 executing program 2: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x4, &(0x7f0000004540)=[{&(0x7f00000041c0)="0f", 0x1}, {&(0x7f00000042c0)='l', 0x1}, {&(0x7f0000004300)="93", 0x1, 0xc549}, {&(0x7f0000004400)="01", 0x1, 0x1000}], 0x0, &(0x7f0000004600)) [ 618.924144][T11960] loop1: detected capacity change from 0 to 264192 [ 618.936079][T11964] loop2: detected capacity change from 0 to 197 [ 618.937092][T11960] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated 09:31:50 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x1004, 0x0, &(0x7f0000000080)) 09:31:50 executing program 2: madvise(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x6) [ 618.953432][T11960] EXT4-fs (loop1): get root inode failed [ 618.958169][T11960] EXT4-fs (loop1): mount failed 09:31:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) [ 619.423299][ T34] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 619.803586][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 619.809380][ T34] usb 8-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 619.815470][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 619.821288][ T34] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.953748][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 619.962144][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 619.968966][ T34] usb 8-1: Product: syz [ 619.972353][ T34] usb 8-1: Manufacturer: syz [ 620.025168][ T34] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 621.938910][ T3773] usb 8-1: USB disconnect, device number 71 09:31:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f0100000400", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:53 executing program 0: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock(&(0x7f0000fec000/0x14000)=nil, 0x14000) 09:31:53 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7, &(0x7f0000000180), 0x88) 09:31:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00), 0x0, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 621.960952][T11978] loop1: detected capacity change from 0 to 264192 09:31:53 executing program 0: mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) [ 621.982629][T11978] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated 09:31:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000003c0), 0x10) [ 621.995849][T11978] EXT4-fs (loop1): get root inode failed [ 622.000751][T11978] EXT4-fs (loop1): mount failed 09:31:53 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) dup2(r0, r1) 09:31:53 executing program 2: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @random="9a79ae417225", @val, {@ipv4}}, 0x0) [ 622.533254][ T3773] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 622.903473][ T3773] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 622.911527][ T3773] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.919446][ T3773] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 622.928962][ T3773] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 623.053537][ T3773] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 623.061292][ T3773] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 623.068382][ T3773] usb 8-1: Product: syz [ 623.072036][ T3773] usb 8-1: Manufacturer: syz [ 623.114587][ T3773] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 624.968870][ T34] usb 8-1: USB disconnect, device number 72 09:31:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f0100000400", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00), 0x0, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:31:56 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) r2 = dup(r1) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xd, &(0x7f0000000000), 0x4) 09:31:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) sendto(r0, &(0x7f0000001040)='I', 0x1, 0x105, &(0x7f0000001080)=@in6={0x1c, 0x1c, 0x3}, 0x1c) [ 624.986786][T12001] loop1: detected capacity change from 0 to 264192 09:31:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') [ 625.000446][T12001] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated 09:31:56 executing program 0: mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) [ 625.011069][T12001] EXT4-fs (loop1): get root inode failed [ 625.015963][T12001] EXT4-fs (loop1): mount failed 09:31:56 executing program 2: select(0x47, 0x0, 0x0, 0x0, &(0x7f0000000100)) 09:31:56 executing program 0: shmget(0x3, 0x4000, 0x348, &(0x7f0000ffc000/0x4000)=nil) [ 625.621766][ T34] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 626.033268][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 626.038544][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.044606][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 626.049903][ T34] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.183486][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 626.191520][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 626.200309][ T34] usb 8-1: Product: syz [ 626.204078][ T34] usb 8-1: Manufacturer: syz [ 626.244305][ T34] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 628.014467][ T3763] usb 8-1: USB disconnect, device number 73 09:31:59 executing program 2: open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000) 09:31:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f0100000400", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:31:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4", 0xa, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:31:59 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000200)={@local={0xfe, 0x80, '\x00', 0x0}}, 0x14) [ 628.044953][T12019] loop1: detected capacity change from 0 to 264192 [ 628.060489][T12019] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated 09:31:59 executing program 2: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="b6f1a35f9cf6", @val, {@ipv4}}, 0x0) [ 628.076492][T12019] EXT4-fs (loop1): get root inode failed [ 628.081203][T12019] EXT4-fs (loop1): mount failed 09:31:59 executing program 2: mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 09:31:59 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000200)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) 09:31:59 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x11}]}}, &(0x7f00000015c0)=""/245, 0x2a, 0xf5, 0x1}, 0x20) 09:31:59 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f00000015c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) [ 628.623238][ T3763] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 629.003516][ T3763] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 629.010392][ T3763] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.024862][ T3763] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 629.038155][ T3763] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.147015][ T3763] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 629.161841][ T3763] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 629.167797][ T3763] usb 8-1: Product: syz [ 629.171296][ T3763] usb 8-1: Manufacturer: syz [ 629.226571][ T3763] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 630.087351][ T1352] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.093472][ T1352] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.047238][ T1268] usb 8-1: USB disconnect, device number 74 09:32:02 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000025c0)={0x6, 0x5, &(0x7f00000023c0)=@raw=[@func, @cb_func, @cb_func], &(0x7f0000002440)='syzkaller\x00', 0x5, 0xbd, &(0x7f0000002480)=""/189, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:32:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}}, &(0x7f00000015c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) 09:32:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4", 0xa, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 631.072318][T12041] loop1: detected capacity change from 0 to 264192 09:32:02 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0x5}, {0x5, 0x2}]}]}}, &(0x7f00000015c0)=""/245, 0x3e, 0xf5, 0x1}, 0x20) 09:32:02 executing program 0: syz_clone(0x4204000, 0x0, 0x0, 0x0, 0x0, 0x0) 09:32:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 631.109197][T12041] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated [ 631.120269][T12041] EXT4-fs (loop1): get root inode failed [ 631.125722][T12041] EXT4-fs (loop1): mount failed 09:32:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4", 0xa, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:32:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0xf, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 631.195972][T12053] loop1: detected capacity change from 0 to 264192 [ 631.200772][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.208613][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 631.214622][ T7120] loop1: unable to read partition table [ 631.226512][T12053] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated [ 631.237529][T12053] EXT4-fs (loop1): get root inode failed [ 631.241328][T12053] EXT4-fs (loop1): mount failed [ 631.574038][ T3773] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 631.943336][ T3773] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 631.950548][ T3773] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.963594][ T3773] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 631.972265][ T3773] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 632.103657][ T3773] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 632.111521][ T3773] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 632.122116][ T3773] usb 8-1: Product: syz [ 632.126113][ T3773] usb 8-1: Manufacturer: syz [ 632.175360][ T3773] cdc_wdm 8-1:1.0: skipping garbage [ 632.179669][ T3773] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 634.097465][ T40] usb 8-1: USB disconnect, device number 75 09:32:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:05 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000001080)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:32:05 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000001080)='ext4_allocate_blocks\x00', r0}, 0x10) 09:32:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf465", 0xf, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 634.118351][T12061] loop1: detected capacity change from 0 to 264192 [ 634.148033][T12061] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: bogus i_mode (0) 09:32:05 executing program 0: symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') readlink(&(0x7f0000000140)='./file0\x00', 0x0, 0x45) 09:32:05 executing program 2: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') [ 634.160491][T12061] EXT4-fs (loop1): get root inode failed [ 634.166464][T12061] EXT4-fs (loop1): mount failed 09:32:05 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 09:32:05 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="236b7cf2db33", @val, {@ipv4}}, 0x0) [ 634.633273][ T3153] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 635.013432][ T3153] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 635.020422][ T3153] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.029385][ T3153] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 635.035283][ T3153] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.163336][ T3153] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 635.168619][ T3153] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 635.174434][ T3153] usb 8-1: Product: syz [ 635.177362][ T3153] usb 8-1: Manufacturer: syz [ 635.214449][ T3153] cdc_wdm 8-1:1.0: skipping garbage [ 635.218151][ T3153] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 637.152505][ T971] usb 8-1: USB disconnect, device number 76 09:32:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf465", 0xf, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:32:08 executing program 0: r0 = open$dir(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = dup(r0) unlinkat(r1, &(0x7f0000000200)='./file0/file0\x00', 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0) 09:32:08 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x20, 0x4) [ 637.180090][T12078] loop1: detected capacity change from 0 to 264192 09:32:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0xc, 0x0, 0x0) 09:32:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x82, 0x0, 0x0) [ 637.193784][ T39] audit: type=1400 audit(1662111128.816:382): avc: denied { setopt } for pid=12081 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 637.218016][T12078] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: bogus i_mode (0) 09:32:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="01", 0x1}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000000c0)='E', 0x1}], 0x1}, 0x0) [ 637.228634][T12078] EXT4-fs (loop1): get root inode failed [ 637.232729][T12078] EXT4-fs (loop1): mount failed 09:32:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 637.683310][ T6243] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 638.043273][ T6243] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 638.050411][ T6243] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.058989][ T6243] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 638.064388][ T6243] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 638.193428][ T6243] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 638.200650][ T6243] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 638.217650][ T6243] usb 8-1: Product: syz [ 638.220927][ T6243] usb 8-1: Manufacturer: syz [ 638.265729][ T6243] cdc_wdm 8-1:1.0: skipping garbage [ 638.270133][ T6243] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 640.186216][ T3153] usb 8-1: USB disconnect, device number 77 09:32:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000010600000000000000000a20000000000a01000000000004000008000000000900010073797a300000000070000000120a0100001000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003"], 0xb8}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 09:32:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf465", 0xf, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:32:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="01", 0x1}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000000c0)='E', 0x1}], 0x1}, 0x0) [ 640.217501][T12100] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 640.230110][T12098] loop1: detected capacity change from 0 to 264192 09:32:11 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0xa081, 0x0) [ 640.259987][T12098] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: bogus i_mode (0) 09:32:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89e1, 0x0) [ 640.273292][T12098] EXT4-fs (loop1): get root inode failed [ 640.277829][T12098] EXT4-fs (loop1): mount failed 09:32:11 executing program 2: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 09:32:11 executing program 2: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) [ 640.713090][ T34] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 641.103638][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 641.110610][ T34] usb 8-1: config 1 has an invalid descriptor of length 211, skipping remainder of the config [ 641.119304][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 641.126070][ T34] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 641.253323][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 641.264832][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 641.275746][ T34] usb 8-1: Product: syz [ 641.278454][ T34] usb 8-1: Manufacturer: syz [ 641.334506][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 641.338809][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 641.342665][ T34] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 643.225350][ T1268] usb 8-1: USB disconnect, device number 78 09:32:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4", 0x12, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:32:14 executing program 0: bpf$PROG_LOAD_XDP(0xe, 0x0, 0x0) 09:32:14 executing program 2: getitimer(0x1, &(0x7f0000003740)) [ 643.245300][T12116] loop1: detected capacity change from 0 to 264192 09:32:14 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) 09:32:14 executing program 0: syz_clone(0x44080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 643.280172][T12116] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: bogus i_mode (0) [ 643.290963][T12116] EXT4-fs (loop1): get root inode failed [ 643.298950][T12116] EXT4-fs (loop1): mount failed 09:32:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x6, 0x0, 0x0, 0x0, 0x988, 0x1}, 0x48) 09:32:14 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd, 0x0, 0x5b}) [ 643.368535][ T39] audit: type=1400 audit(1662111134.986:383): avc: denied { ioctl } for pid=12130 comm="syz-executor.2" path="/dev/rtc0" dev="devtmpfs" ino=864 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 643.743267][ T1268] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 644.103297][ T1268] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 644.110099][ T1268] usb 8-1: config 1 has an invalid descriptor of length 211, skipping remainder of the config [ 644.119330][ T1268] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 644.131428][ T1268] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 644.263791][ T1268] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 644.271080][ T1268] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 644.277585][ T1268] usb 8-1: Product: syz [ 644.281208][ T1268] usb 8-1: Manufacturer: syz [ 644.334713][ T1268] cdc_wdm 8-1:1.0: skipping garbage [ 644.339350][ T1268] cdc_wdm 8-1:1.0: skipping garbage [ 644.344385][ T1268] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 646.274710][ T34] usb 8-1: USB disconnect, device number 79 09:32:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4", 0x12, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:32:17 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd, 0x0, 0x5b}) 09:32:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f0000000480)=@framed={{}, [@map_val]}, &(0x7f0000000340)='GPL\x00', 0x6, 0xfe, &(0x7f0000000380)=""/254, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 646.302612][T12136] loop1: detected capacity change from 0 to 264192 09:32:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00'}) 09:32:17 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd, 0x0, 0x5b}) [ 646.331771][T12136] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: bogus i_mode (0) [ 646.342256][T12136] EXT4-fs (loop1): get root inode failed [ 646.346486][T12136] EXT4-fs (loop1): mount failed 09:32:17 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd, 0x0, 0x5b}) 09:32:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4", 0x12, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 646.436703][T12151] loop1: detected capacity change from 0 to 264192 [ 646.448243][T12151] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: bogus i_mode (0) [ 646.460878][T12151] EXT4-fs (loop1): get root inode failed [ 646.465743][T12151] EXT4-fs (loop1): mount failed [ 646.783386][ T3773] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 647.143364][ T3773] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 647.148364][ T3773] usb 8-1: config 1 has an invalid descriptor of length 211, skipping remainder of the config [ 647.154889][ T3773] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 647.160984][ T3773] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 647.284367][ T3773] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 647.293225][ T3773] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 647.301658][ T3773] usb 8-1: Product: syz [ 647.306359][ T3773] usb 8-1: Manufacturer: syz [ 647.354605][ T3773] cdc_wdm 8-1:1.0: skipping garbage [ 647.359047][ T3773] cdc_wdm 8-1:1.0: skipping garbage [ 647.366190][ T3773] cdc_wdm: probe of 8-1:1.0 failed with error -22 09:32:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a0000000480020009", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 649.324334][ T6243] usb 8-1: USB disconnect, device number 80 09:32:20 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xe4) setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) setxattr$incfs_id(&(0x7f0000000100)='./file0\x00', &(0x7f0000000e40), 0x0, 0x0, 0x0) 09:32:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_CCA_OPT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000540), 0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) 09:32:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 649.340900][T12159] loop1: detected capacity change from 0 to 264192 09:32:20 executing program 2: bpf$PROG_LOAD_XDP(0x7, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:32:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0102000000000000100023000000080002004bac"], 0x1c}}, 0x0) [ 649.367637][T12159] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: bogus i_mode (0) [ 649.377655][T12159] EXT4-fs (loop1): get root inode failed [ 649.381586][T12159] EXT4-fs (loop1): mount failed 09:32:21 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:32:21 executing program 2: clock_gettime(0x9c631391f3f825b6, 0x0) [ 649.853239][ T6243] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 650.223374][ T6243] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 650.229824][ T6243] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.237601][ T6243] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 650.244468][ T6243] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 650.373582][ T6243] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 650.380385][ T6243] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 650.386996][ T6243] usb 8-1: Product: syz [ 650.390628][ T6243] usb 8-1: Manufacturer: syz [ 650.434904][ T6243] cdc_wdm 8-1:1.0: skipping garbage [ 650.439143][ T6243] cdc_wdm 8-1:1.0: skipping garbage [ 650.444189][ T6243] cdc_wdm 8-1:1.0: skipping garbage [ 650.449590][ T6243] cdc_wdm: probe of 8-1:1.0 failed with error -22 09:32:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a0000000480020009", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 652.370247][ T971] usb 8-1: USB disconnect, device number 81 09:32:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private}}}}) 09:32:24 executing program 0: select(0x40, &(0x7f0000000480), 0x0, &(0x7f0000000500)={0x8000800}, 0x0) 09:32:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4", 0x12, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 652.387018][T12175] loop1: detected capacity change from 0 to 264192 09:32:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) 09:32:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001300)={&(0x7f0000001200), 0xc, &(0x7f00000012c0)={0x0}}, 0x0) [ 652.409606][T12175] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: bogus i_mode (0) [ 652.421901][T12175] EXT4-fs (loop1): get root inode failed [ 652.427115][T12175] EXT4-fs (loop1): mount failed 09:32:24 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x280040, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 09:32:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0x5452, &(0x7f0000000180)={0x10, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) [ 652.903243][ T6243] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 653.273464][ T6243] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 653.278544][ T6243] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.285017][ T6243] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 653.291485][ T6243] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.424670][ T6243] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 653.431346][ T6243] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 653.450526][ T6243] usb 8-1: Product: syz [ 653.454330][ T6243] usb 8-1: Manufacturer: syz [ 653.514604][ T6243] cdc_wdm 8-1:1.0: skipping garbage [ 653.517849][ T6243] cdc_wdm 8-1:1.0: skipping garbage [ 653.521540][ T6243] cdc_wdm 8-1:1.0: skipping garbage [ 653.525719][ T6243] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 655.409922][ T6243] usb 8-1: USB disconnect, device number 82 09:32:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a0000000480020009", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') mmap$binder(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x11, r0, 0x0) 09:32:27 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2d223, r0}, 0x80) 09:32:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4", 0x12, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 655.441485][T12193] loop1: detected capacity change from 0 to 264192 [ 655.441656][ T39] audit: type=1400 audit(1662111147.056:384): avc: denied { map } for pid=12191 comm="syz-executor.2" path="/proc/12191/net/psched" dev="proc" ino=4026532932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 09:32:27 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="f3092813c7ce43de3db8bb2c6034be4a", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) [ 655.498615][T12193] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: bogus i_mode (0) 09:32:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') r0 = syz_clone(0x74009000, &(0x7f0000000080)="02b22e4164f2c461f2226e87e7d9122c1661228316b3ce15ccf0460461654976d88edf10dabe773e3d74d9c07c57b9c9af07d58ec4950ab50875ecbe9700fcc2322e04d9188f9565", 0x48, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) syz_open_procfs$namespace(r0, 0x0) gettid() gettid() 09:32:27 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 655.511629][T12193] EXT4-fs (loop1): get root inode failed [ 655.531216][T12193] EXT4-fs (loop1): mount failed 09:32:27 executing program 2: keyctl$set_reqkey_keyring(0xf, 0xfffffffc) [ 655.963270][ T6243] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 656.346412][ T6243] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 656.354025][ T6243] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.378794][ T6243] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 656.388506][ T6243] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.513360][ T6243] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 656.520186][ T6243] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 656.532924][ T6243] usb 8-1: Product: syz [ 656.536668][ T6243] usb 8-1: Manufacturer: syz [ 656.584632][ T6243] cdc_wdm 8-1:1.0: skipping garbage [ 656.590463][ T6243] cdc_wdm 8-1:1.0: skipping garbage [ 656.595087][ T6243] cdc_wdm 8-1:1.0: skipping garbage [ 656.599520][ T6243] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 658.493235][ T971] usb 8-1: USB disconnect, device number 83 09:32:30 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x13, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 09:32:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4", 0x12, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:32:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002000905", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:30 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') r0 = syz_clone(0x74009000, &(0x7f0000000080)="02b22e4164f2c461f2226e87e7d9122c1661228316b3ce15ccf0460461654976d88edf10dabe773e3d74d9c07c57b9c9af07d58ec4950ab50875ecbe9700fcc2322e04d9188f9565", 0x48, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) syz_open_procfs$namespace(r0, 0x0) gettid() gettid() [ 658.520845][T12213] loop1: detected capacity change from 0 to 264192 [ 658.528571][ T39] audit: type=1400 audit(1662111150.146:385): avc: denied { create } for pid=12214 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 09:32:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$KDGETKEYCODE(r0, 0x541b, 0x0) [ 658.561585][ T39] audit: type=1400 audit(1662111150.146:386): avc: denied { write } for pid=12214 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 658.562562][T12213] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: bogus i_mode (0) [ 658.590104][T12213] EXT4-fs (loop1): get root inode failed [ 658.590125][T12213] EXT4-fs (loop1): mount failed 09:32:30 executing program 2: prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="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", 0x171) 09:32:30 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:32:30 executing program 0: openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) 09:32:30 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) 09:32:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 658.770009][T12230] loop1: detected capacity change from 0 to 264192 [ 658.790985][T12230] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated [ 658.803958][T12230] EXT4-fs (loop1): get root inode failed [ 658.808626][T12230] EXT4-fs (loop1): mount failed [ 659.033254][ T3153] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 659.483675][ T3153] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 659.490009][ T3153] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.499891][ T3153] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 659.509056][ T3153] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x73, skipping [ 659.665106][ T3153] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 659.692484][ T3153] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 659.701005][ T3153] usb 8-1: Product: syz [ 659.704653][ T3153] usb 8-1: Manufacturer: syz [ 659.744501][ T3153] cdc_wdm 8-1:1.0: skipping garbage [ 659.748706][ T3153] cdc_wdm 8-1:1.0: skipping garbage [ 659.752762][ T3153] cdc_wdm: probe of 8-1:1.0 failed with error -22 09:32:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002000905", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 661.537272][ T48] usb 8-1: USB disconnect, device number 84 [ 661.558980][T12237] loop1: detected capacity change from 0 to 264192 09:32:33 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_INFO(r0, 0x2, 0x3, &(0x7f00000000c0)=""/150) 09:32:33 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) 09:32:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:32:33 executing program 2: syz_clone(0x0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f0000000140), 0x0) [ 661.570741][T12237] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated [ 661.581412][T12237] EXT4-fs (loop1): get root inode failed 09:32:33 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) [ 661.586541][T12237] EXT4-fs (loop1): mount failed 09:32:33 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 09:32:33 executing program 2: semget(0x2, 0x0, 0x200) [ 662.143136][ T48] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 662.503298][ T48] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 662.509523][ T48] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.517492][ T48] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 662.527537][ T48] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x73, skipping [ 662.666393][ T48] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 662.673757][ T48] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 662.679629][ T48] usb 8-1: Product: syz [ 662.682201][ T48] usb 8-1: Manufacturer: syz [ 662.735419][ T48] cdc_wdm 8-1:1.0: skipping garbage [ 662.738823][ T48] cdc_wdm 8-1:1.0: skipping garbage [ 662.743131][ T48] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 664.572849][ T1268] usb 8-1: USB disconnect, device number 85 09:32:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a000000048002000905", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:36 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 09:32:36 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 09:32:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 664.591556][T12258] loop1: detected capacity change from 0 to 264192 09:32:36 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 09:32:36 executing program 0: prlimit64(0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 664.612088][T12258] EXT4-fs error (device loop1): __ext4_fill_super:5244: inode #2: comm syz-executor.1: iget: root inode unallocated 09:32:36 executing program 2: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0) [ 664.634706][T12258] EXT4-fs (loop1): get root inode failed [ 664.640511][T12258] EXT4-fs (loop1): mount failed 09:32:36 executing program 0: openat(0xffffffffffffffff, &(0x7f0000001840)='./file0\x00', 0x0, 0x0) [ 665.203290][ T1268] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 665.603290][ T1268] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 665.610684][ T1268] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.620946][ T1268] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 665.627906][ T1268] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x73, skipping [ 665.753289][ T1268] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 665.761965][ T1268] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 665.769972][ T1268] usb 8-1: Product: syz [ 665.773140][ T1268] usb 8-1: Manufacturer: syz [ 665.829669][ T1268] cdc_wdm 8-1:1.0: skipping garbage [ 665.833945][ T1268] cdc_wdm 8-1:1.0: skipping garbage [ 665.838381][ T1268] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 667.601666][ T1268] usb 8-1: USB disconnect, device number 86 09:32:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:39 executing program 2: semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000040)=""/248) 09:32:39 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, 0x0) 09:32:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 667.659274][T12278] loop1: detected capacity change from 0 to 264192 09:32:39 executing program 2: mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 09:32:39 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) [ 667.679609][T12278] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 667.695623][T12278] EXT4-fs (loop1): group descriptors corrupted! 09:32:39 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) 09:32:39 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000911) [ 668.143316][ T4011] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 668.524042][ T4011] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 668.535677][ T4011] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.547699][ T4011] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 668.558227][ T4011] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.683547][ T4011] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 668.693819][ T4011] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 668.704422][ T4011] usb 8-1: Product: syz [ 668.708636][ T4011] usb 8-1: Manufacturer: syz [ 668.754745][ T4011] cdc_wdm 8-1:1.0: skipping garbage [ 668.760118][ T4011] cdc_wdm 8-1:1.0: skipping garbage [ 668.767456][ T4011] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 668.773520][ T4011] cdc_wdm 8-1:1.0: Unknown control protocol [ 668.973827][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 668.979503][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.003897][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.009708][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.033313][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.040154][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.063256][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.071147][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.093208][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.099881][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.123467][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.131646][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.143237][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.150838][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.163181][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.169410][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.193201][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.198443][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.213153][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.219915][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.243380][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.248743][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.273245][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.278177][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.293246][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.299106][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.323135][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.328021][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.343129][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.349579][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.373281][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.380047][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.413271][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.418348][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.445516][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 669.451298][ T48] usb 8-1: USB disconnect, device number 87 [ 669.452848][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 669.463774][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 669.471392][ C0] cdc_wdm 8-1:1.0: Unexpected error -71 09:32:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:41 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) 09:32:41 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x6}, 0x10) 09:32:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 670.026402][T12292] loop1: detected capacity change from 0 to 264192 09:32:41 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) [ 670.045560][T12292] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 670.057433][T12292] EXT4-fs (loop1): group descriptors corrupted! 09:32:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x11, 0xa, 0x0, &(0x7f0000000080)) 09:32:41 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) 09:32:41 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) [ 670.543278][ T3763] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 670.903419][ T3763] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 670.912047][ T3763] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.920704][ T3763] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 670.928509][ T3763] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.073800][ T3763] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 671.079930][ T3763] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 671.085864][ T3763] usb 8-1: Product: syz [ 671.089152][ T3763] usb 8-1: Manufacturer: syz [ 671.162587][ T3763] cdc_wdm 8-1:1.0: skipping garbage [ 671.169149][ T3763] cdc_wdm 8-1:1.0: skipping garbage [ 671.176268][ T3763] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 671.181149][ T3763] cdc_wdm 8-1:1.0: Unknown control protocol [ 671.373567][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.381160][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.413169][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.418654][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.453186][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.459049][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.483172][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.489402][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.523159][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.528955][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.539229][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.546478][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.563272][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.570248][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.593322][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.600781][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.623495][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.630336][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.653310][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.658897][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.693339][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.700888][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.723128][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.729776][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.753264][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.758433][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.773337][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.778980][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.803426][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 671.810171][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 671.830372][ T3763] usb 8-1: USB disconnect, device number 88 [ 671.834688][ C1] cdc_wdm 8-1:1.0: Unexpected error -71 09:32:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:32:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x2c, 0x0, 0x0) 09:32:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x88, 0x81, 0x0, 0x0) 09:32:44 executing program 0: openat$vga_arbiter(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 672.412478][T12310] loop1: detected capacity change from 0 to 264192 [ 672.428619][ T39] audit: type=1400 audit(1662111164.046:387): avc: denied { read } for pid=12312 comm="syz-executor.0" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 09:32:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x844, &(0x7f00000006c0)) 09:32:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 672.458998][T12310] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 672.459440][ T39] audit: type=1400 audit(1662111164.046:388): avc: denied { open } for pid=12312 comm="syz-executor.0" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 672.468763][T12310] EXT4-fs (loop1): group descriptors corrupted! 09:32:44 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) [ 672.903181][ T3763] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 673.303522][ T3763] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 673.312823][ T3763] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.326529][ T3763] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 673.339461][ T3763] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.503528][ T3763] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 673.515339][ T3763] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 673.524736][ T3763] usb 8-1: Product: syz [ 673.529743][ T3763] usb 8-1: Manufacturer: syz [ 673.605104][ T3763] cdc_wdm 8-1:1.0: skipping garbage [ 673.609103][ T3763] cdc_wdm 8-1:1.0: skipping garbage [ 673.615685][ T3763] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 673.621058][ T3763] cdc_wdm 8-1:1.0: Unknown control protocol [ 673.813207][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 673.818669][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 673.843363][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 673.849801][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 673.873319][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 673.879642][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 673.903332][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 673.910035][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 673.933261][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 673.938705][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 673.963132][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 673.967213][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 673.983186][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 673.988271][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 674.004663][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 674.009443][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 674.033134][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 674.036887][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 674.053314][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 674.059897][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 674.073242][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 674.079821][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 674.093214][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 674.098932][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 674.113135][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 674.119318][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 674.143182][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 674.150178][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 674.173216][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 674.179072][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 674.203395][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 674.208340][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 674.233160][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 674.239297][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 674.263294][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 674.270798][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 674.275620][ T3763] usb 8-1: USB disconnect, device number 89 [ 674.277015][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 674.290809][ C0] cdc_wdm 8-1:1.0: Unexpected error -71 09:32:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:46 executing program 0: syz_clone(0xc4380, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="17") 09:32:46 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 09:32:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 674.833248][T12328] loop1: detected capacity change from 0 to 264192 09:32:46 executing program 2: r0 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) [ 674.842209][T12328] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 674.850023][T12328] EXT4-fs (loop1): group descriptors corrupted! 09:32:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x1600bd7e, 0x0, &(0x7f0000001180)) 09:32:46 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) write$P9_RLOPEN(r0, 0x0, 0x0) 09:32:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 674.948444][T12339] loop1: detected capacity change from 0 to 264192 [ 674.957043][T12339] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 674.964881][T12339] EXT4-fs (loop1): group descriptors corrupted! [ 675.303152][ T3773] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 675.664415][ T3773] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 675.671011][ T3773] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.692376][ T3773] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 675.699897][ T3773] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.823632][ T3773] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 675.832164][ T3773] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 675.838193][ T3773] usb 8-1: Product: syz [ 675.842142][ T3773] usb 8-1: Manufacturer: syz [ 675.894906][ T3773] cdc_wdm 8-1:1.0: skipping garbage [ 675.899630][ T3773] cdc_wdm 8-1:1.0: skipping garbage [ 675.907394][ T3773] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 675.912467][ T3773] cdc_wdm 8-1:1.0: Unknown control protocol [ 677.863818][ T48] usb 8-1: USB disconnect, device number 90 09:32:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:49 executing program 2: mq_open(&(0x7f0000000000)='})%-\x00', 0x40, 0x0, &(0x7f0000000040)={0x1, 0xffffff87, 0x8000000, 0x8000}) 09:32:49 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008ae09, 0x20000000) 09:32:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:32:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x3, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x44) [ 677.881490][T12346] loop1: detected capacity change from 0 to 264192 09:32:49 executing program 2: prctl$PR_SET_MM_AUXV(0x18, 0x20000000, 0x0, 0x0) [ 677.893697][T12346] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 677.899516][T12346] EXT4-fs (loop1): group descriptors corrupted! 09:32:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x21, 0x0, &(0x7f0000001180)) 09:32:49 executing program 0: clock_gettime(0x0, &(0x7f0000000200)={0x0}) clock_settime(0x0, &(0x7f0000000240)={r0}) [ 678.473655][ T48] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 678.843331][ T48] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 678.850626][ T48] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.859063][ T48] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 678.866752][ T48] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.994995][ T48] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 679.000388][ T48] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 679.006340][ T48] usb 8-1: Product: syz [ 679.009248][ T48] usb 8-1: Manufacturer: syz [ 679.064505][ T48] cdc_wdm 8-1:1.0: skipping garbage [ 679.069210][ T48] cdc_wdm 8-1:1.0: skipping garbage [ 679.077161][ T48] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 679.081800][ T48] cdc_wdm 8-1:1.0: Unknown control protocol [ 680.914791][ T3763] usb 8-1: USB disconnect, device number 91 09:32:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:51 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x358, 0x1fc, 0xffffffff, 0xffffffff, 0x1fc, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0x1cc}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:mtrr_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b4) 09:32:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:32:51 executing program 0: prctl$PR_SET_MM_AUXV(0x29, 0xc, &(0x7f00000000c0), 0x0) [ 680.937062][T12362] loop1: detected capacity change from 0 to 264192 09:32:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000040)={'sit0\x00', 0x0}) [ 680.952525][T12362] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 680.960601][T12362] EXT4-fs (loop1): group descriptors corrupted! 09:32:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x42042) ioctl$LOOP_SET_CAPACITY(r0, 0x1277) 09:32:52 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x513400) 09:32:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x891a, 0x0) [ 681.533276][ T3763] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 681.903352][ T3763] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 681.909532][ T3763] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.919452][ T3763] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 681.927724][ T3763] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.063601][ T3763] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 682.070431][ T3763] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 682.078560][ T3763] usb 8-1: Product: syz [ 682.082154][ T3763] usb 8-1: Manufacturer: syz [ 682.144929][ T3763] cdc_wdm 8-1:1.0: skipping garbage [ 682.148843][ T3763] cdc_wdm 8-1:1.0: skipping garbage [ 682.154735][ T3763] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 682.160546][ T3763] cdc_wdm 8-1:1.0: Unknown control protocol [ 683.987677][ T971] usb 8-1: USB disconnect, device number 92 09:32:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000001480)={0x54, 0x0, &(0x7f00000006c0)=[@increfs={0x40046305}, @transaction_sg={0x40486311, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 09:32:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:32:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xa, 0x0, &(0x7f0000000300)='GPL\x00', 0x438e, 0x0, &(0x7f0000000340), 0x41100, 0x1, '\x00', r2, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x1}, 0x10, 0x22395, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x80, 0x700, 0x3, 0x7, {{0x45, 0x4, 0x0, 0x6, 0x114, 0x65, 0x0, 0xfc, 0x4, 0x0, @multicast2, @local, {[@rr={0x7, 0x13, 0xb6, [@multicast1, @multicast2, @multicast2, @remote]}, @cipso={0x86, 0x2f, 0x2, [{0x6, 0xc, "7d23fca2a0150fe044da"}, {0x7, 0xb, "22ea117c289eaa2c3b"}, {0x2, 0x12, "06d43c34b8bc2fb33c2eef19fb7eb608"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x23, 0x1, 0x3, [{@multicast2, 0x7}, {@empty, 0x6}, {@remote, 0x101}, {@multicast1, 0x1}, {@private=0xa010101, 0x7}]}, @generic={0x7, 0x2}, @timestamp_prespec={0x44, 0x4c, 0x52, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x200}, {@rand_addr=0x64010100, 0x6}, {@loopback, 0x333}, {@local, 0x80000000}, {@local, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x8}, {@broadcast, 0x1}, {@private=0xa010100, 0x8}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x84, 0x1, 0x4, [{@remote, 0x3}, {@rand_addr=0x64010101, 0x2}, {@local, 0x7f}, {@broadcast, 0x401}, {@broadcast, 0x1}, {@private=0xa010100, 0x3}, {@broadcast, 0x9}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x890b, 0x0) 09:32:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 684.011480][T12383] loop1: detected capacity change from 0 to 264192 [ 684.012221][T12381] binder: 12378:12381 ioctl 400c620e 20001480 returned -22 09:32:55 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="19fbf2a8efdb"}, 0x14) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="07040000e23f0000000000000000000006"], 0x4000}], 0x1}, 0x0) 09:32:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x2, &(0x7f0000002300)=[{&(0x7f00000001c0)}, {0x0}], 0x41000, &(0x7f0000000440)={[{@nojournal_checksum}, {@bh}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}, {@auto_da_alloc}], [{@obj_role={'obj_role', 0x3d, '\xcdk\xf6\xaez)`\xef\xfb\a\xdb\x94E\x05\xc3\x88\xbf\xbc\xe7[\xack\xa3\x88\xa0\xba\xb4\vk\x9eY\xba\x90{5\xaa\xc9\x14\x16\xfa{u-\xcapL\x9f\x13\xcc\x90\xac\xcd\x80\v\xf1\x0e\x80I.t\xa53\xe8\xb3^#\x8c\xda\xd4Q^xQ\x8e\x7ff\xba\xb9\xa1/\xb8\x95\t\xde\xf2\x9e\xa2j6S?\xe9\xc4h\xc0\xa4w\x8en\xbf$\x12\x16T\x9d\vT\xf8\t\x92\aK(\xda\xbd;\x91\xa8\xbeP\xa1W\x85\xfb\x01[QN\xe8\xa7}\xa8Qm_\xf74=Lod\xe9\x92J\x10\x9b\x8b$\x16\x04\x83a\xf3a(\xfd\xdfT'}}]}) [ 684.044170][T12383] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 684.052341][T12383] EXT4-fs (loop1): group descriptors corrupted! 09:32:55 executing program 2: socketpair(0x36, 0x0, 0x0, &(0x7f00000000c0)) 09:32:55 executing program 0: socketpair(0x1e, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x7, 0xde, 0xffff, 0x59, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x7, 0x1, 0x1f, 0x6}}) 09:32:55 executing program 2: capset(&(0x7f0000002180)={0x19980330}, &(0x7f00000021c0)) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9}) [ 684.106449][ T39] audit: type=1400 audit(1662111175.149:389): avc: denied { ioctl } for pid=12392 comm="syz-executor.0" path="socket:[62540]" dev="sockfs" ino=62540 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 09:32:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 09:32:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540), 0x0, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 684.138198][T12397] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 684.143562][ T39] audit: type=1400 audit(1662111175.189:390): avc: denied { getopt } for pid=12396 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 684.145178][T12399] loop1: detected capacity change from 0 to 264192 [ 684.216971][T12399] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 684.225067][T12399] EXT4-fs (loop1): group descriptors corrupted! [ 684.523256][ T172] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 684.883350][ T172] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 684.889426][ T172] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.897646][ T172] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 684.904985][ T172] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.033470][ T172] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 685.040136][ T172] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 685.047866][ T172] usb 8-1: Product: syz [ 685.051515][ T172] usb 8-1: Manufacturer: syz [ 685.094618][ T172] cdc_wdm 8-1:1.0: skipping garbage [ 685.100573][ T172] cdc_wdm 8-1:1.0: skipping garbage [ 685.110730][ T172] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 685.114862][ T172] cdc_wdm 8-1:1.0: Unknown control protocol [ 685.663199][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.667012][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.683359][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.688725][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.703195][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 685.709265][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.713403][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.733246][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.737131][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.753334][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.757863][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.773267][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.777271][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.793192][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.797926][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.813137][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.817911][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.833154][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.838410][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.863285][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.868819][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.896025][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.900629][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.923353][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.928613][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.953144][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.958028][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 685.973191][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 685.979804][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 686.003978][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 686.007936][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 686.023272][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 686.028552][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 686.053306][ C0] cdc_wdm 8-1:1.0: Stall on int endpoint [ 686.057850][ C0] cdc_wdm 8-1:1.0: Cannot schedule work [ 686.069289][ T172] usb 8-1: USB disconnect, device number 93 [ 686.073205][ C0] cdc_wdm 8-1:1.0: Unexpected error -71 09:32:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:32:57 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000100)) 09:32:57 executing program 0: socketpair(0x10, 0x2, 0xfff, &(0x7f0000000100)) 09:32:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f00", 0x10, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:32:57 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0xa2202, 0x0) write$vga_arbiter(r0, &(0x7f0000000400)=@other={'trylock', ' ', 'none'}, 0xd) [ 686.626630][T12405] loop1: detected capacity change from 0 to 264192 [ 686.634024][T12405] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (5596!=0) 09:32:57 executing program 2: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000000600)=[{&(0x7f0000000200)="127cc9d8a1c66bcdb561ca0a2df3a0fb8ce55834d00db5fec57c0e85cbe51fbe07249ffc9afae8acc481a596857dfa23005ce7e4259ee086bb1dcb1ecb4dfc75abd7bfb5a727c11bf4eb2b631ef34cefd86f43aea2c9623c3457bc5198f6f1a9cc21bceaee981e475ad5d677a8e68de67aacc19356917b7236c58c2307a17f3467408555aac49c2321b6c3fa2d6ad5cb8154b48bca589cb77f25aa56ebe386a404e247d6719654d9623d010137eb1c7160c4c8f013b0966d1a85d609130f8a54051c", 0xc2, 0x8}, {&(0x7f0000000300)="a9f3e5185976b861b3b7ebd8160a8aa97c0e7cc74ea08a9e71d67bf3c6cba9fee34ca9e0550ef6e106194ada43a1a4abee1e4fc38d4802bfd18491ad9c3ccc9ed8a077f2ce874bd46861c1fccfc56b62b451843806c956321dc59001a6006a06e1b8c63430cf274a89403550424a46a10e8754d1e0dfe1886821c08a7e1f11e2a9", 0x81}, {&(0x7f00000003c0)="71807640aa21a4fb5e908f32fdd00247938ceac4dee5d28a263056be57056a2431ed1a34538e15ff6244efbd09ff7c5da4244b064adf2588eeba5d7402f6167071d4e1cb73c4bb76b994d6c4f5b075795c41167e71a6f731d63b1f1c0a3ddbc3f15a5b908636eb3ce376254622711fc4bbc8b6cfff750e86cf5c72df07a4fe19affd83f9d64e345404ac11b494d61a19eba29b3bfe87bb33ea71b5459b2f92401b17d4c78b8fa98d1d19c0676cc4cf4390b2c18ff31c59b08e1dd652739349a3f79ee8449721f9", 0xc7, 0x1}, {&(0x7f00000006c0)="e7346a6a3a1258e3a97205b8cb119a25a2c420daef8abc3841d2ec989b2b", 0x1e, 0xccc}, {&(0x7f00000004c0)="3782f43f573644c2c721a4bd9f9f9ecbc40e264ba5564e3f974a914a223dac77d606c668bd83d2f95ce89fc85df87adc", 0x30, 0x3ac6}, {&(0x7f0000000500)="2d87141d005297a5f9ca6db72d00d845884ae9e6d09b43540d85ab7178a1ee30267c088d8eb8a7a11cb2c911e589e4bd0be4dfe0aedb4fed27d4160db30afd7fdb49f4aece91c1135b1e0bd409eccc864f1f484b71acd412f263145f3c0c3e9f05a84795fa70eb17ffda7b8960586fce776df4d8b507e0dd415d98cb3f337587f1896a1c64f1e68f1e51ab83dd24930b80c571256037de879831e5dcc79965ef3fbdc3a146a2a347c6f5e77537809beb5542511ce28c2580818019b225c4149a9cceb655", 0xfffffffffffffef5, 0x9}], 0x6808, &(0x7f0000000780)={[{@discard}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@errors_remount}, {@discard}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@audit}, {@uid_lt={'uid<', 0xee00}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@seclabel}]}) [ 686.642914][T12405] EXT4-fs (loop1): group descriptors corrupted! 09:32:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x20}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x10) [ 686.650652][ T39] audit: type=1400 audit(1662111177.689:391): avc: denied { write } for pid=12409 comm="syz-executor.0" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 09:32:57 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000002780), 0x0, 0x0) syz_clone(0x9088d000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 686.908568][T12412] loop2: detected capacity change from 0 to 32765 [ 687.103249][ T3947] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 687.503457][ T3947] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 687.511955][ T3947] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.535617][ T3947] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 687.542662][ T3947] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.683380][ T3947] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 687.689586][ T3947] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 687.695466][ T3947] usb 8-1: Product: syz [ 687.698405][ T3947] usb 8-1: Manufacturer: syz [ 687.744735][ T3947] cdc_wdm 8-1:1.0: skipping garbage [ 687.748404][ T3947] cdc_wdm 8-1:1.0: skipping garbage [ 687.757120][ T3947] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 687.761645][ T3947] cdc_wdm 8-1:1.0: Unknown control protocol [ 688.323126][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.327184][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.343130][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.348803][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.373148][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 688.378967][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.388802][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.404917][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.409958][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.433238][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.437355][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.453174][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.457375][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.473182][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.477764][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.493118][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.496786][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.513185][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.517193][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.533159][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.537205][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.553163][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.557826][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.573169][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.577202][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.593157][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.599038][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.613177][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.616932][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.635365][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.639424][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.653162][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.658857][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.683822][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.689150][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.713148][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 688.717376][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 688.722994][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 688.726311][ T971] usb 8-1: USB disconnect, device number 94 [ 688.729559][ C3] cdc_wdm 8-1:1.0: Unexpected error -71 09:33:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f00", 0x10, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:00 executing program 0: syz_clone(0x3902c000, 0x0, 0xffffffffffffff4c, 0x0, 0x0, 0x0) 09:33:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000240)={0xa, 0x4e23, 0x0, @private0, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0x28}, 0x0) 09:33:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 689.267033][T12423] loop1: detected capacity change from 0 to 264192 [ 689.285999][T12423] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (5596!=0) 09:33:00 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, 0xfffffffffffffffc, 0x2, 0x0) 09:33:00 executing program 2: syz_mount_image$f2fs(&(0x7f0000001140), &(0x7f0000001180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) [ 689.292906][T12423] EXT4-fs (loop1): group descriptors corrupted! 09:33:00 executing program 0: syz_clone(0x9088d000, 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x400454a4, &(0x7f0000000140)={{0x3}}) 09:33:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f00", 0x10, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:00 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x400454a4, &(0x7f0000000140)={{0x3}}) 09:33:00 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r0, &(0x7f0000000140), 0x10) [ 689.385065][ T39] audit: type=1400 audit(1662111180.429:392): avc: denied { bind } for pid=12437 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 689.385193][T12441] loop1: detected capacity change from 0 to 264192 [ 689.403870][ T5398] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 689.420756][ T5398] Buffer I/O error on dev loop1, logical block 0, async page read [ 689.430710][ T5398] loop1: unable to read partition table [ 689.438058][T12441] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (5596!=0) [ 689.444069][T12441] EXT4-fs (loop1): group descriptors corrupted! [ 689.783241][ T3947] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 690.163383][ T3947] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 690.172002][ T3947] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.181799][ T3947] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 690.191369][ T3947] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.333369][ T3947] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 690.340620][ T3947] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 690.382788][ T3947] usb 8-1: Product: syz [ 690.386596][ T3947] usb 8-1: Manufacturer: syz [ 690.443934][ T3947] cdc_wdm 8-1:1.0: skipping garbage [ 690.447225][ T3947] cdc_wdm 8-1:1.0: skipping garbage [ 690.452472][ T3947] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 690.457869][ T3947] cdc_wdm 8-1:1.0: Unknown control protocol [ 691.023098][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.026552][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.043279][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.048183][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.063558][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 691.069733][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.074449][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.093120][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.098018][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.113138][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.117838][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.133133][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.138419][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.153127][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.156646][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.173122][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.177105][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.193191][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.196961][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.213161][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.217412][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.233098][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.237521][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.253245][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.259485][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.273095][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.276696][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.293156][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.298203][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.313127][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.317359][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.333555][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.337523][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.353148][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.357408][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.373156][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.378453][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.393132][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.397840][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.413082][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 691.419386][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 691.419715][ T4011] usb 8-1: USB disconnect, device number 95 [ 691.424233][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 691.435778][ C3] cdc_wdm 8-1:1.0: Unexpected error -71 [ 691.528472][ T1352] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.534109][ T1352] ieee802154 phy1 wpan1: encryption failed: -22 09:33:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:33:03 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x400454a4, &(0x7f0000000140)={{0x3}}) 09:33:03 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='attr/prev\x00') sendmmsg$unix(r0, 0x0, 0x0, 0x0) 09:33:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000", 0x18, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 691.964026][T12447] loop1: detected capacity change from 0 to 264192 [ 691.979551][T12447] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 691.988087][T12447] EXT4-fs (loop1): group descriptors corrupted! 09:33:03 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x400454a4, &(0x7f0000000140)={{0x3}}) 09:33:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:33:03 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000026c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000002680), 0x8) 09:33:03 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 692.463664][ T48] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 692.863610][ T48] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 692.873913][ T48] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.882844][ T48] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 692.900089][ T48] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.044285][ T48] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 693.051129][ T48] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 693.056887][ T48] usb 8-1: Product: syz [ 693.059353][ T48] usb 8-1: Manufacturer: syz [ 693.124469][ T48] cdc_wdm 8-1:1.0: skipping garbage [ 693.128194][ T48] cdc_wdm 8-1:1.0: skipping garbage [ 693.132682][ T48] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 693.140537][ T48] cdc_wdm 8-1:1.0: Unknown control protocol [ 693.694414][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.698673][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.723138][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.727839][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.743146][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 693.747149][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.750845][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.763322][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.767475][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.783304][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.787590][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.803115][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.807750][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.823123][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.828510][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.853150][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.857523][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.874425][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.878325][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.893234][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.898616][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.913329][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.918156][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.933413][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.939770][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.953195][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.957334][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 693.973206][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 693.981678][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.003135][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.006839][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.023136][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.027301][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.043075][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.047493][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.063320][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.067641][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.083153][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.086998][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.103323][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.108832][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.133154][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.138428][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.153125][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.157673][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.173137][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.177015][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.193102][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.197357][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.213076][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.217029][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.233280][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.238808][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.253155][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.258151][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.273137][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.277212][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.293135][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.297631][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.313147][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.316758][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.333150][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.336661][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.353120][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.357744][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.373238][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.377919][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.393140][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.397740][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.413102][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.418148][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.433240][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.437117][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.453127][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.457799][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.473121][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.477349][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.493115][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.497553][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.513103][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.516640][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.533099][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.537279][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.553133][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.558763][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.573107][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.577311][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.593125][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.597882][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.613159][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.617703][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.633114][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.638539][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.653144][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.658603][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.673226][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.677702][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.693135][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.698528][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.713137][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.717389][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.733116][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.737310][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.753410][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.757818][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.773098][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.777568][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.793384][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.797184][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.813235][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.819100][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.843424][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.848305][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.873117][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.876819][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.903185][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.907250][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.923171][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.928137][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.953177][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.958044][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 694.973180][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 694.977888][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 695.014623][ T3773] usb 8-1: USB disconnect, device number 96 09:33:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:33:06 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000026c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000002680), 0x8) 09:33:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5434, 0x0) 09:33:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000", 0x18, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:06 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000026c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000002680), 0x8) 09:33:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x540e, 0x0) [ 695.057355][T12467] loop1: detected capacity change from 0 to 264192 09:33:06 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000026c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000002680), 0x8) [ 695.072757][T12467] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 695.085696][T12467] EXT4-fs (loop1): group descriptors corrupted! 09:33:06 executing program 2: syslog(0x3, &(0x7f00000003c0)=""/4096, 0x1000) [ 695.543160][ T172] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 695.904408][ T172] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 695.912495][ T172] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.920370][ T172] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 695.927263][ T172] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.053408][ T172] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 696.060134][ T172] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 696.066631][ T172] usb 8-1: Product: syz [ 696.070007][ T172] usb 8-1: Manufacturer: syz [ 696.114737][ T172] cdc_wdm 8-1:1.0: skipping garbage [ 696.118776][ T172] cdc_wdm 8-1:1.0: skipping garbage [ 696.125343][ T172] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 696.130761][ T172] cdc_wdm 8-1:1.0: Unknown control protocol [ 696.693050][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.696492][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 696.713208][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.716753][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 696.743127][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 696.748318][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.751818][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 696.778452][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.782808][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 696.803130][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.807389][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 696.823609][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.829314][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 696.853179][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.858212][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 696.883569][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.889656][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 696.913145][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.917826][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 696.933092][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.937004][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 696.959177][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.973091][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.976896][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 696.993112][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 696.997911][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.013163][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.018410][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.033101][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.037317][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.054095][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.058177][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.073067][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.077606][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.093131][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.097602][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.113971][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.119069][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.143223][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.148000][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.163134][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.170982][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.193132][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.197859][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.213185][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.217802][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.233206][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.238603][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.263207][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.268365][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.283276][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.287133][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.303173][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.307626][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.323102][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.326957][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.343112][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.347440][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.363583][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.367414][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.383095][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.387124][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.403077][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.406937][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.423219][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.428790][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.443180][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.449360][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.463796][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.468028][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.483116][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.487673][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.503137][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.507537][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.524007][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.527766][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.553229][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.557253][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.573218][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.578005][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.593128][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.597285][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.613081][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.617796][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.633156][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.637868][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.653174][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.657715][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.673172][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.678036][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.693170][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.698090][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.713140][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.717092][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.733146][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.738149][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.753131][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.756955][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.773098][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.776719][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.794285][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.798832][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.813102][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.817270][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.833130][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.837501][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.853117][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.857210][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.873167][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.877851][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.893119][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.897581][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.913078][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.916743][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.933245][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.939307][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.953136][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.962777][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 697.983158][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 697.987538][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 698.003259][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 698.007690][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 698.023236][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 698.027505][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 698.043291][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 698.048629][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 698.053158][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 09:33:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 698.074278][ T3763] usb 8-1: USB disconnect, device number 97 09:33:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x541c, &(0x7f0000000040)) 09:33:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000", 0x18, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0)=0x200007, 0x4) [ 698.096183][T12481] loop1: detected capacity change from 0 to 264192 [ 698.122634][T12481] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) 09:33:09 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) 09:33:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000f004e"], 0x3c}}, 0x0) [ 698.130729][T12481] EXT4-fs (loop1): group descriptors corrupted! [ 698.161651][T12490] bond1 (uninitialized): Released all slaves 09:33:09 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000001c0)='htcp\x00', 0x5) 09:33:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5401, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "1d6ecf25e8e49fa7c9b74031b87aeb92c317c9"}) [ 698.238734][ T39] audit: type=1400 audit(1662111189.279:393): avc: denied { ioctl } for pid=12494 comm="syz-executor.2" path="/dev/ptyq9" dev="devtmpfs" ino=134 ioctlcmd=0x5401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 698.663132][ T3763] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 699.053258][ T3763] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 699.060582][ T3763] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.069220][ T3763] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 699.077075][ T3763] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.213413][ T3763] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 699.220380][ T3763] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 699.229331][ T3763] usb 8-1: Product: syz [ 699.232889][ T3763] usb 8-1: Manufacturer: syz [ 699.295297][ T3763] cdc_wdm 8-1:1.0: skipping garbage [ 699.299807][ T3763] cdc_wdm 8-1:1.0: skipping garbage [ 699.304578][ T3763] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 699.309528][ T3763] cdc_wdm 8-1:1.0: Unknown control protocol [ 699.853116][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 699.856953][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 699.873689][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 699.882624][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 699.903138][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 699.909142][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 699.913978][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 699.937767][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 699.942258][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 699.963341][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 699.967373][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 699.983405][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 699.988107][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.023154][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.028334][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.053119][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.057748][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.073137][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.077908][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.093808][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.097847][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.113101][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.117944][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.133389][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.138510][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.153226][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.158735][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.173147][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.178306][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.193171][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.198231][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.213294][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.217894][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.233135][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.236838][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.253161][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.258231][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.273123][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.278057][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.293129][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.297441][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.313102][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.317641][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.333308][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.338489][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.363137][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.368753][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.393258][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.398518][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.413228][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.421144][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.433144][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.437788][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.453711][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.458088][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.473163][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.477518][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.493127][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.498276][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.513813][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.518254][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.533164][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.538778][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.553621][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.557664][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.573182][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.577375][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.593172][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.597701][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.613141][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.617231][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.633155][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.637505][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.653487][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.657933][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.673138][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.678195][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.693078][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.697274][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.713112][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.717568][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.733058][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.737282][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.753133][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.757344][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.773131][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.776852][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.793198][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.797753][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.813133][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.817212][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.833256][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.837022][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.853113][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.857373][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.873263][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.877251][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.893144][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.898028][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.913120][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.918183][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.933132][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.936809][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.953107][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.959905][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 700.993112][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 700.998237][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 701.023110][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 701.027928][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 701.043120][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 701.048335][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 701.063110][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 701.067634][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 701.098565][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 701.103855][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 701.144178][ T971] usb 8-1: USB disconnect, device number 98 09:33:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f00030004000000000000000000", 0x1c, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000480)) 09:33:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 09:33:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b30, 0x0) 09:33:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b3d, 0x0) [ 701.182790][T12502] loop1: detected capacity change from 0 to 264192 [ 701.195530][T12502] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) 09:33:12 executing program 2: syz_clone(0x21080000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) [ 701.207989][T12502] EXT4-fs (loop1): group descriptors corrupted! 09:33:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9}) 09:33:12 executing program 0: lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 09:33:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f00030004000000000000000000", 0x1c, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 701.289802][T12515] loop1: detected capacity change from 0 to 264192 [ 701.302435][T12515] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 701.309070][T12515] EXT4-fs (loop1): group descriptors corrupted! [ 701.663213][ T3763] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 702.063249][ T3763] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 702.071367][ T3763] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.080702][ T3763] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 702.089790][ T3763] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.213665][ T3763] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 702.220727][ T3763] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 702.228300][ T3763] usb 8-1: Product: syz [ 702.231733][ T3763] usb 8-1: Manufacturer: syz [ 702.330247][ T3763] cdc_wdm 8-1:1.0: skipping garbage [ 702.334712][ T3763] cdc_wdm 8-1:1.0: skipping garbage [ 702.342098][ T3763] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 702.347500][ T3763] cdc_wdm 8-1:1.0: Unknown control protocol [ 702.893097][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 702.897020][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 702.913152][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 702.918605][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 702.963202][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 702.968401][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 702.972514][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 702.993130][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 702.999150][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.023433][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.028903][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.054386][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.067849][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.083263][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.088464][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.103209][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.107611][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.123148][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.127881][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.143161][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 703.148950][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.153983][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.173243][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.178302][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.208553][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.212702][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.233452][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.238141][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.253467][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.259211][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.283397][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.288223][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.303078][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.308786][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.333249][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.338946][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.363179][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.367652][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.393200][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.396965][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.413070][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.417747][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.433402][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.438573][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.468620][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.473625][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.493121][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.497902][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.517328][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.533169][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.537260][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.553224][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.558923][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.583428][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.588274][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.623126][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.627085][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.643158][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.647072][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.663117][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.667139][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.683439][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.694079][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.703505][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.707803][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.723177][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.727316][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.743195][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.747346][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.763087][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.767594][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.783074][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.786543][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.803161][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.807969][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.823143][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.828301][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.843224][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.848145][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.863164][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.867675][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.888328][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.892153][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.903159][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.909470][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.933210][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.939517][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.963199][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.967439][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 703.993178][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 703.998138][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 704.028472][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 704.033449][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 704.053194][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 704.058220][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 704.073426][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 704.078223][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 704.103482][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 704.110473][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 704.133157][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 704.140334][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 704.163187][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 704.169161][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 704.215171][ T48] usb 8-1: USB disconnect, device number 99 09:33:15 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) write$P9_RREMOVE(r0, 0x0, 0x0) 09:33:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 09:33:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 09:33:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f00030004000000000000000000", 0x1c, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 704.237966][T12522] loop1: detected capacity change from 0 to 264192 09:33:15 executing program 0: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1430, 0x474c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 09:33:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x5419, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "1d6ecf25e8e49fa7c9b74031b87aeb92c317c9"}) [ 704.260202][T12522] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (26474!=0) [ 704.276124][T12522] EXT4-fs (loop1): group descriptors corrupted! 09:33:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4bfb, &(0x7f0000000040)) 09:33:15 executing program 2: keyctl$set_reqkey_keyring(0x4, 0xfffffffd) 09:33:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00", 0x1e, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 704.362650][T12534] loop1: detected capacity change from 0 to 264192 [ 704.372742][T12534] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35945!=0) [ 704.382207][T12534] EXT4-fs (loop1): group descriptors corrupted! [ 704.753337][ T48] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 705.124109][ T48] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 705.131968][ T48] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.139388][ T48] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 705.145516][ T48] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.303336][ T48] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 705.309673][ T48] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 705.317253][ T48] usb 8-1: Product: syz [ 705.320190][ T48] usb 8-1: Manufacturer: syz [ 705.364107][ T48] cdc_wdm 8-1:1.0: skipping garbage [ 705.368027][ T48] cdc_wdm 8-1:1.0: skipping garbage [ 705.378799][ T48] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 705.382824][ T48] cdc_wdm 8-1:1.0: Unknown control protocol [ 705.933197][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 705.937435][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 705.961386][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 705.983175][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 705.988407][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.013124][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 706.019866][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.024053][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.053093][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.057945][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.083345][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.087736][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.113149][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.117899][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.133581][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.138649][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.153351][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.157593][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.173547][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.178535][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.203148][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 706.209489][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.214388][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.233206][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.237802][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.254233][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.257843][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.273416][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.278676][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.303128][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.307890][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.335229][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.339926][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.363153][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.367863][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.383134][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.388153][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.403129][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.408512][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.433445][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.440477][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.463119][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.467557][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.483225][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.489818][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.513328][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.519089][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.543136][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.547799][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.563202][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.568284][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.583135][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.588235][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.603379][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.607814][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.623128][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.627740][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.643135][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.647732][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.663486][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.668869][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.693110][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.697887][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.713081][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.716888][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.733193][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.738323][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.753342][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.758617][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.773196][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.778018][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.793128][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.796574][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.819374][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.823848][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.843236][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.861915][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.884165][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.889148][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.913635][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.918477][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.933115][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.937789][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.953123][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.958056][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.973175][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.978115][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 706.993168][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 706.997662][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 707.013114][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 707.017742][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 707.033120][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 707.037940][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 707.053097][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 707.059320][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 707.083211][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 707.089816][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 707.113274][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 707.119838][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 707.143107][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 707.147399][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 707.163130][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 707.168204][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 707.183219][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 707.188338][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 707.203160][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 707.207436][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 707.223163][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 707.227473][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 707.243128][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 707.248935][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 707.294684][ T3773] usb 8-1: USB disconnect, device number 100 09:33:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 09:33:18 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @dev}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:33:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00", 0x1e, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x560b, 0x0) [ 707.320388][T12541] loop1: detected capacity change from 0 to 264192 09:33:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x98a6fb4990aa55e7, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 707.339512][T12541] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35945!=0) 09:33:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) [ 707.347935][T12541] EXT4-fs (loop1): group descriptors corrupted! 09:33:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x0, "175ef2affe7902a9618275158acf8ba85e186c"}) [ 707.364196][T12547] bond0: Unable to set down delay as MII monitoring is disabled 09:33:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) [ 707.403407][T12551] bond0: Unable to set down delay as MII monitoring is disabled [ 707.803519][ T3947] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 708.203366][ T3947] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 708.211445][ T3947] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.221993][ T3947] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 708.232105][ T3947] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.363619][ T3947] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 708.369970][ T3947] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 708.375368][ T3947] usb 8-1: Product: syz [ 708.380958][ T3947] usb 8-1: Manufacturer: syz [ 708.434797][ T3947] cdc_wdm 8-1:1.0: skipping garbage [ 708.439864][ T3947] cdc_wdm 8-1:1.0: skipping garbage [ 708.455462][ T3947] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 708.460159][ T3947] cdc_wdm 8-1:1.0: Unknown control protocol [ 709.003186][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.007326][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.024353][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.029800][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.053302][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 709.059161][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.064041][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.083148][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.088305][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.113137][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.118358][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.133150][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.138302][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.153123][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.158167][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.173126][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.177773][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.193104][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.196932][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.213108][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.218491][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.233152][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.238806][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.263075][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 709.267312][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.270962][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.293274][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.298805][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.314231][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.318649][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.333106][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.336978][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.353864][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.358242][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.373216][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.377824][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.403234][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.407628][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.423174][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.428023][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.443299][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.448741][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.464917][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.469382][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.503169][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.509124][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.534098][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.539353][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.563147][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.568960][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.593120][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.597995][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.613147][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.617773][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.633117][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.638203][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.653112][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.658018][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.673129][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.678170][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.693295][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.697774][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.713127][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.717288][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.733536][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.739081][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.773100][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.778268][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.803128][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.807345][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.823133][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.827132][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.843206][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.848441][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.863201][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.868548][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.883260][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.887991][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.903119][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.907976][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.923266][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.927029][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.943178][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.947943][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.963604][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.968698][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 709.983568][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 709.987921][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.003141][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.007559][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.023398][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.028595][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.043173][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.047350][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.063127][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.067219][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.083402][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.088591][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.113127][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.118962][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.143126][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.147759][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.163127][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.168571][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.193160][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.197330][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.213479][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.218065][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.233156][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.237675][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.263122][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.268227][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.293481][ C1] cdc_wdm 8-1:1.0: Stall on int endpoint [ 710.298532][ C1] cdc_wdm 8-1:1.0: Cannot schedule work [ 710.345267][ T3763] usb 8-1: USB disconnect, device number 101 09:33:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:33:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00", 0x1e, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:21 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) wait4(r0, &(0x7f0000000000), 0x80000000, 0x0) 09:33:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) [ 710.365561][T12556] bond0: Unable to set down delay as MII monitoring is disabled [ 710.372904][T12557] loop1: detected capacity change from 0 to 264192 [ 710.380014][T12557] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35945!=0) [ 710.390011][T12557] EXT4-fs (loop1): group descriptors corrupted! 09:33:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) [ 710.414681][T12563] bond0: Unable to set down delay as MII monitoring is disabled 09:33:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f0069", 0x1f, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 710.457451][T12565] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled 09:33:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) [ 710.485612][T12567] loop1: detected capacity change from 0 to 264192 [ 710.492931][T12567] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35945!=105) [ 710.493490][T12569] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 710.500788][T12567] EXT4-fs (loop1): group descriptors corrupted! [ 710.963283][ T3763] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 711.323253][ T3763] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 711.329240][ T3763] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.337471][ T3763] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 711.345060][ T3763] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.463464][ T3763] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 711.470145][ T3763] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 711.479802][ T3763] usb 8-1: Product: syz [ 711.482805][ T3763] usb 8-1: Manufacturer: syz [ 711.534736][ T3763] cdc_wdm 8-1:1.0: skipping garbage [ 711.539794][ T3763] cdc_wdm 8-1:1.0: skipping garbage [ 711.545980][ T3763] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 711.550540][ T3763] cdc_wdm 8-1:1.0: Unknown control protocol [ 712.103143][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.107266][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.124446][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.129728][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.153152][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 712.160185][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.165251][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.183152][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.188461][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.213187][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.218132][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.233092][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.238712][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.253238][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.258433][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.273138][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.279057][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.313111][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.318219][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.343098][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 712.349014][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.353660][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.363480][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.368461][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.392502][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.396979][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.413402][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.418227][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.443241][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.447447][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.463158][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.468528][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.493187][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.498765][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.523201][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.527378][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.543616][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.547622][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.563246][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.567622][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.583291][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.587140][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.603257][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.608402][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.643735][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.648015][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.663082][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.667575][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.683407][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.687962][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.703114][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.708031][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.723357][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.728104][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.743117][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.748116][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.763112][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.768110][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.783138][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.788423][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.803359][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.807862][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.823281][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.828014][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.843122][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.847533][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.863189][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.867702][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.883134][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.886679][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.903117][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.907242][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.923584][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.929009][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.943166][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.946958][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.963342][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.967924][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 712.983136][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 712.988138][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.003135][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.007529][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.023110][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.027452][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.043452][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.048438][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.063295][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.067582][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.083315][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.088280][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.116488][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.125113][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.143142][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.147630][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.163390][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.168043][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.183741][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.188383][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.223198][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.228337][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.253121][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.258298][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.273165][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.278371][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.303187][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.308333][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.323293][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.328503][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 713.363215][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 713.369284][ C3] cdc_wdm 8-1:1.0: Cannot schedule work 09:33:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:33:24 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f0069", 0x1f, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:24 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) [ 713.414023][ T40] usb 8-1: USB disconnect, device number 102 [ 713.436707][T12578] loop1: detected capacity change from 0 to 264192 09:33:24 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:24 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) [ 713.449830][T12578] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35945!=105) [ 713.459082][T12578] EXT4-fs (loop1): group descriptors corrupted! 09:33:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "1d6ecf25e8e49fa7c9b74031b87aeb92c317c9"}) 09:33:24 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) [ 714.023163][ T40] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 714.403320][ T40] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 714.410745][ T40] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.418839][ T40] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 714.425931][ T40] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.553437][ T40] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 714.561909][ T40] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 714.568888][ T40] usb 8-1: Product: syz [ 714.572135][ T40] usb 8-1: Manufacturer: syz [ 714.634689][ T40] cdc_wdm 8-1:1.0: skipping garbage [ 714.639471][ T40] cdc_wdm 8-1:1.0: skipping garbage [ 714.645212][ T40] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 714.651493][ T40] cdc_wdm 8-1:1.0: Unknown control protocol [ 715.213130][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.217249][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.243130][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.247168][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.263147][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 715.269426][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.273515][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.293298][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.299278][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.323131][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.336956][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.363122][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.367070][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.393129][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.397022][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.423154][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.427385][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.443474][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 715.452645][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.462706][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.483193][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.488003][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.503111][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.507344][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.523096][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.527258][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.543119][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.546423][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.563151][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.567805][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.583129][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.588417][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.613142][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.618046][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.643149][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.648022][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.663184][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.669014][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.683131][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.688437][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.703181][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.707305][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.723791][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.728108][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.743113][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.747580][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.763446][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.767646][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.783140][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.788020][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.803100][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.808197][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.823136][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.829956][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.853077][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.857963][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.873140][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.878040][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.893260][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.897608][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.913350][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.918153][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.933121][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.938239][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.953377][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.959732][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.973113][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.978294][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 715.994067][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 715.999511][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.013118][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.021674][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.043115][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.047089][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.073103][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.077795][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.093155][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.097909][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.113111][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.117264][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.133107][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.137509][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.153053][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.157717][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.173152][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.176987][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.193199][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.197097][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.213149][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.217376][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.236094][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.240828][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.263137][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.268539][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.283114][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.287511][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.303116][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.307608][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.323161][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.327349][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.343103][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.348752][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.363148][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.368703][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.384134][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.388493][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.403107][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.408738][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.423127][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.427896][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.456129][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.460649][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.473123][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 716.478807][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 716.483454][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 716.495787][ T172] usb 8-1: USB disconnect, device number 103 09:33:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:33:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f0069", 0x1f, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:27 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:27 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) [ 716.513991][T12592] loop1: detected capacity change from 0 to 264192 [ 716.514172][ T39] audit: type=1400 audit(1662111207.559:394): avc: denied { read } for pid=12590 comm="syz-executor.2" name="fb0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 09:33:27 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:27 executing program 2: fchownat(0xffffffffffffffff, &(0x7f0000005640)='./file0\x00', 0x0, 0x0, 0x0) [ 716.539302][T12592] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35945!=105) [ 716.539445][ T39] audit: type=1400 audit(1662111207.559:395): avc: denied { open } for pid=12590 comm="syz-executor.2" path="/dev/fb0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 09:33:27 executing program 2: syz_mount_image$jfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000005740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:27 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) [ 716.548571][T12592] EXT4-fs (loop1): group descriptors corrupted! [ 717.043917][ T3153] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 717.413434][ T3153] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 717.419553][ T3153] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.427899][ T3153] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 717.434131][ T3153] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.553475][ T3153] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 717.559745][ T3153] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 717.571945][ T3153] usb 8-1: Product: syz [ 717.577871][ T3153] usb 8-1: Manufacturer: syz [ 717.625717][ T3153] cdc_wdm 8-1:1.0: skipping garbage [ 717.631213][ T3153] cdc_wdm 8-1:1.0: skipping garbage [ 717.639263][ T3153] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 717.644193][ T3153] cdc_wdm 8-1:1.0: Unknown control protocol [ 718.193137][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.197634][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.213128][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.217455][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.233121][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 718.238613][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.243402][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.273123][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.278652][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.293348][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.298393][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.313124][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.316891][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.333210][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.336868][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.353140][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.358562][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.383106][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.388653][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.413275][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.418807][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.453083][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 718.457748][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.461741][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.483203][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.490362][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.515878][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.523568][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.543093][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.546833][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.563150][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.567635][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.583067][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.586622][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.603100][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.608263][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.623146][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.628237][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.655884][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.660688][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.683313][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.688741][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.703137][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.708285][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.723122][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.728162][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.743129][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.748306][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.773121][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.778164][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.803217][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.808279][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.823117][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.828721][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.853266][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.859011][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.883444][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.887991][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.903247][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.907327][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.923168][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.927347][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.943632][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.948187][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.963260][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.968191][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 718.983313][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 718.988649][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.003428][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.008101][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.023526][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.028614][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.043165][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.047483][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.063209][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.067753][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.083139][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.087583][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.103143][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.106927][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.123653][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.126904][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.143128][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.148191][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.163234][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.167192][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.183415][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.188408][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.213260][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.218902][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.233134][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.237818][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.253074][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.258456][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.293155][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.297032][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.313167][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.317367][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.333109][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.337714][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.353156][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.357983][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.373121][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.377292][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.393322][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.399515][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.413118][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.417226][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.433122][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.437258][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.453118][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.458864][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.483793][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.488880][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 719.507796][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 719.512528][ C3] cdc_wdm 8-1:1.0: Cannot schedule work 09:33:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 09:33:30 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005680), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000056c0)={0x2b, 0x3, 0x0, {0x0, 0xa, 0x0, 'MMAP_CHECK'}}, 0x2b) 09:33:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:33:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 719.566330][ T3763] usb 8-1: USB disconnect, device number 104 [ 719.580446][T12608] loop1: detected capacity change from 0 to 264192 09:33:30 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005680), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000056c0)={0x2b, 0x3, 0x0, {0x0, 0xa, 0x0, 'MMAP_CHECK'}}, 0x2b) 09:33:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 09:33:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 719.622433][T12608] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 719.631353][T12608] EXT4-fs (loop1): group descriptors corrupted! 09:33:30 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005680), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000056c0)={0x2b, 0x3, 0x0, {0x0, 0xa, 0x0, 'MMAP_CHECK'}}, 0x2b) 09:33:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 09:33:30 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000005680), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000056c0)={0x2b, 0x3, 0x0, {0x0, 0xa, 0x0, 'MMAP_CHECK'}}, 0x2b) [ 720.083157][ T34] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 720.453409][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 720.460314][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.467311][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 720.474774][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.584475][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 720.592670][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 720.616923][ T34] usb 8-1: Product: syz [ 720.633835][ T34] usb 8-1: Manufacturer: syz [ 720.673939][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 720.677287][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 720.682575][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 720.686937][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 721.253108][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.256999][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.283207][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.288165][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.313312][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 721.318026][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.321610][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.333084][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.336719][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.353237][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.357357][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.373115][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.377908][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.403098][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.407129][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.423650][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.427848][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.453746][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.458918][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.483175][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.488989][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.513285][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.518402][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.533147][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.537907][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.553233][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.557719][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.573164][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.577791][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.593153][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.598242][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.623153][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.627493][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.643134][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.648127][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.663134][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.668466][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.683257][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.687911][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.703217][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.707934][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.723535][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.727400][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.743069][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.746840][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.763146][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.767050][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.783063][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.788450][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.803166][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.809042][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.835646][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.839983][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.863227][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.867251][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.883166][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.887685][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.903124][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.906608][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.925041][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.931367][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.953122][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.957305][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 721.983083][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 721.987715][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.013168][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.017562][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.033167][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.036946][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.053100][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.056744][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.073121][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.077884][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.093094][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.099222][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.123117][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.127499][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.143185][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.162874][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.185923][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.189756][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.213176][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.218001][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.233104][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.237119][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.253141][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.258222][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.273150][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.277241][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.293161][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.298115][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.319501][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.324098][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.353131][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.358577][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.383621][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.389758][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.423143][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.428110][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.463456][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.467943][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.483497][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.487545][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.503148][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.507872][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.523099][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.527320][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.555608][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.560031][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.593136][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.600126][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.633120][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.640435][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.663150][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.668065][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.683657][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.688970][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.723403][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 722.727280][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 722.730780][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 722.754491][ T40] usb 8-1: USB disconnect, device number 105 09:33:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:33:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 09:33:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000010640), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000010780)={&(0x7f0000010600), 0xc, &(0x7f0000010740)={&(0x7f00000106c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x28}}, 0x0) 09:33:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 722.779807][T12632] loop1: detected capacity change from 0 to 264192 09:33:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 722.793527][T12632] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 09:33:33 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000001c0)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) [ 722.808723][T12632] EXT4-fs (loop1): group descriptors corrupted! 09:33:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}}, 0x0) 09:33:33 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000001c0)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) [ 723.363925][ T40] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 723.723341][ T40] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 723.729366][ T40] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.737811][ T40] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 723.745563][ T40] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.876119][ T40] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 723.884439][ T40] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 723.891021][ T40] usb 8-1: Product: syz [ 723.894423][ T40] usb 8-1: Manufacturer: syz [ 723.944169][ T40] cdc_wdm 8-1:1.0: skipping garbage [ 723.948070][ T40] cdc_wdm 8-1:1.0: skipping garbage [ 723.953263][ T40] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 723.957430][ T40] cdc_wdm 8-1:1.0: Unknown control protocol [ 724.513181][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.517574][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.533160][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.538618][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.564086][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 724.569680][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.574193][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.593133][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.598206][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.623192][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.627553][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.643643][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.648495][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.663216][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.667848][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.683822][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.689078][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.713106][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.716718][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.733137][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.737087][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.753170][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.757883][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.773160][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.777815][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.793152][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.798091][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.823116][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.826810][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.843322][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.851085][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.873143][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.878292][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.915356][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.919589][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.943843][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.953429][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 724.983167][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 724.988326][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.013529][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.018301][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.033133][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.037832][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.053145][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.057740][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.073119][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.077964][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.094692][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.098078][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.113182][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.117533][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.143125][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.147262][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.163108][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.168386][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.183142][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.188030][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.203252][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.210626][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.223137][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.228006][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.243109][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.246618][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.263129][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.267751][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.283208][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.287915][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.303127][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.308025][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.323160][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.327736][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.353121][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.357164][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.373153][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.377566][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.393220][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.398178][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.413110][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.418445][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.433496][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.438276][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.453955][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.472320][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.493164][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.497154][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.513107][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.516831][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.533058][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.537011][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.553307][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.557945][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.583423][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.589604][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.623093][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.627640][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.643342][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.648150][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.663125][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.667726][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.683094][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.687080][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.703090][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.706835][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.723100][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.726806][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.743105][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.747542][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.763282][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.767830][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.783298][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.787565][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.803206][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.807780][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.823209][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.827204][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.843262][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.847731][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.863548][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.867353][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.883065][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.886768][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.903174][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.907236][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.924264][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.928892][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 725.953133][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 725.957781][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 726.004759][ T34] usb 8-1: USB disconnect, device number 106 09:33:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}}, 0x0) 09:33:37 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000004c00a8000000a8"], &(0x7f0000000340)=""/207, 0xc5, 0xcf, 0x1}, 0x20) 09:33:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004000000001f0006031a00000004800200090581", @ANYBLOB="73d3"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:33:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 726.027887][T12644] loop1: detected capacity change from 0 to 264192 [ 726.036343][T12644] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 726.043507][T12644] EXT4-fs (loop1): group descriptors corrupted! 09:33:37 executing program 2: syz_io_uring_setup(0x25f2, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x800000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 09:33:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}}, 0x0) 09:33:37 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @null, @default, @null]}, 0x48) 09:33:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32], 0x3c}}, 0x0) 09:33:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 726.095537][ T39] audit: type=1400 audit(1662111217.139:396): avc: denied { connect } for pid=12655 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 726.107175][T12656] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de 09:33:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32], 0x3c}}, 0x0) [ 726.112312][T12658] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 726.121329][T12660] loop1: detected capacity change from 0 to 264192 [ 726.130061][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 726.141311][T12662] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 726.142198][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 726.155450][ T7120] loop1: unable to read partition table [ 726.160093][T12660] EXT4-fs (loop1): unsupported descriptor size 0 [ 726.513160][ T34] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 726.873286][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 726.880731][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.900259][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 726.907572][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.043380][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 727.049372][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 727.064619][ T34] usb 8-1: Product: syz [ 727.067935][ T34] usb 8-1: Manufacturer: syz [ 727.114164][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 727.118887][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 727.128025][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 727.136271][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 727.683074][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 727.687497][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 727.706053][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 727.711216][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 727.733268][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 727.739370][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 727.744696][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 727.763156][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 727.767664][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 727.783112][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 727.789219][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 727.823127][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 727.828444][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 727.853131][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 727.858312][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 727.883602][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 727.888496][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 727.903104][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 727.906854][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 727.925351][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 727.930551][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 727.943117][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 727.949132][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 727.981184][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 727.984999][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.003280][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.008247][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.023149][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.028217][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.043213][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.049827][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.073163][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.077238][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.093281][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.098138][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.113182][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.118924][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.143150][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.147343][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.163153][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.167183][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.183115][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.187820][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.203107][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.207636][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.223460][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.226918][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.243178][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.246833][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.263145][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.267310][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.293103][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.298349][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.324033][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.331671][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.353140][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.358734][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.383146][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.389080][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.413150][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.418011][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.433174][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.438797][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.463195][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.468678][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.483169][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.488458][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.523104][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.529083][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.553141][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.558586][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.583195][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.588342][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.613942][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.618964][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.643215][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.647907][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.663113][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.667545][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.683124][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.687548][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.703144][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.711038][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.723992][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.728819][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.743199][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.748064][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.763117][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.767710][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.783311][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.788130][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.803253][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.807183][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.823335][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.828829][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.843319][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.848190][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.863117][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.867751][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.883177][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.899975][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.923104][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.927897][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.943131][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.948851][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.973139][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.977902][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 728.993111][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 728.997751][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 729.013211][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 729.018527][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 729.053129][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 729.061662][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 729.083297][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 729.088544][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 729.123111][ C2] cdc_wdm 8-1:1.0: Stall on int endpoint [ 729.127962][ C2] cdc_wdm 8-1:1.0: Cannot schedule work [ 729.175518][ T3947] usb 8-1: USB disconnect, device number 107 09:33:40 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @null, @default, @null]}, 0x48) 09:33:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32], 0x3c}}, 0x0) 09:33:40 executing program 3: syz_io_uring_setup(0x5abd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x2493, &(0x7f0000000340), &(0x7f0000001000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 729.215770][T12667] loop1: detected capacity change from 0 to 264192 [ 729.223740][T12669] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 729.229414][T12666] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 729.245189][T12667] EXT4-fs (loop1): unsupported descriptor size 0 09:33:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) [ 729.272046][T12673] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x7, 0x0, 0x7}, 0x0) 09:33:40 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0xd, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) [ 729.300881][T12678] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:40 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000080), 0x200, 0x101082) [ 729.314218][ T39] audit: type=1400 audit(1662111220.349:397): avc: denied { listen } for pid=12675 comm="syz-executor.2" laddr=::ffff:172.20.20.55 lport=41360 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 09:33:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) 09:33:40 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e1) [ 729.352236][T12686] loop1: detected capacity change from 0 to 264192 [ 729.353696][T12684] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 729.366618][T12686] EXT4-fs (loop1): unsupported descriptor size 0 09:33:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100"], 0x3c}}, 0x0) 09:33:40 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}, 0x10) [ 729.379316][ T39] audit: type=1400 audit(1662111220.419:398): avc: denied { accept } for pid=12675 comm="syz-executor.2" laddr=::ffff:172.20.20.55 lport=41360 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 729.407080][ T39] audit: type=1400 audit(1662111220.429:399): avc: denied { create } for pid=12689 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 729.411497][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:40 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="cda40f8bd72701023b", 0x9) 09:33:40 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="17", 0x1}], 0x1}}], 0x1, 0x0) 09:33:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100"], 0x3c}}, 0x0) [ 729.429306][ T39] audit: type=1400 audit(1662111220.429:400): avc: denied { ioctl } for pid=12689 comm="syz-executor.3" path="socket:[60197]" dev="sockfs" ino=60197 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 729.455847][ T39] audit: type=1400 audit(1662111220.469:401): avc: denied { getopt } for pid=12675 comm="syz-executor.2" laddr=::ffff:172.20.20.55 lport=41360 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 729.459007][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:40 executing program 3: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$qrtrtun(r0, 0x0, 0x0) 09:33:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100"], 0x3c}}, 0x0) 09:33:40 executing program 2: ioperm(0x0, 0x5, 0x1) [ 729.532123][T12707] loop1: detected capacity change from 0 to 264192 [ 729.541437][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) [ 729.550779][T12707] EXT4-fs (loop1): unsupported descriptor size 0 09:33:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e6400000000"], 0x3c}}, 0x0) 09:33:40 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 729.577793][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 729.588260][ T39] audit: type=1400 audit(1662111220.629:402): avc: denied { write } for pid=12716 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 09:33:40 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @empty, @val, {@ipv4}}, 0x0) 09:33:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 729.640428][T12722] loop1: detected capacity change from 0 to 264192 [ 729.642030][ T3132] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 729.655984][ T3132] Buffer I/O error on dev loop1, logical block 0, async page read [ 729.661920][ T3132] loop1: unable to read partition table [ 729.672228][T12722] EXT4-fs (loop1): unsupported descriptor size 0 09:33:41 executing program 3: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x10000000) 09:33:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e6400000000"], 0x3c}}, 0x0) 09:33:41 executing program 2: r0 = syz_usb_connect$cdc_ecm(0x5, 0x65, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090253000101dc104809040040020206000109240600006897bc3905240009000d240f0101040000090009000106241a07001405240102d4d4bb9ecb969f5eff09058103ff0307de0009058202"], &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x0, 0x1, 0x6, 0x20, 0x9}, 0x18b, &(0x7f00000000c0)={0x5, 0xf, 0x18b, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5d, "acfec429211b243d2f231ee09b00e27e"}, @ssp_cap={0x10, 0x10, 0xa, 0xf9, 0x1, 0x10001, 0xf, 0xff, [0xc0cf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x8, 0x2, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x1c, 0x0, 0x871, 0xfa}, @generic={0x98, 0x10, 0xb, "d0b4ac1a970efc8cd8c98d27eb289f0a429f9e280710d75b046bd8bb97b6bbd858e49b5cca6e80ddd8f668402b137814e70f28ccdc1f49f5c27922538ebc9f40a0b5f051090024274ee3a9196e7faa8515fa2d3a72eef52b276e985c9679cb842fc16aff2976b298c3756fc4dae2e30c778841078957f98dc536192dd1a29a6b4bdfbbdb5f2d850cf182f1c034a3d4ed886ae840f3"}, @generic={0xb5, 0x10, 0x4, "86b5a1e83f83dd3b4cec08f373233054835d2ef5b751e628b893b574dc4fe84ff6ecb8d9225ce3cdd80381474681f34f58770320af022b3e19406a6052009c0ae6e106270728cccb691b605c3a6efa5c4dcc129621e0962abcc5c02567d1b2223d856cc57e2c3de3ee15398ce914fe86338a5143af3650fdaf02c1b2af1fb4bf4f34c18a81c61363795879b4c40c2775dfbf0563c17c57958dd9579d32d77a10b7309750217c22d5bec10173a30134ebaa2a"}]}, 0x1, [{0xa9, &(0x7f0000000280)=@string={0xa9, 0x3, "393b8404ccdde7819e55ac9375a6ce1fab0c1bb01237e24827c1358727c139b4bee5cf018abffdda90e60bfbefcc0452fc02d66625430d845e8cd694416deb685decbc30520d58d0e460aac78b57ad7199b2e43e5d98eb76b6ee829a7b3cf5b92b5589f999a40c285d18c786cbfd5d08594122dbb20b91b35d61fa9a0b6b4000d439e5c3e16d2abfb8cf0575c849d01e507b49638941ed017f8936266fe04be448123a0b628033"}}]}) syz_usb_ep_read(r0, 0x6, 0x4b, &(0x7f0000000380)=""/75) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 09:33:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 730.366790][T12727] loop1: detected capacity change from 0 to 264192 [ 730.367334][T12726] bond2 (uninitialized): Released all slaves [ 730.378648][T12727] EXT4-fs (loop1): unsupported descriptor size 0 09:33:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e6400000000"], 0x3c}}, 0x0) 09:33:41 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000240)) [ 730.420509][T12733] bond2 (uninitialized): Released all slaves 09:33:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 09:33:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280"], 0x3c}}, 0x0) [ 730.477433][T12739] loop1: detected capacity change from 0 to 264192 [ 730.485335][T12742] bond2 (uninitialized): Released all slaves 09:33:41 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) [ 730.525162][T12739] EXT4-fs (loop1): unsupported descriptor size 0 [ 730.634736][ T40] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 730.873247][ T40] usb 7-1: Using ep0 maxpacket: 8 [ 731.103674][ T40] usb 7-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 731.111217][ T40] usb 7-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 731.123245][ T40] usb 7-1: config 1 interface 0 has no altsetting 0 [ 731.283357][ T40] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.288926][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.295226][ T40] usb 7-1: Product: syz [ 731.298480][ T40] usb 7-1: Manufacturer: syz [ 731.301852][ T40] usb 7-1: SerialNumber: syz [ 731.639281][ T40] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 731.647139][ T40] usb 7-1: USB disconnect, device number 13 09:33:43 executing program 2: syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 09:33:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280"], 0x3c}}, 0x0) 09:33:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:43 executing program 3: futex(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) [ 732.069806][T12750] __nla_validate_parse: 3 callbacks suppressed [ 732.069821][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 732.073750][T12751] loop1: detected capacity change from 0 to 264192 09:33:43 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000040)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000280)) openat$drirender128(0xffffffffffffff9c, 0x0, 0x169883, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'veth0_virt_wifi\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) [ 732.076916][T12750] bond2 (uninitialized): Released all slaves [ 732.088800][T12751] EXT4-fs (loop1): unsupported descriptor size 0 09:33:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280"], 0x3c}}, 0x0) [ 732.134549][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:43 executing program 3: syz_io_uring_setup(0x53c4, &(0x7f0000000080)={0x0, 0x1fffffe, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) [ 732.144279][T12759] bond2 (uninitialized): Released all slaves 09:33:43 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) 09:33:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800"], 0x3c}}, 0x0) 09:33:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 732.193548][T12767] loop1: detected capacity change from 0 to 264192 09:33:43 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) [ 732.200818][T12769] bond2 (uninitialized): Released all slaves [ 732.207364][T12767] EXT4-fs (loop1): unsupported descriptor size 0 09:33:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r1) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x18}}, 0x0) 09:33:43 executing program 3: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x5, 0x0, 0x0) 09:33:43 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x65, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090253000101dc1048090400400202060001092406"], &(0x7f0000000340)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) 09:33:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800"], 0x3c}}, 0x0) [ 732.248366][T12778] bond2 (uninitialized): Released all slaves [ 732.257902][ T7120] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 09:33:43 executing program 3: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 09:33:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800"], 0x3c}}, 0x0) 09:33:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a", 0x10, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:43 executing program 3: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000000000)={0x0, 0x0, 0xc5}, 0x20) [ 732.300445][T12785] bond2 (uninitialized): Released all slaves [ 732.304520][T12789] loop1: detected capacity change from 0 to 264192 [ 732.307265][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 09:33:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) [ 732.318273][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read 09:33:43 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @empty, @val, {@ipv6}}, 0x0) [ 732.336470][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 732.341299][ T7120] loop1: unable to read partition table [ 732.350289][T12789] EXT4-fs (loop1): unsupported descriptor size 0 [ 732.533194][ T6243] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 732.773259][ T6243] usb 7-1: Using ep0 maxpacket: 8 [ 732.973553][ T6243] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.982613][ T6243] usb 7-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 732.994665][ T6243] usb 7-1: config 1 interface 0 has no altsetting 0 [ 733.193333][ T6243] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 733.200315][ T6243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.208751][ T6243] usb 7-1: Product: syz [ 733.213190][ T6243] usb 7-1: Manufacturer: syz [ 733.217216][ T6243] usb 7-1: SerialNumber: syz [ 733.554049][ T6243] usb 7-1: bad CDC descriptors [ 733.560824][ T6243] usb 7-1: USB disconnect, device number 14 09:33:45 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) 09:33:45 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[{0x0, 0x0, 0x401}], 0x0, 0x0) 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a", 0x10, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 733.994525][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 733.995360][T12799] loop1: detected capacity change from 0 to 264192 [ 733.996486][T12800] loop3: detected capacity change from 0 to 4 09:33:45 executing program 2: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 733.999427][ T3132] Dev loop3: unable to read RDB block 4 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) [ 733.999466][ T3132] loop3: unable to read partition table [ 733.999628][ T3132] loop3: partition table beyond EOD, truncated 09:33:45 executing program 2: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 734.037040][T12799] EXT4-fs (loop1): unsupported descriptor size 0 09:33:45 executing program 3: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x2, &(0x7f00000001c0)={0xffffffff, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) [ 734.037970][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/vmcoreinfo', 0x0, 0x0) 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a", 0x10, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:45 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 734.127247][T12820] loop1: detected capacity change from 0 to 264192 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 3: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, 0x0, 0x0) [ 734.149822][T12820] EXT4-fs (loop1): unsupported descriptor size 0 09:33:45 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c89", 0x18, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 09:33:45 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 3: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2) 09:33:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c89", 0x18, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 734.229182][T12838] loop1: detected capacity change from 0 to 264192 [ 734.236812][T12838] EXT4-fs (loop1): unsupported descriptor size 0 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 3: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 734.276807][T12847] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:45 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 734.294076][ T7120] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote, 'batadv0\x00'}}, 0x1e) 09:33:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c89", 0x18, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 734.317449][ T39] audit: type=1400 audit(1662111225.359:403): avc: denied { connect } for pid=12851 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 734.332583][T12854] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:45 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) [ 734.339411][T12856] loop1: detected capacity change from 0 to 264192 [ 734.340021][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 734.355477][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 734.361932][ T7120] loop1: unable to read partition table 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 734.365239][ T39] audit: type=1400 audit(1662111225.409:404): avc: denied { write } for pid=12857 comm="syz-executor.3" name="fb0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 09:33:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000480)={0x0, 0x9717, &(0x7f0000000440)={0x0}, 0x7}, 0x0) [ 734.390558][T12860] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:45 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007a040)={0x0, [], 0x0, "68f90f5d34070d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007c240)={0x0, [], 0x0, "958b5920ea9195"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000007e440)={0x0, 0x0, "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", "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"}) syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000000000000", @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 734.438561][T12856] EXT4-fs (loop1): unsupported descriptor size 0 [ 734.447501][T12868] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045", 0x1c, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:45 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/vmcoreinfo', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 09:33:45 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x65, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000082505a1a44000010203010902"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000000000000", @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045", 0x1c, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:45 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 734.489497][T12878] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000000000000", @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) [ 734.508525][T12880] loop1: detected capacity change from 0 to 264192 [ 734.517185][T12880] EXT4-fs (loop1): unsupported descriptor size 0 09:33:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/18, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045", 0x1c, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:45 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 734.764010][ T6243] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 735.023134][ T6243] usb 8-1: Using ep0 maxpacket: 8 [ 735.183280][ T6243] usb 8-1: unable to get BOS descriptor or descriptor too short [ 735.263521][ T6243] usb 8-1: config 0 has no interfaces? [ 735.423350][ T6243] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.429143][ T6243] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.434674][ T6243] usb 8-1: Product: syz [ 735.442266][ T6243] usb 8-1: Manufacturer: syz [ 735.451823][ T6243] usb 8-1: SerialNumber: syz [ 735.459202][ T6243] usb 8-1: config 0 descriptor?? [ 735.699799][ T6243] usb 8-1: USB disconnect, device number 108 09:33:47 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e6) 09:33:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f2800450100", 0x1e, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/18, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:47 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/18, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) [ 736.216417][T12895] loop1: detected capacity change from 0 to 264192 [ 736.230958][T12895] EXT4-fs (loop1): unsupported descriptor size 0 09:33:47 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/19, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:47 executing program 3: syz_io_uring_setup(0xda3, &(0x7f0000000000), &(0x7f0000002000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 09:33:47 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/19, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) 09:33:47 executing program 3: unshare(0x4a040000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde3, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x480000, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/220) dup2(r2, r0) dup(r1) ioctl$TIOCSETD(r0, 0x5423, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=0x0], 0x28}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = dup(r2) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x14}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4012, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x4, 0x10, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x0, 0x4cf1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="a80000006500000829bd7000fbdbdf2500008000", @ANYRES32=0x0, @ANYBLOB="0c0009000f000c000f00020008000b0000000000060005001f08000008000100753332003400020008000400c30000001400080076657468315f766c616e000000000000140008006272696467655f736c6176655f31000008000b0004000000080001006270660014000200100002000c000800000000000000000008000b00f8ffffff080001007533320004000200"], 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x85) 09:33:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f2800450100", 0x1e, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 736.314242][T12913] loop1: detected capacity change from 0 to 264192 09:33:47 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/19, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080005"], 0x3c}}, 0x0) [ 736.334890][T12913] EXT4-fs (loop1): unsupported descriptor size 0 09:33:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f2800450100", 0x1e, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:47 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x3) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:47 executing program 0: socket$inet6(0xa, 0x3, 0x48) [ 736.394716][T12923] loop1: detected capacity change from 0 to 264192 [ 736.400285][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.400328][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read 09:33:47 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x3) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 736.400402][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.419957][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.424592][ T39] audit: type=1400 audit(1662111227.469:405): avc: denied { write } for pid=12909 comm="syz-executor.3" name="ppp" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 736.436729][ T7120] loop1: unable to read partition table [ 736.451309][ T39] audit: type=1400 audit(1662111227.469:406): avc: denied { ioctl } for pid=12909 comm="syz-executor.3" path="/dev/ppp" dev="devtmpfs" ino=711 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 736.451580][T12923] EXT4-fs (loop1): unsupported descriptor size 0 09:33:47 executing program 3: unshare(0x4a040000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde3, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x480000, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/220) dup2(r2, r0) dup(r1) ioctl$TIOCSETD(r0, 0x5423, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=0x0], 0x28}}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = dup(r2) write$P9_RMKDIR(r3, &(0x7f00000000c0)={0x14}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4012, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x4, 0x10, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x0, 0x0, 0x4cf1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="a80000006500000829bd7000fbdbdf2500008000", @ANYRES32=0x0, @ANYBLOB="0c0009000f000c000f00020008000b0000000000060005001f08000008000100753332003400020008000400c30000001400080076657468315f766c616e000000000000140008006272696467655f736c6176655f31000008000b0004000000080001006270660014000200100002000c000800000000000000000008000b00f8ffffff080001007533320004000200"], 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x85) 09:33:47 executing program 0: syz_io_uring_setup(0x20005ebd, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 09:33:47 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x3) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:47 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 09:33:47 executing program 2: r0 = socket$inet(0xa, 0x0, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:47 executing program 0: syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x5367, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) [ 736.552663][T12939] loop1: detected capacity change from 0 to 264192 [ 736.555023][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.574428][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.582536][ T7120] loop1: unable to read partition table [ 736.588339][T12939] EXT4-fs (loop1): unsupported descriptor size 0 09:33:47 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001400)={0x0, &(0x7f0000001340)="58958abd472e49a37594e245081de1262fa2315a210a3e09dd5c3007adef5f727cbc5f52096f9642bd59cd22d69ecb081346e1711b038ecbe945f7e8581014f517", 0x41}) 09:33:47 executing program 3: syz_io_uring_setup(0x5ebd, &(0x7f0000000080)={0x0, 0x0, 0x5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 09:33:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:47 executing program 2: r0 = socket$inet(0xa, 0x0, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:47 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001640)='/sys/module/port100', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x32000994) 09:33:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:47 executing program 0: r0 = io_uring_setup(0x435b, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 736.670765][T12959] loop1: detected capacity change from 0 to 264192 [ 736.674210][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 736.682239][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 736.689290][ T39] audit: type=1400 audit(1662111227.719:407): avc: denied { sqpoll } for pid=12960 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 736.690514][ T7120] loop1: unable to read partition table 09:33:47 executing program 0: r0 = io_uring_setup(0x435b, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:47 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f00000002c0)) [ 736.710001][T12959] EXT4-fs (loop1): unsupported descriptor size 0 09:33:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:47 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000001640)='/sys/module/port100', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001640)='/sys/module/port100', 0x0, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x1f}, &(0x7f0000000200)) [ 736.733713][ T39] audit: type=1400 audit(1662111227.779:408): avc: denied { ioctl } for pid=12965 comm="syz-executor.3" path="/dev/fb0" dev="devtmpfs" ino=634 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 09:33:47 executing program 2: r0 = socket$inet(0xa, 0x0, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:47 executing program 3: futex(&(0x7f0000000380), 0x5, 0x0, 0x0, &(0x7f0000000400)=0x2, 0x0) 09:33:47 executing program 0: r0 = io_uring_setup(0x435b, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:47 executing program 3: syz_mount_image$vfat(&(0x7f000000a500), 0x0, 0x0, 0x1, &(0x7f000000a6c0)=[{&(0x7f000000a5c0)="af", 0x1}], 0x0, &(0x7f000000a740)) 09:33:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:47 executing program 0: r0 = io_uring_setup(0x435b, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 736.829446][T12989] loop1: detected capacity change from 0 to 264192 09:33:47 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 736.840643][T12989] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:33:47 executing program 3: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) 09:33:47 executing program 2: r0 = socket$inet(0xa, 0x801, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:47 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:47 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) [ 736.906790][T13003] loop1: detected capacity change from 0 to 264192 09:33:47 executing program 2: r0 = socket$inet(0xa, 0x801, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:47 executing program 0: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 736.907738][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 09:33:47 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001640)='/sys/module/port100', 0x0, 0x0) read$qrtrtun(r0, 0x0, 0x0) [ 736.936766][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read 09:33:47 executing program 2: r0 = socket$inet(0xa, 0x801, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 736.945905][ T7120] loop1: unable to read partition table 09:33:48 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 736.961737][T13003] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:48 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:48 executing program 3: syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x19d3, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000240)) 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:48 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 737.023383][T13019] loop1: detected capacity change from 0 to 264192 [ 737.028421][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.038850][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 737.044988][ T7120] loop1: unable to read partition table [ 737.049559][T13019] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:33:48 executing program 0: r0 = io_uring_setup(0x435b, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xf}]}]}}, &(0x7f00000001c0)=""/150, 0x2e, 0x96, 0x1}, 0x20) 09:33:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:48 executing program 3: futex(&(0x7f0000000040), 0xc, 0x0, 0x0, 0x0, 0x0) [ 737.095203][T13033] loop1: detected capacity change from 0 to 264192 09:33:48 executing program 0: r0 = io_uring_setup(0x435b, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 737.114986][T13033] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:33:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 09:33:48 executing program 0: r0 = io_uring_setup(0x435b, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:48 executing program 0: r0 = io_uring_setup(0x435b, &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:48 executing program 3: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 09:33:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:48 executing program 0: r0 = io_uring_setup(0x435b, &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 737.199261][T13054] loop1: detected capacity change from 0 to 264192 [ 737.200602][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 737.212092][ T7120] loop1: unable to read partition table 09:33:48 executing program 3: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x14, 0x0, 0x0) [ 737.223551][T13054] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:33:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:48 executing program 0: r0 = io_uring_setup(0x435b, &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:48 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 737.271597][T13062] loop1: detected capacity change from 0 to 264192 [ 737.276541][ T7120] blk_print_req_error: 1 callbacks suppressed [ 737.276557][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:48 executing program 0: io_uring_setup(0x435b, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 737.303330][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 737.309939][ T7120] loop1: unable to read partition table [ 737.314903][T13062] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:48 executing program 0: io_uring_setup(0x435b, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 09:33:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:48 executing program 3: socket(0x29, 0x5, 0x80000000) [ 737.387245][T13082] loop1: detected capacity change from 0 to 264192 09:33:48 executing program 0: io_uring_setup(0x435b, &(0x7f0000000000)={0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 737.394255][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 09:33:48 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}}, 0x14) 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 737.400557][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read 09:33:48 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0xd84c1, 0x0) [ 737.435305][ T7120] loop1: unable to read partition table [ 737.441426][T13082] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xc0}, 0x0) 09:33:48 executing program 3: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x0, 0x0) 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 737.505470][T13098] loop1: detected capacity change from 0 to 264192 [ 737.509804][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.525670][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 737.534332][ T7120] loop1: unable to read partition table 09:33:48 executing program 3: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x0, 0x1d21, 0x1, 0x0, 0x0) 09:33:48 executing program 0: select(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x7}, &(0x7f0000000200)) [ 737.540877][T13098] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:48 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000100)={@random="ad3e1dd42087", @empty, @val, {@ipv4}}, 0x0) [ 737.586433][T13112] loop1: detected capacity change from 0 to 264192 [ 737.587132][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.596659][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 737.601976][ T7120] loop1: unable to read partition table [ 737.611680][T13112] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:33:48 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:48 executing program 0: syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x9d0, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) 09:33:49 executing program 3: openat$vfio(0xffffffffffffff9c, &(0x7f0000000140), 0x4001, 0x0) 09:33:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf465", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:49 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:49 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a8000000050000000e0000000000000700000000000000000600000d000000000e000000030000000a000000050000000b000000020000000700000003000000020000000300000005000000050000000c00000000000007000000000800000000000001d8d577a9ea2d2951f0b16c9852d63901000000001e0030030a200000070000060400000007000000ff000000070000000600000003000000050000000300000040000000050000000000000006000000ff"], &(0x7f0000000340)=""/207, 0xc5, 0xcf, 0x1}, 0x20) [ 738.418817][T13126] loop1: detected capacity change from 0 to 264192 09:33:49 executing program 0: r0 = syz_io_uring_setup(0x5ebd, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) [ 738.429174][T13126] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:33:49 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) [ 738.439000][ T39] audit: type=1400 audit(1662111229.479:409): avc: denied { write } for pid=13128 comm="syz-executor.3" name="vfio" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vfio_device_t tclass=chr_file permissive=1 09:33:49 executing program 3: openat$vfio(0xffffffffffffff9c, &(0x7f0000000140), 0x4001, 0x0) 09:33:49 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xf3, 0x1000}) [ 738.461469][ T39] audit: type=1400 audit(1662111229.479:410): avc: denied { open } for pid=13128 comm="syz-executor.3" path="/dev/vfio/vfio" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vfio_device_t tclass=chr_file permissive=1 09:33:49 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00'}, 0x10) 09:33:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:49 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 09:33:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback}}) 09:33:49 executing program 3: syz_io_uring_setup(0x5ebb, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000100), 0x0) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) 09:33:49 executing program 0: select(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x1}, &(0x7f0000000180)={0x7}, &(0x7f0000000200)) 09:33:49 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, 0x0, &(0x7f0000000000)) 09:33:49 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8000, 0x3}) [ 738.542568][T13148] loop1: detected capacity change from 0 to 264192 09:33:49 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@null, 0x100d, 'vlan1\x00'}) [ 738.550626][T13148] EXT4-fs (loop1): invalid first ino: 0 09:33:49 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fbdbdf25070000000c0017000200aaaaaaaaaaaa08000100000000000c0006000300000003"], 0x50}}, 0x0) 09:33:49 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, 0x0, &(0x7f0000000000)) 09:33:49 executing program 0: inotify_init1(0xc0c00) 09:33:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 738.617859][T13159] __nla_validate_parse: 7 callbacks suppressed [ 738.617874][T13159] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 09:33:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010026bd700000000000fc010000000000000000000000000000ac1414bb000000000000000000000000000000000000000002"], 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setrlimit(0x0, &(0x7f00000001c0)={0x1, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@bridge_dellink={0x28, 0x11, 0x400, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0xe40}, [@IFLA_NET_NS_PID={0x15, 0x13, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r1, &(0x7f0000000380)={0x38, 0x5, 0x10000010, 0x7, 0x2, 0x1, 0x1, 0x9, 0x101, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x28, 0x6a, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4804) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/850], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 09:33:49 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, 0x0, &(0x7f0000000000)) [ 738.642114][T13164] loop1: detected capacity change from 0 to 264192 09:33:49 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x65, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090253000101dc1048090400400202060001092406"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) [ 738.644347][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.649991][ T39] audit: type=1400 audit(1662111229.689:411): avc: denied { create } for pid=13165 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 738.655250][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read 09:33:49 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, 0x0) [ 738.655335][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.682502][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 738.693675][ T7120] loop1: unable to read partition table [ 738.698385][T13164] EXT4-fs (loop1): invalid first ino: 0 09:33:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:49 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, 0x0) [ 738.733814][T13176] loop1: detected capacity change from 0 to 264192 09:33:49 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote}}}, 0x0) [ 738.737042][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.748557][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 738.756170][ T7120] loop1: unable to read partition table [ 738.768480][T13176] EXT4-fs (loop1): invalid first ino: 0 09:33:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 738.846800][ T39] audit: type=1400 audit(1662111229.889:412): avc: denied { write } for pid=13165 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 738.953321][ T3758] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 739.203210][ T3758] usb 8-1: Using ep0 maxpacket: 8 [ 739.383320][ T3758] usb 8-1: unable to get BOS descriptor or descriptor too short [ 739.463402][ T3758] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 09:33:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010026bd700000000000fc010000000000000000000000000000ac1414bb000000000000000000000000000000000000000002"], 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setrlimit(0x0, &(0x7f00000001c0)={0x1, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@bridge_dellink={0x28, 0x11, 0x400, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0xe40}, [@IFLA_NET_NS_PID={0x15, 0x13, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r1, &(0x7f0000000380)={0x38, 0x5, 0x10000010, 0x7, 0x2, 0x1, 0x1, 0x9, 0x101, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getnexthop={0x28, 0x6a, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4804) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/850], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 09:33:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000014000480050003000000000005000300000000002c00088014000781080013007f88b2240800060000000000140007800800050000000000080006000000000008000100000000000800020001"], 0x64}}, 0x0) [ 739.483787][ T3758] usb 8-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 739.494747][ T3758] usb 8-1: config 1 interface 0 has no altsetting 0 [ 739.683218][ T3758] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 739.690882][ T3758] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.699994][ T3758] usb 8-1: Product: syz [ 739.705078][ T3758] usb 8-1: Manufacturer: syz [ 739.710083][ T3758] usb 8-1: SerialNumber: syz [ 740.053925][ T3758] usb 8-1: bad CDC descriptors [ 740.068272][ T3758] usb 8-1: USB disconnect, device number 109 09:33:51 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x65, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090253000101dc1048090400400202060001092406"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 09:33:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:51 executing program 0: faccessat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x0) 09:33:51 executing program 2: r0 = syz_io_uring_setup(0x1d95, &(0x7f0000000080), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) [ 740.511344][T13200] loop1: detected capacity change from 0 to 264192 09:33:51 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) geteuid() sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000480)=[@rights, @rights, @cred, @cred, @rights, @cred, @rights, @rights], 0xe8}, 0x0) [ 740.522264][T13200] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) 09:33:51 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000340)=[{&(0x7f0000000200)="dc", 0x1}, {0x0}, {0x0}], 0x3, &(0x7f0000000480)=[@rights], 0x10}, 0x0) 09:33:51 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights, @rights, @cred, @cred, @rights, @cred, @rights, @rights], 0xe8}, 0x0) 09:33:51 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) [ 740.783176][ T3763] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 741.023142][ T3763] usb 8-1: Using ep0 maxpacket: 8 [ 741.233185][ T3763] usb 8-1: unable to get BOS descriptor or descriptor too short [ 741.313272][ T3763] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.320250][ T3763] usb 8-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 741.330812][ T3763] usb 8-1: config 1 interface 0 has no altsetting 0 [ 741.503324][ T3763] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.509627][ T3763] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.514940][ T3763] usb 8-1: Product: syz [ 741.517636][ T3763] usb 8-1: Manufacturer: syz [ 741.520767][ T3763] usb 8-1: SerialNumber: syz [ 741.853770][ T3763] usb 8-1: bad CDC descriptors [ 741.860288][ T3763] usb 8-1: USB disconnect, device number 110 09:33:53 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 09:33:53 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000080), 0x0) 09:33:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 09:33:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 742.292802][T13212] loop1: detected capacity change from 0 to 264192 [ 742.301517][T13212] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) 09:33:53 executing program 2: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 09:33:53 executing program 2: open$dir(&(0x7f0000000000)='./file1\x00', 0x640c0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x204000, 0x8) 09:33:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 742.363082][ T39] audit: type=1800 audit(1662111233.399:413): pid=13220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1166 res=0 errno=0 09:33:53 executing program 2: rt_sigprocmask(0x0, &(0x7f0000000400), 0x0, 0x8) [ 742.386425][T13222] loop1: detected capacity change from 0 to 264192 [ 742.394678][T13222] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) [ 742.573430][ T48] usb 8-1: new high-speed USB device number 111 using dummy_hcd [ 742.774185][ T48] usb 8-1: device descriptor read/64, error 18 [ 743.044151][ T48] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 743.243130][ T48] usb 8-1: device descriptor read/64, error 18 [ 743.363854][ T48] usb usb8-port1: attempt power cycle [ 743.783202][ T48] usb 8-1: new high-speed USB device number 113 using dummy_hcd [ 743.873306][ T48] usb 8-1: Invalid ep0 maxpacket: 0 [ 744.023190][ T48] usb 8-1: new high-speed USB device number 114 using dummy_hcd [ 744.123866][ T48] usb 8-1: Invalid ep0 maxpacket: 0 [ 744.127896][ T48] usb usb8-port1: unable to enumerate USB device 09:33:56 executing program 3: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 09:33:56 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, @short}, 0x14, &(0x7f0000000200)={0x0}}, 0x0) 09:33:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/152, 0x1a, 0x98, 0x1}, 0x20) [ 745.322937][T13228] loop1: detected capacity change from 0 to 264192 09:33:56 executing program 0: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)) [ 745.334328][T13228] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) 09:33:56 executing program 3: syz_clone(0x74009000, &(0x7f0000000080)="02b22e4164f2c461f2226e87e7d9122c1661228316b3ce15ccf0460461654976d88edf10dabe773e3d74d9c07c57b9c9af07d58ec4950ab50875ecbe9700fcc2322e04", 0x43, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="ec1abc816ddc4446752346dfc1182595608efa2020f4e9ef6a2cf76fdaeac64360f1149b0d3c25f6a8974f2b43f1373762ee3cb9ceed7901f6d240f9aacde3c2628d8df9ab3a583b6fea3d127e74") gettid() 09:33:56 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='hybla\x00', 0x6) 09:33:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x8000, 0x5, 0xffffffff}, 0x48) 09:33:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x74009000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x40, 0x6, 0x0, 0x0, 0x8000}, 0x14) gettid() gettid() gettid() 09:33:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 745.438336][T13246] loop1: detected capacity change from 0 to 264192 [ 745.439674][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 09:33:56 executing program 3: syz_clone(0x74009000, &(0x7f0000000080)="02b22e4164f2c461f2226e87e7d9122c1661228316b3ce15ccf0460461654976d88edf10dabe773e3d74d9c07c57b9c9af07d58ec4950ab50875ecbe9700fcc2322e04", 0x43, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="ec1abc816ddc4446752346dfc1182595608efa2020f4e9ef6a2cf76fdaeac64360f1149b0d3c25f6a8974f2b43f1373762ee3cb9ceed7901f6d240f9aacde3c2628d8df9ab3a583b6fea3d127e74") gettid() [ 745.452824][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 745.464473][ T7120] loop1: unable to read partition table [ 745.485549][T13246] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) 09:33:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 745.532422][T13254] loop1: detected capacity change from 0 to 264192 [ 745.537744][T13254] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) [ 745.633326][ T971] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 745.833353][ T971] usb 5-1: device descriptor read/64, error 18 [ 746.103231][ T971] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 746.293191][ T971] usb 5-1: device descriptor read/64, error 18 [ 746.413202][ T971] usb usb5-port1: attempt power cycle [ 746.823181][ T971] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 746.925901][ T971] usb 5-1: Invalid ep0 maxpacket: 0 [ 747.073176][ T971] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 747.163269][ T971] usb 5-1: Invalid ep0 maxpacket: 0 [ 747.167475][ T971] usb usb5-port1: unable to enumerate USB device 09:33:59 executing program 0: r0 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x1c3021, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 09:33:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x74009000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x40, 0x6, 0x0, 0x0, 0x8000}, 0x14) gettid() gettid() gettid() 09:33:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:59 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) [ 748.377349][T13261] loop1: detected capacity change from 0 to 264192 09:33:59 executing program 3: syz_open_dev$dri(&(0x7f00000041c0), 0x0, 0x4441) [ 748.406250][T13261] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) 09:33:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x74009000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x40, 0x6, 0x0, 0x0, 0x8000}, 0x14) gettid() 09:33:59 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={0x0}}, 0x28040881) 09:33:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 748.488811][T13273] loop1: detected capacity change from 0 to 264192 09:33:59 executing program 3: openat$rtc(0xffffff9c, &(0x7f0000000000), 0x68400, 0x0) [ 748.502313][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 748.509849][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 748.517956][ T7120] loop1: unable to read partition table [ 748.524645][ T39] audit: type=1400 audit(1662111239.569:414): avc: denied { append } for pid=13275 comm="syz-executor.3" name="rtc0" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 748.525354][T13273] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) 09:33:59 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 09:33:59 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 09:33:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 748.606968][T13283] loop1: detected capacity change from 0 to 264192 [ 748.614938][T13283] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) 09:33:59 executing program 3: r0 = syz_clone(0x0, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)="365c7fb40ee78c5787e1637a8848f2cc1bc3fcc855d6fe3e4f2d7f9ac86686208be45f0aec241228b542eeb4c6a300e7fe5eb42580d01245ee58a02160a4471d629894915124ba2f7cbc6837c5836ea80c087849df4298dd1acf3244655e815b30f2b190f7b407ecf63fa107a883e88d110d05ba2a6fd5dc9e2437") syz_open_procfs$namespace(r0, &(0x7f00000004c0)='ns/time_for_children\x00') syz_open_procfs$userns(0x0, &(0x7f0000000700)) syz_open_procfs$userns(r0, &(0x7f0000000a40)) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40010) 09:33:59 executing program 0: add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r0 = syz_clone(0x48020080, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(0xffffffffffffffff, r0, 0x0) ptrace(0x10, r0) 09:33:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x5, &(0x7f00000003c0)=[{0x0, 0x0, 0x2}, {&(0x7f0000000100)="7e7b1231776d1c114f5a45", 0xb}, {&(0x7f0000000140)="4ab5784f218d68b08303ea1930423218305fadbd874b4ed7a514be39762e7b", 0x1f, 0x9}, {&(0x7f00000001c0)="8710daecd1ccfdf4a5e64e5a97f61d99380c5e2577136bdc9e0c20386d08abcb18093db1a8230e20327f9b3556a9165f14221dd528bbb05dd3c0707c528ec81aff52d369ad9296e9ffbb77d58f2dddca7c5737ffc0983e9698b0f76de3bde9e98de758aba6032e1d15084183d9586b865c2b33b3a8c8dbb5a79b9f3d7295dfe413170191e28399aecaec315f0e08e9e6b6126d5c736c38453efcf088d0885005bc37c8a2131eff99981932284c187b3787c6c43d539b03c9899e887bd05c55cd43309febc19bb50095e241e295ec4ee43bfb896b9a1fa811494d2a82b3adb5d204df6f76592ac1cfe87d6473", 0xec, 0x81}, {&(0x7f0000000340)="b0a27bbbddd2242101537ec9af710182c8a532b94a87dd308fd6bd5af033d1af5f9ab4f03f408080497f1f3a4b8495701906a3cb86983e284803aad28166f707", 0x40}], 0xc00, &(0x7f0000000480)={[{@nogrpid}, {@noauto_da_alloc}, {@delalloc}, {@noload}, {@nobh}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x64, 0x0, 0x36, 0x0, 0x33], 0x2d, [0x0, 0x35, 0x0, 0x38], 0x2d, [0x64, 0x61], 0x2d, [0x74], 0x2d, [0x0, 0x0, 0x61, 0x63, 0x61, 0x63, 0x33, 0x33]}}}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x1000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000840), 0x800) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000880)=0x2, 0x4) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000000) mount$bpf(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x0, 0x0) 09:33:59 executing program 3: openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) [ 748.688273][T13294] loop1: detected capacity change from 0 to 264192 [ 748.695229][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 09:33:59 executing program 3: unshare(0x400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000080)) [ 748.703373][T13295] EXT4-fs: Ignoring removed nobh option [ 748.704478][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 748.708202][T13295] ext2: Unknown parameter 'fsuuid' [ 748.721026][ T7120] loop1: unable to read partition table 09:33:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @timestamp, @window], 0x4) [ 748.726871][T13294] EXT4-fs (loop1): fragment/cluster size (16384) != block size (1024) 09:33:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000001a000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) 09:33:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x3af4701e) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x0, 0xffffffff}) 09:33:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) 09:33:59 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x318, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x6, 0x0, 0x0, 0x0, 0x5], 0x4, 0xa}}}, @common=@icmp={{0x28}, {0xf, "6893"}}]}, @REJECT={0x28}}, {{@ip={@multicast2, @local, 0x0, 0xffffffff, 'veth0_macvtap\x00', 'veth1_to_bridge\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x4e24, 0x4e22, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21], [0x0, 0x0, 0x1]}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 09:33:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x210002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000001c0)={0x30, 0x37, 0x0, {0x0, 0x1, 0x3, 0x0, 0x12, '/dev/snd/midiC#D#\x00'}}, 0x30) syz_genetlink_get_family_id$batadv(&(0x7f00000061c0), 0xffffffffffffffff) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000500)={0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0xdc2, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 748.830275][T13313] x_tables: duplicate underflow at hook 2 [ 748.836639][T13308] loop1: detected capacity change from 0 to 264192 09:33:59 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000006, 0x4031, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4031, 0xffffffffffffffff, 0x8000000) [ 748.863493][T13308] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:33:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 748.907510][ T39] audit: type=1400 audit(1662111239.949:415): avc: denied { execmem } for pid=13315 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 09:33:59 executing program 2: futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 09:34:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, &(0x7f0000000000)=ANY=[]) [ 749.013500][T13324] loop1: detected capacity change from 0 to 264192 [ 749.055807][T13324] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 09:34:00 executing program 0: syz_io_uring_setup(0x32f5, &(0x7f0000000000)={0x0, 0x9ff4, 0x8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) 09:34:00 executing program 2: write$snddsp(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) mmap$snddsp_status(&(0x7f0000001000/0x2000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000100)=0x8001) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000140)={0x1ff, [0x4], [{0x67ec, 0x0, 0x0, 0x1}, {0x7, 0xe5, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x8, 0x1}, {0x8, 0x5, 0x0, 0x0, 0x1}, {0xff, 0x100}, {0x7, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x3f, 0x4, 0x0, 0x1, 0x1}, {0x3, 0x6, 0x0, 0x0, 0x1}, {0x8, 0x6, 0x0, 0x1}, {0x0, 0x11a6, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f00000002c0)={0x80000000, [0x9, 0x8], [{0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x1000, 0x2, 0x1}, {0xffff3d42, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {0xcc14, 0x6, 0x1, 0x1, 0x1, 0x1}, {0xfff, 0x3f}, {0x7ff, 0x9, 0x1, 0x1}, {0x6, 0x8, 0x0, 0x0, 0x1}, {0x0, 0xff, 0x0, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x1, 0x0, 0x1}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) 09:34:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, 0x0) [ 749.600542][T13331] loop1: detected capacity change from 0 to 264192 09:34:00 executing program 2: r0 = syz_io_uring_setup(0x32f5, &(0x7f0000000000)={0x0, 0x9ff4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) 09:34:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, 0x0) 09:34:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x210002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000001c0)={0x30, 0x37, 0x0, {0x0, 0x1, 0x3, 0x0, 0x12, '/dev/snd/midiC#D#\x00'}}, 0x30) syz_genetlink_get_family_id$batadv(&(0x7f00000061c0), 0xffffffffffffffff) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000500)={0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0xdc2, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:00 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) [ 749.704902][ T39] audit: type=1400 audit(1662111240.749:416): avc: denied { ioctl } for pid=13334 comm="syz-executor.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63337 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 09:34:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x210002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000001c0)={0x30, 0x37, 0x0, {0x0, 0x1, 0x3, 0x0, 0x12, '/dev/snd/midiC#D#\x00'}}, 0x30) syz_genetlink_get_family_id$batadv(&(0x7f00000061c0), 0xffffffffffffffff) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000500)={0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0xdc2, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 749.718860][T13340] loop1: detected capacity change from 0 to 264192 09:34:00 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x210002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000001c0)={0x30, 0x37, 0x0, {0x0, 0x1, 0x3, 0x0, 0x12, '/dev/snd/midiC#D#\x00'}}, 0x30) syz_genetlink_get_family_id$batadv(&(0x7f00000061c0), 0xffffffffffffffff) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000500)={0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0xdc2, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000002540)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf465", 0x13, 0x1510}, {0x0, 0x0, 0x6700000}], 0x0, 0x0) [ 749.833081][ T7120] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 749.858666][T13350] loop1: detected capacity change from 0 to 264192 [ 749.879976][ T7120] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 749.901609][ T7120] Buffer I/O error on dev loop1, logical block 0, async page read [ 749.922672][ T7120] loop1: unable to read partition table 09:34:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x210002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000001c0)={0x30, 0x37, 0x0, {0x0, 0x1, 0x3, 0x0, 0x12, '/dev/snd/midiC#D#\x00'}}, 0x30) syz_genetlink_get_family_id$batadv(&(0x7f00000061c0), 0xffffffffffffffff) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000500)={0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0xdc2, &(0x7f0000000240), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:01 executing program 3: r0 = syz_io_uring_setup(0x32f5, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 09:34:01 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040), 0x4) 09:34:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) 09:34:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000080)=[{{&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x2d, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20}}], 0x40000000000010d, 0x0) 09:34:01 executing program 3: r0 = syz_io_uring_setup(0x32f5, &(0x7f0000000000)={0x0, 0x9ff4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000b80)=@framed, &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:34:01 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) 09:34:01 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) [ 750.829403][T13367] befs: Unrecognized mount option "fsuuid=" or missing value [ 750.838869][T13367] befs: (loop2): cannot parse mount options 09:34:02 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) 09:34:02 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) 09:34:02 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) 09:34:02 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) [ 751.066320][T13373] befs: Unrecognized mount option "fsuuid=" or missing value 09:34:02 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) [ 751.077708][T13373] befs: (loop2): cannot parse mount options 09:34:02 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "6893"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'veth0_macvtap\x00', 'veth1_to_bridge\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 09:34:02 executing program 3: syz_io_uring_setup(0x32f5, &(0x7f0000000000)={0x0, 0x9ff4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x40240, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 09:34:02 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) 09:34:02 executing program 3: syz_io_uring_setup(0x32f5, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:34:02 executing program 0: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) 09:34:02 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) 09:34:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x1f46, 0xf1, &(0x7f00000000c0)=""/241, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:34:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, "35160162b529caad40bf67581d35d30d9a1748"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) 09:34:02 executing program 0: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) [ 751.182027][T13388] befs: Unrecognized mount option "fsuuid=" or missing value [ 751.199849][T13388] befs: (loop2): cannot parse mount options 09:34:02 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x4b, 0x0, 0xfffffff9, 0x0, 0x0, "b9ccbf383f8ff050616a29fb53d72872fc16dd"}) 09:34:02 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) 09:34:02 executing program 0: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) 09:34:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0xff, 0x1}) [ 751.252123][T13399] befs: Unrecognized mount option "fsuuid=" or missing value [ 751.261049][T13399] befs: (loop2): cannot parse mount options 09:34:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x0) 09:34:02 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000019180)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x8) [ 751.294552][T13405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 751.301424][T13405] IPv6: NLM_F_CREATE should be set when creating new route 09:34:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 09:34:02 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) 09:34:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000020000000060a01000000000000000000000000000900010073797a30"], 0x94}}, 0x0) 09:34:02 executing program 2: syz_mount_image$befs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) 09:34:02 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) 09:34:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3970387d71d97352f652bae1605c9d399a4c880e78b0f8b6"}]]}, 0x38}}, 0x0) 09:34:02 executing program 2: syz_mount_image$befs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) 09:34:02 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) 09:34:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {0x4}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0) 09:34:02 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x11}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:34:02 executing program 2: syz_mount_image$befs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) [ 751.485067][T13431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 751.490571][T13431] IPv6: NLM_F_CREATE should be set when creating new route 09:34:02 executing program 0: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) 09:34:02 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x11}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:34:02 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040), 0x0, 0x0) wait4(0x0, &(0x7f0000000280), 0x2, &(0x7f00000002c0)) wait4(r0, &(0x7f0000000000), 0x2, 0x0) 09:34:02 executing program 2: syz_mount_image$befs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) 09:34:02 executing program 0: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) [ 751.529820][T13440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:34:02 executing program 0: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x9, @pix_mp}) 09:34:02 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x11}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:34:02 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) [ 751.567445][T13446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:34:02 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x11}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:34:02 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) [ 751.620431][T13455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 09:34:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b37, 0x0) 09:34:02 executing program 2: syz_mount_image$befs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) 09:34:02 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 09:34:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, "35160162b529caad40bf67581d35d30d9a1748"}) 09:34:02 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x0, @pix_mp}) 09:34:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 09:34:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x560e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, "35160162b529caad40bf67581d35d30d9a1748"}) [ 751.764311][T13469] tipc: Enabling of bearer rejected, failed to enable media 09:34:02 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x0, @pix_mp}) 09:34:02 executing program 2: syz_mount_image$befs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) 09:34:02 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) 09:34:02 executing program 1: read$ptp(0xffffffffffffffff, 0x0, 0x0) [ 751.803639][ T39] audit: type=1400 audit(1662111242.839:417): avc: denied { read } for pid=13472 comm="syz-executor.1" name="autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 09:34:02 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x0, @pix_mp}) [ 751.822304][ T39] audit: type=1400 audit(1662111242.839:418): avc: denied { open } for pid=13472 comm="syz-executor.1" path="/dev/autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 09:34:02 executing program 1: getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) 09:34:02 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) 09:34:03 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 09:34:03 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) 09:34:03 executing program 3: mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:34:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 09:34:03 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) 09:34:03 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="9f", 0x0}, 0x48) 09:34:03 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) 09:34:03 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x3014}}) 09:34:03 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, '\x00', @p_u16=0x0}}) 09:34:03 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) 09:34:03 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x10001, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)) 09:34:03 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) 09:34:03 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={[], [{@fsuuid}]}) 09:34:03 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, '\x00', @p_u16=0x0}}) 09:34:03 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) 09:34:03 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, 0x0) 09:34:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x409400}], 0x3, &(0x7f0000000180)=ANY=[]) 09:34:03 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) [ 752.784225][T13516] loop3: detected capacity change from 0 to 16532 09:34:03 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, 0x0) 09:34:03 executing program 1: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) 09:34:03 executing program 0: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) [ 752.813445][T13516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. 09:34:03 executing program 1: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) 09:34:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x409400}], 0x3, &(0x7f0000000180)=ANY=[]) [ 752.832805][ T3718] EXT4-fs (loop3): unmounting filesystem. 09:34:03 executing program 1: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) 09:34:03 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:03 executing program 1: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) [ 752.880517][T13536] loop3: detected capacity change from 0 to 16532 09:34:03 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, 0x0) 09:34:03 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1}) [ 752.907880][T13536] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. 09:34:03 executing program 1: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) 09:34:03 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:03 executing program 3: ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x7fffffff, 0x80000) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x100000000) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) [ 752.936508][ T3718] EXT4-fs (loop3): unmounting filesystem. 09:34:04 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)) 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:04 executing program 1: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) [ 752.965983][ T1352] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.971165][ T1352] ieee802154 phy1 wpan1: encryption failed: -22 09:34:04 executing program 0: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000100)={0x1}) [ 752.978246][ T39] audit: type=1400 audit(1662111244.019:419): avc: denied { read } for pid=13551 comm="syz-executor.3" name="usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 09:34:04 executing program 1: syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) 09:34:04 executing program 0: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000100)={0x1}) [ 752.997880][ T39] audit: type=1400 audit(1662111244.019:420): avc: denied { open } for pid=13551 comm="syz-executor.3" path="/dev/usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 753.004868][T13558] befs: (loop2): No write support. Marking filesystem read-only [ 753.013524][T13558] befs: (loop2): invalid magic header 09:34:04 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000140)="9f", &(0x7f0000000180)='I'}, 0x48) 09:34:04 executing program 1: syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) 09:34:04 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)) 09:34:04 executing program 1: syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1015, 0x7, 0x1}}) 09:34:04 executing program 0: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:04 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x80247008) 09:34:04 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:04 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) [ 753.134208][T13574] befs: (loop2): No write support. Marking filesystem read-only [ 753.149012][T13574] befs: (loop2): invalid magic header 09:34:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000041c0)={0x0, 0x0, 0x0, &(0x7f0000004000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 09:34:04 executing program 2: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)) 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:04 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) [ 753.194592][T13585] befs: (loop2): No write support. Marking filesystem read-only [ 753.203831][T13585] befs: (loop2): invalid magic header 09:34:04 executing program 3: syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x200040) 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:04 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0xc00, 0x0) mount$bpf(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x0, 0x0) 09:34:04 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x7, 0x1}}) 09:34:04 executing program 2: openat$ptp0(0xffffffffffffff9c, &(0x7f0000003f00), 0x0, 0x0) 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:04 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x48) 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:04 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}) 09:34:04 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) 09:34:04 executing program 2: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) r0 = socket(0x2, 0x80805, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002e00)={0x0, 0x0, 0x5, 0x2, r2}, 0x10) 09:34:04 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}) 09:34:04 executing program 0: syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:04 executing program 0: syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:04 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}) 09:34:04 executing program 0: syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000100)={0x1}) 09:34:04 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000dc0), 0x27a080, 0x0) 09:34:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000051000000080003"], 0x24}}, 0x0) 09:34:04 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x7}}) 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) 09:34:04 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x100f}}) [ 753.450914][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 09:34:04 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)='I'}, 0x48) 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) 09:34:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 09:34:04 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x9}) [ 753.515563][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup3(r1, r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 09:34:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) [ 753.563500][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)) 09:34:04 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, 0x0, 0x181, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) 09:34:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) [ 753.564040][ T39] audit: type=1400 audit(1662111244.609:421): avc: denied { create } for pid=13649 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)) [ 753.592784][ T39] audit: type=1400 audit(1662111244.629:422): avc: denied { write } for pid=13649 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 09:34:04 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x100000000000000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1}) [ 753.610964][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:04 executing program 2: mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x10810, 0xffffffffffffffff, 0x3) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) read$ptp(0xffffffffffffffff, &(0x7f0000000280)=""/249, 0xf9) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x10302, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000003f00), 0x181, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000004300), 0xa040, 0x0) 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)) 09:34:04 executing program 3: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) [ 753.679709][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 753.695353][ T39] audit: type=1400 audit(1662111244.739:423): avc: denied { write } for pid=13669 comm="syz-executor.2" name="ptp0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 09:34:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32], 0x24}}, 0x0) 09:34:04 executing program 0: syz_clone(0x10001000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 09:34:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 753.747146][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:04 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f00000042c0), 0x4000, 0x0) 09:34:04 executing program 0: memfd_create(&(0x7f0000000a00)='{@,\x0f[\x00', 0x0) 09:34:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32], 0x24}}, 0x0) 09:34:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 09:34:04 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x2020, 0x0, 0x8, 0xa}}) 09:34:04 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 09:34:04 executing program 0: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) [ 753.853561][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:05 executing program 2: syz_open_dev$media(&(0x7f0000003f40), 0x0, 0x119140) 09:34:05 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 09:34:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32], 0x24}}, 0x0) [ 754.325777][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:05 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) 09:34:05 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0) 09:34:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:05 executing program 2: syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x200040) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) [ 754.438412][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:05 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00), 0x14) 09:34:05 executing program 2: openat$ptp0(0xffffffffffffff9c, &(0x7f0000003f00), 0x181, 0x0) 09:34:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 09:34:05 executing program 2: syz_clone3(&(0x7f0000000240)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) 09:34:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) [ 754.795503][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:06 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, 0x0, 0x0) 09:34:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000002c0), 0x4, 0x0) 09:34:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000100), 0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) statx(r1, &(0x7f00000016c0)='./file0\x00', 0x1000, 0x1, &(0x7f00000027c0)) write(r0, &(0x7f0000000080)='$', 0x300000) 09:34:06 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) [ 755.234243][ T39] audit: type=1400 audit(1662111246.279:424): avc: denied { setattr } for pid=13738 comm="syz-executor.2" name="tun" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 09:34:06 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:06 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000100), 0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) statx(r1, &(0x7f00000016c0)='./file0\x00', 0x1000, 0x1, &(0x7f00000027c0)) write(r0, &(0x7f0000000080)='$', 0x300000) 09:34:06 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:06 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 09:34:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:07 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 09:34:07 executing program 0: syz_open_dev$media(&(0x7f0000003f40), 0x0, 0x0) 09:34:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:07 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 09:34:07 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:07 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:07 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x12, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 09:34:07 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:07 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:07 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:07 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:07 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x12, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 09:34:07 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:07 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:07 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:07 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 09:34:07 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}]}}}}}}}, 0x0) 09:34:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:08 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 09:34:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:08 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}]}}}}}}}, 0x0) 09:34:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:08 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}]}}}}}}}, 0x0) 09:34:08 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x1c, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}]}]}}}}}}}, 0x0) 09:34:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:08 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x1c, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}]}]}}}}}}}, 0x0) [ 757.473166][T13325] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 757.713248][T13325] usb 5-1: Using ep0 maxpacket: 32 [ 757.833422][T13325] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 757.840441][T13325] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 757.849284][T13325] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 758.013401][T13325] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 758.019920][T13325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.029609][T13325] usb 5-1: Product: syz [ 758.032719][T13325] usb 5-1: Manufacturer: syz [ 758.036784][T13325] usb 5-1: SerialNumber: syz [ 758.288995][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.298802][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.386251][T13325] usb 5-1: 0:2 : does not exist [ 758.409585][T13325] usb 5-1: USB disconnect, device number 14 [ 758.456276][ T7120] udevd[7120]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 09:34:09 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 09:34:09 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x1c, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}]}]}}}}}}}, 0x0) 09:34:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:09 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x1c, 0x0, 0x2, 0x0, [{@private}, {@private}, {@empty}]}]}}}}}}}, 0x0) 09:34:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:09 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 09:34:09 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x1c, 0x0, 0x2, 0x0, [{@private}, {@private}, {@empty}]}]}}}}}}}, 0x0) 09:34:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x97}) 09:34:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(0xffffffffffffffff, r0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x97}) [ 758.936294][T13859] __nla_validate_parse: 10 callbacks suppressed [ 758.936339][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:10 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x1c, 0x0, 0x2, 0x0, [{@private}, {@private}, {@empty}]}]}}}}}}}, 0x0) 09:34:10 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x97}) 09:34:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(0xffffffffffffffff, r0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:10 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x97}) 09:34:10 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x1c, 0x0, 0x2, 0x0, [{@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:10 executing program 0: ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x97}) [ 759.071698][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:10 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x1c, 0x0, 0x2, 0x0, [{@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(0xffffffffffffffff, r0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:10 executing program 0: ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x97}) 09:34:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:10 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x1c, 0x0, 0x2, 0x0, [{@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:10 executing program 0: ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x97}) [ 759.196770][T13882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:10 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x1c, 0x0, 0x2, 0x0, [{@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:10 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x97}) 09:34:10 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x97}) 09:34:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:10 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x1c, 0x0, 0x2, 0x0, [{@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:10 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x97}) 09:34:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:10 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@cipso={0x86, 0x6}, @timestamp_addr={0x44, 0x1c, 0x0, 0x2, 0x0, [{@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:10 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(0xffffffffffffffff, r0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:10 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x97}) 09:34:10 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) [ 759.718593][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:11 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x97}) 09:34:11 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(0xffffffffffffffff, r0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:11 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) 09:34:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:11 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @source_quench={0x5, 0x0, 0x0, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private, {[@timestamp_addr={0x44, 0x24, 0x0, 0x2, 0x0, [{@private}, {@private}, {@local}, {@empty}]}]}}}}}}}, 0x0) [ 760.095858][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:11 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x97}) 09:34:11 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(0xffffffffffffffff, r0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:11 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x409400}], 0x0, &(0x7f0000000180)=ANY=[]) 09:34:11 executing program 0: syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x97}) [ 760.174132][T13931] loop2: detected capacity change from 0 to 16532 [ 760.185619][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:11 executing program 0: syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x97}) [ 760.233873][T13931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 760.249095][T13931] EXT4-fs (loop2): unmounting filesystem. 09:34:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:11 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:11 executing program 0: syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x97}) 09:34:11 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002", 0x1d, 0x1800}, {0x0, 0x0, 0x409400}], 0x0, &(0x7f0000000180)=ANY=[]) [ 760.617440][T13945] loop2: detected capacity change from 0 to 16532 09:34:11 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, 0x0) [ 760.632763][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 760.639859][T13945] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 09:34:11 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) [ 760.650374][T13945] EXT4-fs (loop2): unmounting filesystem. 09:34:11 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, 0x0) [ 760.682323][T13953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:11 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) [ 760.766437][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:12 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, 0x0) 09:34:12 executing program 2: pipe2$watch_queue(&(0x7f0000000dc0), 0x80) 09:34:12 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:12 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)) 09:34:12 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) 09:34:12 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)) 09:34:12 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000003900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)) [ 761.165033][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:12 executing program 2: add_key$user(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="9a", 0x1, 0xfffffffffffffffd) 09:34:12 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:12 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0) 09:34:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xe, 0x0, &(0x7f0000000300)) 09:34:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8e78da7d"}}) 09:34:12 executing program 0: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000140)) 09:34:12 executing program 2: request_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0) 09:34:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001240), 0xffffffffffffffff) 09:34:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:12 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:12 executing program 2: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4081) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x79, &(0x7f0000000200)=[{&(0x7f0000010000)="e62a2dceb43780cb000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a0000001000000000001000000000000005f42485266535f4d07000000000000000040d3010000000000405001000000000000000000000000000000000000000000000008000000000030020000000000060000000000000001000000000000000010000000400000004000000010000081000000050000000000000000000000000000000000000000000000e10100000000000001000000000100000000000000000000080000000000008005000000000010000000100000001000000000000000000000000000000000000000000000000000000000000000006c7ed2bf85974c6295dd17018ed3d3dccdbfac4fc9184e3f9b627be6b63688a000"/318, 0x13e, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a\x00'/32, 0x20, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e40000500100000000000080000000000002000000000000000000010000000000220000000000000000000100000001000010000002000100010000000000000000005001000000006c7ed2bf85974c6295dd17018ed3d3dc01000000000000000000d001000000006c7ed2bf85974c6295dd17018ed3d3dc000000010000000000220000000000000000000100000001000010000002000100010000000000000000005001000000006c7ed2bf85974c6295dd17018ed3d3dc01000000000000000000d001000000006c7ed2bf85974c6295dd17018ed3d3dc00"/256, 0x100, 0x10320}, {&(0x7f0000010400)="00000000000000000000000040d2010000000005000000000000000040500100000000050000000000000000c0d1010000000005000000000000000000d0010000000004000000000000000000d2010000000005000000000000000000d10100000000040000000000000000000008000000000000020000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0d2010000000006000000000000000040500100000000050000000000000000c0d0010000000006000000000000000080d2010000000006000000000000000000d3010000000006000000000000000080d0010000000006000000000000000000000800000000003002000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040d301000000000700000000000000004050010000000005000000000000000080d3010000000007000000000000000080d2010000000006000000000000000000d3010000000006000000000000000080d0010000000006000000000000000000000800000000003002000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040d001000000000400000000000000000050010000000004000000000000000080d0010000000004000000000000000000d00100000000040000000000000000c0d0010000000004000000000000000000d101000000000400000000000000000000080000000000000200000000000100", 0x275, 0x10b20}, {&(0x7f0000010700)="364b90b71294d944000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000001000000000000100000000000001bfadffc0896b4f889c9b098a6c213e590300000000000000030000000000000004000000000100000000000000d80100000000000000393f0000620000000001000000000000e40000100000000000e93e0000500000000001000000000000e40000500000000000993e0000500000000001000000000000e40000d00000000000493e00005000"/224, 0xe0, 0x100000}, {&(0x7f0000010800)="000000000000000000000000000000008000000000000200000000000000000001000000000001000000000000000000010000000100001000000100010001000000000000000000d000000000006c7ed2bf85974c6295dd17018ed3d3dc000080000000000002000000000000000000010000000000040000000000000000000100000001000010000001000100010000000000000000005000000000006c7ed2bf85974c6295dd17018ed3d3dc000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000006c7ed2bf85974c6295dd17018ed3d3dc0100000000000000000000080000000000004001000000000010000000100000001000000000000000000000000000000000000000000000000000000000000000006c7ed2bf85974c6295dd17018ed3d3dccdbfac4fc9184e3f9b627be6b63688a0109e9a50c137d9d7000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000401000000000000000000000000001bfadffc0896b4f889c9b098a6c213e59010000000000000002000000000000000c000000000000100000000000a90000000000000000833f0000180000000000100000000000b00100000000000000833f0000000000000040100000000000a900000000000000006b3f0000180000000040100000000000b002000000000000006b3f0000000000000080100000000000a90000000000000000533f00", 0x23d, 0x103ea0}, {&(0x7f0000010b00)="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"/320, 0x140, 0x107f60}, {&(0x7f0000010d00)="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", 0x13e, 0x10bf40}, {&(0x7f0000010f00)="000000000000000000000000000000000300000000000000000100000000000000001000000000000000400000000000bfadffc0896b4f889c9b098a6c213e590ffc39ec27b99d25000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000001100000000000000000000000001bfadffc0896b4f889c9b098a6c213e5901", 0x91, 0x10ffc0}, {&(0x7f0000011000)="a03786e066b07dff000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a0", 0x30, 0x114000}, {&(0x7f0000011100)="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", 0x1c0, 0x118000}, {&(0x7f0000011300)="00000000000000000000000000000000000000000000000000000000004000000000000000010000000000000400000000000000010000000000000002000000000000000200000000000000b00100000000000000010000000000000002000000000000000200000000000000b00300000000000000010000000000000002000000000000000200000000000000b00400000000000000010000000000000002000000000000000200000000000000b002000000000000000100000000000000010000000000000002000000000000000100000000000000010000000000000002000000000000000040010000000000000100000000000002000000000000000167bfc610f61d44000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000c01100000000000100000000000001bfadffc0896b4f889c9b098a6c213e590200000000000000040000000000000002000000000100000000000000cc00001000000000006b3f0000300000000100000000000000cc00005000000000003b3f00003000"/416, 0x1a0, 0x11bf00}, {&(0x7f0000011500)="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"/288, 0x120, 0x11ffa0}, {&(0x7f0000011700)="80000000000002000000000000000000010000000000040000000000000000000100000001000010000001000100010000000000000000005000000000006c7ed2bf85974c6295dd17018ed3d3dc000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000006c7ed2bf85974c6295dd17018ed3d3dc010000000000000000000008000000000000c0000000000000100000001000000010", 0xc0}, {&(0x7f0000011800)="d4197004af3418a5000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000005000000000000100000000000001bfadffc0896b4f889c9b098a6c213e590200000000000000010000000000000004000000000200000000000000840000000000000000e43d0000b701000004000000000000008400000000000000002d3c0000b70100000500000000000000840000000000000000763a0000b70100000700000000000000840000000000000000bf3800", 0xc4, 0x500000}, {&(0x7f0000011900)="0000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41000000000000", 0x40, 0x503920}, {&(0x7f0000011b00), 0x0, 0x503ac0}, {&(0x7f0000011c00)="0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000001100000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000007d5aba496ab34ae2be829bc48fe9049c0000000000", 0x87, 0x503b60}, {&(0x7f0000011d00), 0x0, 0x503c20}, {&(0x7f0000011e00)="00000000000000000000000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100"/90, 0x5a}, {&(0x7f0000011f00)="0000000000000000000000000000000000000200000000000000000000000000000000c0110000000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000200"/112, 0x70, 0x503d20}, {&(0x7f0000012000)="000000000000000000010000000000000000000000000000000300000000000000004000000000000000000000000000000100"/60, 0x3c, 0x503e40}, {&(0x7f0000012100)="0000000000000000000200"/23, 0x17}, {&(0x7f0000012200)="bf6e65102286a1f8000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000405000000000000100000000000001bfadffc0896b4f889c9b098a6c213e590300000000000000040000000000000003000000000100000000000000cc00001000000000006b3f0000300000000100000000000000cc00005000000000003b3f0000300000000100000000000000cc0000d00000000000", 0xa8, 0x504000}, {&(0x7f0000012600)="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", 0x239, 0x50bee0}, {&(0x7f0000012900)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x50f840}, {&(0x7f0000012a00)="00000100000000000000000000000000000000401100000000000000000000000000004000000000000000000000000000000000000000000000010000000000", 0x40, 0x50f8e0}, {&(0x7f0000012b00), 0x0, 0x50f9e0}, {&(0x7f0000012d00)="000000000000000000000300000000000000000100000000000000005100000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000003000000000000007d5aba496ab34ae2be829bc48fe9049c00"/128, 0x80, 0x50fb60}, {&(0x7f0000012e00)="000000000000000000000000000000000053bc645f000000000000000053bc645f00"/62, 0x3e}, {&(0x7f0000012f00), 0x0, 0x50fc80}, {0x0}, {0x0, 0x0, 0x50fee0}, {&(0x7f0000013300)="c220ad2a454567de000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000005100000000000100000000000001bfadffc0896b4f889c9b098a6c213e590300000000000000050000000000000002000000000001000000000000010000000000000000fb3e0000a00000000001000000000000", 0x86}, {&(0x7f0000013400)="0000000000000000000000000000000000000000000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed4100"/144, 0x90, 0x513f40}, {&(0x7f0000013500)="8da3964014254720000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000005001000000000100000000000001bfadffc0896b4f889c9b098a6c213e590400000000000000030000000000000006000000000100000000000000d80100000000000000393f0000620000000001000000000000e40000100000000000e93e0000500000000001000000000000e40000500000000000993e0000500000000001000000000000e40000d00000000000493e0000500000000001000000000000e40000500100000000d93d0000700000000001000000000000e40000d0010000000069", 0xf4}, {0x0, 0x0, 0x1507dc0}, {&(0x7f0000013d00)="8da3964014254720000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000005001000000000100000000000001bfadffc0896b4f889c9b098a6c213e590400000000000000030000000000000006000000000100000000000000d80100000000000000393f0000620000000001000000000000e40000100000000000e93e0000500000000001000000000000e40000500000000000993e0000500000000001000000000000e40000d000000000", 0xc0, 0x1d00000}, {&(0x7f0000013e00)="0000000000000000000000000000000000020000000002000000000000000000010000000000240000000000000000000100000001000010000002000100010000000000000000005002000000006c7ed2bf85974c6295dd17018ed3d3dc010000000000000000005004000000006c7ed2bf85974c6295dd17018ed3d3dc000080000000000002000000000000000000010000000000220000000000000000000100000001000010000002000100010000000000000000005001000000006c7ed2bf85974c6295dd17018ed3d3dc01000000000000000000d001000000006c7ed2bf85974c6295dd17018ed3d3dc00008000000000000200000000000000000001000000000001000000000000000000010000000100001000000100010001000000000000000000d000000000006c7ed2bf85974c6295dd17018ed3d3dc000080000000000002000000000000000000010000000000040000000000000000000100000001000010000001000100010000000000000000005000000000006c7ed2bf85974c6295dd17018ed3d3dc000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000006c7ed2bf85974c6295dd17018ed3d3dc0100000000000000000000080000000000004006000000000010000000100000001000000000000000000000000000000000000000000000000000000000000000006c7ed2bf85974c6295dd17018ed3d3dccdbfac4fc9184e3f9b627be6b63688a02b0787cae666e86a000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000405001000000000100000000000001bfadffc0896b4f889c9b098a6c213e590500000000000000030000000000000004000000000100000000000000d80100000000000000393f0000620000000001000000000000e40000d00000000000e93e0000500000000001000000000000e40000500100000000793e0000700000000001000000000000e40000d00100000000093e0000700000000001000000000000e40000d00100000000093e0000700000000001000000000000e40000d00100000000b93d00007000", 0x339, 0x1d03dc0}, {&(0x7f0000014200)="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", 0x240, 0x1d07dc0}, {0x0, 0x0, 0x2500000}, {&(0x7f0000014600)}, {&(0x7f0000014a00)="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", 0xc00, 0x2507480}, {&(0x7f0000015600)="0000000000000000dbbbd8326f9b86acdbbbd8326f9b86acdbbbd8326f9b86ac617fc4e2522b7fc1000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000c0d001000000000100000000000001bfadffc0896b4f889c9b098a6c213e59060000000000000002000000000000000c000000000000d00000000000a80030000000000000663f0000350000000000d00000000000c000008000000000004e3f0000180000000000500100000000c00000800000000000363f0000180000000040500100000000a90000000000000000153f0000210000000000d00100000000c00000000200000000fd3e0000180000000080d00100000000a90000000000000000dc3e00002100000000c0d00100000000a90000000000000000bb3e0000210000000040d10100000000a900000000000000009a3e0000210000000080d10100000000a90000000000000000793e0000210000000080d20100000000a90000000000000000583e00002100000000c0d20100000000a90000000000000000373e0000210000000000d30100000000a90000000000000000163e00002100"/447, 0x1bf, 0x250bfe0}, {0x0, 0x0, 0x250fe60}, {&(0x7f0000015a00)="dd81759fbd802e6d000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00040d101000000000100000000000001bfadffc0896b4f889c9b098a6c213e590400000000000000f7ffffffffffffff02000000000001000000000000010000000000000000fb3e0000a000000000010000000000000c0001000000000000ef3e00000c0000", 0x96, 0x2514000}, {&(0x7f0000015b00), 0x0, 0x2517f40}, {0x0, 0x0, 0x251bfe0}, {&(0x7f0000015f00)="010000000000000004000000000000000200000000000000010000000000000004000000000000000200000000000000010000000000000005000000000000000200000000000000b00100000000000000010000000000000005000000000000000200000000000000b00400000000000000010000000000000005000000000000000200000000000000b00200000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000004000000000000000200000000000000b0070000000000000000c001000000000000010000000000002400000000000000010000000000000004000000000000000200000000000000b00500000000000000010000000000000005000000000000000200000000000000b00300000000000000004000000000000000010000000000002200000000000000000000000000000000010000000000000100000000000000a318b9abc25fd7cf000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00000d201000000000100000000000001bfadffc0896b4f889c9b098a6c213e590500000000000000040000000000000005000000000100000000000000cc0000d000000000006b3f0000300000000100000000000000cc00005001000000003b3f0000300000000100000000000000cc0000d001000000000b3f0000300000000100000000000000cc0000500200000000db3e0000300000000100000000000000cc0000500400000000ab3e0000300000000100000000000000cc0000500400000000ab3e0000300000000100000000000000cc00005004000000007b3e00003000"/667, 0x29b}, {&(0x7f0000016200)="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", 0x221, 0x2523ea0}, {&(0x7f0000016500), 0x0, 0x2527560}, {0x0, 0x0, 0x2527720}, {&(0x7f0000016700), 0x0, 0x2527840}, {&(0x7f0000016800), 0x0, 0x25278e0}, {&(0x7f0000016b00)="00000000000000000000040000000000000000010000000000000000d001000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000004000000000000007d5aba496ab34ae2be829bc48fe9049c00"/128, 0x80}, {0x0, 0x0, 0x2527d20}, {0x0, 0x0, 0x2527ee0}, {&(0x7f0000017100)="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"/992, 0x3e0, 0x2528000}, {&(0x7f0000017500)="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", 0xce4, 0x252b3a0}, {&(0x7f0000018300)="0000000000000000000000000000000000000000040000000000000000010000000000000040d10100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/128, 0x80, 0x252f560}, {&(0x7f0000018400)}, {&(0x7f0000018500)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41000000", 0x3b, 0x252f840}, {&(0x7f0000018600)="0000060000000000000000000000000000000080d00100000000000000000000000000400000000000", 0x29, 0x252f8e0}, {&(0x7f0000018700), 0x0, 0x252f9e0}, {&(0x7f0000018900)="00000000000000000000060000000000000000010000000000000080d201000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000006000000000000007d5aba496ab34ae2be829bc48fe904", 0x70, 0x252fb60}, {&(0x7f0000018a00)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100"/84, 0x54, 0x252fc80}, {&(0x7f0000018b00)="000000000000000000000000000000000000060000000000000000000000000000000000d30100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/128, 0x80, 0x252fd20}, {&(0x7f0000018c00)="0000000000000000000100000000000000000000000000000003000000000000000040000000000000000000000000000001000000000000", 0x38, 0x252fe40}, {&(0x7f0000018d00)="0000000000000000000600000000000000000000000000000000c0d00100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600000000000000", 0x60, 0x252fee0}, {&(0x7f0000018e00)="93186b8213a426f8000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00000d301000000000100000000000001bfadffc0896b4f889c9b098a6c213e590600000000000000040000000000000006000000000000000000000000f90100000000000000733f0000280000000100000000000000cc0000d00000000000433f0000300000000100000000000000cc0000500100000000133f0000300000000100000000000000cc0000d00100000000e33e0000300000000100000000000000cc0000500200000000b33e0000300000000100000000000000cc0000500400000000833e0000300000000000000000", 0x100, 0x2530000}, {&(0x7f0000018f00)="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", 0x27f, 0x2533ee0}, {&(0x7f0000019200)="0000000000000000000000000000000000000000040000000000000000010000000000000040d10100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/124, 0x7c, 0x2537560}, {&(0x7f0000019300)="0000000000000000000000040000000000000000000000000000000080d1010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x2537720}, {&(0x7f0000019400)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100000000", 0x3c, 0x2537840}, {&(0x7f0000019500)="0000060000000000000000000000000000000080d00100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/96, 0x60, 0x25378e0}, {&(0x7f0000019600)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000080ffffffff00"/320, 0x140, 0x25379e0}, {&(0x7f0000019800)="00000000000000000000060000000000000000010000000000000080d201000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000006000000000000007d5aba496ab34ae2be829bc48fe9049c0000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000054bc645f00000000d58f461b53bc645f00"/223, 0xdf, 0x2537b60}, {&(0x7f0000019900)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41", 0x48, 0x2537c80}, {&(0x7f0000019a00)="000000000000000000000000000000000000060000000000000000000000000000000000d30100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/117, 0x75, 0x2537d20}, {&(0x7f0000019b00)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x2537e40}, {&(0x7f0000019c00)="000000000000000000070000000000000000000000000000000080d30100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000700000000000000", 0x60, 0x2537ee0}, {&(0x7f0000019d00)="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"/416, 0x1a0, 0x2538000}, {&(0x7f0000019f00)="000000000000000000000000000000000000000000000000000000010000000000000007000000000000000200000000000000b00200000000000000010000000000000007000000000000000200000000000000b00100000000000000010000000000000006000000000000000200000000000000b00400000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000006000000000000000200000000000000b0070000000000000000c001000000000000010000000000002400000000000000010000000000000005000000000000000200000000000000b00300000000000000004000000000000000010000000000002200000000000000003000000000000000010000000000000100000000000000010000000000000006000000000000000100000000000000b205000000000000000501000000000000000000000000000001000000", 0x1a0, 0x253be60}, {&(0x7f000001a100)="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"/318, 0x13e, 0x4000000}, {&(0x7f000001a300), 0x0, 0x4000220}, {&(0x7f000001a400)="00000000000000000000000001000000000000e40000500100000000000080000000000002000000000000000000010000000000220000000000000000000100000001000010000002000100010000000000000000005001000000006c7ed2bf85974c6295dd17018ed3d3dc01000000000000000000d001000000006c7ed2bf85974c6295dd17018ed3d3dc000000010000000000220000000000000000000100000001000010000002000100010000000000000000005001000000006c7ed2bf85974c6295dd17018ed3d3dc01000000000000000000d001000000006c7ed2bf85974c6295dd17018ed3d3dc00"/255, 0xff, 0x4000320}, {&(0x7f000001a500), 0x0, 0x4000b20}, {&(0x7f000001a800)="15f7deadf16827db000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00000d001000000000100000000000001bfadffc0896b4f889c9b098a6c213e590400000000000000050000000000000002000000000001000000000000010000000000000000fb3e0000a000000000010000000000000c00010000", 0x8b, 0x4500000}, {&(0x7f000001a900)}, {0x0, 0x0, 0x4507480}, {&(0x7f000001b900)="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"/447, 0x1bf, 0x450bfe0}, {&(0x7f000001bd00)="dd81759fbd802e6d000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00040d101000000000100000000000001bfadffc0896b4f889c9b098a6c213e590400000000000000f7ffffffffffffff02000000000001000000000000010000000000000000fb3e0000a000000000010000000000000c0001000000000000ef3e00000c00000000000000", 0x9b, 0x4514000}, {&(0x7f000001be00)="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", 0x13b, 0x4517f40}, {&(0x7f000001c000)="0000000000000000000000000000000000000000000000000500000000000000fd2e32b6e552c867000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000c0d101000000000100000000000001bfadffc0896b4f889c9b098a6c213e59050000000000000002000000000000000b000000000000d00000000000c00000800000000000833f0000180000000000500100000000c000008000000000006b3f0000180000000040500100000000a900000000000000004a3f0000210000000000d00100000000a90000000000000000293f0000210000000000d00100000000c00000000200000000113f0000180000000000d10100000000a90000000000000000f03e0000210000000040d10100000000a90000000000000000cf3e0000210000000080d10100000000a90000000000000000ae3e00002100000000c0d10100000000a900000000000000008d3e0000210000000000d20100000000a900000000000000006c3e0000210000000040d20100000000a900000000000000004b3e0000210000000080d10100000000a900000000000000004b3e0000210000000080d10100000000a90000000000000000333e0000210000000000500000000000c00000800000000000f33e000018", 0x1e0, 0x451bfe0}, {&(0x7f000001c200)="010000000000000004000000000000000200000000000000010000000000000004000000000000000200000000000000010000000000000005000000000000000200000000000000b00100000000000000010000000000000005000000000000000200000000000000b00400000000000000010000000000000005000000000000000200000000000000b00200000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000004000000000000000200000000000000b0070000000000000000c001000000000000010000000000002400000000000000010000000000000004000000000000000200000000000000b00500000000000000010000000000000005000000000000000200000000000000b00300000000000000004000000000000000010000000000002200000000000000000000000000000000010000000000000100000000000000a318b9abc25fd7cf000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00000d201000000000100000000000001bfadffc0896b4f889c9b098a6c213e590500000000000000040000000000000005000000000100000000000000cc0000d000000000006b3f0000300000000100000000000000cc00005001000000003b3f0000300000000100000000000000cc0000d001000000000b3f0000300000000100000000000000cc0000500200000000db3e0000300000000100000000000000cc0000500400000000ab3e0000300000000100000000000000cc0000500400000000ab3e0000300000000100000000000000cc00005004000000007b3e0000300000000000000000", 0x299}, {&(0x7f000001c500)="00000000000000000000000000000000030000000000000000010000000000000000d001000000000000000200000000bfadffc0896b4f889c9b098a6c213e59030000000000000000010000000000000000d001000000000000000200000000bfadffc0896b4f889c9b098a6c213e59030000000000000000010000000000000000d001000000000000000200000000bfadffc0896b4f889c9b098a6c213e59030000000000000000010000000000000000d001000000000000000200000000bfadffc0896b4f889c9b098a6c213e590300000000000000000100000000000000005001000000000000800000000000bfadffc0896b4f889c9b098a6c213e590300000000000000000100000000000000005001000000000000800000000000bfadffc0896b4f889c9b098a6c213e59030000000000000000010000000000000000d000000000000000800000000000bfadffc0896b4f889c9b", 0x15a}, {&(0x7f000001c800), 0x0, 0x4527560}, {&(0x7f000001c900)="0000000000000000000000040000000000000000000000000000000080d10100000000000000000000000000400000000000000000000000000000000000000000000001000000", 0x47, 0x4527720}, {&(0x7f000001ca00)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x4527840}, {&(0x7f000001cb00)="0000040000000000000000000000000000000000d1010000000000000000000000000040000000000000000000000000000000000000000000000100"/78, 0x4e, 0x45278e0}, {&(0x7f000001cc00), 0x0, 0x45279e0}, {&(0x7f000001cf00), 0x0, 0x4527c00}, {&(0x7f000001d000)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41", 0x48, 0x4527c80}, {&(0x7f000001d100)="000000000000000000000000000000000000050000000000000000000000000000000000d20100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000500"/126, 0x7e, 0x4527d20}, {&(0x7f000001d200)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed", 0x3e, 0x4527e40}, {0x0, 0x0, 0x4527ee0}, {&(0x7f000001d400), 0x0, 0x4528000}, {0x0}, {&(0x7f000001e700)="0000000000000000000000040000000000000000000000000000000080d1010000000000000000000000000040000000000000000000000000000000000000000000000100000000", 0x48}, {&(0x7f000001e900)="0000060000000000000000000000000000000080d00100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/93, 0x5d}, {&(0x7f000001ea00)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f0000000000000000010000000000000000000000000000000300000000000000004000000000000000000000000000000100000000000000", 0x11a, 0x452f9e0}, {&(0x7f000001ec00)="00000000000000000000060000000000000000010000000000000080d201000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000006000000000000007d5aba496ab34ae2be829bc48fe9049c0000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000054bc645f00000000d58f461b53bc645f00"/217, 0xd9, 0x452fb60}, {&(0x7f000001ed00)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100"/87, 0x57}, {&(0x7f000001ee00)="000000000000000000000000000000000000060000000000000000000000000000000000d3010000000000000000000000000040000000000000000000000000000000000000000000000100"/96, 0x60, 0x452fd20}, {&(0x7f000001f000), 0x0, 0x452fee0}, {&(0x7f000001f100)="93186b8213a426f8000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00000d301000000000100000000000001bfadffc0896b4f889c9b098a6c213e590600000000000000040000000000000006000000000000000000000000f90100000000000000733f0000280000000100000000000000cc0000d00000000000433f0000300000000100000000000000cc0000500100000000133f0000300000000100000000000000cc0000d00100000000e33e0000300000000100000000000000cc0000500200000000b33e0000300000000100000000000000cc0000500400000000833e", 0xf5, 0x4530000}, {&(0x7f000001f500), 0x0, 0x4537560}, {&(0x7f000001f600)="0000000000000000000000040000000000000000000000000000000080d1010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x4537720}, {&(0x7f000001f800)="0000060000000000000000000000000000000080d0010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000060000000000000000", 0x5a, 0x45378e0}, {&(0x7f000001fe00)}, {0x0}], 0x0, &(0x7f0000020400)) [ 761.892768][T14003] loop2: detected capacity change from 0 to 264192 [ 761.902643][T14003] BTRFS: device fsid cdbfac4f-c918-4e3f-9b62-7be6b63688a0 devid 1 transid 7 /dev/loop2 scanned by syz-executor.2 (14003) 09:34:12 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000015030108e305020516830102030109021b005cb2975d000904"], 0x0) [ 761.936684][T14003] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 761.946690][T14003] BTRFS info (device loop2): disk space caching is enabled 09:34:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 762.046785][ T1089] BTRFS error (device loop2): bad tree block start, mirror 1 want 22036480 have 0 [ 762.065728][T14003] BTRFS info (device loop2): read error corrected: ino 0 off 22036480 (dev /dev/loop2 sector 43040) [ 762.078782][T14003] BTRFS info (device loop2): read error corrected: ino 0 off 22040576 (dev /dev/loop2 sector 43048) [ 762.091415][T14003] BTRFS info (device loop2): read error corrected: ino 0 off 22044672 (dev /dev/loop2 sector 43056) [ 762.101344][T14003] BTRFS info (device loop2): read error corrected: ino 0 off 22048768 (dev /dev/loop2 sector 43064) [ 762.122126][ T1090] BTRFS warning (device loop2): checksum verify failed on logical 30490624 mirror 1 wanted 0xdd81759fbd802e6d found 0x6d44f3fb766360cc level 0 09:34:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) [ 762.157452][T14003] BTRFS info (device loop2): read error corrected: ino 0 off 30490624 (dev /dev/loop2 sector 75936) [ 762.173834][T14003] BTRFS info (device loop2): read error corrected: ino 0 off 30494720 (dev /dev/loop2 sector 75944) 09:34:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 762.187266][T14003] BTRFS info (device loop2): read error corrected: ino 0 off 30498816 (dev /dev/loop2 sector 75952) [ 762.200455][T14003] BTRFS info (device loop2): read error corrected: ino 0 off 30502912 (dev /dev/loop2 sector 75960) [ 762.213274][T13326] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 762.224997][T10825] BTRFS error (device loop2): bad tree block start, mirror 1 want 30507008 have 0 [ 762.239722][T14003] BTRFS info (device loop2): read error corrected: ino 0 off 30507008 (dev /dev/loop2 sector 75968) [ 762.249792][T14003] BTRFS info (device loop2): read error corrected: ino 0 off 30511104 (dev /dev/loop2 sector 75976) [ 762.281197][T14003] BTRFS info (device loop2): enabling ssd optimizations 09:34:13 executing program 2: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 09:34:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 762.493133][T13326] usb 5-1: Using ep0 maxpacket: 8 [ 762.619885][T13326] usb 5-1: config 178 has too many interfaces: 92, using maximum allowed: 32 [ 762.627296][T13326] usb 5-1: config 178 has an invalid descriptor of length 0, skipping remainder of the config [ 762.636135][T13326] usb 5-1: config 178 has 1 interface, different from the descriptor's value: 92 [ 762.803398][T13326] usb 5-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=83.16 [ 762.814501][T13326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.822501][T13326] usb 5-1: Product: syz [ 762.828904][T13326] usb 5-1: Manufacturer: syz [ 762.835334][T13326] usb 5-1: SerialNumber: syz [ 763.131154][T13326] usb 5-1: USB disconnect, device number 15 09:34:14 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="81811581000000000000000000000000000000000000000000000000000000004cba99bf717845a0a45395f57da3a43f000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d00000000000000600000000000000010000000000000000100000001000000010000000100000610000000400000000000000000000000000000000000000000000004509000000000000000000000001000000000000000000", 0xd3, 0x10000}, {0x0}, {0x0}], 0x0, &(0x7f0000000ac0)=ANY=[]) 09:34:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:14 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) socket(0x1d, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) socket(0x2b, 0x5, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) 09:34:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:14 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg2\x00'}) [ 763.681119][T14060] can: request_module (can-proto-0) failed. 09:34:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x40086602, 0x0) 09:34:14 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) 09:34:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) [ 763.731678][ T39] audit: type=1400 audit(1662111254.769:425): avc: denied { setattr } for pid=14070 comm="syz-executor.2" path="/dev/uinput" dev="devtmpfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 09:34:14 executing program 2: clock_gettime(0x0, &(0x7f0000000040)={0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)=@mmap={0x20000, 0x0, 0x4, 0x0, 0x6, {r0}, {0x0, 0x1, 0x9, 0xa3, 0x4, 0x4, "8e78da7d"}, 0x7fffffff, 0x1, {}, 0x6, 0x0, r1}) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x5, &(0x7f0000000940)=[{&(0x7f00000002c0)="c9", 0x1, 0x96f8}, {&(0x7f0000000300)="ee835780a95062e213fdd1641f17053d083caec9dbe9125853039ac1b61dacbe2c6c6767eedc11a92819ea81badf9c6e004354c301d641699de15d26da736a2e04e4846614d402acc55609e0536f7e77c54613f4a2", 0x55, 0x1}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000700)="c6", 0x1, 0x80000001}]) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 09:34:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) [ 763.783682][T14077] loop2: detected capacity change from 0 to 264192 09:34:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32], 0x24}}, 0x0) 09:34:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 09:34:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 09:34:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32], 0x24}}, 0x0) 09:34:14 executing program 0: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) 09:34:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 09:34:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32], 0x24}}, 0x0) 09:34:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0x5451, 0x0) 09:34:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 763.958135][T14096] __nla_validate_parse: 10 callbacks suppressed [ 763.958149][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:15 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) [ 763.976029][ T39] audit: type=1400 audit(1662111255.019:426): avc: denied { ioctl } for pid=14099 comm="syz-executor.2" path="socket:[67045]" dev="sockfs" ino=67045 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 09:34:15 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0x80086601, 0x0) 09:34:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000001c0)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = socket(0x0, 0x0, 0x0) getsockname$unix(r6, 0x0, &(0x7f0000000280)) syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000001440), 0x8000, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x6, 0x2, &(0x7f0000000540)=[{&(0x7f00000003c0)="68d86b9e1b3e420fc7b4f2c5a0ed221fe17bd7763317fa9f72fb7108c84ccaaf6b9e9fb90ffc3516c838fe7bd13f2eff657c1c738699e408852b20973e45b7ae8584ffd1f61a53e857113fa3a7c8610f0b80ddab05fac6c6aafd982f2a738cc7306edbc4ba64", 0x66, 0x1}, {&(0x7f0000000440)}], 0x0, 0x0) 09:34:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0x40086602, &(0x7f0000000180)={0x10, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 09:34:15 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:15 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:15 executing program 2: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) syz_read_part_table(0x1f, 0x3, &(0x7f0000000940)=[{0x0, 0x0, 0x96f8}, {0x0}, {0x0}]) 09:34:15 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, 0x0, 0x0) [ 764.191479][T14120] loop2: detected capacity change from 0 to 150 09:34:15 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, 0x0, 0x0) 09:34:15 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, 0x0, 0x0) 09:34:15 executing program 2: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) syz_read_part_table(0x1f, 0x3, &(0x7f0000000940)=[{0x0, 0x0, 0x96f8}, {0x0}, {0x0}]) 09:34:15 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000000240)="ad", 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) [ 764.926633][T14132] loop2: detected capacity change from 0 to 150 09:34:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 09:34:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 09:34:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x2}) 09:34:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@mmap={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1097577"}}) 09:34:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 09:34:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000a40)={0x1, 0x0, 0x1, 0x0, 0xae}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@mmap={0x20000, 0x1, 0x4, 0x10000, 0x6, {r1, r2/1000+60000}, {0x2, 0x1, 0x9, 0xa3, 0x4, 0x4, "8e78da7d"}, 0x7fffffff, 0x1, {}, 0x6, 0x0, r3}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_read_part_table(0x1f, 0x7, &(0x7f0000000940)=[{&(0x7f00000002c0)="c9fa2f77f0", 0x5, 0x96f8}, {&(0x7f0000000300), 0x0, 0x1}, {&(0x7f0000000480), 0x0, 0x9}, {&(0x7f0000000500)="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", 0xff, 0x7}, {&(0x7f0000000600)="6d8f31ae2a5255ac995ec39b1dd945adf7c44b14157bb15ad6bee31152546c85f4eaf8647f9489164021def8bc23b0e248514125f8b631bc00456cf81d508b7fc3969c1542c3f40adb460659995d33d937ebb969d2d82105b0b8e9c5b4d398fa5e0d797cac45091e950856e989f06381ec4f80f2872c85f3e09737340d5950364df385c3b5fdaef97b963d52a057837c21a27908c690c6e7022619d6518650b6a1e58fa664f84a0ab21c53bfe79e75273bd602bd239506f1c8c57cec4fee3e2278cdda2e1d8801ec494372f33b12ee72c1378491e48c0096131d4ca7523c0d241ad833f549f7322f9ba3", 0xea, 0x4b58}, {&(0x7f0000000700)="c6d2555f3d815b05fb01cca92f1112cb56982ceb9c18f3111ae977ac986ca6ac5bec717f55071c9f979441541cad7c56098612b603a107c8db1c895ebe59c5260045224a21172a1b270d9c79f0d7125b129dd6d499a9f5fadfa42f30b6e152fcef19ff0a758d9e36aa7399fe708cc9ed29c95c82ac363b85737179126f1d8f8ffe401608ebb55d6ec5e588f3948bd87490fc7a7ff18cd32ae072076aa458d03b4a66474dad5f28026cda59cc515cddd8c8b04987a9b6adab8fd17af2f5fe8e", 0xbf, 0x80000001}, {&(0x7f0000000800)="4465b30fd21e78a6c3a87258590372657bf60c21475c72a58d6ca3e3e375e0fb772b759e68aa75be1efea805a3d3b0347928083303a1dc5ce03f864bd15627d539996f23ad", 0x45, 0x3a72}]) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) [ 765.122502][T14152] loop2: detected capacity change from 0 to 264192 09:34:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) 09:34:16 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) 09:34:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:16 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000000240)="ad", 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) 09:34:16 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000000240)="ad", 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) 09:34:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) 09:34:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) 09:34:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300"], 0x24}}, 0x0) [ 765.976639][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:17 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300"], 0x24}}, 0x0) [ 766.050914][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:17 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300"], 0x24}}, 0x0) [ 766.111982][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:34:17 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32], 0x24}}, 0x0) 09:34:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) [ 766.714690][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:17 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32], 0x24}}, 0x0) 09:34:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:34:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) [ 766.788958][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:34:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:17 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32], 0x24}}, 0x0) 09:34:17 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:34:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:18 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:34:18 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) [ 766.999778][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:18 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r5], 0x24}}, 0x0) 09:34:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:18 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:34:18 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r5], 0x24}}, 0x0) 09:34:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r0) 09:34:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:34:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r0) 09:34:18 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r5], 0x24}}, 0x0) 09:34:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:34:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) dup2(r1, r0) 09:34:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:34:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:18 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r5], 0x24}}, 0x0) 09:34:18 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:34:18 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r5], 0x24}}, 0x0) 09:34:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) dup2(r1, r0) 09:34:18 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:34:18 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r5], 0x24}}, 0x0) 09:34:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) dup2(r1, r0) 09:34:19 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:34:19 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r5], 0x24}}, 0x0) 09:34:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) dup2(r1, r0) 09:34:19 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r5], 0x24}}, 0x0) 09:34:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 09:34:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 09:34:19 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r5], 0x24}}, 0x0) 09:34:19 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 09:34:19 executing program 0: r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x1e, 0x262) 09:34:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:19 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000051000000", @ANYRES32=r5], 0x24}}, 0x0) [ 768.671781][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:19 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000051000000", @ANYRES32=r5], 0x24}}, 0x0) [ 768.713314][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:19 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000051000000", @ANYRES32=r5], 0x24}}, 0x0) [ 768.749012][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:19 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000510000000800", @ANYRES32=r5], 0x24}}, 0x0) [ 769.014730][T14277] syz-executor.0 (14277): drop_caches: 1 [ 769.065705][T14277] syz-executor.0 (14277): drop_caches: 1 09:34:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') poll(&(0x7f0000000000)=[{r0}], 0x1, 0xff) 09:34:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) dup2(0xffffffffffffffff, r0) 09:34:20 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000510000000800", @ANYRES32=r5], 0x24}}, 0x0) [ 769.254047][T14296] __nla_validate_parse: 1 callbacks suppressed [ 769.254061][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:20 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000510000000800", @ANYRES32=r5], 0x24}}, 0x0) 09:34:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) dup2(0xffffffffffffffff, r0) [ 769.319715][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:20 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000051000000080003", @ANYRES32=r5], 0x24}}, 0x0) 09:34:20 executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f0000001240), 0xffffffffffffffff) 09:34:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) dup2(0xffffffffffffffff, r0) [ 769.401315][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0x40045566, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 09:34:20 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000051000000080003", @ANYRES32=r5], 0x24}}, 0x0) 09:34:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) dup2(r0, 0xffffffffffffffff) 09:34:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x605) 09:34:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) dup2(r0, 0xffffffffffffffff) [ 769.770230][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:20 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 09:34:20 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000051000000080003", @ANYRES32=r5], 0x24}}, 0x0) [ 769.839400][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) dup2(r0, 0xffffffffffffffff) 09:34:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0x40086602, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 09:34:20 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:21 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_read_part_table(0x1f, 0x9, &(0x7f0000000940)=[{&(0x7f00000002c0)="c9fa2f77f0", 0x5, 0x96f8}, {&(0x7f0000000300)}, {&(0x7f0000000380)="7dbc5eafb42f50e0e728b494acabdf68bedd787c7571adb227d173820db4156938187452038f35491e243ec3bc13e23d29944664795d2cb2af4d0128502d80437b4e5b249dd0d97f89797d3914d6b6b230619080a45d0abdf7ffe601d83719bf555fabad56d008b142692f2358a97a8bb809279e774d6f43d4403fc29ead755ac4941e7591aeaddcd272c7ae144e34f49617647f9d42037bf011b7f6f843c4bc70d720f8931988005da5e5f6294e848aa4dca72497b814bbc7c6135258dace4665d63f", 0xc3}, {&(0x7f0000000480)="0b738ada4fcbc12add75fd309a1cd2bca9590379bafba724e93042f40b605b2de323b788c81cd9ca6fccc180b09834e0f64b226be9ec97a885d1351ae6a51799648901c254a4", 0x46, 0x9}, {&(0x7f0000000500)="9a4797dc1015662539a1108356f13a7cfc7d51bfbf9ee0171110161251fa0dea55ad07843bf42571a83b588208d0f48b11f49bf6d218b63456644a779469985332c8eab0cc82d54f30b963cf022082a0a68f94d53e4b2a3b5318ffa4a437dca43a3cef3b31becf3d7739d0615510bdb7aa93dc1722773cd393546c2e551d", 0x7e, 0x7}, {&(0x7f0000000600), 0x0, 0x4b58}, {&(0x7f0000000700)="c6d2555f3d815b05fb01cca92f1112cb56982ceb9c18f3111ae977ac986ca6ac5bec717f55071c9f979441541cad7c56098612b603a107c8db1c895ebe59c5260045224a21172a1b270d9c79f0d7125b129dd6d499a9f5fadfa42f30b6e152fcef19ff0a758d9e36aa7399fe708cc9ed29c95c82ac363b85737179126f1d8f8ffe401608", 0x84, 0x80000001}, {&(0x7f0000000800)="4465b30fd21e78a6c3a87258590372657bf60c21475c72a58d6ca3e3e375e0fb772b75", 0x23}, {0x0}]) 09:34:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:21 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:21 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) 09:34:21 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:21 executing program 0: pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x4}, 0x0, 0x0) 09:34:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:21 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:21 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:21 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:21 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4], 0x24}}, 0x0) 09:34:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) 09:34:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:22 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:22 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:22 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:22 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:22 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5}}, @restrict, @union]}}, &(0x7f0000000080)=""/167, 0x4a, 0xa7, 0x1}, 0x20) 09:34:22 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:22 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:22 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 09:34:22 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) [ 771.527924][ T39] audit: type=1400 audit(1662111262.569:427): avc: denied { read } for pid=14390 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 09:34:22 executing program 0: r0 = socket(0xa, 0x5, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @remote, 'vlan0\x00'}}, 0x1e) 09:34:22 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:22 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 09:34:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:22 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:22 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x4}, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x0) 09:34:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x7f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xb}}, [@filter_kind_options=@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @remote}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 09:34:22 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) [ 771.869585][T14423] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:34:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:22 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:23 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) 09:34:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:23 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000740)=[{}, {}, {}], 0x1, 0x0, &(0x7f00000008c0)=[{}], 0x0, 0x0, 0x0}) 09:34:23 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r0, r1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r5], 0x24}}, 0x0) 09:34:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:23 executing program 0: connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='cdg\x00', 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[], 0x100000530) 09:34:23 executing program 1: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 09:34:23 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x2230000, 0x1000}, 0x20) 09:34:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) [ 772.415229][ T39] audit: type=1400 audit(1662111263.459:428): avc: denied { setopt } for pid=14453 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 09:34:23 executing program 1: socket(0x2, 0x6, 0x9) 09:34:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:24 executing program 0: connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='cdg\x00', 0x3) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[], 0x100000530) 09:34:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:24 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x20) 09:34:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:24 executing program 1: r0 = socket(0x29, 0x5, 0x0) accept$netrom(r0, 0x0, 0x0) 09:34:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) [ 773.090231][ T39] audit: type=1400 audit(1662111264.129:429): avc: denied { accept } for pid=14476 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 09:34:24 executing program 1: r0 = syz_open_dev$media(&(0x7f00000004c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, 0x0}) 09:34:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:24 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) accept$netrom(r0, 0x0, 0x0) 09:34:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:24 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, &(0x7f0000000080)) 09:34:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 773.885539][ T39] audit: type=1400 audit(1662111264.929:430): avc: denied { accept } for pid=14486 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 09:34:24 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xd3b9}, 0x20) [ 773.903371][ T39] audit: type=1400 audit(1662111264.939:431): avc: denied { getopt } for pid=14491 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 09:34:24 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 09:34:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:25 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000740)="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", 0x1f8, 0x9}]) 09:34:25 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000740)="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", 0x1f7, 0x9}]) 09:34:25 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000740)="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", 0x1f7, 0x9}]) [ 774.005829][T14503] loop1: detected capacity change from 0 to 1 09:34:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) [ 774.056127][ T7120] Dev loop1: unable to read RDB block 1 [ 774.060406][ T7120] loop1: unable to read partition table [ 774.065364][ T7120] loop1: partition table beyond EOD, truncated [ 774.071341][T14503] Dev loop1: unable to read RDB block 1 [ 774.076812][T14503] loop1: unable to read partition table [ 774.080341][T14503] loop1: partition table beyond EOD, truncated [ 774.097703][T14503] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 09:34:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:25 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0xfffffffffffffffe) 09:34:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:25 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, 0x0) syz_read_part_table(0x1000, 0x0, 0x0) [ 774.503465][T14516] loop1: detected capacity change from 0 to 8 09:34:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) 09:34:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) [ 774.564282][T14516] Dev loop1: unable to read RDB block 8 [ 774.568162][T14516] loop1: unable to read partition table [ 774.574622][T14516] loop1: partition table beyond EOD, truncated 09:34:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, r0) [ 774.581126][T14516] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 09:34:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup2(r1, r0) [ 774.763162][ T40] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 775.013125][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 775.143217][ T40] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 775.203746][ T40] usb 5-1: string descriptor 0 read error: -71 [ 775.208532][ T40] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 775.216492][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.243317][ T40] usb 5-1: can't set config #1, error -71 [ 775.249559][ T40] usb 5-1: USB disconnect, device number 16 09:34:26 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @bcast, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 09:34:26 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000032fe2a08cd0caf10ae9b000000010902"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xfd, 0x2, 0xa6, 0x0, 0xbb4, 0xa82, 0x5678, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x65, 0x73, 0xc4}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:34:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup2(r1, r0) 09:34:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x0, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:26 executing program 1: epoll_create(0x3ff) 09:34:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup2(r1, r0) 09:34:26 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x14, 0x0, &(0x7f0000001340)=[@acquire_done], 0x0, 0x0, 0x0}) [ 775.758634][ T39] audit: type=1400 audit(1662111266.799:432): avc: denied { set_context_mgr } for pid=14538 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 09:34:26 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0x14, 0x0, &(0x7f0000001340)=[@acquire_done], 0x0, 0x0, 0x0}) 09:34:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10) dup2(r1, r0) [ 775.963193][ T3726] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 776.213482][ T3726] usb 5-1: Using ep0 maxpacket: 8 [ 776.343516][ T3726] usb 5-1: config 0 has no interfaces? [ 776.349600][ T3726] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=9b.ae [ 776.357680][ T3726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.369376][ T3726] usb 5-1: config 0 descriptor?? [ 776.615646][T13325] usb 5-1: USB disconnect, device number 17 09:34:28 executing program 1: syz_read_part_table(0x1000, 0x0, 0x0) 09:34:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10) dup2(r1, r0) 09:34:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000000)=""/125, &(0x7f0000000080)=0x7d) 09:34:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x0, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 777.346435][T14556] loop1: detected capacity change from 0 to 8 09:34:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10) dup2(r1, r0) 09:34:28 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) [ 777.404338][T14556] Dev loop1: unable to read RDB block 8 09:34:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) dup2(r1, r0) 09:34:28 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000740)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{}, {}]}) [ 777.424865][T14556] loop1: unable to read partition table [ 777.429558][T14556] loop1: partition table beyond EOD, truncated [ 777.437881][T14556] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 09:34:28 executing program 1: syz_read_part_table(0x1000, 0x0, 0x0) 09:34:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) dup2(r1, r0) 09:34:28 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000740)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{}, {}]}) [ 777.587698][T14573] loop1: detected capacity change from 0 to 8 [ 777.623860][T14573] Dev loop1: unable to read RDB block 8 [ 777.627907][T14573] loop1: unable to read partition table [ 777.632672][T14573] loop1: partition table beyond EOD, truncated [ 777.638434][T14573] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 09:34:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x0, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:28 executing program 0: r0 = socket(0xa, 0x5, 0x0) accept$netrom(r0, 0x0, 0x0) 09:34:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) dup2(r1, r0) 09:34:28 executing program 1: ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000011c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r1, &(0x7f0000000080)=""/55, 0x37) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 09:34:28 executing program 0: r0 = io_uring_setup(0x3bff, &(0x7f00000001c0)) r1 = io_uring_setup(0x476c, &(0x7f0000000000)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x16, 0x21000000, r2) 09:34:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) dup2(0xffffffffffffffff, r0) 09:34:29 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8e010, r0, 0x0) 09:34:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) dup2(0xffffffffffffffff, r0) [ 777.977467][ T39] audit: type=1400 audit(1662111269.019:433): avc: denied { map } for pid=14588 comm="syz-executor.0" path="socket:[67536]" dev="sockfs" ino=67536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 778.008012][ T39] audit: type=1400 audit(1662111269.019:434): avc: denied { read } for pid=14588 comm="syz-executor.0" path="socket:[67536]" dev="sockfs" ino=67536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 09:34:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:29 executing program 1: socket(0x7876eeff70faeecb, 0x0, 0x0) 09:34:29 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 09:34:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) dup2(0xffffffffffffffff, r0) 09:34:29 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r0, r1, 0x0) 09:34:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, 0xffffffffffffffff) 09:34:29 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') pread64(r0, 0x0, 0x0, 0x0) 09:34:29 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 09:34:29 executing program 1: r0 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 09:34:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, 0xffffffffffffffff) 09:34:29 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x10001}}, 0x18) 09:34:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') write(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x5, 0x0, &(0x7f0000000200), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) [ 778.895821][ T39] audit: type=1400 audit(1662111269.939:435): avc: denied { read } for pid=14612 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 09:34:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) dup2(r1, 0xffffffffffffffff) 09:34:30 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 09:34:30 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$alg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000140)='8', 0x1}], 0x2}, 0x400c0) 09:34:30 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$alg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000140)='8', 0x1}], 0x2}, 0x400c0) 09:34:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') write(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x5, 0x0, &(0x7f0000000200), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 09:34:30 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') write(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x5, 0x0, &(0x7f0000000200), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 09:34:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, 0x0, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:30 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x30) [ 779.786450][ T39] audit: type=1400 audit(1662111270.829:436): avc: denied { getopt } for pid=14637 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 09:34:30 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 09:34:30 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 09:34:30 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 09:34:31 executing program 2: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 09:34:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4dae, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') write(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r2, 0x2fe, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ocfs2(0x0, 0x0, 0x5, 0x0, &(0x7f0000000200), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x0, @local}, 0x10) 09:34:31 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0), 0x4) 09:34:31 executing program 2: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 09:34:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:31 executing program 2: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x30) [ 780.741751][ T39] audit: type=1400 audit(1662111271.779:437): avc: denied { setopt } for pid=14660 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 09:34:31 executing program 1: socket(0x10, 0x3, 0xa9a) 09:34:31 executing program 2: socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 09:34:31 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 09:34:32 executing program 0: r0 = socket(0x29, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, 0x0) 09:34:32 executing program 2: socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 09:34:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x1000, 0x3, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0, 0x0, 0x1ff}]) 09:34:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:32 executing program 2: socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x30) [ 781.222365][T14675] loop1: detected capacity change from 0 to 8 09:34:32 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa000) [ 781.232415][ T39] audit: type=1400 audit(1662111272.269:438): avc: denied { getopt } for pid=14676 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 09:34:32 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000200)) 09:34:32 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x20004810, 0x0, 0x0) [ 781.275713][T14675] Dev loop1: unable to read RDB block 8 [ 781.280293][T14675] loop1: unable to read partition table [ 781.291382][T14675] loop1: partition table beyond EOD, truncated [ 781.297220][T14675] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 09:34:32 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000200)) [ 781.312404][ T39] audit: type=1400 audit(1662111272.349:439): avc: denied { write } for pid=14685 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 09:34:32 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 09:34:32 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000200)) 09:34:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:32 executing program 0: r0 = socket(0x29, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f0000000000)=@ax25={{0x3, @netrom}, [@bcast, @netrom, @rose, @default, @default, @netrom, @null, @default]}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/173, 0xad}, {&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/145, 0x91}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000340)=""/128, 0xffffffffffffff3d}], 0x5, &(0x7f0000000440)=""/131, 0x83}, 0x0) 09:34:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x1000, 0x3, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0, 0x0, 0x1ff}]) 09:34:32 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f00000001c0), 0x0) [ 781.641633][T14697] loop1: detected capacity change from 0 to 8 09:34:32 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f00000001c0), 0x0) 09:34:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb3e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x50}}, 0x0) 09:34:32 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f00000001c0), 0x0) [ 781.713697][T14697] Dev loop1: unable to read RDB block 8 [ 781.717675][T14697] loop1: unable to read partition table [ 781.721738][T14697] loop1: partition table beyond EOD, truncated [ 781.726892][T14697] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 09:34:32 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:33 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TCSETSW(r0, 0x541e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b9ccbf383f8ff050616a29fb53d72872fc16dd"}) 09:34:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 09:34:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:33 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, 0x0) 09:34:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/127}, 0x20) 09:34:33 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e62a2dceb43780cb000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a0000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000020400)) [ 782.197653][T14728] loop2: detected capacity change from 0 to 256 09:34:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 782.224130][T14728] BTRFS: device fsid cdbfac4f-c918-4e3f-9b62-7be6b63688a0 devid 0 transid 0 /dev/loop2 scanned by syz-executor.2 (14728) 09:34:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:33 executing program 2: syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@discard}]}) 09:34:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:33 executing program 1: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)={0xfb8, 0x3ed, 0x0, 0x0, 0x0, "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"}, 0xfb8}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18}, 0xfffe) [ 782.662912][T14737] XFS (loop2): Invalid superblock magic number 09:34:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:33 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000100)={0x0, 0x0, @value}) 09:34:33 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000100)={0x0, 0x0, @value}) 09:34:33 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:34 executing program 1: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000100)="74115727975ca48e8b345f589fde80d1c07dbd2fcba0b3ef8e4c75412cdc2974a2d82de2af93b955f3a14ffd5e8c49b00431", 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000240)="dc5662af0ea42f8bce8772ac9f14fa626ec343fa98456ee2dc95484fd90f410080", 0x0, 0x0, 0x0}, 0x38) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:34:34 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) getrusage(0x1, &(0x7f0000000140)) 09:34:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:34 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 09:34:34 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 783.368505][T14775] binder: 14774:14775 ioctl c0306201 20001480 returned -14 [ 783.382356][ T39] audit: type=1400 audit(1662111274.419:440): avc: denied { call } for pid=14774 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 09:34:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:34 executing program 1: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$khugepaged_scan(r0, 0x0, 0x0) [ 783.775490][T14786] binder: 14782:14786 ioctl c0306201 20001480 returned -14 09:34:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:34 executing program 1: bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, 0x0}, 0x8000) 09:34:34 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 783.839651][T14794] binder: 14792:14794 ioctl c0306201 20001480 returned -14 09:34:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:35 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 09:34:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 784.246913][T14801] binder: 14799:14801 ioctl c0306201 20001480 returned -14 09:34:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:35 executing program 1: getresgid(&(0x7f0000000540), 0x0, 0x0) 09:34:35 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, 0x0}, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) 09:34:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 784.322671][T14812] binder: BINDER_SET_CONTEXT_MGR already set [ 784.331693][T14812] binder: 14810:14812 ioctl 40046207 0 returned -16 [ 784.338783][T14812] binder: 14810:14812 ioctl c0306201 20001480 returned -14 09:34:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:35 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0844123, 0x0) 09:34:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:35 executing program 1: mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x83000000) 09:34:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 784.725559][T14822] binder: BINDER_SET_CONTEXT_MGR already set [ 784.729911][T14822] binder: 14819:14822 ioctl 40046207 0 returned -16 [ 784.737625][T14822] binder: 14819:14822 ioctl c0306201 20001480 returned -14 09:34:35 executing program 1: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540), 0x10) 09:34:35 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 784.811928][T14831] binder: BINDER_SET_CONTEXT_MGR already set [ 784.819937][T14831] binder: 14830:14831 ioctl 40046207 0 returned -16 [ 784.827352][T14831] binder: 14830:14831 ioctl c0306201 20001480 returned -14 09:34:36 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:36 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$bt_rfcomm(r0, 0x0, 0x0) 09:34:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:36 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x400, 0x14042) 09:34:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:36 executing program 1: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000100)="74115727975ca48e8b345f589fde80d1c07dbd2fcba0b3ef8e4c75412cdc2974a2d82de2af93b955f3a14ffd5e8c49b00431", 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000240)="dc5662af0ea42f8bce8772ac9f14fa626ec343fa98456ee2dc95484fd90f410080", 0x0, 0x0, 0x0}, 0x38) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x0, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:34:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:36 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:36 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, 0x0) 09:34:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) 09:34:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 785.712533][T14868] binder: 14865:14868 ioctl c0306201 20001480 returned -14 09:34:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:36 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x0, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 785.761799][T14873] binder: 14872:14873 ioctl c0306201 20001480 returned -14 [ 785.963215][T13325] usb 6-1: new high-speed USB device number 20 using dummy_hcd 09:34:37 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x0, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 786.129873][T14878] binder: 14876:14878 ioctl c0306201 20001480 returned -14 09:34:37 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x0, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 786.333228][T13325] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.341014][T13325] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.350280][T13325] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 786.357586][T13325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.464993][ C2] vkms_vblank_simulate: vblank timer overrun [ 787.163417][T13325] usbhid 6-1:1.0: can't add hid device: -71 [ 787.169122][T13325] usbhid: probe of 6-1:1.0 failed with error -71 [ 787.176937][T13325] usb 6-1: USB disconnect, device number 20 09:34:38 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) 09:34:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:38 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 787.642708][T14889] binder: 14886:14889 ioctl c0306201 20001480 returned -14 [ 787.657970][T14890] WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (0x160 vs. 32x8) 09:34:38 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x140e, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 09:34:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 787.709649][T14897] binder: 14894:14897 ioctl c0306201 20001480 returned -14 09:34:38 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x140e, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) [ 787.716073][T14899] WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (0x160 vs. 32x8) 09:34:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:38 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0x5450, 0x0) [ 787.774315][T14904] binder: 14903:14904 ioctl c0306201 20001480 returned -14 [ 787.779590][T14908] WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (0x160 vs. 32x8) 09:34:39 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:39 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x13, r0, 0x83000000) 09:34:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 788.063892][T14912] binder: BINDER_SET_CONTEXT_MGR already set 09:34:39 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) [ 788.071841][T14913] WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (320x0 vs. 32x8) [ 788.083241][T14912] binder: 14909:14912 ioctl 40046207 0 returned -16 [ 788.083699][T14912] binder: 14909:14912 ioctl c0306201 20001480 returned -14 09:34:39 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname$packet(r0, 0x0, 0x0) 09:34:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 788.132724][T14922] WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (320x0 vs. 32x8) [ 788.142295][T14924] binder: BINDER_SET_CONTEXT_MGR already set [ 788.147657][T14924] binder: 14923:14924 ioctl 40046207 0 returned -16 [ 788.154337][T14924] binder: 14923:14924 ioctl c0306201 20001480 returned -14 09:34:39 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:39 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x10}, 0x10}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10}, 0x10}}, 0x0) 09:34:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 788.479524][T14932] binder: BINDER_SET_CONTEXT_MGR already set 09:34:39 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) [ 788.489574][T14933] WARNING: fbcon: Driver 'vkmsdrmfb' missed to adjust virtual screen size (320x0 vs. 32x8) [ 788.499786][T14932] binder: 14928:14932 ioctl 40046207 0 returned -16 [ 788.500188][T14932] binder: 14928:14932 ioctl c0306201 20001480 returned -14 09:34:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:39 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) [ 788.560442][T14939] binder: BINDER_SET_CONTEXT_MGR already set [ 788.566578][T14939] binder: 14937:14939 ioctl 40046207 0 returned -16 [ 788.566943][T14939] binder: 14937:14939 ioctl c0306201 20001480 returned -14 09:34:39 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:39 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) 09:34:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = dup2(r2, r1) accept(r3, &(0x7f0000000080)=@un=@abs, &(0x7f0000000140)=0x80) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x0}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) 09:34:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 788.933062][T14950] binder: BINDER_SET_CONTEXT_MGR already set [ 788.933112][T14950] binder: 14947:14950 ioctl 40046207 0 returned -16 [ 788.933343][T14950] binder: 14947:14950 ioctl c0306201 20001480 returned -14 [ 788.961568][T14956] binder: BINDER_SET_CONTEXT_MGR already set [ 788.961581][T14956] binder: 14955:14956 ioctl 40046207 0 returned -16 [ 788.961763][T14956] binder: 14955:14956 ioctl c0306201 20001480 returned -14 [ 789.004910][T14959] binder: 14958:14959 ioctl c0306201 20001480 returned -14 09:34:40 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = dup2(r2, r1) accept(r3, &(0x7f0000000080)=@un=@abs, &(0x7f0000000140)=0x80) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x0}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) [ 789.354417][T14964] binder: 14962:14964 ioctl c0306201 20001480 returned -14 09:34:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 789.405858][T14971] binder: 14970:14971 ioctl c0306201 20001480 returned -14 09:34:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = dup2(r2, r1) accept(r3, &(0x7f0000000080)=@un=@abs, &(0x7f0000000140)=0x80) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x0}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) 09:34:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:40 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:40 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = dup2(r2, r1) accept(r3, &(0x7f0000000080)=@un=@abs, &(0x7f0000000140)=0x80) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x0}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) 09:34:40 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 789.946659][T14994] binder: 14992:14994 ioctl c0306201 20001480 returned -14 09:34:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = dup2(r2, r1) accept(r3, &(0x7f0000000080)=@un=@abs, &(0x7f0000000140)=0x80) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x0}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) 09:34:41 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 790.017492][T15000] binder: 14997:15000 ioctl c0306201 20001480 returned -14 09:34:41 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = dup2(r2, r1) accept(r3, &(0x7f0000000080)=@un=@abs, &(0x7f0000000140)=0x80) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x0}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) 09:34:41 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0) [ 790.415134][T15005] binder: 15003:15005 ioctl c0306201 20001480 returned -14 09:34:41 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:41 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:41 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 790.454575][T15012] binder: 15011:15012 ioctl c0306201 20001480 returned -14 [ 790.478602][T15014] binder: 15013:15014 ioctl c0306201 20001480 returned -14 [ 790.518506][T15019] binder: 15018:15019 ioctl c0306201 20001480 returned -14 09:34:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 790.574242][T15021] binder: 15020:15021 ioctl c0306201 20001480 returned -14 09:34:41 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:41 executing program 1: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 09:34:41 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0) 09:34:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 790.805898][T15025] binder: 15022:15025 ioctl c0306201 20001480 returned -14 09:34:41 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x0, 0x10, r0, 0x83000000) 09:34:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:41 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24841) 09:34:41 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$khugepaged_scan(r0, 0x0, 0xfffffffffffffea6) [ 790.864577][T15034] binder: 15032:15034 ioctl c0306201 20001480 returned -14 09:34:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:42 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x1000], [0x1000], [0x4]], '\x00', [], '\x00', 0x400}) 09:34:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0) 09:34:42 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 09:34:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:42 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x380a, r1}, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mknodat(r1, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) [ 791.181988][T15044] binder: 15040:15044 ioctl c0306201 20001480 returned -14 [ 791.216375][T15050] binder: 15049:15050 ioctl c0306201 20001480 returned -14 [ 791.250564][T15054] binder: 15052:15054 ioctl c0306201 20001480 returned -14 09:34:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:42 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x380a, r1}, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mknodat(r1, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 09:34:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:42 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000440), 0x1000, 0x200) 09:34:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x204, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000021}, 0x48) 09:34:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:43 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:43 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:34:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:43 executing program 1: ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000140)) syz_open_dev$sndpcmc(&(0x7f0000000180), 0x7fffffffffffffff, 0x88000) [ 792.135199][T15087] binder: 15085:15087 ioctl c0306201 20001480 returned -14 09:34:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 792.175424][T15090] binder: 15089:15090 ioctl c0306201 20001480 returned -14 09:34:43 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:43 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:34:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), 0x0}) [ 792.596281][T15099] binder: 15096:15099 ioctl c0306201 20001480 returned -14 09:34:43 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5453, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) 09:34:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:43 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 09:34:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 792.659240][T15109] binder: 15106:15109 ioctl c0306201 0 returned -14 [ 792.662037][T15109] binder: 15106:15109 ioctl c0306201 20001480 returned -14 [ 792.690850][T15113] binder: 15112:15113 ioctl c0306201 0 returned -14 [ 792.692483][T15113] binder: 15112:15113 ioctl c0306201 20001480 returned -14 09:34:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:44 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) 09:34:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:44 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), 0x0}) 09:34:44 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 09:34:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:44 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000001c0)={0x0, [[0xffff], [0x40]], '\x00', [], '\x00', 0x1f}) 09:34:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 793.069651][T15119] binder: 15115:15119 ioctl c0306201 0 returned -14 [ 793.071103][T15119] binder: 15115:15119 ioctl c0306201 20001480 returned -14 [ 793.102229][T15125] binder: 15124:15125 ioctl c0306201 20000080 returned -14 [ 793.103418][T15125] binder: 15124:15125 ioctl c0306201 20001480 returned -14 [ 793.135561][T15130] binder: 15129:15130 ioctl c0306201 20000080 returned -14 [ 793.137831][T15130] binder: 15129:15130 ioctl c0306201 20001480 returned -14 09:34:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x3, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 09:34:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:44 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], 0x0, &(0x7f0000000480), 0x0}) 09:34:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 793.510119][T15137] binder: 15134:15137 ioctl c0306201 20000080 returned -14 09:34:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 793.513217][T15137] binder: 15134:15137 ioctl c0306201 20001480 returned -14 [ 793.541498][T15141] binder: 15139:15141 unknown command 0 [ 793.541528][T15141] binder: 15139:15141 ioctl c0306201 20000080 returned -22 09:34:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 793.543648][T15141] binder: 15139:15141 ioctl c0306201 20001480 returned -14 [ 793.590479][T15145] binder: 15144:15145 unknown command 0 [ 793.590508][T15145] binder: 15144:15145 ioctl c0306201 20000080 returned -22 [ 793.592512][T15145] binder: 15144:15145 ioctl c0306201 20001480 returned -14 [ 793.635140][T15148] binder: 15147:15148 unknown command 0 [ 793.635159][T15148] binder: 15147:15148 ioctl c0306201 20000080 returned -22 [ 793.636323][T15148] binder: 15147:15148 ioctl c0306201 20001480 returned -14 [ 793.682612][T15150] binder: 15149:15150 unknown command 0 [ 793.694235][T15150] binder: 15149:15150 ioctl c0306201 20000080 returned -22 [ 793.720770][T15150] binder: 15149:15150 ioctl c0306201 20001480 returned -14 09:34:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:34:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], 0x0, &(0x7f0000000480), 0x0}) 09:34:45 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 794.354377][T15157] binder: 15154:15157 unknown command 0 09:34:45 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:45 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 794.367156][T15157] binder: 15154:15157 ioctl c0306201 20000080 returned -22 09:34:45 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 794.369387][T15157] binder: 15154:15157 ioctl c0306201 20001480 returned -14 [ 794.408540][T15165] binder: 15164:15165 unknown command 0 [ 794.408567][T15165] binder: 15164:15165 ioctl c0306201 20000080 returned -22 [ 794.410244][T15165] binder: 15164:15165 ioctl c0306201 20001480 returned -14 [ 794.451871][T15169] binder: 15167:15169 unknown command 25348 [ 794.451900][T15169] binder: 15167:15169 ioctl c0306201 20000080 returned -22 [ 794.453967][T15169] binder: 15167:15169 ioctl c0306201 20001480 returned -14 [ 794.500650][T15171] binder: 15170:15171 unknown command 25348 [ 794.526907][T15171] binder: 15170:15171 ioctl c0306201 20000080 returned -22 09:34:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], 0x0, &(0x7f0000000480), 0x0}) [ 794.535500][T15171] binder: 15170:15171 ioctl c0306201 20001480 returned -14 [ 794.576482][T15161] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 794.576993][T15161] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. 09:34:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), 0x0, 0x0}) 09:34:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:34:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 795.372061][T15177] binder: 15176:15177 unknown command 25348 [ 795.380857][T15177] binder: 15176:15177 ioctl c0306201 20000080 returned -22 09:34:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 795.392149][T15177] binder: BINDER_SET_CONTEXT_MGR already set [ 795.392167][T15177] binder: 15176:15177 ioctl 40046207 0 returned -16 [ 795.392501][T15177] binder: 15176:15177 ioctl c0306201 20001480 returned -14 [ 795.434987][T15186] binder: 15185:15186 unknown command 287492 [ 795.435014][T15186] binder: 15185:15186 ioctl c0306201 20000080 returned -22 09:34:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), 0x0, 0x0}) [ 795.437713][T15186] binder: 15185:15186 ioctl c0306201 20001480 returned -14 [ 795.506852][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.528333][T15191] binder: 15190:15191 unknown command 287492 09:34:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 795.563115][T15191] binder: 15190:15191 ioctl c0306201 20000080 returned -22 [ 795.580806][T15191] binder: BINDER_SET_CONTEXT_MGR already set [ 795.580825][T15191] binder: 15190:15191 ioctl 40046207 0 returned -16 [ 795.581169][T15191] binder: 15190:15191 ioctl c0306201 20001480 returned -14 [ 795.621555][T15197] binder: 15196:15197 unknown command 287492 [ 795.621583][T15197] binder: 15196:15197 ioctl c0306201 20000080 returned -22 [ 795.630213][T15197] binder: 15196:15197 ioctl c0306201 20001480 returned -14 [ 795.694297][T15199] binder: BINDER_SET_CONTEXT_MGR already set [ 795.699934][T15199] binder: 15198:15199 ioctl 40046207 0 returned -16 [ 795.711626][T15194] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 795.720061][T15194] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 795.731770][T15199] binder: 15198:15199 ioctl c0306201 20001480 returned -14 09:34:46 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440), 0x0, 0x0}) 09:34:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) close(r2) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=%\x1d\x1db\xfb8MI\xd1\x14r2, {0x4}}, './file0\x00'}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) write$cgroup_pid(r6, &(0x7f0000000240)=r7, 0x12) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 09:34:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 796.450459][T15208] binder: BINDER_SET_CONTEXT_MGR already set [ 796.455497][T15208] binder: 15203:15208 ioctl 40046207 0 returned -16 [ 796.461460][T15208] binder: 15203:15208 ioctl c0306201 20001480 returned -14 09:34:47 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 796.536478][T15214] binder: BINDER_SET_CONTEXT_MGR already set [ 796.541545][T15214] binder: 15213:15214 ioctl 40046207 0 returned -16 [ 796.597296][T15218] binder: 15213:15218 ioctl c0306201 20001480 returned -14 09:34:47 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) close(r3) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=%\x1d\x1db\xfb8MI\xd1\x14r2, {0x4}}, './file0\x00'}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) write$cgroup_pid(r6, &(0x7f0000000240)=r7, 0x12) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) [ 796.834270][T15223] binder: BINDER_SET_CONTEXT_MGR already set [ 796.839103][T15223] binder: 15222:15223 ioctl 40046207 0 returned -16 [ 796.847245][T15223] binder: 15222:15223 ioctl c0306201 20001480 returned -14 09:34:47 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 796.954228][T15227] binder: BINDER_SET_CONTEXT_MGR already set [ 796.961751][T15227] binder: 15225:15227 ioctl 40046207 0 returned -16 [ 796.971878][T15227] binder: 15225:15227 ioctl c0306201 20001480 returned -14 [ 797.301070][ C0] vkms_vblank_simulate: vblank timer overrun 09:34:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) close(r3) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=%\x1d\x1db\xfb8MI\xd1\x14r2, {0x4}}, './file0\x00'}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) write$cgroup_pid(r6, &(0x7f0000000240)=r7, 0x12) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 09:34:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) close(r2) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=%\x1d\x1db\xfb8MI\xd1\x140x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 797.338791][T15231] binder: BINDER_SET_CONTEXT_MGR already set [ 797.343874][T15231] binder: 15228:15231 ioctl 40046207 0 returned -16 [ 797.350590][T15231] binder: 15228:15231 ioctl c0306201 20001480 returned -14 09:34:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 797.416569][T15237] binder: BINDER_SET_CONTEXT_MGR already set [ 797.422415][T15237] binder: 15236:15237 ioctl 40046207 0 returned -16 [ 797.428735][T15237] binder: 15236:15237 ioctl c0306201 20001480 returned -14 09:34:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 797.471544][T15242] binder: BINDER_SET_CONTEXT_MGR already set [ 797.476618][T15242] binder: 15241:15242 ioctl 40046207 0 returned -16 [ 797.483211][T15242] binder: 15241:15242 ioctl c0306201 20001480 returned -14 09:34:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 797.522561][T15246] binder: BINDER_SET_CONTEXT_MGR already set [ 797.532312][T15246] binder: 15245:15246 ioctl 40046207 0 returned -16 [ 797.537799][T15246] binder: 15245:15246 ioctl c0306201 20001480 returned -14 09:34:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 797.577230][T15248] binder: 15247:15248 ioctl c0306201 20001480 returned -14 [ 797.580542][T15239] hub 9-0:1.0: USB hub found [ 797.587429][T15239] hub 9-0:1.0: 1 port detected 09:34:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/106, 0x6a}], 0x1, 0x0, 0x0) 09:34:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) close(r3) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=%\x1d\x1db\xfb8MI\xd1\x14r2, {0x4}}, './file0\x00'}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) write$cgroup_pid(r6, &(0x7f0000000240)=r7, 0x12) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) [ 798.117565][T15251] binder: 15250:15251 ioctl c0306201 20001480 returned -14 09:34:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/106, 0x6a}], 0x1, 0x0, 0x0) [ 798.147007][T15258] binder: 15257:15258 ioctl c0306201 20001480 returned -14 09:34:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:49 executing program 0: r0 = socket$netlink(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x48c5) [ 798.191530][T15262] binder: 15261:15262 ioctl c0306201 20001480 returned -14 09:34:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:49 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, r0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 798.256133][T15269] binder: 15268:15269 ioctl c0306201 20001480 returned -14 09:34:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) close(r3) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000600)='\xfc|\xf5\x13\xd4\xf6P\xc5DF\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=%\x1d\x1db\xfb8MI\xd1\x14r2, {0x4}}, './file0\x00'}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) write$cgroup_pid(r6, &(0x7f0000000240)=r7, 0x12) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 09:34:49 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, r0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 09:34:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) [ 798.495187][T15278] binder: 15274:15278 ioctl c0306201 20001480 returned -14 09:34:49 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, r0, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 09:34:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r2, 0x9, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}}, 0x0) 09:34:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:50 executing program 1: r0 = socket$netlink(0x2, 0x3, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 09:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:50 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) 09:34:50 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@ldst], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x80) 09:34:50 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x2042) write$usbip_server(r0, &(0x7f0000001840), 0x30) 09:34:50 executing program 0: r0 = socket$inet(0x2, 0x80005, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8934, &(0x7f0000000000)={'macvtap0\x00'}) 09:34:50 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000280)) 09:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:50 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) read$char_usb(r0, &(0x7f00000001c0)=""/48, 0x30) 09:34:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x28}}, 0x0) [ 799.057439][ T39] audit: type=1400 audit(1662111290.099:441): avc: denied { read } for pid=15307 comm="syz-executor.0" path="socket:[71240]" dev="sockfs" ino=71240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 09:34:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x28}}, 0x0) 09:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:50 executing program 1: r0 = memfd_secret(0x0) write$usbip_server(r0, 0x0, 0x0) [ 799.168665][T15317] binder: 15314:15317 ioctl c0306201 0 returned -14 09:34:50 executing program 1: r0 = socket$inet(0x2, 0x80005, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) 09:34:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$can_j1939(r0, &(0x7f0000000140)={0x10}, 0x18) 09:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:50 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, 0x0) [ 799.202580][ T39] audit: type=1400 audit(1662111290.239:442): avc: denied { connect } for pid=15323 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 799.213133][T15326] binder: 15325:15326 ioctl c0306201 0 returned -14 09:34:50 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101a06, 0x0) 09:34:50 executing program 0: r0 = socket$inet(0x2, 0x80005, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, &(0x7f0000000000)={'macvtap0\x00'}) 09:34:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) [ 799.299009][ T39] audit: type=1400 audit(1662111290.339:443): avc: denied { write } for pid=15329 comm="syz-executor.1" name="autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 799.303538][T15334] binder: 15330:15334 ioctl c0306201 0 returned -14 09:34:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) 09:34:50 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8000000000, 0x0) getpeername$netlink(r0, 0x0, 0x0) 09:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:50 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000240)={0x2}, 0x18) 09:34:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r2, 0x9, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) 09:34:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:50 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 09:34:50 executing program 1: bpf$PROG_LOAD_XDP(0x16, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:50 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) 09:34:50 executing program 1: r0 = socket$inet(0x2, 0x80005, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8943, &(0x7f0000000000)={'macvtap0\x00'}) 09:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0102000000000000100024000000080002004bac"], 0x1c}}, 0x0) 09:34:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x34, r2, 0x9, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) 09:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {0x24}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 09:34:50 executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) [ 799.587240][ T39] audit: type=1400 audit(1662111290.629:444): avc: denied { read } for pid=3352 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 09:34:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)) [ 799.614286][T15369] binder: BINDER_SET_CONTEXT_MGR already set [ 799.622422][T15369] binder: 15367:15369 ioctl 40046207 0 returned -16 09:34:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @private, {[@ssrr={0x89, 0x3}]}}}}}) 09:34:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) [ 799.632246][ T39] audit: type=1400 audit(1662111290.659:445): avc: denied { create } for pid=15371 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 799.656720][ T39] audit: type=1400 audit(1662111290.659:446): avc: denied { ioctl } for pid=15371 comm="syz-executor.1" path="socket:[71901]" dev="sockfs" ino=71901 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 09:34:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:50 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) io_setup(0x800, &(0x7f0000000000)) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) 09:34:50 executing program 1: accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) 09:34:50 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x33fe0}}, 0x0) 09:34:50 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) 09:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:50 executing program 1: bpf$PROG_LOAD_XDP(0x3, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:34:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xb20, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}}], 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a) 09:34:50 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp, @alu={0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x89, &(0x7f0000000140)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0xf0}}}], 0x0, 0x0, 0x0}) 09:34:50 executing program 1: socket$netlink(0x2, 0x6, 0x0) 09:34:50 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) [ 799.874700][T15396] binder: 15395:15396 ioctl c0306201 20001480 returned -14 09:34:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}}, 0x0) 09:34:50 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x511, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) [ 799.898009][T15396] general protection fault, probably for non-canonical address 0xdffffc0000000025: 0000 [#1] PREEMPT SMP KASAN [ 799.906841][T15396] KASAN: null-ptr-deref in range [0x0000000000000128-0x000000000000012f] 09:34:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}}, 0x0) [ 799.912479][T15396] CPU: 1 PID: 15396 Comm: syz-executor.2 Not tainted 6.0.0-rc3-syzkaller-00107-g42e66b1cc3a0 #0 [ 799.922319][T15396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 799.929125][T15396] RIP: 0010:__lock_acquire+0xd83/0x56d0 [ 799.933094][T15396] Code: 9b 0e 41 bf 01 00 00 00 0f 86 c8 00 00 00 89 05 23 ec 9b 0e e9 bd 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 4e 31 00 00 49 81 3e 60 34 51 8f 0f 84 4c f3 ff [ 799.946952][T15396] RSP: 0018:ffffc900051d7268 EFLAGS: 00010002 [ 799.951149][T15396] RAX: dffffc0000000000 RBX: 1ffff92000a3ae7c RCX: 0000000000000001 [ 799.956619][T15396] RDX: 0000000000000025 RSI: 0000000000000000 RDI: 0000000000000001 [ 799.961675][T15396] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 799.968184][T15396] R10: fffffbfff1bbbf12 R11: 0000000000000000 R12: 0000000000000000 [ 799.973709][T15396] R13: ffff88801dd5e040 R14: 0000000000000128 R15: 0000000000000001 [ 799.979220][T15396] FS: 00007f3275734700(0000) GS:ffff88802c900000(0000) knlGS:0000000000000000 [ 799.985307][T15396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 799.989590][T15396] CR2: 00007fbb0dba0000 CR3: 00000000784ab000 CR4: 0000000000150ee0 [ 799.995321][T15396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 800.000233][T15396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 800.006058][T15396] Call Trace: [ 800.008328][T15396] [ 800.010267][T15396] ? lock_chain_count+0x20/0x20 [ 800.013360][T15396] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 800.017121][T15396] ? lock_release+0x780/0x780 [ 800.020101][T15396] lock_acquire+0x1ab/0x570 [ 800.023001][T15396] ? binder_alloc_new_buf+0xa5/0x19e0 [ 800.026521][T15396] ? lock_release+0x780/0x780 [ 800.029385][T15396] ? __mutex_lock+0x231/0x1350 [ 800.032490][T15396] down_read+0x98/0x450 [ 800.035059][T15396] ? binder_alloc_new_buf+0xa5/0x19e0 [ 800.038444][T15396] ? rwsem_down_read_slowpath+0xb10/0xb10 [ 800.042259][T15396] ? find_held_lock+0x2d/0x110 [ 800.045638][T15396] binder_alloc_new_buf+0xa5/0x19e0 [ 800.049091][T15396] binder_transaction+0x242e/0x9a80 [ 800.052551][T15396] ? __stack_depot_save+0x35/0x500 [ 800.055991][T15396] ? unwind_next_frame+0xfa9/0x1cc0 [ 800.059455][T15396] ? __lock_acquire+0x166e/0x56d0 [ 800.062620][T15396] ? binder_deferred_func+0x1150/0x1150 [ 800.066133][T15396] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 800.069996][T15396] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 800.074124][T15396] ? find_held_lock+0x2d/0x110 [ 800.077520][T15396] ? __might_fault+0xd1/0x170 [ 800.080624][T15396] ? lock_downgrade+0x6e0/0x6e0 [ 800.083705][T15396] binder_thread_write+0x664/0x3220 [ 800.087249][T15396] ? binder_transaction+0x9a80/0x9a80 [ 800.090595][T15396] ? find_held_lock+0x2d/0x110 [ 800.093484][T15396] binder_ioctl+0x3470/0x6d00 [ 800.096451][T15396] ? tomoyo_path_number_perm+0x24e/0x590 [ 800.100201][T15396] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 800.104499][T15396] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 800.108379][T15396] ? binder_thread_write+0x3220/0x3220 [ 800.111923][T15396] ? do_vfs_ioctl+0x132/0x15c0 [ 800.114967][T15396] ? vfs_fileattr_set+0xbe0/0xbe0 [ 800.118076][T15396] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 800.123085][T15396] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 800.127865][T15396] ? selinux_inode_getsecctx+0x90/0x90 [ 800.132060][T15396] ? __ct_user_exit+0xff/0x150 [ 800.135503][T15396] ? selinux_file_ioctl+0xb1/0x270 [ 800.138337][T15396] ? binder_thread_write+0x3220/0x3220 [ 800.141467][T15396] __x64_sys_ioctl+0x193/0x200 [ 800.144424][T15396] do_syscall_64+0x35/0xb0 [ 800.147984][T15396] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 800.152962][T15396] RIP: 0033:0x7f3274689279 [ 800.157747][T15396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 800.171720][T15396] RSP: 002b:00007f3275734168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.177459][T15396] RAX: ffffffffffffffda RBX: 00007f327479bf80 RCX: 00007f3274689279 [ 800.184225][T15396] RDX: 00000000200007c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 800.190043][T15396] RBP: 00007f32746e32e9 R08: 0000000000000000 R09: 0000000000000000 [ 800.195020][T15396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.200643][T15396] R13: 00007ffcc3b316ef R14: 00007f3275734300 R15: 0000000000022000 [ 800.205569][T15396] [ 800.207528][T15396] Modules linked in: [ 800.210076][T15396] ---[ end trace 0000000000000000 ]--- [ 800.213548][T15396] RIP: 0010:__lock_acquire+0xd83/0x56d0 [ 800.217061][T15396] Code: 9b 0e 41 bf 01 00 00 00 0f 86 c8 00 00 00 89 05 23 ec 9b 0e e9 bd 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 4e 31 00 00 49 81 3e 60 34 51 8f 0f 84 4c f3 ff [ 800.229328][T15396] RSP: 0018:ffffc900051d7268 EFLAGS: 00010002 [ 800.233375][T15396] RAX: dffffc0000000000 RBX: 1ffff92000a3ae7c RCX: 0000000000000001 [ 800.238571][T15396] RDX: 0000000000000025 RSI: 0000000000000000 RDI: 0000000000000001 [ 800.243198][T15396] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 800.248966][T15396] R10: fffffbfff1bbbf12 R11: 0000000000000000 R12: 0000000000000000 [ 800.254379][T15396] R13: ffff88801dd5e040 R14: 0000000000000128 R15: 0000000000000001 [ 800.260158][T15396] FS: 00007f3275734700(0000) GS:ffff88802c900000(0000) knlGS:0000000000000000 [ 800.266591][T15396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.271675][T15396] CR2: 00007fbb0dba0000 CR3: 00000000784ab000 CR4: 0000000000150ee0 [ 800.276916][T15396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 800.282215][T15396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 800.287962][T15396] Kernel panic - not syncing: Fatal exception [ 800.293102][T15396] Kernel Offset: disabled [ 800.296334][T15396] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:34:51 Registers: info registers vcpu 0 RAX=ffffffff81c6e1f9 RBX=ffffffff8df35408 RCX=ffffffff81c6e1ee RDX=0000000000000000 RSI=ffffffff8e686936 RDI=ffffffff8df353bc RBP=ffffffff8df35408 RSP=ffffc90002e877e8 R8 =ffffffff8be02360 R9 =ffffc90002e878d4 R10=fffff520005d0f1f R11=000000000008c07c R12=ffffffff8df3540c R13=ffffffff8df353bc R14=ffffffff8df35404 R15=dffffc0000000000 RIP=ffffffff8135e5eb RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fbc31892840 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f327479c018 CR3=000000002471d000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ff000000000000ff00000000000000 XMM02=ffffffffffff00000000000000000000 XMM03=00000000000000000000ff00ff0000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=65726168732f6372732f2e2e2f2e2e00 XMM09=00000000000000000000000000000000 XMM10=73732552a868436373732557ca704d68 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84612d31 RDI=ffffffff914820c0 RBP=ffffffff91482080 RSP=ffffc900051d6c00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=502031203a555043 R12=0000000000000000 R13=000000000000002e R14=ffffffff84612cd0 R15=0000000000000000 RIP=ffffffff84612d5b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f3275734700 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbb0dba0000 CR3=00000000784ab000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f32747717c000007f32747717c8 XMM02=00007f32747717e000007f32747717c0 XMM03=00007f32747717c800007f32747717c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff8880729a6200 RSI=ffffffff8219edb5 RDI=0000000000000005 RBP=ffff8880289cd730 RSP=ffffc90002f67a90 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=000000000008c07c R12=ffff888028b5fe00 R13=ffff8880289cdbc8 R14=ffff88806e01e400 R15=ffffc90002f67bc0 RIP=ffffffff817b3967 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555567c4400 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555567cd848 CR3=0000000074b96000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000045d66e6770c38fe0 XMM02=00000000000000005931608782dc365e XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000003 RBX=ffff888012534080 RCX=ffffffff897f4b25 RDX=ffffed100596698a RSI=0000000000000000 RDI=ffffffff8982590f RBP=0000000000000003 RSP=ffffc9000069fe00 R8 =0000000000000000 R9 =ffff88802cb34c4b R10=ffffed1005966989 R11=0000000000000001 R12=ffffed10024a6810 R13=0000000000000003 R14=ffffffff8dddf890 R15=0000000000000000 RIP=ffffffff8982515b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000c00c40d000 CR3=000000007466f000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000