last executing test programs: 1m28.123937682s ago: executing program 2 (id=2185): r0 = socket(0xb, 0x3, 0x7fffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x4, './file0\x00'}}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), 0x10) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000040)) r8 = socket(0x2b, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000100)={0x0, 'bond0\x00', {0x3}, 0x9}) 1m26.763901331s ago: executing program 2 (id=2188): getcwd(&(0x7f00000003c0)=""/71, 0x47) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r2 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@nl=@proc, &(0x7f00000000c0)=0x80, 0x80400) ioctl$FICLONE(r2, 0x40049409, r1) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff000000000000000c030900000000000000228b70f33746a540f7989967b60fae12b3aea633786c54a03dd1230f2c1baa03874b00eb8ce2f9a1883ccb76944981b8b64632aefa7f361542ddac05e82fbb1250c525f22f04ff42a58f8a046b54a04426d2a28448552343a9275d951d95569f513e3166dfcdf9af6f056bc151977fb2a18d79d176ed515c9cbf6d65c45e55905b64d74030a5da969b38b279eb526c052332cd7a9b04c9394db4be43558b4a75a1c060988ec342f256524fe529a23e352531b266636a1ff29d3f396224512c"], &(0x7f0000000340)={0x1, 0x3, [0x7c7, 0xf99, 0x858, 0x7e2]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)=0x0) sched_setscheduler(r3, 0x3, &(0x7f0000000180)=0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r6, 0x0, 0x0, 0x4008001, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) faccessat2(0xffffffffffffffff, 0x0, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000380), 0x6, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) 1m25.92247202s ago: executing program 2 (id=2192): mount$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=']) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x3000000000000000, &(0x7f0000000340)) 1m24.840273767s ago: executing program 2 (id=2193): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0x21579e60f9c72150, &(0x7f0000000100)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = dup(r1) copy_file_range(r0, 0x0, r2, 0x0, 0x3ff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 1m21.601815357s ago: executing program 2 (id=2207): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) pipe2$9p(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000000000000001000000010000", @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000440), 0x0, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), 0x0, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) syz_open_pts(0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="ec000000"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m21.360024793s ago: executing program 2 (id=2208): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x14e, [0x0, 0x20000300, 0x20000330, 0x2000178c], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x12, 0x40, 0x0, 'veth0\x00', 'team0\x00', 'veth0_virt_wifi\x00', 'ip6_vti0\x00', @random="42bba60defb0", [0x0, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x82, "52bd2ebd7b47832b31e925c3f5a26cdbfa484a7593aa0d33908f85f4863c", 0xd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x1c6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) 1m21.221958108s ago: executing program 32 (id=2208): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x14e, [0x0, 0x20000300, 0x20000330, 0x2000178c], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x12, 0x40, 0x0, 'veth0\x00', 'team0\x00', 'veth0_virt_wifi\x00', 'ip6_vti0\x00', @random="42bba60defb0", [0x0, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x82, "52bd2ebd7b47832b31e925c3f5a26cdbfa484a7593aa0d33908f85f4863c", 0xd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x1c6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) 8.788486045s ago: executing program 5 (id=2482): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x0) gettid() r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x629) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x40505331, &(0x7f0000000300)={0x9, 0x0, 0x3, {0x1}, 0x800}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/config\x00') setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x0) syz_fuse_handle_req(r2, &(0x7f0000000400)="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", 0x2000, &(0x7f0000003240)={&(0x7f0000002400)={0x50, 0x0, 0xdb4f, {0x7, 0x29, 0x6, 0xffffffff80000004, 0x818, 0x9, 0x4, 0xfc, 0x0, 0x0, 0x10, 0x9}}, &(0x7f0000002480)={0x18, 0x0, 0x9, {0xff}}, &(0x7f00000024c0)={0x18, 0xfffffffffffffff5, 0x6, {0x4}}, &(0x7f0000002500)={0x18, 0x0, 0x6, {0x7f}}, &(0x7f0000002540)={0x18, 0x0, 0x8, {0x43d4ff62}}, &(0x7f0000002580)={0x28, 0xfffffffffffffff5, 0xb, {{0x7, 0x3, 0x1}}}, &(0x7f00000025c0)={0x60, 0x0, 0x200, {{0xa4, 0x2, 0x87, 0x2, 0x80000001, 0x2, 0x223, 0x40}}}, &(0x7f0000002640)={0x18, 0x0, 0x4, {0x1}}, &(0x7f0000002740)=ANY=[@ANYBLOB="19000000006bdb8e84000000ff01000000000000696c6c696e6f697300"], &(0x7f00000026c0)={0x20, 0x0, 0x9, {0x0, 0x4}}, &(0x7f00000027c0)={0x78, 0xb, 0x0, {0x5, 0x7, 0x0, {0x0, 0x6, 0x8, 0xffffffffffffffff, 0x8, 0xa, 0xfff, 0x0, 0xe, 0xa000, 0x4, 0xee00, 0x0, 0x0, 0x1}}}, &(0x7f0000002840)={0x90, 0x0, 0xfffffffffffff4a9, {0x2, 0x3, 0x7e, 0x7, 0x7, 0xfff, {0x0, 0x2b, 0x5, 0x6, 0x6, 0x100000000, 0x67, 0xfffff792, 0x8, 0x6000, 0x401, 0x0, 0x0, 0x8, 0x7}}}, &(0x7f0000002900)=ANY=[@ANYBLOB="e00000000000000007000000000000000200000000000000020000000000000010000000070000006e65742f766c616e2f636f6e666967000600000000000000ffffffffffffffff02000000050000005c25000000000000000000001f978ecd7035dcafd796f500000000ffffffff000000000e000000050000002f6465762f61646d6d696469230000000200000000000001000100696c6c696e6f697300000000000000000000000000000000ffffff7f000000000000000003000000000000000000000007000000000000000700000002"], &(0x7f0000003300)=ANY=[@ANYBLOB="90020000000000000000000000000000060000000000000001020000000000000500000000000000000400000000000006000000030000000100000000000000010100000000000006000000000000000000008000000000aaff000000000000be000000000000000300000001000100f8ffffff00a0000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff070000080000000000000006000000000000009f0000000000000010000000b10d00006e65742f766c616e2f636f6e6669670002000000000000000300000000000000cb3d00000000000009000000000000008df5ffff070000000300000000000000060000000000000008000000000000000900000000000000de0100000000000080000000000000000000401ba3ef0000e206000000600000ff010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a5040000c518bd40000000000100000000000000ff0f00000000000001000000030000002600000000000000020000000000000000000000000000000000000000000000fbfcffffffffffff0c000000a6b900000100000000000000070000000000000009000000000000000200000000000000020000000000000001000000000000000900000009000000000000000020000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00fcffff310f0000000000000500000000000000000001000000000002000000080000002b28000000000000"], &(0x7f0000002f40)={0xa0, 0x0, 0x6dbc5482, {{0x1, 0x3, 0x5, 0xf8, 0x0, 0xff1, {0x0, 0xffffffff, 0x1, 0x0, 0x15e3, 0x1, 0xfffff832, 0x5, 0x4, 0x1000, 0x8, 0x0, 0x0, 0x7db, 0xd}}, {0x0, 0xf}}}, &(0x7f0000003000)={0x20, 0xffffffffffffffda, 0x1, {0x0, 0x4, 0x4, 0x6}}, &(0x7f0000003100)={0x130, 0x0, 0x100000001, {0x200, 0x8001, 0x0, '\x00', {0x4000, 0x7, 0x7, 0x48000, 0x0, 0x0, 0x0, '\x00', 0x80000001, 0x6, 0x9, 0x7fff, {0x2, 0x3e}, {0xe, 0x80000001}, {0x8, 0x2}, {0xffffffff, 0x8}, 0xfffffff2, 0x9, 0x6, 0x6}}}}) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x1, @remote}, 0x10, 0x0}, 0x3000c041) syz_open_dev$admmidi(&(0x7f0000002700), 0xffffffffffff7ffe, 0x52de994789af203) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) close(r5) 6.993322196s ago: executing program 3 (id=2491): r0 = syz_open_dev$video(0x0, 0x3ff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000002c0)={0x8000000, 0x93d, 0x3}) 6.379029882s ago: executing program 3 (id=2492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x17, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x95) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0, r3}, 0x18) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/150, 0x96}, {&(0x7f00000005c0)=""/229, 0xe5}], 0x3) socket$key(0xf, 0x3, 0x2) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) socket$netlink(0x10, 0x3, 0x12) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000280)={0x1, 0x3, 0xa, {0x7, 0x8, 0x2, 0x90000}}) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x1c8012, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9da}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, @jmp={0x5, 0x0, 0x6, 0x5, 0x2, 0x4, 0x1}, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000700)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x3, 0xbb, 0xe}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000800)=[r2, 0xffffffffffffffff, r2, r2, r2, r4, 0x1], &(0x7f0000000840)=[{0x4, 0x1, 0x3, 0x3}, {0x3, 0x4, 0x6, 0x3}, {0x5, 0x5, 0xb}, {0x4, 0x1, 0x1, 0xc}, {0x2, 0x4, 0x1}, {0x4, 0x4, 0x1, 0x1}, {0x2, 0x5, 0x9, 0x8}, {0x0, 0x5, 0xc, 0x1}], 0x10, 0x80, @void, @value}, 0x94) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet6(r8, &(0x7f0000000ac0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0xff00) socket$netlink(0x10, 0x3, 0xb) 6.09244053s ago: executing program 5 (id=2493): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r2, @ANYBLOB="9a"], 0x20}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbf8eb5600000000000019", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$alg(0x26, 0x5, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newlink={0x130, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0xb, 0x80}, [@IFLA_AF_SPEC={0x110, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x0, 0x0, 0x2}, {0x8, 0x15, 0x0, 0x0, 0x4}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x11}, {0x8, 0x1}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x7c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xc}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x130}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x314, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x2dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\a\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ':+.!&[##!,\xdf\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cgroup.events\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '*)#/-\xab:()}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/snd/seq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-^::@\'\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb, 0x4, "508cd85675df70"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x158, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$^I@-)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cgroup.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '!^,:}(#},#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'queue0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x79c5ff3e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cgroup.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xac}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xbe\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "13a97e0924d59c25e43bb0bdafaecf5fee2e26be694a59b1dd11be35ca68f7d166036b6866088b2f6115ee8156bb2099da13380c4adf90a7218551286c2c9dd89698cbe6c2aa97f84c168740d0404b7d2d8562f1cedcc452d60143ba09c56935694843053be0347a79e4f66c7dcace72712d800bfaa88f699c0c8419b72993d3a1aa0e0e1363d5ed53761817bc0f57b58986027a7ef5"}]}, @ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x4800}, 0x20000004) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000180)={0x1d7, @time={0x1ff, 0x4}, 0x9}) close(0x3) close(r9) socket$key(0xf, 0x3, 0x2) accept4(r9, 0x0, 0x0, 0x80000) 5.587638869s ago: executing program 3 (id=2495): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x20000000) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000140)={0x0, 0x0, [0x4, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000]}) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000fedbeb251700000008000300", @ANYRES32=r5, @ANYBLOB="0c0030800500020000000000"], 0x28}}, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) read$msr(r6, &(0x7f0000000080)=""/16, 0x10) 5.272044756s ago: executing program 1 (id=2496): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0xe000000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) 5.26693795s ago: executing program 1 (id=2497): r0 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r0, 0x3f72, 0x74f1, 0x0, 0x0, 0x39) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0x0, 0x0, 0x2}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7d7159a0, 0x0, 0x1, {0x1}}) io_uring_enter(r9, 0x8aa, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) syz_open_dev$ttys(0xc, 0x2, 0x1) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000100), 0x208e24b) 5.132986491s ago: executing program 3 (id=2498): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0xeb5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0xff, 0x1, 0x0, 0x0, 0x7, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffaf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe]}, 0x45c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000b80)=ANY=[@ANYBLOB="930200007d00000005"], 0x232) write$sequencer(r2, &(0x7f00000000c0)=[@t={0x81, 0x4, 0x0, 0x0, @generic}], 0x8) close_range(r1, 0xffffffffffffffff, 0x0) r4 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r4, 0x0, 0x8}, 0x18) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@multicast2, 0x0, 0x3c}, @in6=@remote, {0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x3503, 0xa, 0x2, 0xfd, 0x2c}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "d4dfeb1ceb40eeefe68d6cf265b68e88a8bb314f3c0f82df67e25dad70d6b31e036f9f20b70c42a4dc5b21aa28f606af1557115f56805a217afe6b467cb413b3"}, 0x48, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r9, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x0, &(0x7f0000000000)={0x20, 0x15, 0x2, 0x6, 0x6}, 0x8, 0x0, 0x5, 0x0, 0x11f6, 0x6, 0x0}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000440)={0x5, 0xca, &(0x7f0000000340)="ba4581b2474c0e905867a2477e74100e5c250c69c68aa46793242671e0da879b06dec4cc07dd5a28af2303b736726bbba61c33126fc2c1ec63bcc673634feb5e8600133a98f102ca2ad88fb9615db44cb69e43c369b5159b9fe484890a2d13679deadc4533ad222b954d70f0b99505dc58edaee821f986346b68ad45e306b0b50685882bd50baaf0859ddb1d2df987990431d60a448b124bce615875325495f6d3851d70a882c3b314668b021f53d998c3b1ef1745248265d7737773910fdefe65ddaad45f7a0b451a55"}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) 5.015475996s ago: executing program 5 (id=2500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24049080}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 4.600878093s ago: executing program 5 (id=2501): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() write(0xffffffffffffffff, &(0x7f0000000040), 0x0) fsmount(0xffffffffffffffff, 0x0, 0x88) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x7, {0x2020, 0x2, 0x1000, 0x6}}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x10) fcntl$notify(r5, 0x402, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640), 0x0, 0x0}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000000c0)={&(0x7f0000002000)={[{&(0x7f0000000180)="ce6982409effe24c315f209fce02de5a8b0a2027089cf439caef927d5a5f9eb28fed6365fd3135a9f669ab9ba7ccd8aca85c1f4498f411c56ebdb2ca698677b1eca084c44594978c5f16114fd19c5d3dfb7ac372c3a2c27543c4110e828c1feccc8f191e590cb22b51aa4a47f3ef644ce6dfc012fd9268384eef2a5033ef8e80", 0x80, 0x3}, {&(0x7f00000002c0)="2c3a3dfeb0c78f4e664cf3544988e60830bde72ea886b9fa10767272e26cf3dc22a5391cdd0c93551c8bc834b2da1e2620606f75938adcacba39b3b24c21c66b4195af1344e08d240da47dc0774aaecf895faa3eaf2a4f5a5681dfd2", 0x5c, 0x1}, {&(0x7f0000000340)="ccfe26361947a2f32fe7adb51b02133c8845f848ff25a225f3c48783cdf3b95ac0d5d3be33db90d7600093ce7bcdc339c6987025282cd32e9fca5546f8579941ee4529a0d52607d1", 0x48, 0x3}, {&(0x7f00000003c0)="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", 0xfb, 0x1}]}, 0x4, 0x3}, 0x1) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) 4.542349058s ago: executing program 3 (id=2502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0xfa4) getpid() getpid() r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001140)='cgroup\x00') read$char_usb(r3, &(0x7f0000000040)=""/4122, 0x101a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x8, 0x5, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x1c4, 0x21, 0x107, 0x0, 0x0, {0xff, 0x7c}, [@generic="fe390aedfc3c927e97f456e1e4f53cafe1ce0adc0e8a075b4927db2229ee55d5c78087e160a2137f6f71abc2aab0bcfabc507e312c348a865a737a6510606d267d1d2363c88a6c27764139826e026ebead5851a0b7bf19ed3ac8e6a2a3cdfc934f1f3fd55f020e151f716f096e1b6677c3bef8015fb3b3ffd383240d543caca31f82dfcfee184e2a7aefe4144e594ba620f5254da53140e4a2e470d64432eb0d3751950c35fc41f050ad5a98037fbfcab803bfd5649dbaf5c95c95", @nested={0xec, 0x1, 0x0, 0x1, [@nested={0xe6, 0x67, 0x0, 0x1, [@generic="4ed2002e3b56cd0c5c2dcd1bd2cbb7269fa062ce3150095f2bea523c4fc4fa21d9197534661436a31d75e16e7b5dd70cce321296104ccabf20c7f724c8d0417812dc2570190c7c2e9ca01f08cf51bb36f978e872117ca46053b1f0c54e7542398b7f261e285a53b2c0a38c854663cb66cd145402f371007e273fe284cb379bccd588a9103a98940ed171d506c877bc7004e2a3cc6d557d2beebbf9fffcb2953c63a704d52f183e73e422a1024c0b375f29c4500db87312d775d06bb9298d3b6d5c44f267d139fb9823c63df7ebd3ff8c36216729411b0343d320ac8caef8f2a37aec"]}]}, @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x7}]}, 0x1c4}}, 0xc000) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 4.242411179s ago: executing program 5 (id=2503): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x20, 0xfff, 0x1, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1}}}}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r2}, 0x10) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000002c0)={{r4}, 0x80000000, 0x101, 0xa}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x0, 0x0, [{0xffffffff}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4, 0x22}]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r7, &(0x7f0000000000)={0x10}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netlink\x00') preadv(r8, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/221, 0xdd}, {0x0}, {&(0x7f0000000340)=""/66, 0x42}, {&(0x7f0000000d40)=""/164, 0xa4}, {&(0x7f0000000880)=""/75, 0x4b}, {&(0x7f0000000900)=""/236, 0xec}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000a00)=""/129, 0x81}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0x9, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) dup2(r6, r6) 3.182843926s ago: executing program 4 (id=2506): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 3.032094907s ago: executing program 4 (id=2507): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000000)={r2}) (fail_nth: 2) 2.564008637s ago: executing program 4 (id=2508): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x6010000) 2.298157688s ago: executing program 1 (id=2510): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x15, 0x0, &(0x7f0000000100)) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0)) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000003600)=[{{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000006180)="e4d7a4ae8b46db", 0x7}], 0x1}}], 0x1, 0x4000) 2.24097892s ago: executing program 0 (id=2511): socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x8, 0x7, 0x0, 0x200003f0, 0xb02d], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000182c20000000000000000000000b8000000b80000eae70000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f0000e1ab14140000000000000000000084300400000000000000000000000041554349540000bcb92dff0000000000000800"/376]}, 0x1f0) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) bind$ax25(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0xb, 0x4) sendmmsg$inet(r2, &(0x7f00000021c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000540)="8510b0dfd17bcc1d6663e8b606de7af825b71072d66c397a0054406130f334e428f55d7c3a7dbe18bd3847e5340054535bcb75444b517eebe537d1cf1bd68d4e5adf608128afc3eb47c7294a18339b84068cda06916aa489da38495fdf8884869e6bac5ea7c6e7346d574398e0195343ddb3695a2694a7a17e9d3fcd8b00db15f8348da23ec361b8a96c4b57f456aa465d91b558335aa1626ed0db2bf5e402a37596de68a9af221ed1f717d3663f3960a5a4f047d988ca66ea62ca5395d2f4209db8a6dd158df155ca08501a63cb35e982fd3c4b32e71b4a9d4a01a1", 0xdc}, {&(0x7f0000000180)="39e746b14059c9a41e86e03a62bc0af8a33ed73f9f58f7f156ff72fad08732f06da1a9bb57542343e3cf66a91ab94375f7b2487cd0aa97ecc8", 0x39}, {&(0x7f0000000300)="433ad4b5b7600714cb02ce7046f1c408a096907d74358edba5ed7a5fd84820c4d09a4af8f66554fb951960dc62f7345064929c245862f4854ad1ecfa4db570b0a4445635413998d18890204870103d21e770af02b73aa9dea4222f0848ee8882a0c4aa0da55b22742d64e8f3c2310465f7320b95886089b1fdb8b1435801cda0172c1560dfe9bf48b3d7bb8022f19edc647eae35931c7ee1e5c0588b25c7a1a7", 0xa0}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="11000000000000000000000001000000020000000000000058000000b95000000000000007000000940400000707f1ac1414bb861000000000020a9581a3f4b4f2280314bb41c40001ac1414bb6401f002e0000002e0000002ac14142d0000f148e694a32131156617f9a276000094040100000014ee36640f387627a000"/136], 0x88}}, {{&(0x7f0000000280)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="33c785c27ab006c5d4621670", 0xc}, {&(0x7f0000001740)="3408c00536e55b7b24327dde3b78cdae3782a146f5895d112e1f9ecc3d0555cdaabfb22d9bc32447b2ce572efb592c4beb0b8f6c9a0d8ce9fadf91e5051c24a4a7bb010a7be82b21347537b8cb113a49f17e534bfca18ae41dce37e6f7856bf3e99d62bd5df7dc1c652313b13363afa20dfdbaace254a7d0e93f7a91f6252f3da026178ea186a618d9d32b4ac6456b4320565fa4", 0x94}, {&(0x7f0000001800)="3db1105f3d7d58517276d3d3e063b0a87d11b2e59f29c8051e09d6a895059525ee8e1f2d6bee58420b8961233e8dffe936a9baefcdbe2bbcfe0e3683184216941b6aecefbc51be927788d869beb78e7e43a070e421077d0475955db8c583ee0c286b5b5aec9506849e760ab602d1c8b5d5af26f51d02db6b8bb04c09769f2309d41deea000bf", 0x86}, {&(0x7f00000018c0)="ea878ad9c4e222d574f34558298bf6ce13f80ad5a43e8b82b00ca612851974e38f9ab03885cba08900780833a33100b6a86cd01ce288bb7c6698c2efc79eae", 0x3f}, {&(0x7f0000001900)}], 0x6, &(0x7f0000001d00)=ANY=[@ANYBLOB="14000000000000000030f9755e8e0242aaac96292d9a4a329e6b6798c47a7e77a895cd9ec8f99203c21111e3ab6326690791bc08a7e3f385baceeb28ed7df0e5217c6ca205000000000000000000000000000000000071208ec4c89962e6f6c940a1f2e97ba1006cf1fae1df3d0790c9df106a7e9dc04f5db20cb067ce42c570fbbb8ca5448c5e112f55a9e758cb3edb116597513e0ef60d816669a176aa4081189f2b92477acc2687188d058ac22c56f15e6ac27071418056"], 0x29}}, {{&(0x7f0000001900)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001a40)="06f7b2ec813085b3629c89aacfcb4023b530ed13ad5eb1d0813d773b90b44c17cb7c2471457475db032c12a5a0803767cea6c984de0e9ddaf62c5dda79eb9be04e4961b639540e4bb518b4a136", 0x4d}, {&(0x7f0000001ac0)="90b597036b7fb825af7f364d3c1948bd1fcc0c441017e64f09fa1f8830f9b580ecbf92eb4e438409a15dd947bc45d8347cd0f41b4cdfdda117c28c748a91bf2d451989979f247639cd7e619ebf3488bc2c51578d0c3473a9d263e1", 0x5b}, {&(0x7f0000001b40)="7eb011ea92d342d48ad14ed8bb7e3e7888c16f33b0ea3cfd45f28e3844fbfc552e6fd630198016571f72b335d2665e628e78bb3ec535bf697106013d04e0aee377fd68954de6d03a47975ee61da72f77", 0x50}, {&(0x7f0000001bc0)="98a6169b49a1c9e4b695b8c5091b7d8ab2ff4ea819176ad9cc0db0107ff8b37ad67428f878450b9c773800f25b291186af25f5ab66f19c21c14ceb75016bd59308cde0c9bf98d6e277fcb36d74676cb7bdedc2156f4d1803e33179fb119461a5e76350a64ddbdd20efd6f99f388fd75d52922a517f2c4ac63bbe9dcff128cc9cd5ed1831ad2820f681b28e830c77ba838466fef2f474e3373db01b93b8fcae86872412f9c2630438b7b50a58ae0247e7e94f65c4904db6c0667f4cc9280cd06ea4", 0xc1}], 0x4, &(0x7f0000001dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001e40)="9458f49f99b44bf1af34febef64d3b79a89bd025afefbcaeae00e46453f7e02a23e86faf9fefa5", 0x27}], 0x1, &(0x7f0000001ec0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}}}}], 0x20}}, {{&(0x7f0000001f00)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000002000)=[{&(0x7f0000001f40)="22ad00c6a692024af3aa98c30044cb1345bd608506389c1a9f28a3b044c7fa481efe38b5d336075b5f355cabc25883c14f69c6e896f1e46feef48a0236ac251238176c914b10023b6268f06c76dc9d423480de18d8328ff5252696db8c6d0fec41178588ddfff16eb4020727709b07cbb6150fade2acb3d6aaf472b1750be84b724dfff622d14816", 0x88}], 0x1, &(0x7f0000002040)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa7f00000100000000"], 0x150}}], 0x5, 0x20004081) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000040008100000002000000200001801400040000000000000000000000ffffac1414aa060001000a"], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.187984965s ago: executing program 1 (id=2512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioperm(0x0, 0xf4, 0x10000007f) socket$nl_generic(0x10, 0x3, 0x10) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffff001) listen(r1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b00010000000009040000012ec25d000905d891"], 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}}, 0x40) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x2, 0x1000103d, 0xffffffffffffffff, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaae8adaa2118fbbaaaaaaaaaaaaaaaadc92aa86dd6000000000180600fe8000000000000000000000000000bbfe80fc000000000000000000000000aa4e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="64c20000907800001e0401a1"], 0x0) 2.006762971s ago: executing program 0 (id=2513): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802001400000000000000000000000085000000970000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0xa654, "49eb663cea3b03e971a2211a078c9675b78a9f47fda1db33533dbeae2449fbb8", 0x4, 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2300, 0x0) 1.947810234s ago: executing program 0 (id=2514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x17, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x95) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) readv(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) socket$netlink(0x10, 0x3, 0x12) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000280)={0x1, 0x3, 0xa, {0x7, 0x8, 0x2, 0x90000}}) r9 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x1c8012, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9da}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, @jmp={0x5, 0x0, 0x6, 0x5, 0x2, 0x4, 0x1}, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000700)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000b00)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x3, 0xbb, 0xe}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000800)=[r2, 0xffffffffffffffff, r2, r2, r2, r4, 0x1], &(0x7f0000000840)=[{0x4, 0x1, 0x3, 0x3}, {0x3, 0x4, 0x6, 0x3}, {0x5, 0x5, 0xb}, {0x4, 0x1, 0x1, 0xc}, {0x2, 0x4, 0x1}, {0x4, 0x4, 0x1, 0x1}, {0x2, 0x5, 0x9, 0x8}, {0x0, 0x5, 0xc, 0x1}], 0x10, 0x80, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet6(r9, &(0x7f0000000ac0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0xff00) socket$netlink(0x10, 0x3, 0xb) close_range(r7, 0xffffffffffffffff, 0x0) 1.534761444s ago: executing program 0 (id=2515): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x400, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xe, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x80, 0x2, 0x8, 0x8, 0x6, 0xafb8}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x412bdadda1bbbc15}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x51}, 0x31c6d6e942e24b9a) r2 = dup(0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x4c}}, 0x0) close(r3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r5, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x4, 0x0, @random="48bd00"}, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000001c0)="d41460a57d7d425716b52939c7") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000018001101e442cc2984f9daa24927fb4e0e01000000000000000a000000ff000006000a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) 1.528900596s ago: executing program 5 (id=2516): syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) read$usbfs(r3, &(0x7f0000000000)=""/161, 0xa1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @rand_addr=0x64010100}, 0xb}}, 0x26) sendmmsg$inet(r8, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) ioctl$TCSETS(r2, 0x5402, &(0x7f0000010400)={0x2, 0x614, 0x7, 0xffffffff, 0x9, "972c700500141000000000002000052c707400"}) ioctl$TIOCSTI(r3, 0x5412, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000800000000000000", @ANYRES32, @ANYRESDEC], 0x48) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1b0, r9, 0x5912418525cbde76, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2c}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9d3ae60bfbd24b5b59f5212ab64d0477532da56c62a5e9f3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b9ccb52cded04ece35d8d40133d9ae9217d293aa91c8c2e5"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9f3fabb21ee2d86e1d5ea8deaa647c236daadef29d56e398"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4843db1f8ce486375144475cf3338a267994207530ed50df"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0094a5faaf844cee8517c36849e5194482647351d1080533"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9e2627b093551192dd264e54e4667f9ec5000c1782f073c7"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "aea9ebb48760e4ada788760628691b30ad66448a67f7e226"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x1b0}}, 0x48000) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) 1.52801588s ago: executing program 4 (id=2517): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c972e7810000104060a00000000400000000000", @ANYRES32=r1, @ANYBLOB="000000004000000004002b800500270000000000"], 0x2c}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x1001f9d, &(0x7f0000000640)={0x0, 0xfffffffa, 0x8000, 0x3, 0x1}, &(0x7f00000001c0), &(0x7f00000005c0)) unshare(0x400) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r5}, 0x0, 0x0) unshare(0x8010400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000003c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000300), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000040)={r12, r10, r11, 0x2000000, 0xffffffff, 0x80000001, 0x0, 0x0, 0xfffffffc, 0xd, 0x20000}) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) 1.483592035s ago: executing program 1 (id=2518): r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) fcntl$setflags(0xffffffffffffffff, 0x3, 0x0) syz_usb_connect(0x4, 0x4f3, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0xbf, 0x7d, 0x83, 0x10, 0xaf0, 0x6761, 0xea0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e1, 0x2, 0x5, 0x9, 0x80, 0x3, [{{0x9, 0x4, 0x5e, 0x5, 0x0, 0x8f, 0x66, 0x53, 0x4, [@hid_hid={0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xe18}}]}}, {{0x9, 0x4, 0x8, 0x7, 0xd, 0x31, 0xce, 0xe5, 0x7f, [@generic={0xe2, 0x8, "31ba91fe54d4b1769ff5dd717ef7e7bd96e28a229c2c68c771eeb6f834b581622965cf4040f84e89842ad598362b43bdefc724241ca0e7c918c4b7b1d30544cc639ff0bc7fceee7ae1621f49d84bc67f31f9cf6d7c205d3db0b689327893c2c65b10ba7c694d2b19e9fabc0689e64fcf7b8e92371336ddefc4478e97387a23428a98c232578ee1e78f0f6a4babc2886f4d13995bef5ed790558ab08325e2b39d15934593bb28d0859eeb7d0c4c6f5258e888ffaf0d05432ae55669fc3d09274e80e22ef81dad6a7b45c97b692af92a674ba91bae24c314b0b22301af6d938151"}], [{{0x9, 0x5, 0x2, 0x10, 0x210, 0x7, 0x55, 0x1}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0xc, 0x1, 0x3, [@generic={0x89, 0xc, "c2e3693a501ab2c7c9e2f521f57c7f299c2a55c509cd6a70ae996d5039ad06216757371cb34dce49f80ea4aecb19d0ef5313efe53657575179c999aa1e4f6027de31e08cb94ebb4cf5f1b74497bf5563312a8cc48cef5d507f7523d078927e6b28a29d2ae8466c6387f5e929d591bd84cefc7ee43417ee4e40c8602b08cb30de2d7e4e53f24e76"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3d7, 0x2, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc3, 0x6, 0x1}, @generic={0x46, 0x1, "89be6b2cae05c4d4d23375c41117fa529f5631c34e6366eeba3824e40860474de256256b0fae61d10ad6a3cc39e17315f501728f3e172013e762eee3b38b8c36e906ce1c"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xc, 0x52, 0x7, [@generic={0x1e, 0x27, "f9c5e82dc02a87df2c9223afe259513978eb900d2f34db960620184d"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x240, 0x0, 0x9, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf5}, @generic={0x4e, 0x9, "245daf231b1c377158738b2e934b7dd344ddfb2f173c1298d0ebe532209816ec281f5a009594909e30ea9594d936e90c936d10ec6e6e153a6cd0dbf32a5959f4f72769a5dced627064d9d464"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x7f, 0x4, 0x6c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x9, 0x1a, [@generic={0xe9, 0xa, "47efbd8c7d9dbab889875567070dc9e060eaf232cb5ed59a5322d76757be7c41c775c2bd52d78a11aafd03fd0bb62e4d82f3d6a3d4d67992bcd0802ff5a90bdacfe1ccdd4bcce233ca6f8a3104f5c46e4d334d6db1a245d651935ba4f16c0e2b6c76378fd9517f5174d12daf7dc5bb36e1a298c0fb13107f8a4369b42eff9e5ffc7748a0cee86541a1cce64fb7694959ee0cb76d309baadfc108209274fe43b23f25f8c54f71a62276ee480498565c9dc839be17ae33ee0a0caece0171da9fd95ae323de8a5276bffb1e8cf0afe5bba826649daedf6d4f2f30965d3372e0ab3024a47f8f455387"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0xb, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xcc1}, @generic={0x85, 0x24, "964be00074d25420ae1261268a0cde3573a8a73c2fcb923fce8f0b8646120e969c0c646a7f9bb89a1fbcd6b2c39358d3ac9ee7a976281240b1dca0ef87584899bd787d7ff3455e87ff0076f674545acbcf025961653c1fbc9a7c0730a164515e601f0c6f598e28cd2b47eb1590638102840084adf58efc94b3710b6ba6c810e34689ff"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x85, 0xf9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x0, 0x7d, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5a, 0x6}]}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0xc3, 0x9, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x20}, @generic={0x77, 0x22, "70078daea10046fd62ff47be03bb95c0592b0d5fd06579d2d9c977e63c7bf5d7cd06a7b4d732a7757dad823a845ec2fdf75d1f9c6851880092ffce4940ee3613cbc0b763d830607e8b49204899e2a61046dbc42e86393c18ea7d9b3f7f71399653c87ee7cff777d0a8d128aa148a6f5b22489f447a"}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x6, 0x7, 0x3, 0x8, 0x1}, 0x91, &(0x7f0000000640)={0x5, 0xf, 0x91, 0x3, [@generic={0x5e, 0x10, 0xa, "da2818167834dbf1a265ef5b1a085d598a800ec7eaa6f892d6c3882513004de032a4aee0a25374cd3968783a4bd6361f8591c68f92561d4a6a5afed1fa33f086989605a59cc9f6a1449f4d3bc646bfcfbec0dea5ac101fc1ee4df9"}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x215, 0x9c973e2118727b7b, 0x8, [0xff0000, 0xf, 0x1814060, 0xff0000, 0xff3ff0]}, @generic={0xe, 0x10, 0x2, "2813cbdc49dc7cc839ac9d"}]}, 0x8, [{0x31, &(0x7f0000000040)=@string={0x31, 0x3, "7999527d41d7c3820c0c04f3116d90606c93437a95eb8b6ccc7b5b825cc357e65e2e53be97a4e6b79fe7a57fbb6769"}}, {0xef, &(0x7f0000000700)=@string={0xef, 0x3, "144daa981b97ea0c295655e15ded205086dac37d62ed105d2af1c560d4c7169e691d2479da3845752dde77ccbfd815b0983cf88804734c8361e5c28fd299ef79186f87f23cee4bba7aca76ea3c736f311491422286dee80850dcc7a0e13b37ec202a0f449807195e8e69c1920d93d9efecdb56c4e590197b779aa1790a6b5bdfe4d7b993e5f737555fe8417237db58afcc6e49353b0ff60c3f1bb33493d52a578ea6f189c259160292ffd45e3610d72a4720f11c9e03d7a2dbae7fc38fffd981c519302188937493c7f4ea9f53212aacae564ea10224842c22a0fe0850214e2ab0e84c40308f468852d36a88bd"}}, {0x73, &(0x7f0000000800)=@string={0x73, 0x3, "ec1d6b9bc49b7092d622a616922ceff8237100bf303e626277b0b62e839acc51659416b6d7697d62eda8aadbd5f047fdaa6b4e8b9825e79a4ce7a9730c9170289aa709408ba47f193f7827f0a6fb071acb161ee4f258d460294619a2b9c6091b5421fda3c45a74fbf2d62ba139e77d5b75"}}, {0xdc, &(0x7f0000000880)=@string={0xdc, 0x3, "206754fc7cd3de9ddc7b4417a1f1919a6d5554678a9f6a9d7811ee5711c5c2bd2a573cf4edd8a4c4571e228fca047dc91cef7a97908245b3ae9e697d26c2a78d11e5b77d2b3419c9a5c96c37489117d7e138abe47ef7ff2424e1d6547a2454090ff2f1b4d0a3f1f2a26117c7a443b1e55a17e27ea51d1632f23de2622da83c5af0f6de7093cf4683f528ed48bede88778105f0334f1d052d7a5ac5a94ae7723e7dc31a484e85da655fae81702891cb8e68a98a8a7b92775f17948a1232065d8290b7ac6642fc5916c70a80b777537fa99277fab97aededa27cfb"}}, {0x44, &(0x7f0000000980)=@string={0x44, 0x3, "e868d6ff9da77baf3ea0edd26bfec364aebf3e3a929a2d35ce14b4b46fb9e7afeeb1cadc4fc34cf1bfc240d9d852f0bee301e5c728c4937148ba00f51e50e766bf78"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x438}}, {0x95, &(0x7f0000000a40)=@string={0x95, 0x3, "cb5e4824a3ece60f8edd52bc33df105f7d15bff79392dab60a00b35944f0c0ef5b0ecaf769d98698b963213af4b40e053e62f0a641a2cab87857e7ebff7ba5bce493a0cba3b06cfc1f2c83d5ca5bf5fdbfdc9910cd9c891a5afdcde2a13c721d7123b47c75a42b7145bd27d529e6b1b0a1d5e01a765563264326484c4e6b7764ac22894decfc87a9482807a07f8fd00a039d25"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x440a}}]}) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000bc0), &(0x7f0000000c00)={'syz', 0x3}, &(0x7f0000000c40)="bedcd27dfcffb746aa99b9c069190003e801347a3ef9a6b339a79e36c35fd22b2e02c71037eef1c01dc7011f7a49ca2690512d509e73862b993c39bd6dac2864ea15a67d4dcd", 0x46, 0xfffffffffffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0002, 0xf0, 0xfffffffffffffe17, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = dup(r2) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000b76000/0x4000)=nil, 0x4000}, 0x1}) ioctl$CEC_DQEVENT(r6, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xd0}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) keyctl$describe(0x6, r1, &(0x7f0000000cc0)=""/255, 0xff) sendto$inet6(r0, 0x0, 0x0, 0x4045, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x18, 0x0, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 1.29003909s ago: executing program 0 (id=2519): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000000c0), 0x4f) prlimit64(0x0, 0x2, &(0x7f00000000c0)={0x5, 0x1000087}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x20000) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000001280)={0x7, @pix_mp={0x10000, 0x800, 0x20323159, 0x1, 0x5, [{0xff, 0xe85c}, {0x943, 0x8bbc043}, {0x8, 0x9}, {0xe, 0x7fffffff}, {0x1, 0xfffffffd}, {0x39, 0x4}, {0x9, 0x2}, {0x400, 0x501}], 0xcc, 0x3, 0x8, 0x1, 0x1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r4, 0x4000}], 0x1, 0x4) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000080)=0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002c80)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) read(r5, &(0x7f0000000440)=""/70, 0x46) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) 456.702451ms ago: executing program 4 (id=2520): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000002cc0)={0x10, 0xfffffff2, {0x53, 0x7, 0x7, {0x4bb, 0xfff}, {0x4, 0xe}, @const={0x8, {0xfffc, 0x7}}}, {0x55, 0xc, 0x94b, {0x313, 0x8d}, {0xfe00, 0x5b1}, @cond=[{0x4, 0x1, 0x8001, 0x0, 0x6, 0x3}, {0x57, 0x3d, 0xfff, 0x2, 0xfff, 0x3}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x1, @local, 0xd0}}, 0x0, 0x0, 0x5, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd5c, 0x20000045, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x200000, &(0x7f0000006680)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r3, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2b}}}], 0x18}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) ioctl$TIOCL_SELLOADLUT(r8, 0x541c, &(0x7f0000000000)={0x5, 0x9, 0x8, 0x100, 0x2}) splice(r7, 0x0, r5, 0x0, 0x620000f, 0xc) 113.200121ms ago: executing program 4 (id=2521): epoll_create1(0x80000) (async) mlockall(0x7) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x27a) (async, rerun: 32) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 32) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800dfe83eb731fc30bd0000feffff10850000040700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) write$qrtrtun(r0, &(0x7f0000000180)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f8525", 0x1e) (async) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r4, 0x708, 0x2) (async) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x1, 0xfc, 0x1, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) (async) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x2) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) close(0xffffffffffffffff) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x68, r8, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @probe_request={{{}, {}, @device_b, @device_b}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x95ce, 0xe9}}, @val={0x72, 0x6}}}]}, 0x68}}, 0x14) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000100)={0x6, [0x1, 0x0, 0x2, 0x2, 0x1, 0x5, 0x0, 0x2, 0x7, 0x10, 0x0, 0x2, 0x7, 0x3, 0xf, 0x8, 0x7, 0x22, 0x3, 0xcc, 0x1, 0x9, 0x5, 0x3, 0x7, 0xff00, 0x0, 0x8, 0x0, 0xb, 0xc, 0x5, 0x8000, 0xf, 0xd4b, 0x5, 0x8, 0x3, 0xfff, 0x3e, 0x10, 0x7, 0x7, 0x43e, 0x5, 0x0, 0x2, 0x2], 0x7}) (async) write$FUSE_IOCTL(r0, &(0x7f0000000240)={0x20, 0xffffffffffffffda, 0x0, {0x18d, 0x0, 0x74, 0xfff}}, 0x20) (async) fanotify_init(0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000bc0)={'#! ', './file0', [{0x20, '(\xe3-'}, {0x20, '\x00'}, {0x20, '-\'\'%:{'}], 0xa, "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"}, 0x198) (async) write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async) write$qrtrtun(r0, &(0x7f00000003c0)="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", 0x277) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 11.40678ms ago: executing program 0 (id=2522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r1, 0x0) unlinkat(r2, &(0x7f0000000080)='./file2\x00', 0x200) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r6}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r9, &(0x7f00000008c0), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 9.916745ms ago: executing program 3 (id=2523): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x73) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snddsp(r3, &(0x7f0000000740)=""/56, 0x38) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) fsopen(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x4) lseek(0xffffffffffffffff, 0x8, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x15) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x0, 0x7ff}, 0x40000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x2abe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4000, 0x2c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x4, 0x401], [0x0, 0xfffffffe, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x3, 0x0, 0x0, 0x9, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xa64e, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x3], [0x8000, 0x1, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x200, 0x3, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x69]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) setresuid(0xee01, 0xee01, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e00)=ANY=[@ANYBLOB="280600002d000100000000000000000006"], 0x628}], 0x1}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 0s ago: executing program 1 (id=2524): gettid() r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000740), 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x8, 0x10, 0x7, 0x9}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000808000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63c2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, 0x0, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r5}, 0x10) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x31}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc80) connect$can_bcm(r3, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r7, 0x9, 0x0) iopl(0x3) syz_open_dev$vcsn(0xfffffffffffffffe, 0x0, 0x0) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r8, &(0x7f00000002c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '\x13b\x1b\xc7M\x9f\x80\xcef\xfe\x01\xce\\x0+#\xd1\tydh3@\x02*7\x1d\xe1\x95\xf8\xd55\xed\r\xcc\xde(\a\x1bs\xd86\xf1\xa3?\x839?_{\x86\xbf\xac\xc5\x1fD\xd0\x91\x10\xcf\ak\xe2\xa8\x8f>\xd0h\xbf\n\xaf\xc3O\xb2<\x9f}R\x98k\x9di\xcc\x9d\x8f\xcf+\x01\xf9\xa4T\xcbYr\x17\xb7\xbdP%Q\xbb\x88\x15\x01\xfc\x02I\\\xeb\xd6-\\V\xf3\xd1,Q\x1cb\x15\xaf5\xd3\xe8p\x94\xe2c0\x85\x11\x93\xe4\x95x\xe5\x91\xcaA\xe3^\xbd\x88{\xce\xe2\xf3\xfbcM86\x1a\x14O\xf4n\t\t+\x81(A^P\x7fJ\x06\xca\xb3 PS\xe72r~\xc59r\xf8K\f\xb0#\xae\x1fl\"\xd9\xc1\xb4\x88', 0x3a, ':dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xfe) kernel console output (not intermixed with test programs): 5" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 705.650793][ T5868] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 705.710233][ T5868] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 705.735110][ T29] audit: type=1400 audit(1735894395.956:1157): avc: denied { ioctl } for pid=13642 comm="syz.3.1975" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 705.791011][ T5868] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 705.798676][T13180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.814356][T13180] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.824138][ T5868] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 705.840962][ T5868] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 705.872318][ T5868] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 705.890495][ T5868] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 705.954528][ T5868] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 706.028072][T13180] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 706.028236][ T5868] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 706.049595][T13180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.060662][T13180] usb 3-1: config 0 descriptor?? [ 706.229786][ T5868] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 706.413893][ T5868] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 706.431645][ T5868] usb 1-1: USB disconnect, device number 54 [ 706.591296][ T29] audit: type=1400 audit(1735894397.036:1158): avc: denied { setopt } for pid=13633 comm="syz.1.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 706.772468][ T29] audit: type=1400 audit(1735894397.216:1159): avc: denied { setopt } for pid=13654 comm="syz.4.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 706.791931][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.230860][ T8] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 707.325511][T13638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.343226][T13638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.367793][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'. [ 707.419583][T13180] usbhid 3-1:0.0: can't add hid device: -71 [ 707.425642][T13180] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 707.442881][T13180] usb 3-1: USB disconnect, device number 43 [ 707.478409][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 707.544587][T12201] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 707.563147][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.574186][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.584544][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 707.594003][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.611868][ T29] audit: type=1400 audit(1735894398.006:1160): avc: denied { read } for pid=13665 comm="syz.0.1980" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 707.644497][ T29] audit: type=1400 audit(1735894398.096:1161): avc: denied { read } for pid=13665 comm="syz.0.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 707.672096][ T8] usb 4-1: config 0 descriptor?? [ 707.677477][ T29] audit: type=1400 audit(1735894398.126:1162): avc: denied { connect } for pid=13665 comm="syz.0.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 707.703714][ T8] hub 4-1:0.0: USB hub found [ 707.848479][ T29] audit: type=1400 audit(1735894398.296:1163): avc: denied { name_bind } for pid=13673 comm="syz.1.1982" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 707.896429][ T8] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 708.170564][ T5905] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 708.336276][ T29] audit: type=1400 audit(1735894398.786:1164): avc: denied { read } for pid=13677 comm="syz.2.1984" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 708.359402][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.351399][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.362440][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.373235][ T5905] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 709.375668][T13690] hsr0: entered promiscuous mode [ 709.382501][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.592653][ T5905] usb 5-1: config 0 descriptor?? [ 709.601626][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 709.610596][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 709.632887][T13696] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 709.694713][ T8] usb 4-1: USB disconnect, device number 67 [ 710.122032][ T5905] hid (null): bogus close delimiter [ 710.471765][T13705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 711.112737][ T8] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 711.230073][ T935] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 711.350070][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 711.360406][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.375805][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.379901][ T935] usb 2-1: Using ep0 maxpacket: 32 [ 711.387507][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 711.393448][ T935] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.403678][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 711.421693][ T935] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.425071][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.433856][ T935] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 711.448250][ T8] usb 3-1: config 0 descriptor?? [ 711.532179][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.646851][T13670] kvm: apic: phys broadcast and lowest prio [ 711.667732][ T5905] uclogic 0003:256C:006D.0010: v1 frame probing failed: -71 [ 711.669648][ T935] hub 2-1:4.0: USB hub found [ 711.675149][ T5905] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 711.675208][ T5905] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 711.703369][ T5905] usb 5-1: USB disconnect, device number 48 [ 711.764500][T13722] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1992'. [ 711.778241][T13722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1992'. [ 711.969042][ T8] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 712.019963][ T8] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 712.080032][ T8] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 712.239036][ T935] hub 2-1:4.0: 30 ports detected [ 712.244159][ T935] usb 2-1: selecting invalid altsetting 1 [ 712.250010][ T935] hub 2-1:4.0: Using single TT (err -22) [ 712.256000][ T935] hub 2-1:4.0: config failed, can't get hub status (err -5) [ 712.288217][ T935] usb 2-1: USB disconnect, device number 65 [ 712.408839][ T8] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 712.458215][ T8] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 712.496596][ T8] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 712.504024][ T8] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 712.569574][ T8] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 712.596927][ T8] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 712.635638][ T8] microsoft 0003:045E:07DA.0011: No inputs registered, leaving [ 712.700637][ T8] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 712.723322][ T8] microsoft 0003:045E:07DA.0011: no inputs found [ 712.729677][ T8] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 712.738557][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 712.738569][ T29] audit: type=1326 audit(1735894403.166:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.3.1994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c0ab85d29 code=0x0 [ 712.807487][ T8] usb 3-1: USB disconnect, device number 44 [ 714.014114][ T29] audit: type=1400 audit(1735894404.466:1172): avc: denied { create } for pid=13731 comm="syz.0.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 714.076912][ T29] audit: type=1400 audit(1735894404.466:1173): avc: denied { ioctl } for pid=13731 comm="syz.0.1996" path="socket:[52483]" dev="sockfs" ino=52483 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 714.125816][T13749] loop7: detected capacity change from 0 to 16384 [ 714.914489][ T29] audit: type=1400 audit(1735894405.366:1174): avc: denied { setopt } for pid=13761 comm="syz.3.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 714.941621][T13763] SELinux: syz.2.2005 (13763) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 714.960000][ T29] audit: type=1400 audit(1735894405.406:1175): avc: denied { write } for pid=13761 comm="syz.3.2006" name="net" dev="proc" ino=51940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 714.982024][ T29] audit: type=1400 audit(1735894405.406:1176): avc: denied { add_name } for pid=13761 comm="syz.3.2006" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 715.002829][ T29] audit: type=1400 audit(1735894405.406:1177): avc: denied { create } for pid=13761 comm="syz.3.2006" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 715.023704][ T29] audit: type=1400 audit(1735894405.406:1178): avc: denied { associate } for pid=13761 comm="syz.3.2006" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 715.130085][ T935] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 715.179980][ T8] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 715.240213][ T6470] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 715.280003][ T935] usb 5-1: Using ep0 maxpacket: 16 [ 715.287882][ T935] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 715.298302][ T935] usb 5-1: config 0 has no interface number 0 [ 715.305846][ T935] usb 5-1: config 0 interface 148 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 715.321433][ T935] usb 5-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 715.331780][ T935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.341394][ T935] usb 5-1: config 0 descriptor?? [ 715.346877][T13753] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 715.362479][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 715.395924][ T7725] udevd[7725]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.415168][ T6470] usb 3-1: Using ep0 maxpacket: 32 [ 715.428559][ T6470] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 715.445045][ T6470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.476524][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.489650][ T8] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 715.499328][ T6470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.517012][ T8] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 715.526216][ T6470] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 715.526243][ T6470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.544309][ T6470] usb 3-1: config 0 descriptor?? [ 715.560048][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.568065][ T8] usb 1-1: Product: syz [ 715.572279][ T8] usb 1-1: Manufacturer: syz [ 715.576873][ T8] usb 1-1: SerialNumber: syz [ 715.688130][T13180] usb 5-1: USB disconnect, device number 49 [ 715.753887][T13765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.766405][T13765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.334036][T13775] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13775 comm=syz.0.2004 [ 717.580539][T13789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.590008][T13789] team0: Port device batadv0 added [ 717.699916][ T29] audit: type=1400 audit(1735894407.476:1179): avc: denied { write } for pid=13776 comm="syz.3.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 717.739933][T13773] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 717.791265][ T29] audit: type=1400 audit(1735894408.216:1180): avc: denied { audit_write } for pid=13792 comm="syz.3.2012" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 717.934487][T13773] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 717.946947][T13773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 717.958518][T13773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 717.960070][T13180] usb 1-1: USB disconnect, device number 55 [ 717.981564][T13773] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 718.003546][T13773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.026760][T13773] usb 2-1: Product: syz [ 718.039945][ T935] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 718.049492][T13773] usb 2-1: Manufacturer: syz [ 718.058058][T13773] usb 2-1: SerialNumber: syz [ 718.068774][T13773] usb 2-1: config 0 descriptor?? [ 718.079658][T13773] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 718.200587][ T935] usb 4-1: Using ep0 maxpacket: 8 [ 718.217790][ T935] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 718.227436][ T935] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 718.267793][ T935] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 718.390429][ T935] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 718.454463][T13773] usb 2-1: USB disconnect, device number 66 [ 718.528603][ T935] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 718.595151][ T935] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 718.606373][ T935] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 718.720102][ T935] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 718.733497][ T935] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 718.744840][ T935] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 718.762724][ T935] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 718.771601][ T935] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 718.812116][ T935] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 718.924707][ T935] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 718.935901][ T935] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 718.963437][ T935] usb 4-1: string descriptor 0 read error: -22 [ 718.970695][ T935] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 718.979778][ T935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.123032][ T935] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 719.323737][T13793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.451232][T13793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.504187][ T8] usb 4-1: USB disconnect, device number 68 [ 719.686531][T13806] sit1: entered promiscuous mode [ 719.716991][T13806] sit1: entered allmulticast mode [ 719.723107][ T29] audit: type=1400 audit(1735894410.156:1181): avc: denied { setopt } for pid=13792 comm="syz.3.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 719.853699][T13800] syz.0.2014 (13800): drop_caches: 2 [ 719.978392][ T6470] usbhid 3-1:0.0: can't add hid device: -71 [ 719.984788][ T6470] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 720.003407][ T6470] usb 3-1: USB disconnect, device number 45 [ 720.030920][ T29] audit: type=1400 audit(1735894410.466:1182): avc: denied { getopt } for pid=13807 comm="syz.1.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 720.094587][ T29] audit: type=1400 audit(1735894410.546:1183): avc: denied { getopt } for pid=13809 comm="syz.4.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 720.192126][ T29] audit: type=1400 audit(1735894410.596:1184): avc: denied { name_bind 0x1000000 } for pid=13809 comm="syz.4.2018" path="socket:[52585]" dev="sockfs" ino=52585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 721.000499][ T29] audit: type=1400 audit(1735894411.436:1185): avc: denied { bind } for pid=13826 comm="syz.2.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 721.030058][ T29] audit: type=1400 audit(1735894411.436:1186): avc: denied { node_bind } for pid=13826 comm="syz.2.2024" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 721.445494][T12201] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 721.701006][ T29] audit: type=1400 audit(1735894412.156:1187): avc: denied { bind } for pid=13840 comm="syz.1.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 721.720503][ T8] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 721.756378][ T29] audit: type=1400 audit(1735894412.156:1188): avc: denied { name_bind } for pid=13840 comm="syz.1.2027" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 721.777850][ T29] audit: type=1400 audit(1735894412.156:1189): avc: denied { node_bind } for pid=13840 comm="syz.1.2027" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 721.860164][ T6470] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 721.888768][ T8] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 721.902604][ T8] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 721.920113][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 721.936138][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 721.957230][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 721.972273][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 722.000001][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 722.016005][ T8] usb 1-1: string descriptor 0 read error: -22 [ 722.028396][ T8] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 722.038573][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.048611][ T6470] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 722.066701][ T6470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.067181][ T8] usb 1-1: config 0 descriptor?? [ 722.100073][ T6470] usb 4-1: Product: syz [ 722.105898][ T6470] usb 4-1: Manufacturer: syz [ 722.116474][ T6470] usb 4-1: SerialNumber: syz [ 722.121377][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 722.135553][ T6470] r8152-cfgselector 4-1: Unknown version 0x0000 [ 722.143130][ T6470] r8152-cfgselector 4-1: config 0 descriptor?? [ 722.156641][ T8] hub 1-1:0.0: probe with driver hub failed with error -5 [ 722.191148][ T8] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input110 [ 722.383467][ T8] usb 1-1: USB disconnect, device number 56 [ 722.434129][ T6470] r8152-cfgselector 4-1: Unknown version 0x0000 [ 722.448194][ T6470] r8152-cfgselector 4-1: bad CDC descriptors [ 722.473950][ T6470] r8152-cfgselector 4-1: USB disconnect, device number 69 [ 722.913430][T13846] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 722.927024][ T29] audit: type=1400 audit(1735894413.366:1190): avc: denied { mount } for pid=13844 comm="syz.4.2028" name="/" dev="ramfs" ino=52731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 723.005142][T13852] SELinux: failed to load policy [ 723.050147][ T29] audit: type=1400 audit(1735894413.456:1191): avc: denied { load_policy } for pid=13844 comm="syz.4.2028" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 723.070421][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.274977][ T29] audit: type=1400 audit(1735894413.726:1192): avc: denied { mounton } for pid=13861 comm="syz.0.2033" path=2F3431312FE91F7189591E9233614B dev="tmpfs" ino=2228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 723.669889][ T29] audit: type=1400 audit(1735894414.116:1193): avc: denied { read } for pid=13861 comm="syz.0.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 724.701941][ T29] audit: type=1400 audit(1735894415.156:1194): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 725.430145][ T29] audit: type=1400 audit(1735894415.876:1195): avc: denied { mounton } for pid=13884 comm="syz.1.2041" path="/414/file0" dev="tmpfs" ino=2275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 725.502989][T12201] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 725.512375][T12201] Bluetooth: hci1: Injecting HCI hardware error event [ 725.522702][ T5828] Bluetooth: hci1: hardware error 0x00 [ 725.740197][ T935] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 725.890747][T13894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2043'. [ 726.017131][ T935] usb 5-1: Using ep0 maxpacket: 16 [ 726.029520][ T935] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.040771][ T935] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 726.077307][T13900] veth0_macvtap: left promiscuous mode [ 726.078538][ T935] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 726.254825][T13900] macvtap0: refused to change device tx_queue_len [ 726.263876][ T935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.965893][ T935] usb 5-1: Product: syz [ 727.048854][ T935] usb 5-1: Manufacturer: syz [ 727.147124][ T935] usb 5-1: SerialNumber: syz [ 727.329351][ T29] audit: type=1400 audit(1735894417.776:1196): avc: denied { execute } for pid=13892 comm="syz.3.2043" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=53324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 727.802949][ T5828] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 727.811592][ T29] audit: type=1400 audit(1735894418.266:1197): avc: denied { name_connect } for pid=13912 comm="syz.3.2050" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 727.990297][ T935] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 728.150176][ T935] usb 3-1: Using ep0 maxpacket: 16 [ 728.163782][ T935] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.245366][ T935] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 728.314436][T13928] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13928 comm=syz.4.2038 [ 728.314558][ T935] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 728.397051][ T935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.624757][ T935] usb 3-1: Product: syz [ 728.628956][ T935] usb 3-1: Manufacturer: syz [ 728.640061][ T935] usb 3-1: SerialNumber: syz [ 728.680738][T13930] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20000 [ 728.700626][T13930] batadv0: entered promiscuous mode [ 729.557725][ T935] usb 5-1: USB disconnect, device number 50 [ 730.504005][T13957] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13957 comm=syz.2.2048 [ 731.214605][ T29] audit: type=1400 audit(1735894421.666:1198): avc: denied { read } for pid=13963 comm="syz.3.2064" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 731.395018][ T29] audit: type=1400 audit(1735894421.666:1199): avc: denied { create } for pid=13963 comm="syz.3.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 731.625217][ T29] audit: type=1400 audit(1735894421.696:1200): avc: denied { write } for pid=13963 comm="syz.3.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 731.906063][T13984] overlay: filesystem on ./bus not supported as upperdir [ 732.512336][ T935] usb 3-1: USB disconnect, device number 46 [ 733.158293][T14001] fuse: Bad value for 'fd' [ 733.274109][T14005] syzkaller0: entered promiscuous mode [ 733.279630][T14005] syzkaller0: entered allmulticast mode [ 734.470787][ T29] audit: type=1400 audit(1735894424.926:1201): avc: denied { setopt } for pid=14027 comm="syz.0.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 734.509739][ T29] audit: type=1400 audit(1735894424.946:1202): avc: denied { setopt } for pid=14027 comm="syz.0.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 734.840605][T14034] kvm: pic: non byte write [ 735.561682][T14041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2084'. [ 736.381391][T14047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2085'. [ 738.015948][ T29] audit: type=1400 audit(1735894428.456:1203): avc: denied { read } for pid=14058 comm="syz.1.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 739.041927][ T29] audit: type=1326 audit(1735894429.036:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.4.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff385d29 code=0x7ffc0000 [ 739.281902][ T29] audit: type=1326 audit(1735894429.036:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.4.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff385d29 code=0x7ffc0000 [ 739.305502][ T29] audit: type=1326 audit(1735894429.036:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.4.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc5ff385d29 code=0x7ffc0000 [ 739.337764][ T29] audit: type=1326 audit(1735894429.036:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.4.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff385d29 code=0x7ffc0000 [ 739.361852][ T29] audit: type=1326 audit(1735894429.036:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.4.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff385d29 code=0x7ffc0000 [ 739.385468][ T29] audit: type=1326 audit(1735894429.036:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.4.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5ff385d29 code=0x7ffc0000 [ 739.409269][ T29] audit: type=1326 audit(1735894429.036:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.4.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff385d29 code=0x7ffc0000 [ 739.433252][ T29] audit: type=1326 audit(1735894429.046:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.4.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff385d29 code=0x7ffc0000 [ 739.456880][ T29] audit: type=1326 audit(1735894429.046:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.4.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc5ff385d29 code=0x7ffc0000 [ 740.621711][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2095'. [ 740.641295][T14093] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.650151][T14093] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.657828][T14093] bridge0: entered allmulticast mode [ 740.720333][ T5905] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 741.586941][T14099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2100'. [ 741.969910][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 741.989906][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.003907][ T5905] usb 4-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 742.028496][T14111] input: syz0 as /devices/virtual/input/input111 [ 742.230562][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.269917][T14113] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2103'. [ 742.390217][ T5905] usb 4-1: config 0 descriptor?? [ 743.139552][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 743.139568][ T29] audit: type=1400 audit(1735894433.586:1240): avc: denied { listen } for pid=14126 comm="syz.1.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 743.234916][ T5905] ntrig 0003:1B96:000C.0012: item fetching failed at offset 4/5 [ 743.344161][ T5905] ntrig 0003:1B96:000C.0012: parse failed [ 743.350031][ T5905] ntrig 0003:1B96:000C.0012: probe with driver ntrig failed with error -22 [ 744.134889][T14140] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14140 comm=syz.1.2111 [ 744.181732][T14135] block nbd3: Device being setup by another task [ 744.345190][T14135] block nbd3: shutting down sockets [ 744.395701][ T29] audit: type=1400 audit(1735894434.846:1241): avc: denied { connect } for pid=14141 comm="syz.2.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 744.415261][ C0] vkms_vblank_simulate: vblank timer overrun [ 744.718873][T14155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2114'. [ 745.428951][ T8] usb 4-1: USB disconnect, device number 70 [ 746.101595][ T29] audit: type=1400 audit(1735894436.546:1242): avc: denied { connect } for pid=14160 comm="syz.4.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 746.585111][T14175] input: syz0 as /devices/virtual/input/input112 [ 746.737562][T14177] netlink: 'syz.3.2120': attribute type 10 has an invalid length. [ 746.750077][T14177] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2120'. [ 746.799861][ T29] audit: type=1400 audit(1735894437.246:1243): avc: denied { setopt } for pid=14170 comm="syz.2.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 746.975988][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.984121][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.325566][T14167] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2119'. [ 749.607164][T14210] fuse: Unknown parameter 'grotp_Yd9d3mᶁOp(5R [ 749.607164][T14210] ;Α %8BmY 3ndϣ9*M}?TIDѼ74qiƁY|`ջo%'( u\1fߒxg$א{(m @w?⛓bv' [ 749.804304][ T29] audit: type=1400 audit(1735894440.256:1244): avc: denied { bind } for pid=14197 comm="syz.1.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 749.992330][T14217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2128'. [ 752.708542][ T29] audit: type=1400 audit(1735894443.146:1245): avc: denied { ioctl } for pid=14241 comm="syz.1.2139" path="socket:[55375]" dev="sockfs" ino=55375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 752.758480][T14244] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 752.780577][T14244] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 754.048660][T14258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2142'. [ 754.603531][T14274] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 755.580248][ T29] audit: type=1400 audit(1735894445.986:1246): avc: denied { create } for pid=14277 comm="syz.3.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 756.670254][ T29] audit: type=1400 audit(1735894447.126:1247): avc: denied { listen } for pid=14293 comm="syz.2.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 756.746287][ T29] audit: type=1400 audit(1735894447.166:1248): avc: denied { accept } for pid=14293 comm="syz.2.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 756.960263][ T25] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 757.460062][ T29] audit: type=1400 audit(1735894447.546:1249): avc: denied { ioctl } for pid=14303 comm="syz.1.2151" path="socket:[54979]" dev="sockfs" ino=54979 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 757.485790][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.916482][ T25] usb 1-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 757.925890][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.936527][ T25] usb 1-1: config 0 descriptor?? [ 758.222891][T14324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2154'. [ 758.757857][T14330] netlink: 'syz.2.2156': attribute type 2 has an invalid length. [ 759.027776][ T25] wacom 0003:056A:0336.0013: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.0-1/input0 [ 759.259966][T14340] syz.3.2158: attempt to access beyond end of device [ 759.259966][T14340] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 759.381002][T14340] syz.3.2158: attempt to access beyond end of device [ 759.381002][T14340] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 760.049946][T14340] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 760.059973][T14340] syz.3.2158: attempt to access beyond end of device [ 760.059973][T14340] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 760.073244][T14340] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 760.115357][T14340] syz.3.2158: attempt to access beyond end of device [ 760.115357][T14340] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 760.167993][T14340] syz.3.2158: attempt to access beyond end of device [ 760.167993][T14340] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 760.190741][T14340] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 760.253494][T14340] syz.3.2158: attempt to access beyond end of device [ 760.253494][T14340] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 760.289340][T14340] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 760.301159][T14340] syz.3.2158: attempt to access beyond end of device [ 760.301159][T14340] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 760.315323][T14340] syz.3.2158: attempt to access beyond end of device [ 760.315323][T14340] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 760.328558][T14340] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 760.339299][T14340] syz.3.2158: attempt to access beyond end of device [ 760.339299][T14340] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 760.352636][T14340] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 760.362566][T14340] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 760.375232][ T25] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 760.553034][T14351] netlink: 'syz.2.2160': attribute type 1 has an invalid length. [ 760.610243][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 760.621672][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 760.639058][ T25] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 760.690685][ T25] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 760.763017][ T25] usb 5-1: Product: syz [ 760.783313][ T25] usb 5-1: Manufacturer: syz [ 760.793560][ T25] usb 5-1: SerialNumber: syz [ 760.894261][T13773] usb 1-1: USB disconnect, device number 57 [ 761.509283][ T25] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 761.517968][ T25] visor 5-1:1.0: probe with driver visor failed with error -110 [ 761.596161][ T29] audit: type=1400 audit(1735894451.656:1250): avc: denied { ioctl } for pid=14356 comm="syz.2.2163" path="socket:[55658]" dev="sockfs" ino=55658 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 761.989096][T14391] overlayfs: failed to resolve './file1': -2 [ 762.039898][ T29] audit: type=1400 audit(1735894451.916:1251): avc: denied { setopt } for pid=14356 comm="syz.2.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 762.201130][ T29] audit: type=1400 audit(1735894452.646:1252): avc: denied { write } for pid=14401 comm="syz.0.2165" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 762.509972][ T29] audit: type=1400 audit(1735894452.646:1253): avc: denied { ioctl } for pid=14401 comm="syz.0.2165" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 762.535302][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.923679][ T8] usb 5-1: USB disconnect, device number 51 [ 763.168184][ T29] audit: type=1400 audit(1735894453.616:1254): avc: denied { read } for pid=14400 comm="syz.3.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 763.354608][T14425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2167'. [ 764.460158][ T29] audit: type=1400 audit(1735894454.906:1255): avc: denied { ioctl } for pid=14434 comm="syz.1.2171" path="socket:[55121]" dev="sockfs" ino=55121 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 764.486088][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.571388][ T29] audit: type=1400 audit(1735894455.016:1256): avc: denied { create } for pid=14442 comm="syz.2.2175" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 764.682616][ T29] audit: type=1400 audit(1735894455.136:1257): avc: denied { write } for pid=14442 comm="syz.2.2175" name="file0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 764.719920][ T8] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 764.753261][ T29] audit: type=1400 audit(1735894455.136:1258): avc: denied { open } for pid=14442 comm="syz.2.2175" path="/40/file0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 764.788099][ T29] audit: type=1400 audit(1735894455.136:1259): avc: denied { ioctl } for pid=14442 comm="syz.2.2175" path="/40/file0" dev="tmpfs" ino=233 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 764.801021][T14435] block nbd3: not configured, cannot reconfigure [ 764.891761][T14451] nfs4: Unknown parameter 'rdma' [ 765.420101][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 765.438230][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.459902][ T8] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 765.922465][ T8] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 766.020552][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.029892][ T8] usb 5-1: Product: syz [ 766.035061][ T8] usb 5-1: Manufacturer: syz [ 766.039936][ T8] usb 5-1: SerialNumber: syz [ 766.097710][T14465] overlay: filesystem on ./bus not supported as upperdir [ 766.783253][T14476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2181'. [ 767.463320][T14481] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14481 comm=syz.4.2173 [ 767.768542][T14479] sctp: [Deprecated]: syz.1.2182 (pid 14479) Use of int in max_burst socket option deprecated. [ 767.768542][T14479] Use struct sctp_assoc_value instead [ 767.904380][T14493] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 767.918930][T14493] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 768.009020][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 768.009035][ T29] audit: type=1400 audit(1735894458.456:1265): avc: denied { ioctl } for pid=14484 comm="syz.2.2185" path="socket:[55933]" dev="sockfs" ino=55933 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 768.040144][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.050372][ T25] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 768.760165][ T25] usb 1-1: Invalid ep0 maxpacket: 32 [ 768.940627][ T25] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 769.090127][ T25] usb 1-1: Invalid ep0 maxpacket: 32 [ 769.102330][ T25] usb usb1-port1: attempt power cycle [ 769.450263][ T25] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 769.481078][ T25] usb 1-1: Invalid ep0 maxpacket: 32 [ 769.517851][ T6470] usb 5-1: USB disconnect, device number 52 [ 769.584037][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2190'. [ 769.630175][ T25] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 769.670608][ T25] usb 1-1: Invalid ep0 maxpacket: 32 [ 769.677567][ T25] usb usb1-port1: unable to enumerate USB device [ 771.398051][T14531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2194'. [ 771.703117][T14532] trusted_key: encrypted_key: insufficient parameters specified [ 771.868024][ T29] audit: type=1400 audit(1735894462.316:1266): avc: denied { ioctl } for pid=14530 comm="syz.1.2199" path="socket:[55998]" dev="sockfs" ino=55998 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 773.320930][ T29] audit: type=1400 audit(1735894463.726:1267): avc: denied { sqpoll } for pid=14517 comm="syz.2.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 773.400351][ T25] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 773.559951][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 773.581600][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.600027][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.632219][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 773.657715][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.686873][ T25] usb 5-1: config 0 descriptor?? [ 773.908873][ T25] logitech 0003:046D:C295.0014: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.4-1/input0 [ 773.942161][ T25] logitech 0003:046D:C295.0014: no inputs found [ 774.105381][ T8] usb 5-1: USB disconnect, device number 53 [ 774.304674][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.450496][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.653791][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.827300][T14576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2212'. [ 774.841329][T14576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2212'. [ 775.314536][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 775.357177][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 775.370329][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 775.456597][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 775.473676][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 775.481080][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 775.482669][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.614141][T14586] netlink: 'syz.3.2216': attribute type 9 has an invalid length. [ 776.243769][ T29] audit: type=1400 audit(1735894466.696:1268): avc: denied { create } for pid=14583 comm="syz.3.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 776.370019][ T25] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 776.520137][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 776.528212][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.050273][ T57] bridge_slave_1: left allmulticast mode [ 777.074402][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.085252][ T57] bridge_slave_1: left promiscuous mode [ 777.103677][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.105273][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 777.123674][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.143010][ T25] usb 5-1: config 0 descriptor?? [ 777.146209][ T57] bridge_slave_0: left allmulticast mode [ 777.151469][ T25] hub 5-1:0.0: USB hub found [ 777.158457][ T57] bridge_slave_0: left promiscuous mode [ 777.170868][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.356102][ T8] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 777.364866][ T25] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 777.540593][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 777.547684][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 777.583175][ T8] usb 1-1: config 3 has an invalid interface number: 7 but max is 1 [ 777.601483][ T8] usb 1-1: config 3 has no interface number 0 [ 777.682464][ T8] usb 1-1: config 3 interface 7 has no altsetting 0 [ 777.682750][T12201] Bluetooth: hci3: command tx timeout [ 777.689265][ T8] usb 1-1: config 3 interface 1 has no altsetting 0 [ 778.090530][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.093772][ T8] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=e3.e2 [ 778.119140][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.119541][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.147974][ T8] usb 1-1: Product: syz [ 778.158807][ T8] usb 1-1: Manufacturer: syz [ 778.166742][ T57] bond0 (unregistering): Released all slaves [ 778.168426][ T8] usb 1-1: SerialNumber: syz [ 778.210889][ T29] audit: type=1400 audit(1735894468.666:1269): avc: denied { ioctl } for pid=14602 comm="syz.3.2220" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 778.250249][T14603] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2220'. [ 778.272666][T14603] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2220'. [ 778.289178][T14603] netlink: 'syz.3.2220': attribute type 6 has an invalid length. [ 778.305836][T14574] chnl_net:caif_netlink_parms(): no params data found [ 778.340357][T14603] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2220'. [ 778.452457][T14609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.462553][T14609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.698446][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 778.705230][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 778.843493][ T8] xr_serial 1-1:3.7: xr_serial converter detected [ 778.910468][ T8] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 778.916851][ T8] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 778.991091][ T25] usb 5-1: USB disconnect, device number 54 [ 778.996254][ T8] usb 1-1: USB disconnect, device number 62 [ 779.030134][ T5905] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 779.093971][ T8] xr_serial 1-1:3.7: device disconnected [ 779.273835][ T5905] usb 4-1: too many configurations: 39, using maximum allowed: 8 [ 779.448538][ T5905] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 779.458619][T14574] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.468440][ T5905] usb 4-1: can't read configurations, error -61 [ 779.474670][T14574] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.474840][T14574] bridge_slave_0: entered allmulticast mode [ 779.512335][T14574] bridge_slave_0: entered promiscuous mode [ 779.520932][T14574] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.528034][T14574] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.535315][T14574] bridge_slave_1: entered allmulticast mode [ 779.542986][T14574] bridge_slave_1: entered promiscuous mode [ 779.599360][ T57] hsr_slave_0: left promiscuous mode [ 779.607223][ T57] hsr_slave_1: left promiscuous mode [ 779.618161][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.620547][ T5905] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 779.629295][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.745674][T12201] Bluetooth: hci3: command tx timeout [ 779.930380][ T5905] usb 4-1: too many configurations: 39, using maximum allowed: 8 [ 779.987943][ T5905] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 779.995918][ T5905] usb 4-1: can't read configurations, error -61 [ 780.002899][ T5905] usb usb4-port1: attempt power cycle [ 780.042199][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.049674][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.159485][ T57] veth1_macvtap: left promiscuous mode [ 780.177318][ T57] veth0_macvtap: left promiscuous mode [ 780.192720][ T57] veth1_vlan: left promiscuous mode [ 780.212925][ T57] veth0_vlan: left promiscuous mode [ 780.350478][ T5905] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 780.371819][ T5905] usb 4-1: too many configurations: 39, using maximum allowed: 8 [ 780.384418][ T5905] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 780.404751][ T5905] usb 4-1: can't read configurations, error -61 [ 780.441061][ T867] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 780.561024][ T5905] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 780.595735][ T5905] usb 4-1: too many configurations: 39, using maximum allowed: 8 [ 780.615927][ T5905] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 780.625529][ T867] usb 5-1: Using ep0 maxpacket: 16 [ 780.644234][ T867] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.660132][ T5905] usb 4-1: can't read configurations, error -61 [ 780.672373][ T867] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 780.684397][ T5905] usb usb4-port1: unable to enumerate USB device [ 780.693537][ T867] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 780.703694][ T867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.714250][ T867] usb 5-1: Product: syz [ 780.718428][ T867] usb 5-1: Manufacturer: syz [ 780.723343][ T867] usb 5-1: SerialNumber: syz [ 781.286534][ T57] team0 (unregistering): Port device team_slave_1 removed [ 781.995354][ T867] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 782.032609][T12201] Bluetooth: hci3: command tx timeout [ 782.038309][T14640] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14640 comm=syz.4.2227 [ 782.086582][ T57] team0 (unregistering): Port device team_slave_0 removed [ 782.150784][ T867] usb 1-1: device descriptor read/64, error -71 [ 782.972260][ T867] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 783.148602][ T867] usb 1-1: device descriptor read/64, error -71 [ 783.270121][ T867] usb usb1-port1: attempt power cycle [ 783.390950][T14574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.402085][T14574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.443076][T14574] team0: Port device team_slave_0 added [ 783.453625][T14574] team0: Port device team_slave_1 added [ 783.515515][T14574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.524238][T14574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.550136][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.565185][T14574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.600551][T14574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.617372][T14574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.643325][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.650070][ T867] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 783.657877][T14574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.672002][ T867] usb 1-1: device descriptor read/8, error -71 [ 783.740109][T14574] hsr_slave_0: entered promiscuous mode [ 783.746652][T14574] hsr_slave_1: entered promiscuous mode [ 783.752949][T14574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 783.762252][T14574] Cannot create hsr debugfs directory [ 783.908419][T14574] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 783.918098][T14574] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 783.927622][T14574] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 783.938283][T14574] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 783.939948][ T867] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 783.983542][ T867] usb 1-1: device descriptor read/8, error -71 [ 784.016066][T13773] usb 5-1: USB disconnect, device number 55 [ 784.060625][T12201] Bluetooth: hci3: command tx timeout [ 784.082410][T14574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.101007][ T867] usb usb1-port1: unable to enumerate USB device [ 784.162397][T14574] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.186341][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.193510][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.253043][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.260210][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.743652][ T29] audit: type=1400 audit(1735894475.196:1270): avc: denied { create } for pid=14660 comm="syz.0.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 784.829700][ T29] audit: type=1400 audit(1735894475.276:1271): avc: denied { setopt } for pid=14667 comm="syz.3.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 785.015307][T14574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.772408][T14677] veth0_to_team: entered promiscuous mode [ 785.778207][T14677] veth0_to_team: entered allmulticast mode [ 786.308848][T12415] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 786.490964][T12415] usb 4-1: Using ep0 maxpacket: 16 [ 786.501404][T14691] overlay: filesystem on ./bus not supported as upperdir [ 786.511282][T12415] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 786.520492][T12415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.530644][T12415] usb 4-1: Product: syz [ 786.543961][T12415] usb 4-1: Manufacturer: syz [ 786.563895][T12415] usb 4-1: SerialNumber: syz [ 786.582056][T14574] veth0_vlan: entered promiscuous mode [ 786.591333][T14574] veth1_vlan: entered promiscuous mode [ 786.599953][T12415] r8152-cfgselector 4-1: Unknown version 0x0000 [ 786.606258][T12415] r8152-cfgselector 4-1: config 0 descriptor?? [ 786.645175][T14574] veth0_macvtap: entered promiscuous mode [ 786.665158][T14574] veth1_macvtap: entered promiscuous mode [ 786.693352][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.703980][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.714166][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.724808][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.735133][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.745757][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.756359][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.767945][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.778265][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.789203][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.806954][T14574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.824719][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.835855][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.845843][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.857061][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.867352][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.878109][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.888925][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.899727][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.910086][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.920677][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.940382][T14574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.982772][T14574] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.996950][T14574] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.006201][T14574] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.015070][T14574] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.174999][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.213085][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.274309][T14416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.275796][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.300890][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.317149][T14416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.336207][T14674] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.2240'. [ 787.396439][T14674] netlink: zone id is out of range [ 787.408203][T14674] netlink: zone id is out of range [ 787.426683][T14674] netlink: zone id is out of range [ 787.439608][T14674] netlink: zone id is out of range [ 787.450333][T14697] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.2245'. [ 787.461075][T14697] openvswitch: netlink: Message has 12 unknown bytes. [ 787.482641][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.497660][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.515880][ T5905] r8152-cfgselector 4-1: USB disconnect, device number 75 [ 787.675627][T12415] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 787.682947][ T935] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 787.860350][T12415] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 787.876071][T12415] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 787.912126][T12415] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 787.925204][T12415] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 787.934520][T12415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.950747][T12415] usb 6-1: Product: syz [ 787.955331][T12415] usb 6-1: Manufacturer: syz [ 787.959990][T12415] usb 6-1: SerialNumber: syz [ 787.966395][T12415] usb 6-1: config 0 descriptor?? [ 787.972540][T14698] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 787.986442][T12415] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input117 [ 788.021374][ T935] usb 5-1: Using ep0 maxpacket: 16 [ 788.028777][ T935] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.059101][ T935] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 788.076959][ T935] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 788.096568][ T935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.119906][ T935] usb 5-1: Product: syz [ 788.124082][ T935] usb 5-1: Manufacturer: syz [ 788.128679][ T935] usb 5-1: SerialNumber: syz [ 788.590363][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'. [ 788.779547][T13773] usb 6-1: USB disconnect, device number 2 [ 788.886990][T14717] netlink: 'syz.3.2249': attribute type 1 has an invalid length. [ 788.894896][T14717] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2249'. [ 789.590163][T14721] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14721 comm=syz.4.2244 [ 789.670314][ T29] audit: type=1400 audit(1735894480.116:1272): avc: denied { connect } for pid=14704 comm="syz.0.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 789.693288][T14727] netlink: 'syz.0.2247': attribute type 19 has an invalid length. [ 790.202378][T14734] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 790.609399][T14738] overlayfs: failed to resolve './file0': -2 [ 790.670881][T14741] devpts: called with bogus options [ 791.061905][ T935] usb 5-1: USB disconnect, device number 56 [ 791.866926][ T29] audit: type=1400 audit(1735894481.836:1273): avc: denied { bind } for pid=14747 comm="syz.4.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 792.528518][ T29] audit: type=1400 audit(1735894482.976:1274): avc: denied { getopt } for pid=14760 comm="syz.1.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 792.550693][ T29] audit: type=1400 audit(1735894482.976:1275): avc: denied { mount } for pid=14760 comm="syz.1.2261" name="/" dev="pstore" ino=3810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 792.559024][T14766] delete_channel: no stack [ 792.607926][ T29] audit: type=1400 audit(1735894483.056:1276): avc: denied { write } for pid=14765 comm="syz.0.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 792.756375][ T29] audit: type=1400 audit(1735894483.176:1277): avc: denied { connect } for pid=14767 comm="syz.5.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 793.067520][T14776] fuse: Unknown parameter '' [ 794.579909][ T25] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 794.623990][T14776] trusted_key: encrypted_key: insufficient parameters specified [ 794.685672][ T29] audit: type=1400 audit(1735894485.136:1278): avc: denied { remount } for pid=14788 comm="syz.4.2270" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 794.725195][T14791] FAULT_INJECTION: forcing a failure. [ 794.725195][T14791] name failslab, interval 1, probability 0, space 0, times 0 [ 794.739528][T14791] CPU: 1 UID: 0 PID: 14791 Comm: syz.3.2271 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 794.750306][T14791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 794.760366][T14791] Call Trace: [ 794.763647][T14791] [ 794.766580][T14791] dump_stack_lvl+0x16c/0x1f0 [ 794.771267][T14791] should_fail_ex+0x497/0x5b0 [ 794.775956][T14791] ? fs_reclaim_acquire+0xae/0x150 [ 794.781062][T14791] should_failslab+0xc2/0x120 [ 794.785731][T14791] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 794.791542][T14791] ? __alloc_skb+0x2b1/0x380 [ 794.796146][T14791] __alloc_skb+0x2b1/0x380 [ 794.800561][T14791] ? __pfx___alloc_skb+0x10/0x10 [ 794.805476][T14791] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 794.811432][T14791] netlink_alloc_large_skb+0x69/0x130 [ 794.816778][T14791] netlink_sendmsg+0x689/0xd70 [ 794.821530][T14791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.826793][T14791] ____sys_sendmsg+0xaaf/0xc90 [ 794.831544][T14791] ? copy_msghdr_from_user+0x10b/0x160 [ 794.837007][T14791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.842312][T14791] ___sys_sendmsg+0x135/0x1e0 [ 794.846997][T14791] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.852209][T14791] ? __pfx_lock_release+0x10/0x10 [ 794.857226][T14791] ? trace_lock_acquire+0x14e/0x1f0 [ 794.862407][T14791] ? __fget_files+0x206/0x3a0 [ 794.867071][T14791] __sys_sendmsg+0x16e/0x220 [ 794.871646][T14791] ? __pfx___sys_sendmsg+0x10/0x10 [ 794.876740][T14791] do_syscall_64+0xcd/0x250 [ 794.881221][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.887091][T14791] RIP: 0033:0x7f2c0ab85d29 [ 794.891492][T14791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.911093][T14791] RSP: 002b:00007f2c0b9f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.919479][T14791] RAX: ffffffffffffffda RBX: 00007f2c0ad75fa0 RCX: 00007f2c0ab85d29 [ 794.927424][T14791] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 794.935368][T14791] RBP: 00007f2c0b9f5090 R08: 0000000000000000 R09: 0000000000000000 [ 794.943326][T14791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.951290][T14791] R13: 0000000000000000 R14: 00007f2c0ad75fa0 R15: 00007ffea203d708 [ 794.959242][T14791] [ 794.979974][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 794.988994][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.000344][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.020650][ T935] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 795.039925][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 795.056648][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.067778][T14798] could not open pipe file descriptor [ 795.075204][ T25] usb 1-1: config 0 descriptor?? [ 795.093294][ T25] hub 1-1:0.0: USB hub found [ 795.201600][ T935] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 795.210730][ T935] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 795.221521][ T935] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 795.230779][ T935] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 795.242475][ T935] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 795.268498][T14804] netlink: 'syz.4.2275': attribute type 21 has an invalid length. [ 795.297442][ T25] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 795.358761][ T935] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 795.369973][ T935] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 795.378006][ T935] usb 6-1: Product: syz [ 795.400123][ T935] usb 6-1: Manufacturer: syz [ 795.468669][ T935] cdc_wdm 6-1:1.0: skipping garbage [ 795.474150][ T935] cdc_wdm 6-1:1.0: skipping garbage [ 795.515137][ T935] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 795.521504][ T935] cdc_wdm 6-1:1.0: Unknown control protocol [ 795.779840][ C1] hrtimer: interrupt took 32389 ns [ 795.864958][ T867] usb 6-1: USB disconnect, device number 3 [ 796.091892][ T29] audit: type=1400 audit(1735894486.546:1279): avc: denied { connect } for pid=14810 comm="syz.4.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 796.562999][ T867] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 796.790064][ T867] usb 6-1: Using ep0 maxpacket: 32 [ 796.802160][ T867] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 796.813811][ T867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.864310][ T867] usb 6-1: config 0 descriptor?? [ 796.893154][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 796.896521][ T867] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 796.903529][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 796.940714][ T25] usb 1-1: USB disconnect, device number 67 [ 797.322621][ T867] gspca_nw80x: reg_r err -71 [ 797.328833][ T867] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 797.350087][ T867] usb 6-1: USB disconnect, device number 4 [ 797.448836][ T29] audit: type=1400 audit(1735894487.896:1280): avc: denied { getopt } for pid=14825 comm="syz.1.2284" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 797.947064][T14843] Invalid/unusable pipe [ 797.951565][T14843] FAULT_INJECTION: forcing a failure. [ 797.951565][T14843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.968923][T14843] CPU: 0 UID: 0 PID: 14843 Comm: syz.4.2288 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 797.979693][T14843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 797.989728][T14843] Call Trace: [ 797.992993][T14843] [ 797.995910][T14843] dump_stack_lvl+0x16c/0x1f0 [ 798.000581][T14843] should_fail_ex+0x497/0x5b0 [ 798.005255][T14843] _copy_to_user+0x32/0xd0 [ 798.009664][T14843] simple_read_from_buffer+0xd0/0x160 [ 798.015028][T14843] proc_fail_nth_read+0x198/0x270 [ 798.020058][T14843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 798.025642][T14843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 798.031189][T14843] vfs_read+0x1df/0xbe0 [ 798.035334][T14843] ? __fget_files+0x1fc/0x3a0 [ 798.039997][T14843] ? __pfx___mutex_lock+0x10/0x10 [ 798.045012][T14843] ? __pfx_vfs_read+0x10/0x10 [ 798.049678][T14843] ? __fget_files+0x206/0x3a0 [ 798.054345][T14843] ksys_read+0x12b/0x250 [ 798.058575][T14843] ? __pfx_ksys_read+0x10/0x10 [ 798.063334][T14843] do_syscall_64+0xcd/0x250 [ 798.067937][T14843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.073821][T14843] RIP: 0033:0x7fc5ff38473c [ 798.078222][T14843] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 798.097819][T14843] RSP: 002b:00007fc600143030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 798.106224][T14843] RAX: ffffffffffffffda RBX: 00007fc5ff575fa0 RCX: 00007fc5ff38473c [ 798.114185][T14843] RDX: 000000000000000f RSI: 00007fc6001430a0 RDI: 0000000000000000 [ 798.122144][T14843] RBP: 00007fc600143090 R08: 0000000000000000 R09: 0000000000000000 [ 798.130102][T14843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.138063][T14843] R13: 0000000000000000 R14: 00007fc5ff575fa0 R15: 00007fff465cf4a8 [ 798.146032][T14843] [ 798.391886][T14854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2289'. [ 798.871942][T14855] overlayfs: failed to resolve './file0': -2 [ 800.709724][T14874] netlink: 1292 bytes leftover after parsing attributes in process `syz.0.2297'. [ 800.723831][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2297'. [ 801.059990][ T867] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 801.128012][ T29] audit: type=1400 audit(1735894491.466:1281): avc: denied { shutdown } for pid=14883 comm="syz.5.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 801.300524][ T867] usb 1-1: Using ep0 maxpacket: 8 [ 801.307058][ T867] usb 1-1: config 0 has no interfaces? [ 801.327994][ T867] usb 1-1: New USB device found, idVendor=0711, idProduct=0918, bcdDevice=97.e4 [ 801.404535][ T867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.412861][ T867] usb 1-1: Product: syz [ 801.417050][ T867] usb 1-1: Manufacturer: syz [ 801.421830][ T867] usb 1-1: SerialNumber: syz [ 801.452355][ T867] usb 1-1: config 0 descriptor?? [ 801.856841][ T25] usb 1-1: USB disconnect, device number 68 [ 802.201603][T14912] overlay: filesystem on ./bus not supported as upperdir [ 802.366958][T14915] input: syz0 as /devices/virtual/input/input118 [ 802.756543][T14920] input: syz0 as /devices/virtual/input/input119 [ 803.183612][T12201] Bluetooth: hci3: command 0x0405 tx timeout [ 803.267528][ T935] libceph: connect (1)[c::]:6789 error -101 [ 803.293264][ T935] libceph: mon0 (1)[c::]:6789 connect error [ 803.345035][T14929] netlink: 'syz.1.2310': attribute type 3 has an invalid length. [ 803.356368][T14929] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2310'. [ 803.370997][T14923] ceph: No mds server is up or the cluster is laggy [ 803.561568][T14938] ./cgroup: Can't lookup blockdev [ 803.979949][ T29] audit: type=1400 audit(1735894494.406:1282): avc: denied { setattr } for pid=14942 comm="syz.3.2315" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 804.223372][ T29] audit: type=1400 audit(1735894494.546:1283): avc: denied { read write } for pid=14942 comm="syz.3.2315" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 804.245897][ T29] audit: type=1400 audit(1735894494.566:1284): avc: denied { open } for pid=14942 comm="syz.3.2315" path="/68/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 804.574418][T14949] Can't find ip_set type bitmap:ip,mac [ 804.916323][ T29] audit: type=1400 audit(1735894495.366:1285): avc: denied { create } for pid=14963 comm="syz.0.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 805.020779][T14964] overlayfs: failed to resolve './file0': -2 [ 805.990524][T14983] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2323'. [ 806.042605][ T29] audit: type=1400 audit(1735894496.496:1286): avc: denied { map } for pid=14982 comm="syz.0.2323" path="socket:[58635]" dev="sockfs" ino=58635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 806.319911][ T5905] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 806.473198][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.499041][ T5905] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 806.564247][ T5905] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 806.596472][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.643414][ T5905] usb 6-1: Product: syz [ 806.658298][ T5905] usb 6-1: Manufacturer: syz [ 806.677156][ T5905] usb 6-1: SerialNumber: syz [ 806.693659][ T5905] cdc_mbim 6-1:1.0: skipping garbage [ 807.051291][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2326'. [ 807.846089][T15001] pimreg3: entered allmulticast mode [ 808.049939][T14987] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 808.132004][ T5828] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 808.142066][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: kworker/u9:6 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 808.152927][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 808.162969][ T5828] Workqueue: hci4 hci_rx_work [ 808.167633][ T5828] Call Trace: [ 808.170889][ T5828] [ 808.173800][ T5828] dump_stack_lvl+0x16c/0x1f0 [ 808.178457][ T5828] sysfs_warn_dup+0x7f/0xa0 [ 808.182940][ T5828] sysfs_create_dir_ns+0x24d/0x2b0 [ 808.188043][ T5828] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 808.193659][ T5828] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 808.199026][ T5828] ? kobject_add_internal+0x12d/0x990 [ 808.204383][ T5828] ? do_raw_spin_unlock+0x172/0x230 [ 808.209561][ T5828] kobject_add_internal+0x2c8/0x990 [ 808.214742][ T5828] kobject_add+0x16f/0x240 [ 808.219136][ T5828] ? __pfx_kobject_add+0x10/0x10 [ 808.224060][ T5828] ? class_to_subsys+0x3e/0x160 [ 808.228893][ T5828] ? do_raw_spin_unlock+0x172/0x230 [ 808.234087][ T5828] ? kobject_put+0xab/0x5a0 [ 808.238591][ T5828] device_add+0x289/0x1a70 [ 808.243000][ T5828] ? __pfx_dev_set_name+0x10/0x10 [ 808.248017][ T5828] ? __pfx_device_add+0x10/0x10 [ 808.252853][ T5828] ? mgmt_send_event_skb+0x2f2/0x460 [ 808.258127][ T5828] hci_conn_add_sysfs+0x17e/0x230 [ 808.263136][ T5828] le_conn_complete_evt+0x107f/0x1da0 [ 808.268505][ T5828] ? __pfx_lock_release+0x10/0x10 [ 808.273509][ T5828] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 808.279206][ T5828] ? trace_contention_end+0xee/0x140 [ 808.284470][ T5828] ? __mutex_lock+0x1cc/0xa60 [ 808.289128][ T5828] hci_le_conn_complete_evt+0x23c/0x370 [ 808.294656][ T5828] hci_le_meta_evt+0x2e2/0x5d0 [ 808.299397][ T5828] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 808.305447][ T5828] hci_event_packet+0x666/0x1180 [ 808.310364][ T5828] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 808.315628][ T5828] ? __pfx_hci_event_packet+0x10/0x10 [ 808.320991][ T5828] ? mark_held_locks+0x9f/0xe0 [ 808.325736][ T5828] ? kcov_remote_start+0x3cf/0x6e0 [ 808.330839][ T5828] ? lockdep_hardirqs_on+0x7c/0x110 [ 808.336016][ T5828] hci_rx_work+0x2c5/0x16b0 [ 808.340499][ T5828] ? process_one_work+0x921/0x1ba0 [ 808.345587][ T5828] process_one_work+0x9c5/0x1ba0 [ 808.350505][ T5828] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 808.356126][ T5828] ? __pfx_process_one_work+0x10/0x10 [ 808.361475][ T5828] ? rcu_is_watching+0x12/0xc0 [ 808.366226][ T5828] ? assign_work+0x1a0/0x250 [ 808.370805][ T5828] worker_thread+0x6c8/0xf00 [ 808.375376][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 808.380462][ T5828] kthread+0x2c1/0x3a0 [ 808.384528][ T5828] ? _raw_spin_unlock_irq+0x23/0x50 [ 808.389702][ T5828] ? __pfx_kthread+0x10/0x10 [ 808.394273][ T5828] ret_from_fork+0x45/0x80 [ 808.398666][ T5828] ? __pfx_kthread+0x10/0x10 [ 808.403269][ T5828] ret_from_fork_asm+0x1a/0x30 [ 808.408022][ T5828] [ 808.417441][ T5828] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 808.433256][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.434623][ T5828] Bluetooth: hci4: failed to register connection device [ 808.439532][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.539981][ T867] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 808.559669][T15009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3088 sclass=netlink_route_socket pid=15009 comm=syz.1.2330 [ 808.689939][ T867] usb 4-1: Using ep0 maxpacket: 16 [ 809.217996][ T867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.233549][ T867] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.256702][ T867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 809.288211][ T867] usb 4-1: SerialNumber: syz [ 809.308461][ T867] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 809.338049][ T867] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 809.354209][ T867] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 809.514483][T12415] usb 4-1: USB disconnect, device number 76 [ 809.523148][ T5828] Bluetooth: hci4: unexpected event for opcode 0x2043 [ 810.359625][T15023] tmpfs: Unknown parameter ';ć񤿪g^]y4q1öc m[{:]!ݞ$Rs0]Gg?S8B-JXl}a*wس)v' [ 810.381839][ T29] audit: type=1326 audit(1735894500.786:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15019 comm="syz.1.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 810.913872][ T29] audit: type=1326 audit(1735894500.786:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15019 comm="syz.1.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 811.073209][ T29] audit: type=1326 audit(1735894500.786:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15019 comm="syz.1.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 811.097846][T15027] raw_sendmsg: syz.1.2335 forgot to set AF_INET. Fix it! [ 811.191549][ T5905] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 811.197694][ T5905] cdc_mbim 6-1:1.0: bind() failure [ 811.271884][ T5905] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 811.289932][ T29] audit: type=1326 audit(1735894500.786:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15019 comm="syz.1.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 811.295307][ T5905] cdc_ncm 6-1:1.1: bind() failure [ 811.326176][ T29] audit: type=1326 audit(1735894500.786:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15019 comm="syz.1.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 811.414961][ T5905] usb 6-1: USB disconnect, device number 5 [ 811.497182][ T29] audit: type=1326 audit(1735894500.786:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15019 comm="syz.1.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40e4384690 code=0x7ffc0000 [ 811.501178][T15035] binder: 15030:15035 ioctl c00c620f 200001c0 returned -22 [ 812.310712][ T29] audit: type=1326 audit(1735894500.786:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15019 comm="syz.1.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 812.336507][ T29] audit: type=1326 audit(1735894500.786:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15019 comm="syz.1.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 812.360823][ T29] audit: type=1326 audit(1735894500.786:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15019 comm="syz.1.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 812.384602][ T29] audit: type=1326 audit(1735894500.796:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15019 comm="syz.1.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 812.470734][T15039] overlayfs: missing 'lowerdir' [ 813.055419][T15044] input: syz1 as /devices/virtual/input/input121 [ 813.102820][T15055] IPv6: addrconf: prefix option has invalid lifetime [ 813.155388][T15055] IPv6: addrconf: prefix option has invalid lifetime [ 813.871203][T15070] SELinux: syz.3.2349 (15070) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 813.922113][T12201] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 813.930937][T12201] Bluetooth: hci4: Injecting HCI hardware error event [ 813.988111][T12201] Bluetooth: hci4: hardware error 0x00 [ 814.639426][T15081] input: syz0 as /devices/virtual/input/input122 [ 814.679495][T12415] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 814.840083][T12415] usb 1-1: Using ep0 maxpacket: 32 [ 815.295918][T12415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.306935][T12415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.316854][T12415] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 815.326352][T12415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.344542][T12415] usb 1-1: config 0 descriptor?? [ 815.375099][T12415] hub 1-1:0.0: USB hub found [ 815.426712][T15081] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2351'. [ 815.618038][T12415] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 815.631014][T13773] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 815.643909][T15091] 9pnet_fd: Insufficient options for proto=fd [ 815.762575][T15094] openvswitch: netlink: IP tunnel dst address not specified [ 815.782274][T13773] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 815.798535][T13773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.819278][T13773] usb 4-1: config 0 descriptor?? [ 816.269772][T13773] [drm] vendor descriptor length:b9 data:ad 03 93 95 da 44 6c c8 7a 41 2a [ 816.283571][T13773] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 816.305387][T13773] [drm:udl_init] *ERROR* Selecting channel failed [ 816.349648][T13773] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 816.363283][T13773] [drm] Initialized udl on minor 2 [ 816.379099][T13773] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 816.397991][T13773] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 816.413677][T13773] usb 4-1: USB disconnect, device number 77 [ 816.444509][ T935] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 816.499041][ T935] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 816.540509][T12201] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 818.305375][T15125] input: syz0 as /devices/virtual/input/input123 [ 818.333638][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 818.333719][ T29] audit: type=1400 audit(1735894508.786:1327): avc: denied { listen } for pid=15123 comm="syz.1.2369" lport=41109 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 818.453603][ T5868] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 818.480786][T15128] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2367'. [ 818.585978][T15124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2369'. [ 818.600601][ T29] audit: type=1400 audit(1735894508.916:1328): avc: denied { accept } for pid=15123 comm="syz.1.2369" lport=41109 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 818.638010][T12415] usbhid 1-1:0.0: can't add hid device: -71 [ 818.649976][T12415] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 818.689104][ T29] audit: type=1400 audit(1735894508.916:1329): avc: denied { write } for pid=15123 comm="syz.1.2369" lport=41109 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 818.690666][T12415] usb 1-1: USB disconnect, device number 69 [ 818.742058][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 818.750703][ T29] audit: type=1400 audit(1735894508.926:1330): avc: denied { setopt } for pid=15123 comm="syz.1.2369" lport=41109 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 818.750855][ T5868] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 818.888557][ T5868] usb 5-1: config 0 has no interface number 0 [ 818.895131][ T5868] usb 5-1: config 0 interface 5 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.906145][ T5868] usb 5-1: config 0 interface 5 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.916463][ T5868] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 818.926258][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.935931][ T5868] usb 5-1: config 0 descriptor?? [ 819.470523][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2366'. [ 819.532536][T15120] Bluetooth: MGMT ver 1.23 [ 819.556213][ T29] audit: type=1400 audit(1735894510.006:1331): avc: denied { setopt } for pid=15119 comm="syz.4.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 820.986771][ T5868] usbhid 5-1:0.5: can't add hid device: -71 [ 820.992805][ T5868] usbhid 5-1:0.5: probe with driver usbhid failed with error -71 [ 821.002275][ T5868] usb 5-1: USB disconnect, device number 57 [ 821.944972][T15178] input: syz0 as /devices/virtual/input/input124 [ 822.816675][T15192] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 822.826332][T15192] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 823.881693][T15199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 824.038538][T15205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2387'. [ 824.422261][ T29] audit: type=1400 audit(1735894514.876:1332): avc: denied { accept } for pid=15213 comm="syz.5.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 824.759895][T12201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 824.769704][T12201] CPU: 0 UID: 0 PID: 12201 Comm: kworker/u9:0 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 824.780650][T12201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 824.790704][T12201] Workqueue: hci3 hci_rx_work [ 824.795394][T12201] Call Trace: [ 824.798671][T12201] [ 824.801602][T12201] dump_stack_lvl+0x16c/0x1f0 [ 824.806287][T12201] sysfs_warn_dup+0x7f/0xa0 [ 824.810802][T12201] sysfs_create_dir_ns+0x24d/0x2b0 [ 824.815924][T12201] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 824.821565][T12201] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 824.826943][T12201] ? kobject_add_internal+0x12d/0x990 [ 824.832323][T12201] ? do_raw_spin_unlock+0x172/0x230 [ 824.837533][T12201] kobject_add_internal+0x2c8/0x990 [ 824.842743][T12201] kobject_add+0x16f/0x240 [ 824.847173][T12201] ? __pfx_kobject_add+0x10/0x10 [ 824.852124][T12201] ? kobject_put+0xab/0x5a0 [ 824.856647][T12201] device_add+0x289/0x1a70 [ 824.861073][T12201] ? __pfx_dev_set_name+0x10/0x10 [ 824.866116][T12201] ? __pfx_device_add+0x10/0x10 [ 824.870984][T12201] ? mgmt_send_event_skb+0x2f2/0x460 [ 824.876282][T12201] hci_conn_add_sysfs+0x17e/0x230 [ 824.881315][T12201] le_conn_complete_evt+0x107f/0x1da0 [ 824.886699][T12201] ? __pfx_lock_release+0x10/0x10 [ 824.891726][T12201] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 824.897450][T12201] ? trace_contention_end+0xee/0x140 [ 824.902744][T12201] ? __mutex_lock+0x1cc/0xa60 [ 824.907439][T12201] hci_le_conn_complete_evt+0x23c/0x370 [ 824.912998][T12201] hci_le_meta_evt+0x2e2/0x5d0 [ 824.917769][T12201] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 824.923844][T12201] hci_event_packet+0x666/0x1180 [ 824.928788][T12201] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 824.934081][T12201] ? __pfx_hci_event_packet+0x10/0x10 [ 824.939468][T12201] ? kcov_remote_start+0x3df/0x6e0 [ 824.944594][T12201] hci_rx_work+0x2c5/0x16b0 [ 824.949105][T12201] ? process_one_work+0x921/0x1ba0 [ 824.954205][T12201] process_one_work+0x9c5/0x1ba0 [ 824.959123][T12201] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 824.964738][T12201] ? __pfx_process_one_work+0x10/0x10 [ 824.970082][T12201] ? rcu_is_watching+0x12/0xc0 [ 824.974824][T12201] ? assign_work+0x1a0/0x250 [ 824.979387][T12201] worker_thread+0x6c8/0xf00 [ 824.983953][T12201] ? __kthread_parkme+0x148/0x220 [ 824.988954][T12201] ? __pfx_worker_thread+0x10/0x10 [ 824.994048][T12201] kthread+0x2c1/0x3a0 [ 824.998095][T12201] ? _raw_spin_unlock_irq+0x23/0x50 [ 825.003266][T12201] ? __pfx_kthread+0x10/0x10 [ 825.007839][T12201] ret_from_fork+0x45/0x80 [ 825.012228][T12201] ? __pfx_kthread+0x10/0x10 [ 825.016793][T12201] ret_from_fork_asm+0x1a/0x30 [ 825.021541][T12201] [ 825.024615][ C0] vkms_vblank_simulate: vblank timer overrun [ 825.031489][T12201] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 825.046384][T12201] Bluetooth: hci3: failed to register connection device [ 826.102742][ T29] audit: type=1326 audit(1735894516.556:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 826.264136][ T29] audit: type=1326 audit(1735894516.586:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 826.316031][ T29] audit: type=1326 audit(1735894516.586:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 826.356568][ T29] audit: type=1326 audit(1735894516.706:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 826.466482][ T5905] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 826.477613][ T29] audit: type=1326 audit(1735894516.706:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 826.501113][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.508803][ T29] audit: type=1326 audit(1735894516.706:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40e437cce7 code=0x7ffc0000 [ 826.532199][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.742773][ T29] audit: type=1326 audit(1735894516.706:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40e4321f29 code=0x7ffc0000 [ 826.766117][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.781682][ T29] audit: type=1326 audit(1735894516.706:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e4385d29 code=0x7ffc0000 [ 826.805596][ T5905] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 826.817899][ T5905] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 826.825591][ T5905] usb 6-1: can't read configurations, error -61 [ 826.836348][ T29] audit: type=1326 audit(1735894516.706:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40e437cce7 code=0x7ffc0000 [ 826.960415][ T5905] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 827.120803][ T5905] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 827.130426][ T5905] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 827.137964][ T5905] usb 6-1: can't read configurations, error -61 [ 827.144849][ T5905] usb usb6-port1: attempt power cycle [ 827.490255][ T5905] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 827.521426][ T5905] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 827.531070][ T5905] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 827.538959][ T5905] usb 6-1: can't read configurations, error -61 [ 827.686331][T15252] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2405'. [ 827.695546][ T5905] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 827.728899][T15252] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2405'. [ 827.748665][ T5905] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 827.758022][ T5905] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 827.781564][T15252] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2405'. [ 827.794482][ T5905] usb 6-1: can't read configurations, error -61 [ 827.801679][ T5905] usb usb6-port1: unable to enumerate USB device [ 830.170258][ T5868] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 830.258952][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 830.258964][ T29] audit: type=1400 audit(1735894520.706:1361): avc: denied { unmount } for pid=13434 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 830.410264][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 830.548883][T15279] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2412'. [ 830.559908][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.571132][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.581225][ T5868] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 830.590609][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.600527][ T5868] usb 5-1: config 0 descriptor?? [ 830.606986][ T5868] hub 5-1:0.0: USB hub found [ 830.863423][ T5868] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 831.555926][T15291] sp0: Synchronizing with TNC [ 832.060299][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 832.707451][ T5868] usbhid 5-1:0.0: can't add hid device: -71 [ 832.714343][ T5868] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 832.810070][ T5868] usb 5-1: USB disconnect, device number 58 [ 833.780186][ T5868] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 833.953339][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 833.965900][ T5868] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.984331][ T5868] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 833.996203][ T5868] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 834.005655][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.015238][ T5868] usb 5-1: Product: syz [ 834.019581][ T5868] usb 5-1: Manufacturer: syz [ 834.024921][ T5868] usb 5-1: SerialNumber: syz [ 834.103807][ T29] audit: type=1400 audit(1735894524.556:1362): avc: denied { ioctl } for pid=15324 comm="syz.3.2425" path="socket:[59220]" dev="sockfs" ino=59220 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 834.733276][T15333] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15333 comm=syz.4.2419 [ 836.707178][ T8] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 837.080270][ T29] audit: type=1400 audit(1735894527.136:1363): avc: denied { name_bind } for pid=15339 comm="syz.1.2432" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 837.144748][ T5905] usb 5-1: USB disconnect, device number 59 [ 837.229909][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 837.237361][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.251784][ T5868] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 837.256052][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.269747][ T29] audit: type=1400 audit(1735894527.706:1364): avc: denied { read } for pid=15363 comm="syz.0.2436" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 837.294106][ T29] audit: type=1400 audit(1735894527.706:1365): avc: denied { open } for pid=15363 comm="syz.0.2436" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 837.304367][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 837.369031][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.377701][T15366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 837.389252][ T8] usb 4-1: config 0 descriptor?? [ 837.400010][T15366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 837.419229][T15366] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 837.465692][ T8] hub 4-1:0.0: USB hub found [ 837.497469][T15366] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 837.555464][T15366] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 837.657538][ T8] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 837.824095][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 837.894239][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0 [ 837.927018][ T5868] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 837.938281][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.948055][ T5868] usb 6-1: Product: syz [ 837.953923][ T5868] usb 6-1: Manufacturer: syz [ 837.961332][ T5868] usb 6-1: SerialNumber: syz [ 837.992675][T15385] overlayfs: failed to clone upperpath [ 838.274461][ T5868] usb 6-1: config 0 descriptor?? [ 838.300376][T15383] input: syz0 as /devices/virtual/input/input126 [ 838.548332][T15393] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2442'. [ 838.568154][T15394] netlink: 'syz.0.2444': attribute type 1 has an invalid length. [ 838.595149][T15394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 838.761191][ T5868] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 839.349937][T12201] Bluetooth: hci2: command 0x0406 tx timeout [ 839.397995][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 839.405116][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 839.420094][T12201] Bluetooth: hci3: command 0x0405 tx timeout [ 839.441891][T15394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 839.448801][T15394] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 839.451576][ T8] usb 4-1: USB disconnect, device number 78 [ 839.493607][T15394] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 839.830585][ T5868] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 839.860416][ T5868] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 840.211551][T15360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 840.234465][T15360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 840.280755][T15403] delete_channel: no stack [ 840.319422][ T25] usb 6-1: USB disconnect, device number 10 [ 840.584248][T15415] overlayfs: failed to clone upperpath [ 840.916686][T15424] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 840.990362][T13773] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 841.037532][T15427] sockfs: Unknown parameter 'ns' [ 841.359919][ T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 841.438852][T13773] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 841.451353][T13773] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 841.465688][T13773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.479623][T13773] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 841.520020][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 841.535970][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 841.548691][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 203, changing to 11 [ 841.560675][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50685, setting to 1024 [ 841.573014][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 841.587876][ T8] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 841.597224][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.607179][ T8] usb 6-1: config 0 descriptor?? [ 841.613587][T15431] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 841.625128][ T8] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input128 [ 841.692157][T15419] netlink: 'syz.4.2453': attribute type 1 has an invalid length. [ 841.703908][ T25] usb 5-1: USB disconnect, device number 60 [ 841.830149][T13773] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 841.945239][ T8] usb 6-1: USB disconnect, device number 11 [ 841.957858][T15445] overlayfs: missing 'lowerdir' [ 842.112918][T13773] usb 4-1: Using ep0 maxpacket: 32 [ 842.114098][T15450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2464'. [ 842.119248][T13773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.138265][T13773] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 842.171069][T13773] usb 4-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 842.269267][T13773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.361649][T12201] Bluetooth: hci2: command 0x0406 tx timeout [ 842.367990][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 842.618002][T13773] usb 4-1: config 0 descriptor?? [ 843.058520][ T29] audit: type=1400 audit(1735894533.506:1366): avc: denied { getopt } for pid=15435 comm="syz.3.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 843.704237][T13773] usbhid 4-1:0.0: can't add hid device: -71 [ 843.710271][T13773] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 843.721149][ T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 843.728221][T13773] usb 4-1: USB disconnect, device number 79 [ 843.759875][ T25] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 844.201706][ T8] usb 6-1: config 4 has an invalid interface number: 243 but max is 3 [ 844.232915][ T8] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 844.253489][ T8] usb 6-1: config 4 has an invalid interface number: 73 but max is 3 [ 844.266038][ T8] usb 6-1: config 4 has an invalid interface number: 108 but max is 3 [ 844.274285][ T8] usb 6-1: config 4 has an invalid interface number: 118 but max is 3 [ 844.282765][ T8] usb 6-1: config 4 has 5 interfaces, different from the descriptor's value: 4 [ 844.283810][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 844.291856][ T8] usb 6-1: config 4 has no interface number 0 [ 844.291877][ T8] usb 6-1: config 4 has no interface number 1 [ 844.291894][ T8] usb 6-1: config 4 has no interface number 2 [ 844.291910][ T8] usb 6-1: config 4 has no interface number 4 [ 844.291953][ T8] usb 6-1: config 4 interface 243 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 844.291979][ T8] usb 6-1: config 4 interface 243 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 844.292002][ T8] usb 6-1: config 4 interface 243 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 844.292028][ T8] usb 6-1: too many endpoints for config 4 interface 73 altsetting 30: 117, using maximum allowed: 30 [ 844.292057][ T8] usb 6-1: config 4 interface 73 altsetting 30 endpoint 0x2 has invalid wMaxPacketSize 0 [ 844.292078][ T8] usb 6-1: config 4 interface 73 altsetting 30 bulk endpoint 0x5 has invalid maxpacket 16 [ 844.292103][ T8] usb 6-1: config 4 interface 73 altsetting 30 has a duplicate endpoint with address 0x1, skipping [ 844.292123][ T8] usb 6-1: config 4 interface 73 altsetting 30 has a duplicate endpoint with address 0xF, skipping [ 844.292144][ T8] usb 6-1: config 4 interface 73 altsetting 30 has a duplicate endpoint with address 0x2, skipping [ 844.292166][ T8] usb 6-1: config 4 interface 73 altsetting 30 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 844.292188][ T8] usb 6-1: config 4 interface 73 altsetting 30 has a duplicate endpoint with address 0xB, skipping [ 844.292211][ T8] usb 6-1: config 4 interface 73 altsetting 30 has 11 endpoint descriptors, different from the interface descriptor's value: 117 [ 844.292241][ T8] usb 6-1: config 4 interface 3 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 844.470648][ T8] usb 6-1: config 4 interface 3 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 844.586919][ T8] usb 6-1: config 4 interface 3 altsetting 16 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 844.598121][ T8] usb 6-1: config 4 interface 3 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 844.609510][ T8] usb 6-1: config 4 interface 3 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 844.620581][ T8] usb 6-1: config 4 interface 3 altsetting 16 has a duplicate endpoint with address 0xF, skipping [ 844.631352][ T8] usb 6-1: config 4 interface 3 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 845.156114][ T8] usb 6-1: config 4 interface 108 altsetting 134 has a duplicate endpoint with address 0x4, skipping [ 845.167020][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 845.167040][ T8] usb 6-1: config 4 interface 108 altsetting 134 has a duplicate endpoint with address 0x4, skipping [ 845.173130][ T25] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 845.183940][ T8] usb 6-1: config 4 interface 108 altsetting 134 has a duplicate endpoint with address 0xB, skipping [ 845.183964][ T8] usb 6-1: config 4 interface 108 altsetting 134 has a duplicate endpoint with address 0x7, skipping [ 845.183985][ T8] usb 6-1: config 4 interface 108 altsetting 134 has a duplicate endpoint with address 0xF, skipping [ 845.199863][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.204003][ T8] usb 6-1: config 4 interface 108 altsetting 134 has a duplicate endpoint with address 0xF, skipping [ 845.214813][ T25] usb 5-1: Product: syz [ 845.225864][ T8] usb 6-1: config 4 interface 108 altsetting 134 has an invalid descriptor for endpoint zero, skipping [ 845.225888][ T8] usb 6-1: config 4 interface 108 altsetting 134 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 845.225920][ T8] usb 6-1: config 4 interface 118 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 845.225941][ T8] usb 6-1: config 4 interface 118 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 845.225961][ T8] usb 6-1: config 4 interface 118 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 845.225980][ T8] usb 6-1: config 4 interface 243 has no altsetting 0 [ 845.225997][ T8] usb 6-1: config 4 interface 73 has no altsetting 0 [ 845.226014][ T8] usb 6-1: config 4 interface 3 has no altsetting 0 [ 845.226030][ T8] usb 6-1: config 4 interface 108 has no altsetting 0 [ 845.226046][ T8] usb 6-1: config 4 interface 118 has no altsetting 0 [ 845.269975][ T8] usb 6-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=de.f0 [ 845.320104][ T25] usb 5-1: Manufacturer: syz [ 845.353150][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.353174][ T8] usb 6-1: Product: syz [ 845.353188][ T8] usb 6-1: Manufacturer: 鑊믶픖␎褯ᗔᰲ䮰⇓嫜䟐㉭ḧ뒄짮梄⪇哫ὕ✠啥략Ẅग़⍼뗣﷓䌇㎈蘋↪뾳쳟룠⼩橻圷ढ़Ỉ [ 845.353210][ T8] usb 6-1: SerialNumber: syz [ 845.480345][ T25] usb 5-1: SerialNumber: syz [ 845.500346][ T25] usb 5-1: config 0 descriptor?? [ 846.548182][T12415] usb 5-1: USB disconnect, device number 61 [ 846.572327][T15499] FAULT_INJECTION: forcing a failure. [ 846.572327][T15499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.592469][T15499] CPU: 1 UID: 0 PID: 15499 Comm: syz.3.2480 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 846.603253][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 846.610870][T15501] overlayfs: missing 'lowerdir' [ 846.613298][T15499] Call Trace: [ 846.613309][T15499] [ 846.613317][T15499] dump_stack_lvl+0x16c/0x1f0 [ 846.613346][T15499] should_fail_ex+0x497/0x5b0 [ 846.613374][T15499] _copy_from_user+0x2e/0xd0 [ 846.638253][T15499] get_user_ifreq+0xf1/0x250 [ 846.642848][T15499] sock_do_ioctl+0x16c/0x280 [ 846.647437][T15499] ? __pfx_sock_do_ioctl+0x10/0x10 [ 846.652537][T15499] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 846.659047][T15499] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 846.665543][T15499] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 846.672402][T15499] sock_ioctl+0x228/0x6c0 [ 846.676727][T15499] ? __pfx_sock_ioctl+0x10/0x10 [ 846.681570][T15499] ? selinux_file_ioctl+0x180/0x270 [ 846.686758][T15499] ? selinux_file_ioctl+0xb4/0x270 [ 846.691850][T15499] ? __pfx_sock_ioctl+0x10/0x10 [ 846.696698][T15499] __x64_sys_ioctl+0x190/0x200 [ 846.701448][T15499] do_syscall_64+0xcd/0x250 [ 846.705939][T15499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.711834][T15499] RIP: 0033:0x7f2c0ab85d29 [ 846.716237][T15499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.735856][T15499] RSP: 002b:00007f2c0b9f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.744280][T15499] RAX: ffffffffffffffda RBX: 00007f2c0ad75fa0 RCX: 00007f2c0ab85d29 [ 846.752258][T15499] RDX: 0000000020000900 RSI: 0000000000008931 RDI: 0000000000000004 [ 846.760233][T15499] RBP: 00007f2c0b9f5090 R08: 0000000000000000 R09: 0000000000000000 [ 846.768208][T15499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.776181][T15499] R13: 0000000000000000 R14: 00007f2c0ad75fa0 R15: 00007ffea203d708 [ 846.784175][T15499] [ 846.901096][ T8] safe_serial 6-1:4.243: safe_serial converter detected [ 846.908141][ T8] safe_serial 6-1:4.243: probe with driver safe_serial failed with error -22 [ 846.948405][ T8] usb 6-1: USB disconnect, device number 12 [ 847.034917][T15508] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 847.179970][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 847.354630][T15512] netlink: 'syz.3.2483': attribute type 21 has an invalid length. [ 847.367679][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2483'. [ 848.557550][ T29] audit: type=1400 audit(1735894538.986:1367): avc: denied { connect } for pid=15532 comm="syz.3.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 848.626575][ T29] audit: type=1400 audit(1735894538.986:1368): avc: denied { read } for pid=15532 comm="syz.3.2490" laddr=172.20.20.170 lport=5 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 850.085358][ T29] audit: type=1326 audit(1735894540.536:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0ab85d29 code=0x7ffc0000 [ 850.130567][T15553] netlink: 'syz.5.2493': attribute type 10 has an invalid length. [ 850.148760][ T29] audit: type=1326 audit(1735894540.536:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0ab85d29 code=0x7ffc0000 [ 850.181614][ T29] audit: type=1326 audit(1735894540.576:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c0ab85d29 code=0x7ffc0000 [ 850.211941][T15548] netlink: 'syz.4.2494': attribute type 7 has an invalid length. [ 850.228357][T15548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2494'. [ 850.238218][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2494'. [ 850.269142][ T29] audit: type=1326 audit(1735894540.576:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0ab85d29 code=0x7ffc0000 [ 850.324534][ T29] audit: type=1326 audit(1735894540.576:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c0ab85d29 code=0x7ffc0000 [ 850.358393][ T29] audit: type=1326 audit(1735894540.576:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0ab85d29 code=0x7ffc0000 [ 850.457474][ T29] audit: type=1326 audit(1735894540.576:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0ab85d29 code=0x7ffc0000 [ 850.532427][ T29] audit: type=1326 audit(1735894540.576:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15551 comm="syz.3.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c0ab85d29 code=0x7ffc0000 [ 850.580356][T15566] input: syz1 as /devices/virtual/input/input129 [ 852.696124][T15601] FAULT_INJECTION: forcing a failure. [ 852.696124][T15601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.748210][T15601] CPU: 0 UID: 0 PID: 15601 Comm: syz.4.2507 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 852.759000][T15601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 852.769036][T15601] Call Trace: [ 852.772296][T15601] [ 852.775205][T15601] dump_stack_lvl+0x16c/0x1f0 [ 852.779876][T15601] should_fail_ex+0x497/0x5b0 [ 852.784561][T15601] _copy_to_user+0x32/0xd0 [ 852.788964][T15601] simple_read_from_buffer+0xd0/0x160 [ 852.794336][T15601] proc_fail_nth_read+0x198/0x270 [ 852.799344][T15601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 852.804891][T15601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 852.810418][T15601] vfs_read+0x1df/0xbe0 [ 852.814566][T15601] ? __fget_files+0x1fc/0x3a0 [ 852.819238][T15601] ? __pfx___mutex_lock+0x10/0x10 [ 852.824257][T15601] ? __pfx_vfs_read+0x10/0x10 [ 852.828917][T15601] ? __fget_files+0x206/0x3a0 [ 852.833574][T15601] ksys_read+0x12b/0x250 [ 852.837791][T15601] ? __pfx_ksys_read+0x10/0x10 [ 852.842532][T15601] do_syscall_64+0xcd/0x250 [ 852.847016][T15601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.852888][T15601] RIP: 0033:0x7fc5ff38473c [ 852.857278][T15601] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 852.876862][T15601] RSP: 002b:00007fc600143030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 852.885249][T15601] RAX: ffffffffffffffda RBX: 00007fc5ff575fa0 RCX: 00007fc5ff38473c [ 852.893207][T15601] RDX: 000000000000000f RSI: 00007fc6001430a0 RDI: 0000000000000005 [ 852.901153][T15601] RBP: 00007fc600143090 R08: 0000000000000000 R09: 0000000000000000 [ 852.909122][T15601] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 852.917070][T15601] R13: 0000000000000000 R14: 00007fc5ff575fa0 R15: 00007fff465cf4a8 [ 852.925024][T15601] [ 852.928098][ C0] vkms_vblank_simulate: vblank timer overrun [ 854.213090][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 854.317316][ T29] audit: type=1400 audit(1735894544.656:1419): avc: denied { bind } for pid=15624 comm="syz.0.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 855.360022][T13773] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 855.530115][T13773] usb 6-1: Using ep0 maxpacket: 32 [ 855.542881][T13773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.590642][T13773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.629195][T13773] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 855.669273][T13773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.692830][T13773] usb 6-1: config 0 descriptor?? [ 855.716655][T13773] hub 6-1:0.0: USB hub found [ 855.837019][T15654] input input130: cannot allocate more than FF_MAX_EFFECTS effects [ 960.929757][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 960.936743][ C1] rcu: 0-...!: (1 GPs behind) idle=93c4/1/0x4000000000000000 softirq=65396/65404 fqs=1 [ 960.948510][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15644/1:b..l [ 960.956516][ C1] rcu: (detected by 1, t=10502 jiffies, g=57361, q=431 ncpus=2) [ 960.964234][ C1] Sending NMI from CPU 1 to CPUs 0: [ 960.964259][ C0] NMI backtrace for cpu 0 [ 960.964270][ C0] CPU: 0 UID: 0 PID: 15654 Comm: syz.3.2523 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 960.964288][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 960.964296][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x8/0x20 [ 960.964321][ C0] Code: bf 02 00 00 00 e9 18 ff ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 04 00 00 00 e9 ea fe ff ff 66 2e 0f 1f 84 00 00 00 [ 960.964334][ C0] RSP: 0018:ffffc90000007d78 EFLAGS: 00000092 [ 960.964351][ C0] RAX: 1ffff1100679b519 RBX: 1821c061f0000000 RCX: ffffffff89415cef [ 960.964361][ C0] RDX: ffff888030a3c880 RSI: 0000000000000002 RDI: 0000000000000002 [ 960.964370][ C0] RBP: ffff888033cda810 R08: 0000000000000006 R09: 0000000000000000 [ 960.964380][ C0] R10: 0000000004000000 R11: 0000000000000000 R12: 0000000000000002 [ 960.964390][ C0] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000004000000 [ 960.964400][ C0] FS: 00007f2c0b9d46c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 960.964416][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.964427][ C0] CR2: 0000001b32106ff8 CR3: 000000004969a000 CR4: 00000000003526f0 [ 960.964437][ C0] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 960.964446][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 960.964455][ C0] Call Trace: [ 960.964461][ C0] [ 960.964468][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 960.964486][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 960.964501][ C0] ? nmi_handle+0x1ac/0x5d0 [ 960.964517][ C0] ? __sanitizer_cov_trace_cmp4+0x8/0x20 [ 960.964534][ C0] ? default_do_nmi+0x6a/0x160 [ 960.964549][ C0] ? exc_nmi+0x170/0x1e0 [ 960.964562][ C0] ? end_repeat_nmi+0xf/0x53 [ 960.964584][ C0] ? advance_sched+0x3cf/0xc60 [ 960.964599][ C0] ? __sanitizer_cov_trace_cmp4+0x8/0x20 [ 960.964616][ C0] ? __sanitizer_cov_trace_cmp4+0x8/0x20 [ 960.964634][ C0] ? __sanitizer_cov_trace_cmp4+0x8/0x20 [ 960.964651][ C0] [ 960.964656][ C0] [ 960.964660][ C0] advance_sched+0x3cf/0xc60 [ 960.964680][ C0] ? __pfx_advance_sched+0x10/0x10 [ 960.964693][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 960.964716][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 960.964734][ C0] ? read_tsc+0x9/0x20 [ 960.964755][ C0] hrtimer_interrupt+0x392/0x8e0 [ 960.964778][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 960.964797][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 960.964814][ C0] [ 960.964818][ C0] [ 960.964824][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 960.964843][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 960.964862][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 71 4a f6 48 89 df e8 ae f0 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 95 d5 3b f6 65 8b 05 f6 90 d7 74 85 c0 74 16 5b [ 960.964874][ C0] RSP: 0018:ffffc90004e3fb88 EFLAGS: 00000246 [ 960.964886][ C0] RAX: 0000000000000006 RBX: ffff888024fe8a00 RCX: 1ffffffff20bde71 [ 960.964896][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1ede0 [ 960.964906][ C0] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 [ 960.964915][ C0] R10: ffffffff905f36d7 R11: 0000000000000000 R12: ffff888024fe8014 [ 960.964925][ C0] R13: ffff888024fe8a00 R14: ffff888024fe8000 R15: ffffc90004e3fbe8 [ 960.964942][ C0] try_to_wake_up+0x949/0x1490 [ 960.964960][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 960.964975][ C0] ? __pfx_lock_release+0x10/0x10 [ 960.964992][ C0] ? plist_check_head+0xa3/0x150 [ 960.965008][ C0] wake_up_q+0x91/0x140 [ 960.965022][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 960.965040][ C0] futex_wake+0x43e/0x4e0 [ 960.965058][ C0] ? __pfx_futex_wake+0x10/0x10 [ 960.965072][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 960.965090][ C0] ? add_device_randomness+0xb8/0xf0 [ 960.965107][ C0] ? __pfx_add_device_randomness+0x10/0x10 [ 960.965125][ C0] do_futex+0x1e5/0x350 [ 960.965139][ C0] ? __pfx_do_futex+0x10/0x10 [ 960.965153][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 960.965166][ C0] ? bpf_lsm_capable+0x9/0x10 [ 960.965179][ C0] ? trace_event_raw_event_xrun+0x357/0x590 [ 960.965198][ C0] __x64_sys_futex+0x1e1/0x4c0 [ 960.965214][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 960.965228][ C0] ? rcu_is_watching+0x12/0xc0 [ 960.965251][ C0] do_syscall_64+0xcd/0x250 [ 960.965269][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.965287][ C0] RIP: 0033:0x7f2c0ab85d29 [ 960.965300][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.965312][ C0] RSP: 002b:00007f2c0b9d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 960.965326][ C0] RAX: ffffffffffffffda RBX: 00007f2c0ad76088 RCX: 00007f2c0ab85d29 [ 960.965336][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2c0ad7608c [ 960.965351][ C0] RBP: 00007f2c0ad76080 R08: 00007f2c0b9f6000 R09: 0000000000000000 [ 960.965361][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2c0ad7608c [ 960.965371][ C0] R13: 0000000000000000 R14: 00007ffea203d620 R15: 00007ffea203d708 [ 960.965386][ C0] [ 960.966258][ C1] task:syz.0.2522 state:R running task stack:26336 pid:15644 tgid:15641 ppid:5814 flags:0x00004000 [ 961.492275][ C1] Call Trace: [ 961.495551][ C1] [ 961.498485][ C1] __schedule+0xe58/0x5ad0 [ 961.502912][ C1] ? __pfx_mark_lock+0x10/0x10 [ 961.507675][ C1] ? finish_task_switch.isra.0+0x212/0xcc0 [ 961.513483][ C1] ? __pfx_mark_lock+0x10/0x10 [ 961.518260][ C1] ? __pfx___schedule+0x10/0x10 [ 961.523115][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 961.528316][ C1] ? finish_task_switch.isra.0+0x217/0xcc0 [ 961.534132][ C1] ? mark_held_locks+0x9f/0xe0 [ 961.538899][ C1] preempt_schedule_irq+0x51/0x90 [ 961.543924][ C1] irqentry_exit+0x36/0x90 [ 961.548340][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 961.553806][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 961.559702][ C1] Code: b8 ff ff ff ff 65 0f c1 05 d0 c1 8b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 961.579312][ C1] RSP: 0000:ffffc90004a8f490 EFLAGS: 00000206 [ 961.585376][ C1] RAX: 0000000000000046 RBX: 1ffff92000951e93 RCX: 000000009f2502c7 [ 961.593347][ C1] RDX: 0000000000000001 RSI: ffffffff8b6cdce0 RDI: ffffffff8bd1ede0 [ 961.601331][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dca398 [ 961.609327][ C1] R10: ffffffff96e51cc7 R11: 0000000000000001 R12: 0000000000000000 [ 961.617305][ C1] R13: ffffffff8e1bb900 R14: 0000000000000000 R15: 0000000000000000 [ 961.625296][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 961.630939][ C1] ? rcu_is_watching+0x12/0xc0 [ 961.635711][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 961.640915][ C1] ? rcu_is_watching+0x12/0xc0 [ 961.645682][ C1] ? ___pte_offset_map+0x42/0x540 [ 961.650714][ C1] ? lock_acquire+0x2f/0xb0 [ 961.655216][ C1] ? ___pte_offset_map+0x42/0x540 [ 961.660254][ C1] ___pte_offset_map+0x48/0x540 [ 961.665108][ C1] ? ___pte_offset_map+0x42/0x540 [ 961.670142][ C1] __pte_offset_map_lock+0x8e/0x300 [ 961.675347][ C1] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 961.681162][ C1] ? __pfx___might_resched+0x10/0x10 [ 961.686461][ C1] unmap_page_range+0x7d5/0x3d10 [ 961.691418][ C1] ? mark_held_locks+0x9f/0xe0 [ 961.696183][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 961.701555][ C1] ? irqentry_exit+0x3b/0x90 [ 961.706149][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 961.711353][ C1] ? uprobe_munmap+0x20/0x5c0 [ 961.716036][ C1] unmap_single_vma+0x194/0x2b0 [ 961.720894][ C1] unmap_vmas+0x22f/0x490 [ 961.725226][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 961.730087][ C1] ? __pfx_lock_release+0x10/0x10 [ 961.735116][ C1] ? lock_acquire+0x2f/0xb0 [ 961.739617][ C1] ? mlock_drain_local+0x6f/0x4f0 [ 961.744653][ C1] exit_mmap+0x1c6/0xb20 [ 961.748899][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 961.753691][ C1] __mmput+0x12a/0x4c0 [ 961.757765][ C1] mmput+0x62/0x70 [ 961.761487][ C1] do_exit+0x9ba/0x2d70 [ 961.765652][ C1] ? irqentry_exit+0x3b/0x90 [ 961.770244][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 961.775443][ C1] ? __pfx_do_exit+0x10/0x10 [ 961.780045][ C1] do_group_exit+0xd3/0x2a0 [ 961.784558][ C1] get_signal+0x24ed/0x26c0 [ 961.789083][ C1] ? __pfx_get_signal+0x10/0x10 [ 961.793941][ C1] ? __pfx_do_futex+0x10/0x10 [ 961.798622][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 961.804174][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 961.810338][ C1] ? rcu_is_watching+0x12/0xc0 [ 961.815114][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 961.820766][ C1] do_syscall_64+0xda/0x250 [ 961.825362][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.831268][ C1] RIP: 0033:0x7f06b5185d29 [ 961.835680][ C1] RSP: 002b:00007f06b5f190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 961.844096][ C1] RAX: fffffffffffffe00 RBX: 00007f06b5375fa8 RCX: 00007f06b5185d29 [ 961.852071][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f06b5375fa8 [ 961.860045][ C1] RBP: 00007f06b5375fa0 R08: 0000000000000000 R09: 0000000000000000 [ 961.868020][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f06b5375fac [ 961.875988][ C1] R13: 0000000000000000 R14: 00007ffcd9c6c3f0 R15: 00007ffcd9c6c4d8 [ 961.883969][ C1] [ 961.886988][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g57361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 961.898178][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 961.908157][ C1] rcu: RCU grace-period kthread stack dump: [ 961.914039][ C1] task:rcu_preempt state:R running task stack:27744 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 961.925799][ C1] Call Trace: [ 961.929076][ C1] [ 961.932029][ C1] __schedule+0xe58/0x5ad0 [ 961.936447][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 961.941666][ C1] ? __pfx___schedule+0x10/0x10 [ 961.946519][ C1] ? schedule+0x298/0x350 [ 961.950851][ C1] ? __pfx_lock_release+0x10/0x10 [ 961.955878][ C1] ? lock_acquire+0x2f/0xb0 [ 961.960383][ C1] ? schedule+0x1fd/0x350 [ 961.964715][ C1] schedule+0xe7/0x350 [ 961.968786][ C1] schedule_timeout+0x124/0x280 [ 961.973635][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 961.979007][ C1] ? __pfx_process_timeout+0x10/0x10 [ 961.984301][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 961.990187][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 961.995679][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 962.000463][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 962.005750][ C1] ? rcu_gp_init+0xc82/0x1630 [ 962.010432][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 962.015682][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 962.021518][ C1] rcu_gp_kthread+0x271/0x380 [ 962.026213][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 962.031435][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 962.036650][ C1] ? __kthread_parkme+0x148/0x220 [ 962.041693][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 962.046903][ C1] kthread+0x2c1/0x3a0 [ 962.050981][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 962.056184][ C1] ? __pfx_kthread+0x10/0x10 [ 962.060779][ C1] ret_from_fork+0x45/0x80 [ 962.065194][ C1] ? __pfx_kthread+0x10/0x10 [ 962.069790][ C1] ret_from_fork_asm+0x1a/0x30 [ 962.074572][ C1] [ 962.077591][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 962.083905][ C1] CPU: 1 UID: 0 PID: 14416 Comm: kworker/u8:16 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 962.094921][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 962.104992][ C1] Workqueue: events_unbound toggle_allocation_gate [ 962.111500][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 962.118183][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ba 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 962.137787][ C1] RSP: 0018:ffffc9000450f998 EFLAGS: 00000293 [ 962.143850][ C1] RAX: 0000000000000000 RBX: ffff8880b86469c0 RCX: ffffffff818e078c [ 962.151817][ C1] RDX: ffff88807f4d2440 RSI: ffffffff818e0766 RDI: 0000000000000005 [ 962.159784][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 962.167751][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d39 [ 962.175718][ C1] R13: 0000000000000001 R14: ffff8880b86469c8 R15: ffff8880b873fe40 [ 962.183701][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 962.192657][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.199248][ C1] CR2: 00007fc5ff577bac CR3: 000000000df7e000 CR4: 00000000003526f0 [ 962.207223][ C1] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 962.215194][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 962.223161][ C1] Call Trace: [ 962.226436][ C1] [ 962.229282][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 962.235619][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 962.240827][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 962.246321][ C1] ? timekeeping_advance+0x72e/0xa90 [ 962.251739][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 962.257402][ C1] ? __asan_memcpy+0x3c/0x60 [ 962.262024][ C1] ? rcu_is_watching+0x12/0xc0 [ 962.266797][ C1] ? update_process_times+0x178/0x2d0 [ 962.272175][ C1] ? __pfx_update_process_times+0x10/0x10 [ 962.277896][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 962.283363][ C1] ? update_wall_time+0x1c/0x40 [ 962.288222][ C1] ? tick_nohz_handler+0x376/0x530 [ 962.293340][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 962.298807][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 962.304189][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 962.309909][ C1] ? read_tsc+0x9/0x20 [ 962.313992][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 962.319121][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 962.325282][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 962.331094][ C1] [ 962.334024][ C1] [ 962.336952][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 962.343124][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 962.349199][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 962.355273][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 962.361345][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 962.367425][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 962.372456][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 962.377483][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 962.382600][ C1] text_poke_bp_batch+0x22b/0x760 [ 962.387634][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 962.393184][ C1] ? __jump_label_patch+0x1db/0x400 [ 962.398394][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 962.404645][ C1] text_poke_finish+0x30/0x40 [ 962.409325][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 962.415318][ C1] jump_label_update+0x1d7/0x400 [ 962.420266][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 962.426166][ C1] static_key_enable+0x1a/0x20 [ 962.430934][ C1] toggle_allocation_gate+0xfc/0x260 [ 962.436222][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 962.442116][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 962.447319][ C1] ? process_one_work+0x921/0x1ba0 [ 962.452439][ C1] ? lock_acquire+0x2f/0xb0 [ 962.456940][ C1] ? process_one_work+0x921/0x1ba0 [ 962.462054][ C1] process_one_work+0x9c5/0x1ba0 [ 962.467000][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 962.472631][ C1] ? __pfx_process_one_work+0x10/0x10 [ 962.478000][ C1] ? rcu_is_watching+0x12/0xc0 [ 962.482776][ C1] ? assign_work+0x1a0/0x250 [ 962.487373][ C1] worker_thread+0x6c8/0xf00 [ 962.491970][ C1] ? __kthread_parkme+0x148/0x220 [ 962.497001][ C1] ? __pfx_worker_thread+0x10/0x10 [ 962.502111][ C1] kthread+0x2c1/0x3a0 [ 962.506180][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 962.511382][ C1] ? __pfx_kthread+0x10/0x10 [ 962.515975][ C1] ret_from_fork+0x45/0x80 [ 962.520389][ C1] ? __pfx_kthread+0x10/0x10 [ 962.524984][ C1] ret_from_fork_asm+0x1a/0x30 [ 962.529765][ C1]