last executing test programs: 19m58.136431727s ago: executing program 3 (id=98): r0 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x1, @raw_data="9d5dcc684d7857bcda7df742eb7fcb9db9d7335d5969e0569fe57b510de14401e488167afb076e80e2571d2c0ecd86f64227098aa93a0023814ab330c4ff0f0000000000002632594f8f6e94eb9e68c55a52d912967db7166c302e09aefc10e9ccf1714f7bee737d7f28c2662c77ddd7512b984348b85d04970d0431177bd4b80200000070da4a6a0f367f42ee2bd48fbd8b62d0e268cf88a0cdd333529b59444dba0e1123565b0bf47bee4089677af86974c54301ba0c4a2f428c00"}) 19m57.820592155s ago: executing program 3 (id=100): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f00000000c0), 0x1, r2}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[{}], r4, 0x0, '\x00', 0x0, 0x1}) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7ffe, 0x40024e}, &(0x7f0000000600)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x628, 0xc88d, 0x43, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "299246c8790c329b9b21c709e5bde740665dacbf8e609ceb866040a2100c9ec9eac4261c62000000000000000000000080"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, &(0x7f0000000580)={0x6, [0x4, 0x7], 0x9}, 0x10) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r10, 0x80049370, &(0x7f0000000540)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040341a05f7000000000001090224000100008000090400ee010300000009210000000122070009058103"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="00079a000000e6056764343319c6ea6cf8130634479304bfa8d2e153647627cc5f1b0a39c333be094f3f2addd0b926461bb42ff9b15337f13a5ccb9d79366eb6b94f63d8430b046e1f5b60b179163ce93f47c6763e7d96a307af68e3893a6068feb5dc458820f7e1a9d54096a61955611030bafef1f672e2fc3eda7b67bc9e11bbcbd441ab517ef5c67f7cc9f8aea493940b12273a6827db08e1dbd0b5edd324"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x5, 0xf666, 0x0, 0x5, 0x9, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0xe8}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) 19m56.961517335s ago: executing program 3 (id=102): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x0, 0x97, 0x40, 0xa4}}]}}]}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="29920200d65c0400a648aa3892a581daba90b36805946391c286394332e31a3dee87b035216f1f2d609b776dc200100000000000007b3db6d5c611"], 0x20}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r0}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r8, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x76}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x20000080) 19m56.068765901s ago: executing program 3 (id=104): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0203f3010c00000000000000000000000200080008000000fd00000000000000030006000000000002000000ac141400000000000000000002000100000000000000000000000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x1, 0xdddd1000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) 19m55.138810365s ago: executing program 3 (id=113): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000013c0)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000d00)=0x2b56, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) recvfrom$packet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) 19m53.566716069s ago: executing program 3 (id=118): r0 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x890, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x400000}}]}}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b3d, 0xf7b1, 0x40, 0x0, 0x31) syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x890, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x400000}}]}}) (async) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x3b3d, 0xf7b1, 0x40, 0x0, 0x31) (async) 19m38.512518579s ago: executing program 32 (id=118): r0 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x890, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x400000}}]}}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b3d, 0xf7b1, 0x40, 0x0, 0x31) syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x890, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x400000}}]}}) (async) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x3b3d, 0xf7b1, 0x40, 0x0, 0x31) (async) 11.113246877s ago: executing program 2 (id=3890): syz_io_uring_setup(0x2b04, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f00000000c0), &(0x7f0000ffe000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_io_uring_setup(0x98b, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) r4 = syz_open_procfs(0x0, 0x0) lseek(r4, 0xff, 0x0) getdents64(r4, 0xffffffffffffffff, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = syz_open_dev$media(&(0x7f0000000180), 0x1, 0x200) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000440)={0x0, 0x6, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0}, 0x4001000) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b000a", 0x35}], 0x1}, 0x80) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) prlimit64(0x0, 0x7, 0x0, 0x0) write$binfmt_elf64(r8, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x68, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000020, 0x0, {0x3}}) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) capset(0x0, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x101, 0x8a}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e000131206c"], 0x7) 9.776252193s ago: executing program 1 (id=3893): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010600000000000000000900000024000480130001"], 0x38}}, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r10, 0x4610, &(0x7f0000000000)={0x9}) write$uinput_user_dev(r4, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x800]}, 0x45c) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000006480)) open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket$kcm(0x10, 0x3, 0x10) 9.667574525s ago: executing program 4 (id=3894): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8006, 0x145}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) fchmod(0xffffffffffffffff, 0xc2) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r5, 0x89e0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0xf000) 8.966349183s ago: executing program 2 (id=3895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x4004085) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000009, 0x8010, r2, 0x68d25000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xaa442, 0x0) r3 = syz_pidfd_open(0xffffffffffffffff, 0x0) pidfd_send_signal(r3, 0x36, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xa, 0x0) sysinfo(&(0x7f0000000000)=""/196) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xffa8) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000005880)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 8.002680038s ago: executing program 5 (id=3898): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x4004085) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xaa442, 0x0) r1 = syz_pidfd_open(0xffffffffffffffff, 0x0) pidfd_send_signal(r1, 0x36, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xa, 0x0) sysinfo(&(0x7f0000000000)=""/196) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xffa8) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000005880)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 7.809868426s ago: executing program 1 (id=3899): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x325, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0xfd45}}, 0x0) 6.250851984s ago: executing program 1 (id=3901): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000001000b7080000000400007b8af8ff00000000bfa2000000000000070008000000b70400000000000085000000010000009527b3e733be4b32e46500"/74], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ptrace(0x11, r6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 6.203816653s ago: executing program 2 (id=3902): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x226942, 0x1ff) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = dup(r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000500)={0x6ba, r5, 'id1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x80}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @ldst={0x0, 0x1, 0x6, 0x6, 0xa, 0xffffffffffffffe0, 0xfffffffffffffffc}, @map_val={0x18, 0xc, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xf0, 0x38, &(0x7f0000000440)=""/56, 0x41100, 0x1, '\x00', r4, 0x25, r0, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r0, r0, r0, r0, r0, r0, r9, r0, r0], &(0x7f0000000600)=[{0x5, 0x3, 0xf, 0x4}, {0x0, 0x2, 0x5, 0x6}, {0x5, 0x4, 0xe, 0x5}, {0x5, 0x4, 0xd, 0x5}], 0x10, 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x60) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0xb}}}, 0x24}}, 0x800) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4680040000ff7f08000000000003003e84ecffffff9a0300008000000040007f00000000005600000000000000000000000000380001000f00020000000300000005000000040000000d20000000400000c801000000000000e2000000000000000400000000003bbb3a5d519ed834254200000000"], 0x78) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 5.786566839s ago: executing program 5 (id=3904): accept$ax25(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491"], 0x1c}}, 0x8000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x2c, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) 4.877675788s ago: executing program 4 (id=3905): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000001818000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800c000100626974776973650014000280080003400000000208000140000000140900010073797a3000000000140000001100010000000000000000000700000a"], 0xc4}}, 0x0) clock_gettime(0x0, &(0x7f0000003780)={0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe}, "4dc10bdd35d968d2"}}}}}, 0x0) recvmmsg(r1, &(0x7f00000035c0)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000003900)=[{&(0x7f00000003c0)=""/168, 0xa8}, {&(0x7f0000000080)=""/80, 0x50}, {&(0x7f0000000100)=""/238, 0xee}, {&(0x7f0000000480)=""/188, 0xbc}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000003800)=""/197, 0xc5}], 0x6, &(0x7f0000000600)=""/115, 0x73}, 0x1ff}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/198, 0xc6}, {&(0x7f0000000900)=""/145, 0x91}], 0x2, &(0x7f0000000a00)=""/87, 0x57}, 0x4}, {{&(0x7f0000000a80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d80)}, 0x5}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001dc0)=""/132, 0x84}, {&(0x7f0000001e80)=""/12, 0xc}, {&(0x7f0000001ec0)=""/179, 0xb3}], 0x3, &(0x7f0000001fc0)=""/185, 0xb9}, 0x7ff}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, &(0x7f00000030c0)=""/56, 0x38}, 0x9}, {{&(0x7f0000003100)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003180)=""/234, 0xea}, {&(0x7f0000003280)=""/254, 0xfe}, {&(0x7f0000003380)=""/126, 0x7e}], 0x3, &(0x7f0000003440)=""/71, 0x47}, 0x8}, {{&(0x7f00000034c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003540)=""/46, 0x2e}], 0x1}, 0x1}], 0x7, 0x40000103, &(0x7f00000037c0)={r2, r3+10000000}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB="ee4c1812ae2f030f2ce3738cb603d6269335815abc3be5f27582eba21481c3ac0502ed3db7522aeb38da46cc94063ab2194b6f04e0e53f08e94f500d42a9f11e71801200944e31a68243e0541111c7108211cd299e12cdc4e2bf15abb70f1e357024dc16a9d20ffb7bffa73cf713aee616fb00ea71c2aa6f6f123bb578e843ef9618bac0851d965b77d351ca45eb40d704ef9ad187715804850d77e3252feb9b15a77a2745cf799d087aad28c8ad77ca845c722bc8", @ANYRES16=r0, @ANYBLOB="01002ab97000fddbdf4c497d3ef7fea0d6504465ba99ec215cc338328660522bd87507008fd1f4fcfcc8bb2900145804c38bbe1001c0cf0ede2bec8685beb6090b6255ece87421e6d03e9632eb34994c311f61e1e07a7bac1af0a80fbd25e3c725a85b82d584ff4af360e7f5cc40152946f22b136f099ef5f51d6bee83c0e7526ce89ddfe67aed25b4c36119a0ac1829ee1536d703f7d51580f496f1e0a3ea66a076d1b9adb76c2a74f6201692bc60f74446f9d2287443ac55372a6950006e572acc53f913cabc54c499b8336964405e60db9e7825"], 0x2c}, 0x1, 0x0, 0x0, 0x40488d0}, 0x24004854) 4.846544977s ago: executing program 0 (id=3906): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x60, 0x4}}], 0x48, 0x4004}, 0x0) 4.777557827s ago: executing program 4 (id=3907): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x1, 0x3, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x5, '\x00', 0xa0}, {0x1, 0x9}, {0xa, 0x3, 0x5}, {0xb8, 0xda, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x4, 0x6, 0x4, '\x00', 0x9}, {0xfe, 0x5, 0xd, '\x00', 0xa}, {0x2, 0x4b, 0x45, '\x00', 0xc2}, {0xd2, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x5, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x0, 0x6, '\x00', 0x9}, {0x1b, 0x9, 0x7, '\x00', 0x4}, {0x4, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0x3, 0xa, '\x00', 0x8}, {0x86, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x7f}]}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000002c0)={0x2, 0x1, 0x0, "eee98fb006178749cb4dfd9300009b6b7bd152f35ed730fc700000cb4f1891e2", 0x32314752}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4], 0x1, 0x800}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000000)={0xffd9, 0x0, 0x0}) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549f100000000000000ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffff454b, 0x0) 4.740182463s ago: executing program 2 (id=3908): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20018000}, 0x0) r7 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x1000) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) 4.736088178s ago: executing program 0 (id=3909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x4004085) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000009, 0x8010, r2, 0x68d25000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xaa442, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x36, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xa, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xffa8) 3.070318315s ago: executing program 1 (id=3910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.941876622s ago: executing program 0 (id=3911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) (fail_nth: 1) 2.526897373s ago: executing program 5 (id=3912): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x325, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 2.521893966s ago: executing program 0 (id=3913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc7", 0x6}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1, 0xffffffff, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x1, 0x101000}}, 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r10 = dup(r9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r10, r6, 0x25, 0x4, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f00000024c0)={@multicast, @local, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "80de2e", 0xd47, 0x2f, 0xff, @local, @mcast1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0xf0, 0x1, 0x1, 0x0, 0x2, 0x5}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x3, {{0x8, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7}, 0x2, {0x7, 0x5, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "c43da1a8a9e1ca578a0f63d487e345c42762041ea990c1437af466bf4260252119c345e0a3c1d5717f5fb47117617fc63b9777761d7c104d49db2c177bcd7c0ee887b7101f6a2c13ec34175beb559a7683c326cc51dba6c569e6461d3467378bd983206f0284b28d213af79b074eb0aeb672efd8ff30b3d39d8c1323df751dbf335fdc5cb3acb5821c5d78f1d14a9856c312b824b4e4feb1641728d5ec3d7a8459b8aef4f3aae885351248f1d1d49c372683113cf205b8752525b84e486b014c63cb26084af88704d873930030cf664c8c19ecc870bf31601a3bd96c3e2218cb5b8fac3eb21d697aa8ba0646949d856fe0b5d46f434145688bfe8f29cd1fe23bbb73ca8f4029066158967213c5a66d4b6978f2480e71139fb4e3b7a7f2c18d963a2f42a2cd1004f45ff5fe14b77a3e14a3274785ab1baa4cb317cc565a931f6e8bd4666e7adec7416cea48896ded27b8fa9b23eebb62fee014a439398eff1d6cbc9a8c167974746197f3f7963d96766675a0cd2620c7edf3da1857983042ebb5523d21e6b504dad1a162304ec2b6b09e4c14da1933ddc930029402aa62b0ed95f98c19281a83f30c50dfc9194ddf6308ff885f9d0b1c1d65d4e446d4d5eb11a7d417c2b189bf9c103c4adb035fe411483d2700af10d146c7a5b0e3506a8c022ff1a7364c38dda179262a8a56076c186e203e006c9a3fb5a98fdf6b65b5001dfc8e16f9a548d2d6330caf0ae5574eeb193ede814e464b27b1500f48efa754a463aa60a60cdbe11af5a89cfe769f36ca6e097b3336a461f2e90a386fccc0606a2ff7aaf30670a59211180414f5f71ed46cca68634e97be7fd05d4b6454eae9daebf59c44cdcf86ba88ef7878c01dd3c444cec0b935a63bb8ef56fdb33af663b78f2abb8071e8f6386c538e8a6ff9b009264cc9b43f63c65224adcd79ab1b3fc498250425fa8460f1b5641af0ee00fd26715820586a04c1485cf297fcfd80856a3d8b20f86121beaa3fa0cc804d23859ac819c4f0c2e13c923a9c4f6eba797ca344a81a84b45bc55463241ea1b59b03e2c542a9cceb31368f05914e00779482f17127cf33f31682c4eabbd7d13c395238447fa053ebab0147fc59c4fe5351599a4fe464e6cb47ce4fff25e30f78be0ea0317d972817cc0c41343081083d99b70225feb5b9e6540edc9ba4107f046a46cf4be4cb1a3748b60d1e10a72de214d9598fe094f8a4789d1fd867cf5f2afa58344363e8e4533ee3266e6ba61f6b82ab6aff7411628646aa3018e454126bb435775bb771412b8c9242eb831fe4e503181f94fbb2372e1e2b08be0ef557e79842f7bf3449f2e15d824105599d547fee1e69e30be536d2df7823e050ea2d3a93f6ebdfdd594618290fb18458f864b1900f3aec063baba6c7bc0e339ccc9e31702a1af0598333b79124f657f827c904658998dc515bd2e76e2443dfe45a674e56f78af0fa866c3f1034e899cf01aca6284bf90c5c4251dcab4711834734c85d3762a2d776e513f79c8e95f4b008347904c03e91d8b3e461f46d86675fbbd810aab1262264ff22532509b76c7b0f76350488425e62dd71620a1eea1ace1a8c853000f2976e61e33fefa04f70e7afbf077f9fbbdfa40af4c03459d8ce0a6a1dbea14c1a737aa74807e839943b515321d3cb1f646e05ab78b2d11fa45af09815db03d785e9fd5f01cfed9dfc650a734a41d0722eed5b7817c267170b307dd25e7152b26238a3c41bdc0d976879dd0425249d4a86159b5eca2e0e617c0412e2685d61993687b6ba7b0e6c19e0bb011677b97035c240f47e7db81883d95a71e815c9028bfaf1fcaac5d6a9b7803576e157e8d3c0341610f2e88efdba7488654f4fcf2cc21313d04d0433193d82add3b5ef42d9daa74af1fa996ebcf0f1ba1252bdd07ce786803ba49e1598837217b660336c929b234ef298f338d6eaf473434c4caf873cccc2feb5c91c63511a43decc6ededeca50d7fc552c2b0d3e9f7454f6277d151fd03876cd21c0cd768e094f13a7b776a3721929338d9c15c5d5384bd0578b199b6a493a1fe3c068df3db4011e7a2ab55d67657ef5037a6d0d766335699d449905b692d540cb55a68e8676d79d3ee01dbcb1d649064b62873eb04ccdf06fd95a15a63e87dc8a57c1504d0024f7c76b75802e313aeee9993975d7efb158fe0ffc68f4f689e75fdb3a598833f8c56704e76b6e06d6327ca54fcc97d120a41bebdfbea0126f570b119dae3fcc81ca00dfdf67ae194e7bf3cbef27711f7a71e6606cf4cb00cd25b22b93b347e9e1db57235a15c3d8db0d8c0d39db6256721dae8a641d8b1dd45ed7036dbf83c375eff374fa814929044f91746475d56278a729a54180a2c6bd0f4cc9b9a333507d89702c3e54b1a9ec5a2e162d53deedc4272451699dc6d7184b87b3a6cd315048c2065c135cf9cd26ab82eddf52f90bcf8ea3aa2ba8f5d6c76134f31abc7d5d13f4701ce455e45b9dca0000af7e5c91e1f45ce02d37302c7e910e349b1b7901a0efc43bf9bf83abe9ff8e5c7665ab3d9839d3ca43fa6a2b903bbdd63735dae262fb9ace822b56506fa0aac7f2468906055637bab64aa312cbf20e8a3db74575d545c9b93565d33c7139861a7319b351aee927627915ee65d4ca8a60e4d0e37335f12b57952e34bf7e4bdecaae6d0db9d2f7a559ae5506bf82a1e435c5ba11d938c906814b99339c0fbdedd4bee148e913c4bf1f360e941a770983abb2e622a91767e90380e8cb94c1577e09baaa5d46a33b59ed13c5d4ed4e8b70c6999f6b944df894b7ec8cebb9700b845e9d9a41749c94718e99e01ff882f0c8e63ffa96d8d83d6c82757b80f12bf48c4232ba31d2533b72863cb48e5b29be8acd763d88aca588acd384a050595f0c2e24f97053c5d2f87addd66408becbcdbff73bb31aac5b12648927ab60e82194b62ae4ad990f4c004034d439bd2c903af6505579bc61a4443754776821ed19175495c8ed041366441f23cedca45b19fb90476bc019d74975559de3a8462853bd63c4d5bcbf94cc330127c08a25bea7dd26192437a0067f3afb8dc41d5bddf2fe4633015d8c317d53b5e53fecaca3f31bcf8a83fdadc9b413a49f86e528e3966ad472d224059d1afec755f74be898ba738312bc02943e22fa5eb402d79db0fbda98aaa2fcf6ddb2fb82f8d478a9c017470ef21d215eb6648f086c0fe20a244814652c5b155c0e7f01e3ad0218413d0177bd45e5650baf5bc467b1daee5e7bb557d5b820552b4dd4c9da15714b7768a5e7bfd4f22ac09c87d8558e3ad0312f694dba9e4935bfe93bffbd8f311c8127495687d0e7620aac04bc1d2489b8955af6903ba5cfb20a9d560024658ba7949f7f284befb142eea5022a8018e252878d5aa75707ad16feb2111c4098984dd3d76410949af9b09e21906602845217da945e51a5195fae3ea65db6f4b1d7682f27cf008984ea47d36176460deb4b13281ddd7a3542a4374f5cb2db761eb4754afcad20cbb942b6983b8f46555d842b0b66e3983e327fc9bc6636c8530d0909961f51df0f5e65b3d52ea7b87dcd920815b87e041ccdd3650b717b24af3f7ba4fc812dcbbf17137ebe737569046396ceac0395808078f043acaeeab5b17b76afdcac06261e6e578be979456980c7a15d04e77329455c6f339f5d30f866ee6f59c8b31f3233fa99df0e9727a881330ab20ead1cd698b98b18345ee776435ad91813be19815eb1e3575faf2602d4a805db00f3abad4c44600507c09d7d08567ceb10535b1a9f93bbc7c35ac576a56844f835f46b1a3b784892bfea22d09bd6be10436bcf55a1fa921b0fe2ea950a6b1af856483e23965271ee5b39a69569dbc7ef6e41186ec1a003be0f98d1087959c6fb9d9eb910e4a176024a646f906d16e7aaeab24409b1636920d03ba03155182a65e6881e981211bbf1e452825c9ebcba3eab09d44d8fa0ca812ebf8520c33525a38792ec023d923c191bd9713dbffcaf7e66667618923c7a8482cea84969b352145fd7879fd0c06a4e699c74c86254404a1d1c2f821b627ecee904ed396576d0797d10c8845e8e0ff5ee8e990a56844b4cf00f24d91c7e1f96c790234e281d483793c916ef397e060ea43478011745f37d44a6db6b823e6f21a18e99f30c4227ae1a7aa015b8e8c97ab1ff5a8205d785c6207f4af2eb22da533ec4a73ff5248f536b3afc0afb70ac9cb965e30ffa9613ae98d5718a13479460935e6426ae4c2e4e7cc8e970756fb7027121b512a111a69ad202ae4dabde511523dbcb7215c02dc23f4903e9221011a7c72df195e32c80598cb689a81cfd598e525b998f47e9d0e25b8883098f34d719dde19bfb3e78aa709f35b2b7bb8048d455aa1fc79a4428bbe54affb54a120636ebb897fb5673bde834b1b697fd3673407d1054f296f45c55039b204c4fefc7894064299c78e01bcdfaabdc879c720dce6863f79e6eec52f850858fa5520cc1cc44b145d4c99fcc24e399f0355d910af087ea9df9c9b8a2f765b8cf20c7f2710e7fd18700e17b9cef623aacd41051c8d812d9a7dbb6108993733c55e3ac763a0fb1263beb99ce3ca31285bb5abcdfc80c4be068b7b7007213a24383bdce744c9b2031db6c7d2b373ea1d7e2880430377a5d36975b7ae509dc8e3e1ce9c6f470110046ac6649d3d1702e0e9ea5e4b52c218ab2c2fc01fd25d6a2cbd920fa"}}}}}}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@local, 0x1}) 2.498854687s ago: executing program 2 (id=3914): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x4004085) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xaa442, 0x0) r1 = syz_pidfd_open(0xffffffffffffffff, 0x0) pidfd_send_signal(r1, 0x36, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xa, 0x0) sysinfo(&(0x7f0000000000)=""/196) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xffa8) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000005880)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 2.475187723s ago: executing program 1 (id=3915): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r0, 0x5) accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000180001002dbd70000000000002200000fd00fd07000000000c00090040002002", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 2.388223553s ago: executing program 5 (id=3916): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 2.343007731s ago: executing program 4 (id=3917): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x2) setrlimit(0x6, &(0x7f0000000180)={0x1000, 0x10000}) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x1, './file1\x00'}, 0x6e) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c910"], 0x15) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0xa, @sliced={0x8, [0x9, 0x7, 0x33db, 0x3, 0x2c1, 0x2, 0xf092, 0x25, 0x5, 0x8, 0x8000, 0x9, 0x8, 0xf, 0xd, 0x5, 0x0, 0xc3, 0x4, 0x80, 0x10, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x8, 0x8000, 0x8, 0x200, 0x2, 0x6, 0x1, 0x9, 0x0, 0x8, 0x8, 0x0, 0x77d5, 0x3, 0x1, 0x100, 0x7, 0x3, 0x7, 0x2, 0xe7], 0x7}}) sendfile(r0, r1, 0x0, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) 1.386780374s ago: executing program 5 (id=3918): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 1.385740475s ago: executing program 0 (id=3919): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x60, 0x4}}], 0x48, 0x4004}, 0x0) (fail_nth: 2) 859.008333ms ago: executing program 2 (id=3920): r0 = syz_io_uring_setup(0x2f67, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3, 0xf2}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x802, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x1c, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r4}, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x80, r5, 0x1}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000080)=0x20, 0x0) 673.95372ms ago: executing program 5 (id=3921): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) unshare(0x2c020400) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x404}], 0x1, 0x70000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000000340)) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './cgroup.net/cgroup.procs\x00'}) accept4$alg(r5, 0x0, 0x0, 0x99c15eae128d5b90) epoll_create(0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x60, 0x0, r6, 0x0, &(0x7f0000000140)="622875fb96f49bcc2e3403fed881ca85b1019cec3902e0343882b3ac88de284a97177b80832237d27f8ddff0cdac5b2e93060b1c8cdb627716bd50f7bc", 0x3d, 0x40000000, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000400)=@ceph_nfs_fh={0x8, 0x1, {0x4}}, 0x480041) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000002c0)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) read$FUSE(r7, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r8, r9) io_uring_enter(r2, 0x351e, 0x483, 0x0, 0x0, 0x0) 605.611285ms ago: executing program 1 (id=3922): accept$ax25(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491"], 0x1c}}, 0x8000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x2c, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) 578.972525ms ago: executing program 0 (id=3923): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x7ff, 0xa, "5dee000000594000"}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, &(0x7f0000000180)="4b17eac9f230b05bc1fd5938e2270284880c43388658a6af27eb0054f80987b96183c76e5bfe79888b5aedb71d58b3845179e32e4d1c2f860e3486dbbac8889b6cf8fa7c09b662eb3cc68f7b5859363978b3bb438b339b3e6b112a6e4aab557f80a2afbc7853ff1bb841e170759521cf61ba6b20c5205cfceb8097dee6177c60ecb208d5cf160f99b12805191be27b70c7d9245984f2b4", 0x97, 0x1001, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @private0, 0x6}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582", @ANYRESOCT], 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2ef9ee02cb9ce5c1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 578.089982ms ago: executing program 4 (id=3924): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = gettid() ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xfffffffffffffdba, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24048800}, 0x40000) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69e30103010902240001000010000904b8070296d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0xdf, &(0x7f00000002c0)=ANY=[@ANYBLOB="75c66b2c623aa87f455147da69939601091511bd4c0553ac08d815bbd4fd0467cf5e203fdd5ee35d16b03d433072d202c6365b1098800241e52df42c99514141e3898e73cff8874407137232c640595011ad0061af529e9fc689ba3038a14461ec556ab04ea77ac4c2a513327475bf2244"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESOCT=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r7 = socket$unix(0x1, 0x1, 0x0) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) 0s ago: executing program 4 (id=3925): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8) r1 = syz_io_uring_setup(0x494, &(0x7f0000000200)={0x0, 0x36f1, 0x400, 0x1, 0x381}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) io_uring_setup(0x3eae, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', 0x0, 0x0, 0x8851, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x6, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a99b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f8f4ed0b27cedd1c5e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r9}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fdc000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000040)="660f388086008000000fa9c4c1a4551666baf80cb8d4d3d888ef66bafc0cb800000000eff7f80f0fa700000000a4c4e27d59c00f01c38fc8288760c500360f01cb", 0x41}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x8, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r1, 0x26c8, 0x0, 0x1, 0x0, 0x10) kernel console output (not intermixed with test programs): raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1139.836485][ T5879] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1139.880953][T18300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.929665][T18300] veth0_vlan: entered promiscuous mode [ 1140.023302][T18300] veth1_vlan: entered promiscuous mode [ 1140.128916][ T30] audit: type=1326 audit(1140.122:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18462 comm="syz.0.3466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4712f8e9a9 code=0x0 [ 1140.159687][T15073] Bluetooth: Unexpected continuation frame (len 16) [ 1140.571150][T18300] veth0_macvtap: entered promiscuous mode [ 1140.590324][T18300] veth1_macvtap: entered promiscuous mode [ 1140.641254][T18300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.692020][T18469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3467'. [ 1140.769261][T18300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.793914][T18300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.803501][T18300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.813187][T18300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.834462][T18300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.904560][T18476] dvmrp17: entered allmulticast mode [ 1140.925108][T18476] dvmrp17: left allmulticast mode [ 1140.997626][T18477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3468'. [ 1141.013069][ T5919] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1141.106137][ T5828] usb 3-1: USB disconnect, device number 48 [ 1141.166126][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.189545][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.202843][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 1141.219378][ T5919] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1141.232916][ T5919] usb 5-1: config 179 has no interface number 0 [ 1141.503024][ T5919] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1141.565155][ T5919] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1141.579239][ T5919] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1141.593627][ T5919] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1141.609133][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.623748][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.638097][ T5919] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1141.654464][ T5919] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1141.661365][ T5919] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1141.710324][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.751099][T18485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1141.792669][ T5919] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input35 [ 1142.073825][T17065] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 1142.525199][T18488] SELinux: failed to load policy [ 1143.513615][ T5919] usb 5-1: USB disconnect, device number 58 [ 1143.519606][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1143.690552][T18499] syzkaller0: entered promiscuous mode [ 1143.714496][T18499] syzkaller0: entered allmulticast mode [ 1144.023324][T18505] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1144.055486][T18505] 9pnet_fd: Insufficient options for proto=fd [ 1145.423109][ T30] audit: type=1400 audit(1145.422:1413): avc: denied { getopt } for pid=18521 comm="syz.0.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1147.035918][T18533] SELinux: failed to load policy [ 1147.422486][ T5828] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1147.699054][T18549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 1147.710680][T18549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.719030][T18549] batadv_slave_0: entered promiscuous mode [ 1148.052689][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 1148.302517][ T5828] usb 1-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 1148.313334][T18542] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3489'. [ 1148.387481][ T5828] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1148.416309][ T5828] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1148.440722][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.449930][ T5828] usb 1-1: Product: syz [ 1148.457869][ T5828] usb 1-1: Manufacturer: syz [ 1148.463807][ T5828] usb 1-1: SerialNumber: syz [ 1148.562814][ T6455] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1148.700946][T18569] netlink: 'syz.1.3496': attribute type 20 has an invalid length. [ 1148.722638][ T6455] usb 5-1: Using ep0 maxpacket: 32 [ 1148.737808][ T6455] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1148.750800][ T6455] usb 5-1: config 0 has no interface number 0 [ 1148.756604][T18569] dvmrp17: entered allmulticast mode [ 1148.770816][ T6455] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1148.786906][ T6455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.802449][ T6455] usb 5-1: Product: syz [ 1148.822349][ T6455] usb 5-1: Manufacturer: syz [ 1148.827040][ T5828] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1148.838468][ T6455] usb 5-1: SerialNumber: syz [ 1148.866437][ T6455] usb 5-1: config 0 descriptor?? [ 1148.869545][T18569] dvmrp17: left allmulticast mode [ 1148.886074][ T6455] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 1148.940598][ T30] audit: type=1400 audit(1148.892:1414): avc: denied { mounton } for pid=18536 comm="syz.0.3486" path="/proc/124/task" dev="proc" ino=60851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1148.965148][ T6455] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 1149.002512][T18572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3496'. [ 1149.013253][ T5828] usb 6-1: Using ep0 maxpacket: 16 [ 1149.024331][ T5828] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1149.049296][ T5828] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1149.078329][T18573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.091447][ T6455] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1149.093082][T18573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.142308][ T5828] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1149.178349][ T6455] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 1149.211151][ T5828] usb 6-1: config 1 has no interface number 1 [ 1149.226126][ T5828] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1149.262471][ T5828] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1149.308029][ T5828] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1149.321930][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.378983][ T5828] usb 6-1: Product: syz [ 1149.399623][ T5828] usb 6-1: Manufacturer: syz [ 1149.438683][ T5828] usb 6-1: SerialNumber: syz [ 1149.657068][T18577] SELinux: failed to load policy [ 1149.662377][T15073] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1149.671505][T15073] Bluetooth: hci4: Injecting HCI hardware error event [ 1149.680620][T15073] Bluetooth: hci4: hardware error 0x00 [ 1149.711146][ T5828] usb 6-1: USB disconnect, device number 71 [ 1150.032716][ T5893] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1150.179663][ T5919] usb 1-1: USB disconnect, device number 97 [ 1150.204395][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1150.217627][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.322870][ T5893] usb 3-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 1150.346138][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.360668][ T5893] usb 3-1: config 0 descriptor?? [ 1150.629530][T18589] syzkaller0: entered promiscuous mode [ 1150.635826][T18589] syzkaller0: entered allmulticast mode [ 1150.647838][ T43] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1150.781962][ T5893] wacom 0003:056A:0217.004B: unknown main item tag 0x0 [ 1150.832474][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1150.855654][ T43] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.870000][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1150.876847][ T43] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1150.889033][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.902245][ T43] usb 6-1: config 0 descriptor?? [ 1151.342913][ T5886] usb 5-1: USB disconnect, device number 59 [ 1151.428070][ T30] audit: type=1400 audit(1151.412:1415): avc: denied { map } for pid=18593 comm="syz.4.3503" path="socket:[62196]" dev="sockfs" ino=62196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1151.498365][ T30] audit: type=1400 audit(1151.412:1416): avc: denied { getopt } for pid=18593 comm="syz.4.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1151.540585][ T43] nzxt-smart2 0003:1E71:2009.004C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1151.712672][ T5886] usb 3-1: USB disconnect, device number 49 [ 1151.723289][T15073] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1151.874322][T18598] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3500'. [ 1152.306316][T18598] syz.5.3500: attempt to access beyond end of device [ 1152.306316][T18598] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1152.326882][T18598] syz.5.3500: attempt to access beyond end of device [ 1152.326882][T18598] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1152.342483][T18598] Mount JFS Failure: -5 [ 1152.819041][T18607] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1153.210285][T18612] wg1 speed is unknown, defaulting to 1000 [ 1153.217663][T18612] wg1 speed is unknown, defaulting to 1000 [ 1153.224649][T18612] wg1 speed is unknown, defaulting to 1000 [ 1153.333562][T18612] infiniband syz0: set active [ 1153.338436][T18612] infiniband syz0: added wg1 [ 1153.351269][ T5919] wg1 speed is unknown, defaulting to 1000 [ 1153.378641][T18612] RDS/IB: syz0: added [ 1153.383179][T18612] smc: adding ib device syz0 with port count 1 [ 1153.389426][T18612] smc: ib device syz0 port 1 has pnetid [ 1153.398156][T18612] wg1 speed is unknown, defaulting to 1000 [ 1153.515354][T18612] wg1 speed is unknown, defaulting to 1000 [ 1153.633336][T18612] wg1 speed is unknown, defaulting to 1000 [ 1153.747868][T18612] wg1 speed is unknown, defaulting to 1000 [ 1153.864509][T18612] wg1 speed is unknown, defaulting to 1000 [ 1153.980332][T18612] wg1 speed is unknown, defaulting to 1000 [ 1154.066123][ T5919] wg1 speed is unknown, defaulting to 1000 [ 1154.124433][T18612] wg1 speed is unknown, defaulting to 1000 [ 1154.506152][T18620] SELinux: failed to load policy [ 1155.407957][T18634] blktrace: Concurrent blktraces are not allowed on sg0 [ 1155.432571][ T5919] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1155.466476][ T43] usb 6-1: USB disconnect, device number 72 [ 1155.637724][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 1155.647961][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.658521][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1155.682800][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1155.697040][T18640] netlink: 'syz.5.3514': attribute type 20 has an invalid length. [ 1155.715463][ T5919] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1155.743298][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1155.776925][ T5919] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1155.792635][ T5919] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1155.802489][ T5886] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1155.811151][ T5919] usb 3-1: Manufacturer: syz [ 1155.829409][ T30] audit: type=1400 audit(1155.822:1417): avc: denied { create } for pid=18643 comm="syz.4.3516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1155.891682][ T5919] usb 3-1: config 0 descriptor?? [ 1155.967021][T18640] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3514'. [ 1155.992572][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 1155.994503][ T5886] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1155.994529][ T5886] usb 1-1: config 0 has no interface number 0 [ 1156.088074][ T5886] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1156.092016][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.092046][ T5886] usb 1-1: Product: syz [ 1156.092061][ T5886] usb 1-1: Manufacturer: syz [ 1156.092076][ T5886] usb 1-1: SerialNumber: syz [ 1156.562474][ T5919] rc_core: IR keymap rc-hauppauge not found [ 1156.568407][ T5919] Registered IR keymap rc-empty [ 1156.727280][T18652] SELinux: failed to load policy [ 1157.224699][T18657] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1157.243770][T18657] 9pnet_fd: Insufficient options for proto=fd [ 1157.385059][ T5886] usb 1-1: config 0 descriptor?? [ 1157.394446][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.414486][ T5886] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1157.423930][ T5886] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1157.442501][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.474949][ T5919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1157.515459][ T5919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 1157.558323][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.592548][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.612595][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.626459][ T5886] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1157.641093][ T5886] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 1157.652903][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.676607][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.712515][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.767054][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.892719][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.922560][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.987684][T18666] SELinux: failed to load policy [ 1158.003364][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1158.164853][ T5919] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1158.201971][ T5919] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1158.252727][ T5919] usb 3-1: USB disconnect, device number 50 [ 1159.576913][T18682] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1159.587605][T18682] SELinux: failed to load policy [ 1159.738058][ T5828] usb 1-1: USB disconnect, device number 98 [ 1161.100968][ T5886] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1161.687974][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 1161.713792][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.751130][T18704] bridge3: entered promiscuous mode [ 1161.756463][T18704] bridge3: entered allmulticast mode [ 1161.768493][T18691] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1161.769318][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1161.802911][T18700] dvmrp17: entered allmulticast mode [ 1161.820742][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1161.830847][T18691] SELinux: failed to load policy [ 1161.836054][T18702] dvmrp17: left allmulticast mode [ 1161.884901][ T5886] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1161.894859][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1161.916016][ T5886] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1161.939789][ T5886] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1161.960911][ T5886] usb 5-1: Manufacturer: syz [ 1161.960946][T18693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3531'. [ 1161.986683][ T5886] usb 5-1: config 0 descriptor?? [ 1162.903134][ T5886] rc_core: IR keymap rc-hauppauge not found [ 1162.909383][ T5886] Registered IR keymap rc-empty [ 1163.025810][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1163.072519][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1163.113265][ T5886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1163.150682][ T5886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input37 [ 1163.188657][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1163.235572][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1163.267504][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1163.293881][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1163.336123][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1163.407627][ T5893] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1163.452962][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1163.953947][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1164.013154][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 1164.167416][ T5893] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1164.176794][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1164.186245][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.222069][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1164.285831][ T5893] usb 3-1: config 0 descriptor?? [ 1164.314010][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1164.352939][ T5886] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1164.466382][T18735] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1164.476833][T18735] SELinux: failed to load policy [ 1165.310735][ T5886] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1165.407626][ T5893] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1165.489563][ T5886] usb 5-1: USB disconnect, device number 60 [ 1165.616406][T18746] netlink: 'syz.5.3543': attribute type 20 has an invalid length. [ 1165.689437][T18746] dvmrp17: entered allmulticast mode [ 1165.794545][T18746] dvmrp17: left allmulticast mode [ 1166.330024][T18753] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3543'. [ 1166.345891][ T5893] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1166.358755][ T5893] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1166.412860][ T5893] usb 3-1: USB disconnect, device number 51 [ 1167.562787][ T5893] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1167.842462][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 1167.849392][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.860108][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1167.871975][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1167.881696][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1167.891569][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1167.908849][ T5893] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1168.014450][ T30] audit: type=1326 audit(1167.982:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18767 comm="syz.0.3549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4712f8e9a9 code=0x0 [ 1168.386245][ T5893] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1168.409554][ T5893] usb 3-1: Manufacturer: syz [ 1168.417044][ T5893] usb 3-1: config 0 descriptor?? [ 1168.671003][T18774] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1168.681454][T18774] SELinux: failed to load policy [ 1169.484643][ T5893] rc_core: IR keymap rc-hauppauge not found [ 1169.646713][ T5893] Registered IR keymap rc-empty [ 1169.657247][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1169.692726][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1169.735279][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1169.792919][ T6455] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1169.817128][T18784] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1169.827698][T18784] SELinux: failed to load policy [ 1169.866887][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input38 [ 1170.049018][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1170.174399][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1170.273184][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1170.365704][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1170.453100][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1170.533944][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1170.639331][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1170.676574][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1170.678328][ T30] audit: type=1400 audit(1170.672:1419): avc: denied { create } for pid=18791 comm="syz.1.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1170.712745][ T30] audit: type=1400 audit(1170.702:1420): avc: denied { getopt } for pid=18791 comm="syz.1.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1170.724698][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1170.752515][ T5893] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1170.776798][ T5893] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1170.778792][T18798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1170.788995][ T5893] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1170.800064][ T6455] usb 6-1: Using ep0 maxpacket: 16 [ 1170.827452][ T6455] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1170.833027][ T5893] usb 3-1: USB disconnect, device number 52 [ 1170.843429][ T6455] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1170.860872][ T30] audit: type=1400 audit(1170.852:1421): avc: denied { map } for pid=18797 comm="syz.0.3559" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1170.892932][ T6455] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1170.901895][ T6455] usb 6-1: config 1 has no interface number 1 [ 1170.911485][ T6455] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1170.926597][ T30] audit: type=1400 audit(1170.852:1422): avc: denied { call } for pid=18797 comm="syz.0.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1170.946642][ T6455] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1170.959799][ T5879] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1170.962084][ T6455] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1170.981536][ T6455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.990637][ T6455] usb 6-1: Product: syz [ 1170.995101][ T6455] usb 6-1: Manufacturer: syz [ 1170.999698][ T6455] usb 6-1: SerialNumber: syz [ 1171.089532][T18808] netlink: 'syz.2.3561': attribute type 20 has an invalid length. [ 1171.102469][T15308] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1171.112452][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 1171.120162][ T5879] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1171.146541][ T5879] usb 2-1: language id specifier not provided by device, defaulting to English [ 1171.158115][T18808] dvmrp17: entered allmulticast mode [ 1171.166766][ T5879] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1171.180756][ T5879] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1171.201014][T18808] dvmrp17: left allmulticast mode [ 1171.206452][ T5879] usb 2-1: SerialNumber: ዖ﹞é±ç­‡à¦µà°ƒï’©ê¸ àºˆâ“⩞㿭煉㌭ [ 1171.263202][ T6455] usb 6-1: USB disconnect, device number 73 [ 1171.272911][T15308] usb 5-1: Using ep0 maxpacket: 8 [ 1171.290472][T15308] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1171.301564][T18808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3561'. [ 1171.311442][T15308] usb 5-1: config 179 has no interface number 0 [ 1171.320196][T15308] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1171.331765][T15308] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1171.377908][T15308] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1171.407642][T15308] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1171.430775][T15308] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1171.449305][T15308] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1171.456396][T15308] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1171.465641][T15308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.498269][T15308] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input39 [ 1171.499817][ T5879] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1171.545114][ T5879] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1171.558452][ T5879] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1171.568959][ T5879] usb 2-1: media controller created [ 1171.588662][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1171.618743][ T5879] zl10353_read_register: readreg error (reg=127, ret==0) [ 1171.652182][ T5879] usb 2-1: USB disconnect, device number 112 [ 1171.765396][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 1171.782083][T15308] usb 5-1: USB disconnect, device number 61 [ 1171.788154][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1172.330937][T18812] SELinux: failed to load policy [ 1173.441164][T18827] bridge2: entered promiscuous mode [ 1173.446513][T18827] bridge2: entered allmulticast mode [ 1173.676863][ T30] audit: type=1326 audit(1173.662:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18825 comm="syz.1.3566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa09a18e9a9 code=0x0 [ 1173.715162][T15073] Bluetooth: Unexpected continuation frame (len 16) [ 1175.080818][T18845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3571'. [ 1175.179915][T18841] SELinux: failed to load policy [ 1175.331693][T18854] binder: 18850:18854 ioctl 4018620d 0 returned -22 [ 1175.432461][ T5893] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1176.272614][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 1176.279408][ T5893] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1176.288361][ T5893] usb 3-1: config 0 has no interface number 0 [ 1176.334566][ T5893] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1176.341277][T18862] input: syz1 as /devices/virtual/input/input40 [ 1176.357395][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.368298][ T5893] usb 3-1: Product: syz [ 1176.374687][ T5893] usb 3-1: Manufacturer: syz [ 1176.380172][ T5893] usb 3-1: SerialNumber: syz [ 1176.472766][ T5879] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1176.844169][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.951059][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.960488][ T5893] usb 3-1: config 0 descriptor?? [ 1177.115950][T18864] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3576'. [ 1177.187649][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 1177.192698][ T43] Process accounting resumed [ 1177.193784][ T5893] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1177.372607][ T5893] usb 3-1: selecting invalid altsetting 1 [ 1177.378662][ T5893] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1177.387531][ T5879] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1177.397332][ T5893] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1177.407838][ T5879] usb 1-1: config 5 has an invalid interface number: 118 but max is 0 [ 1177.541692][ T5879] usb 1-1: config 5 has no interface number 0 [ 1177.552477][ T5879] usb 1-1: config 5 interface 118 has no altsetting 0 [ 1177.559798][ T5893] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1178.174223][ T5893] usb 3-1: media controller created [ 1178.181303][ T5879] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=1c.96 [ 1178.259495][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.274466][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1178.284548][ T5879] usb 1-1: Product: syz [ 1178.288762][ T5879] usb 1-1: Manufacturer: syz [ 1178.302869][ T5879] usb 1-1: SerialNumber: syz [ 1178.358141][ T5893] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1178.382638][ T5893] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1178.398305][ T5893] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1178.465574][ T5893] usb 3-1: USB disconnect, device number 53 [ 1178.698562][T15073] Bluetooth: Unexpected continuation frame (len 16) [ 1178.705611][ T30] audit: type=1326 audit(1178.692:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18877 comm="syz.5.3581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bf218e9a9 code=0x0 [ 1178.891802][ T30] audit: type=1326 audit(1178.842:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.2.3580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89e898e9a9 code=0x0 [ 1178.929300][T15073] Bluetooth: Unexpected continuation frame (len 16) [ 1180.641270][ T30] audit: type=1400 audit(1180.632:1426): avc: denied { read } for pid=18894 comm="syz.4.3583" path="socket:[62725]" dev="sockfs" ino=62725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1180.915427][ T5879] imon_raw 1-1:5.118: IR endpoint missing [ 1181.402856][T18896] 9pnet: Could not find request transport: ff [ 1181.485575][ T30] audit: type=1400 audit(1180.892:1427): avc: denied { mounton } for pid=18894 comm="syz.4.3583" path="/188/file0" dev="tmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1181.548945][ T5879] usb 1-1: USB disconnect, device number 99 [ 1181.654971][T18913] bridge5: entered promiscuous mode [ 1181.660223][T18913] bridge5: entered allmulticast mode [ 1181.946725][T18917] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3587'. [ 1181.956132][T18917] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3587'. [ 1181.966003][T18917] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3587'. [ 1182.638391][ T5879] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1182.865110][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 1182.873805][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.904397][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1183.018726][ T30] audit: type=1400 audit(1182.912:1428): avc: denied { mounton } for pid=18908 comm="syz.5.3587" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1183.046910][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1183.068958][ T30] audit: type=1400 audit(1183.062:1429): avc: denied { read write } for pid=18924 comm="syz.1.3591" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1183.075961][T18925] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1183.112534][ T5879] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1183.147986][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1183.155307][ T30] audit: type=1400 audit(1183.062:1430): avc: denied { open } for pid=18924 comm="syz.1.3591" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1183.174062][T18928] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1183.194294][ T5879] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1183.222594][ T5879] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1183.231675][ T5879] usb 5-1: Manufacturer: syz [ 1183.280768][ T5879] usb 5-1: config 0 descriptor?? [ 1183.645156][ T5879] rc_core: IR keymap rc-hauppauge not found [ 1183.654332][ T5879] Registered IR keymap rc-empty [ 1183.668650][ T5879] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1183.715004][ T5879] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1183.773171][ T5879] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1183.805111][ T5879] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input41 [ 1184.166010][ T5879] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1184.226874][ T5879] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1184.284783][ T5879] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1184.383863][ T5879] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1184.419934][ T5879] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1184.455350][ T5879] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1184.519054][ T5879] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1184.698033][ T5879] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1184.732465][ T5879] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1184.772536][ T5879] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.248326][T18947] SELinux: failed to load policy [ 1185.343368][ T5879] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1185.359527][ T5879] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1185.378899][ T5879] usb 5-1: USB disconnect, device number 62 [ 1185.530820][T18950] netdevsim netdevsim5: Direct firmware load for „ failed with error -2 [ 1185.595911][T18953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3598'. [ 1185.844808][ T30] audit: type=1400 audit(1185.732:1431): avc: denied { firmware_load } for pid=18949 comm="syz.5.3597" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1185.924831][T18950] netdevsim netdevsim5: Falling back to sysfs fallback for: „ [ 1186.907194][T18968] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3603'. [ 1187.012553][ T6455] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1187.112474][ T43] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1187.163768][ T6455] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1187.176685][ T6455] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1187.232296][ T6455] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1187.241854][ T6455] usb 5-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1187.248492][T18986] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3607'. [ 1187.268262][T18988] trusted_key: encrypted_key: hex blob is missing [ 1187.291138][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1187.352037][ T43] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1187.363045][ T43] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1187.375017][ T6455] usb 5-1: Product: syz [ 1187.493148][ T43] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1187.504640][T18977] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1187.512824][ T43] usb 1-1: config 1 has no interface number 1 [ 1187.520635][ T6455] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1187.544980][ T43] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1187.590970][ T43] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1187.626018][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1187.636258][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.648266][ T43] usb 1-1: Product: syz [ 1187.655137][ T43] usb 1-1: Manufacturer: syz [ 1187.660048][ T43] usb 1-1: SerialNumber: syz [ 1187.855999][ T30] audit: type=1400 audit(1187.852:1432): avc: denied { connect } for pid=18976 comm="syz.4.3604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1187.910694][ T43] usb 1-1: USB disconnect, device number 100 [ 1188.002112][T18994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3604'. [ 1188.042680][ T5879] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1188.196411][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 1188.207872][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.226585][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1188.238520][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1188.249320][ T5879] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1188.259162][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1188.273557][ T5879] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1188.282785][ T5879] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1188.290927][ T5879] usb 2-1: Manufacturer: syz [ 1188.298355][ T5879] usb 2-1: config 0 descriptor?? [ 1188.547436][T18999] loop3: detected capacity change from 0 to 1 [ 1188.569792][T18999] Dev loop3: unable to read RDB block 1 [ 1188.576031][T18999] loop3: unable to read partition table [ 1188.587732][T18999] loop3: partition table beyond EOD, truncated [ 1188.594846][T18999] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1188.622499][ T5879] rc_core: IR keymap rc-hauppauge not found [ 1188.628948][ T5879] Registered IR keymap rc-empty [ 1188.634236][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.663668][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.683192][ T5879] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1188.696873][ T5879] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42 [ 1188.714750][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.755895][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.792569][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.822692][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.852881][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.892516][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.923799][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.972575][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1188.980295][ T6455] usb 5-1: USB disconnect, device number 63 [ 1189.012507][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.019967][ T30] audit: type=1400 audit(1189.012:1433): avc: denied { open } for pid=19004 comm="syz.2.3612" path="/dev/ttyq8" dev="devtmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1189.052644][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.084626][ T5879] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1189.093093][ T5879] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1189.104834][ T5879] usb 2-1: USB disconnect, device number 113 [ 1189.127672][T19008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1189.136031][T19008] UDF-fs: Scanning with blocksize 512 failed [ 1189.149599][T19008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1189.157492][T19008] UDF-fs: Scanning with blocksize 1024 failed [ 1189.167044][T19008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1189.172549][ T43] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1189.187671][T19008] UDF-fs: Scanning with blocksize 2048 failed [ 1189.196456][T19008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1189.204539][T19008] UDF-fs: Scanning with blocksize 4096 failed [ 1189.392500][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1189.406041][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.429201][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1189.452513][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1189.462330][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1189.477130][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1189.492086][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1189.501361][ T43] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1189.509706][ T43] usb 6-1: Manufacturer: syz [ 1189.551623][ T43] usb 6-1: config 0 descriptor?? [ 1190.158198][T19025] fuse: Bad value for 'fd' [ 1190.322344][ T43] rc_core: IR keymap rc-hauppauge not found [ 1190.332985][ T43] Registered IR keymap rc-empty [ 1190.351879][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1190.472569][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1190.483815][ T5940] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1190.493027][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1190.585238][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input43 [ 1190.724059][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1190.727484][T19030] dvmrp17: entered allmulticast mode [ 1190.732468][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 1190.743154][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1190.747867][T19030] dvmrp17: left allmulticast mode [ 1190.754519][ T5940] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1190.764097][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1190.811065][ T5940] usb 5-1: config 179 has no interface number 0 [ 1190.817644][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1190.828576][T19032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3618'. [ 1190.834994][ T5940] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1190.849104][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1190.872521][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1190.932557][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1190.946400][ T5940] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1190.991566][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1191.007219][ T5940] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1191.049893][ T5940] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1191.060456][ T5940] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1191.074190][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1191.081572][ T5940] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1191.089070][ T5940] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1191.098440][ T43] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1191.133705][ T43] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1191.163273][ T43] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1191.171905][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.255780][ T43] usb 6-1: USB disconnect, device number 74 [ 1191.266071][ T5940] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input44 [ 1191.576795][T19034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3617'. [ 1191.596149][T12587] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 1191.634698][ T5879] usb 5-1: USB disconnect, device number 64 [ 1191.634729][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1192.959025][T19040] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3619'. [ 1194.238568][T19008] Set syz1 is full, maxelem 65536 reached [ 1194.719274][ T30] audit: type=1400 audit(1194.712:1434): avc: denied { execute } for pid=19070 comm="syz.2.3628" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=63024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1195.247738][T19082] tipc: Enabled bearer , priority 0 [ 1195.257374][T19082] syzkaller0: entered promiscuous mode [ 1195.277819][T19082] syzkaller0: entered allmulticast mode [ 1195.526302][T19082] tipc: Resetting bearer [ 1195.872716][T19080] tipc: Resetting bearer [ 1195.904840][T19095] netlink: 'syz.2.3634': attribute type 20 has an invalid length. [ 1195.952843][T19080] tipc: Disabling bearer [ 1195.959019][T19085] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1195.969736][T19089] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3633'. [ 1196.206229][T19099] dvmrp17: entered allmulticast mode [ 1196.212185][T19101] dvmrp17: left allmulticast mode [ 1196.282731][T19095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3634'. [ 1196.894400][T19107] SELinux: failed to load policy [ 1197.642470][ T5893] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1197.742463][ T5940] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1197.802584][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 1197.819649][ T5893] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1197.828370][ T5893] usb 5-1: config 179 has no interface number 0 [ 1197.843901][ T5893] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1197.859554][ T5893] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1197.872555][ T5940] usb 2-1: device descriptor read/64, error -71 [ 1197.879352][ T5893] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1197.890925][ T5893] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1197.901291][ T5893] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1197.916162][ T5893] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1197.923775][ T5893] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1197.935538][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.156448][ T5893] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input45 [ 1198.162713][ T5940] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1198.636908][ T5987] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 1198.672632][ T5940] usb 2-1: device descriptor read/64, error -71 [ 1198.750900][ T5893] usb 5-1: USB disconnect, device number 65 [ 1198.756919][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1198.793479][ T5940] usb usb2-port1: attempt power cycle [ 1198.841783][ T30] audit: type=1400 audit(1198.832:1435): avc: denied { getopt } for pid=19126 comm="syz.0.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1199.532455][ T5940] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1199.566992][ T5940] usb 2-1: device descriptor read/8, error -71 [ 1199.584634][T19141] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1199.606963][T19141] 9pnet_fd: Insufficient options for proto=fd [ 1199.822524][ T5940] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1199.867791][T19143] SELinux: failed to load policy [ 1199.903103][ T5940] usb 2-1: device descriptor read/8, error -71 [ 1200.026024][ T5940] usb usb2-port1: unable to enumerate USB device [ 1200.600287][T19159] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3649'. [ 1201.174776][T19145] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3647'. [ 1202.742666][ T5893] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 1202.812479][ T5886] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1202.841873][ T30] audit: type=1400 audit(1202.822:1436): avc: denied { read } for pid=19180 comm="syz.2.3655" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1202.865500][T19161] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3650'. [ 1202.904350][ T5893] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1202.918839][ T30] audit: type=1400 audit(1202.822:1437): avc: denied { open } for pid=19180 comm="syz.2.3655" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1202.938182][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.942618][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.060865][ T5893] usb 1-1: config 0 descriptor?? [ 1203.067745][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 1203.074620][ T5886] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1203.084001][ T5886] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1203.808130][ T30] audit: type=1804 audit(1203.212:1438): pid=19187 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3657" name="/" dev="pidfs" ino=19186 res=1 errno=0 [ 1203.811780][T19191] 8021q: VLANs not supported on ipvlan1 [ 1203.891036][ T5886] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1203.911307][ T5886] usb 6-1: config 1 has no interface number 1 [ 1203.925699][ T5886] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1204.200350][ T5886] usb 6-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1204.236963][ T5886] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1204.250985][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.261026][ T5886] usb 6-1: Product: syz [ 1204.280372][ T5886] usb 6-1: Manufacturer: syz [ 1204.416481][T15308] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1204.432804][ T5886] usb 6-1: SerialNumber: syz [ 1204.515076][ T5886] usb 6-1: can't set config #1, error -71 [ 1204.562599][ T5940] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1204.568918][ T5886] usb 6-1: USB disconnect, device number 75 [ 1204.587287][T15308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.037733][T19194] SELinux: failed to load policy [ 1205.961386][T15308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.981387][T15308] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1205.994707][T15308] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1206.004118][T15308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.063423][T15308] usb 5-1: config 0 descriptor?? [ 1206.068838][T15308] usb 5-1: can't set config #0, error -71 [ 1206.074721][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 1206.081637][T15308] usb 5-1: USB disconnect, device number 66 [ 1206.088579][T19191] [U]  [ 1206.090445][ T5940] usb 3-1: device descriptor read/all, error -71 [ 1206.111565][T19197] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1206.122003][T19197] SELinux: failed to load policy [ 1206.178713][ T5893] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1206.199495][ T5893] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1206.202311][T19201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1206.583598][T19206] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1206.814994][ T5893] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1207.284579][ T5893] usb 1-1: USB disconnect, device number 101 [ 1208.248018][ T30] audit: type=1400 audit(1208.172:1439): avc: denied { setopt } for pid=19219 comm="syz.4.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1208.721050][T19234] netlink: 'syz.4.3670': attribute type 20 has an invalid length. [ 1208.755653][T19234] dvmrp17: entered allmulticast mode [ 1208.769703][T19236] netlink: 'syz.2.3671': attribute type 20 has an invalid length. [ 1208.798577][T19236] dvmrp17: entered allmulticast mode [ 1208.816842][T19234] dvmrp17: left allmulticast mode [ 1208.832485][ T5940] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1208.852000][T19236] dvmrp17: left allmulticast mode [ 1208.919315][T19237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3670'. [ 1208.988158][T19238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3671'. [ 1209.052550][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 1209.059620][ T5940] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1209.068537][ T5940] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1209.090111][ T5940] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1209.118447][ T5940] usb 1-1: config 1 has no interface number 1 [ 1209.132923][ T5940] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1209.175066][ T5940] usb 1-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1209.219360][ T5940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1209.233033][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.375980][ T5940] usb 1-1: Product: syz [ 1209.382023][ T5940] usb 1-1: Manufacturer: syz [ 1209.391627][ T5940] usb 1-1: SerialNumber: syz [ 1209.917337][ T5940] usb 1-1: USB disconnect, device number 102 [ 1211.165566][T19246] SELinux: failed to load policy [ 1211.428573][T19248] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1211.438811][T19248] SELinux: failed to load policy [ 1211.502182][ T30] audit: type=1400 audit(1211.492:1440): avc: denied { getopt } for pid=19249 comm="syz.0.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1211.721609][T19258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3679'. [ 1211.732004][T19258] openvswitch: netlink: Message has 8 unknown bytes. [ 1211.759907][T19259] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3678'. [ 1211.768959][T19259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3678'. [ 1211.810004][T19259] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3678'. [ 1211.833284][ T30] audit: type=1400 audit(1211.832:1441): avc: denied { connect } for pid=19255 comm="syz.5.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1211.855240][T19259] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3678'. [ 1212.125804][T19271] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1212.136329][T19271] SELinux: failed to load policy [ 1213.458498][T19267] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1213.623835][T19278] SELinux: failed to load policy [ 1213.853717][ T5893] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1213.874699][ T30] audit: type=1400 audit(1213.732:1442): avc: denied { shutdown } for pid=19275 comm="syz.4.3685" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1214.038726][T19283] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1214.050757][T19283] SELinux: failed to load policy [ 1214.192547][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 1214.520903][ T5893] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1214.593185][ T5893] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1214.610516][ T5893] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1214.620631][ T5893] usb 6-1: config 1 has no interface number 1 [ 1214.653436][ T5893] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1214.674075][ T5893] usb 6-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1214.688627][ T5893] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1214.699997][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.709981][ T5893] usb 6-1: Product: syz [ 1214.794011][ T5893] usb 6-1: Manufacturer: syz [ 1214.802309][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.813125][ T5893] usb 6-1: SerialNumber: syz [ 1215.285675][T19298] netlink: 'syz.2.3690': attribute type 20 has an invalid length. [ 1215.376734][T19298] dvmrp17: entered allmulticast mode [ 1215.416860][T19299] dvmrp17: left allmulticast mode [ 1215.444767][ T30] audit: type=1400 audit(1215.432:1443): avc: denied { listen } for pid=19300 comm="syz.0.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1215.450140][ T5893] usb 6-1: USB disconnect, device number 76 [ 1215.805923][T19302] 9pnet_fd: Insufficient options for proto=fd [ 1215.832125][ T30] audit: type=1400 audit(1215.812:1444): avc: denied { ioctl } for pid=19300 comm="syz.0.3691" path="socket:[63420]" dev="sockfs" ino=63420 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1215.856452][ C0] vkms_vblank_simulate: vblank timer overrun [ 1215.924094][T19298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3690'. [ 1215.966994][T19307] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1215.984026][T19307] 9pnet_fd: Insufficient options for proto=fd [ 1216.219936][T19310] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1216.260136][T19310] 9pnet_fd: Insufficient options for proto=fd [ 1216.798627][T19317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3695'. [ 1216.897529][T19312] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3694'. [ 1217.077704][ T5893] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1217.454829][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 1217.468279][ T5893] usb 5-1: config 1 interface 0 altsetting 75 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1217.482958][ T5893] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1217.499894][ T5893] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.40 [ 1217.509856][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.518078][ T5893] usb 5-1: Product: ⡑란ӹ⛩찾鶎á‡ì¬›îµìˆšë½£à­’♵지î¿çŸ»æŽè¯·á½—퉆ì”굧봒➿츲æ‡ì¥­ì·¿áš´é´’ë“»ê¾éœ’蛀⿭耴 [ 1217.535645][ T5893] usb 5-1: Manufacturer: 誧ìž×½Úˆå¾”桳騪뇡᤭㽶ᠼ￈콅囒껥ࣅ郥呺뗜ïŠà½…㠅墦也ሣꧪ崑䔓漉煬摺冊ࠣ뜱⨘â£â˜±è“€ë½ªéƒçˆè“„毒퉄腼액é®è¹î¸¸å¬µç·€è‘­î«®î•œç½…錷⫤枂찗剚톧윃ë–뷢䇃솛ℇ瀹䌷ᶋîŽå„’厕ᰑ生ᤴ⡖㫽ᕥᷪ爞븭館퉠⟜ [ 1217.579644][ T5893] usb 5-1: SerialNumber: syz [ 1217.614317][T19324] dvmrp17: entered allmulticast mode [ 1217.634437][T19321] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3697'. [ 1217.694459][T19324] dvmrp17: left allmulticast mode [ 1217.787663][T19326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3696'. [ 1218.093442][ T6455] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1218.282436][ T6455] usb 2-1: Using ep0 maxpacket: 32 [ 1218.550596][T19333] SELinux: failed to load policy [ 1218.818361][ T6455] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1218.826708][ T6455] usb 2-1: config 0 has no interface number 0 [ 1218.835153][ T30] audit: type=1400 audit(1218.142:1445): avc: denied { getopt } for pid=19316 comm="syz.4.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1218.835658][ T6455] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1218.865268][ T6455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.873373][ T6455] usb 2-1: Product: syz [ 1218.877595][ T6455] usb 2-1: Manufacturer: syz [ 1218.932397][ T5893] usbhid 5-1:1.0: can't add hid device: -71 [ 1218.960201][T19334] 9pnet_fd: Insufficient options for proto=fd [ 1219.005072][ T5893] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1219.079857][ T6455] usb 2-1: SerialNumber: syz [ 1219.092652][ T5893] usb 5-1: USB disconnect, device number 67 [ 1219.149445][ T6455] usb 2-1: config 0 descriptor?? [ 1219.180251][ T6455] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1219.450727][ T30] audit: type=1326 audit(1219.442:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.2.3701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89e898e9a9 code=0x0 [ 1219.482678][T18888] Bluetooth: Unexpected continuation frame (len 16) [ 1219.817629][ T6455] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1219.868412][ T6455] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1219.967355][T19347] dvmrp17: entered allmulticast mode [ 1220.111372][T19347] dvmrp17: left allmulticast mode [ 1220.163163][ T5893] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1220.199708][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3698'. [ 1220.220235][T19350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3703'. [ 1220.362438][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 1220.370407][ T5893] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1220.379889][ T5893] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1220.382546][ T6455] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1220.390496][ T5893] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1220.408695][ T5893] usb 1-1: config 1 has no interface number 1 [ 1220.416197][ T5893] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1220.441673][ T5893] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1220.455413][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1220.456817][ T5886] usb 2-1: USB disconnect, device number 118 [ 1220.471215][ T5893] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1220.482065][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.490617][ T5886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1220.502997][ T5893] usb 1-1: Product: syz [ 1220.507232][ T5893] usb 1-1: Manufacturer: syz [ 1220.513369][ T5893] usb 1-1: SerialNumber: syz [ 1220.518315][ T5886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1220.533916][ T5886] quatech2 2-1:0.51: device disconnected [ 1220.744699][ T6455] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1220.747917][ T5893] usb 1-1: USB disconnect, device number 103 [ 1220.777520][ T6455] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1221.254940][T19354] ceph: No mds server is up or the cluster is laggy [ 1221.261872][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 1221.282501][ T6455] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1221.291709][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 1221.303520][ T6455] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1221.329205][ T6455] usb 3-1: Product: syz [ 1221.341483][T19349] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1221.361817][ T6455] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1221.520190][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3708'. [ 1221.536226][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3708'. [ 1221.548099][ T30] audit: type=1400 audit(1221.552:1447): avc: denied { write } for pid=19358 comm="syz.5.3708" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1221.601372][T19362] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1221.618111][T19362] 9pnet_fd: Insufficient options for proto=fd [ 1223.197481][ T5940] usb 3-1: USB disconnect, device number 56 [ 1223.672158][T19386] trusted_key: encrypted_key: hex blob is missing [ 1223.796461][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3715'. [ 1223.940133][T19390] netlink: 'syz.5.3711': attribute type 50 has an invalid length. [ 1223.961666][ T30] audit: type=1400 audit(1223.952:1448): avc: denied { read write } for pid=19391 comm="syz.2.3716" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1224.045457][T19394] x_tables: duplicate underflow at hook 1 [ 1224.059778][T19382] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3714'. [ 1224.071065][ T30] audit: type=1400 audit(1223.952:1449): avc: denied { open } for pid=19391 comm="syz.2.3716" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1224.872471][ T5893] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1225.083199][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 1225.110082][ T5893] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1225.132664][ T5893] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1225.146380][T19411] RDS: rds_bind could not find a transport for fe80::66, load rds_tcp or rds_rdma? [ 1225.199610][ T5893] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1225.229050][ T5893] usb 3-1: config 1 has no interface number 1 [ 1225.244078][T19398] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1225.263897][ T5893] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1225.302698][ T5893] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1225.318053][ T5893] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1225.331550][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.352937][ T5893] usb 3-1: Product: syz [ 1225.357121][ T5893] usb 3-1: Manufacturer: syz [ 1225.361806][ T5893] usb 3-1: SerialNumber: syz [ 1225.700759][T19416] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3722'. [ 1225.785693][ T5893] usb 3-1: USB disconnect, device number 57 [ 1225.966254][T19428] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1225.980162][T19428] 9pnet_fd: Insufficient options for proto=fd [ 1226.187006][ T5940] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1226.374348][ T5940] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1226.397009][ T5940] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1226.431850][ T5940] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1226.459363][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1226.486069][ T5940] usb 5-1: Product: syz [ 1226.544124][T19426] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1226.568097][ T5940] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1226.716666][T19438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3729'. [ 1226.738330][T19438] openvswitch: netlink: Message has 8 unknown bytes. [ 1226.838062][ T5893] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1227.004912][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 1227.027389][ T5893] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1227.220619][ T5893] usb 3-1: config 179 has no interface number 0 [ 1227.263513][ T5893] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1227.282760][ T5893] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1227.296772][ T5893] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1227.315266][ T5893] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1227.326584][ T5893] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1227.340710][ T5893] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1227.349227][ T5893] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1227.362325][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.693676][ T5893] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input46 [ 1227.735730][ T5893] usb 3-1: USB disconnect, device number 58 [ 1227.741646][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1227.867320][ T43] usb 5-1: USB disconnect, device number 68 [ 1228.349860][ T30] audit: type=1400 audit(1228.322:1450): avc: denied { write } for pid=19450 comm="syz.5.3733" path="socket:[64894]" dev="sockfs" ino=64894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1228.378116][ T30] audit: type=1400 audit(1228.332:1451): avc: denied { accept } for pid=19450 comm="syz.5.3733" lport=46424 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1229.111512][T19467] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3736'. [ 1230.163392][T19470] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3737'. [ 1230.454009][T19482] trusted_key: encrypted_key: hex blob is missing [ 1231.075124][T19486] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1231.179527][ T30] audit: type=1400 audit(1231.172:1452): avc: denied { unmount } for pid=16986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1231.261885][ T30] audit: type=1400 audit(1231.252:1453): avc: denied { write } for pid=19487 comm="syz.5.3743" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1231.882670][ T5893] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1232.032733][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 1232.049970][ T5893] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1232.060707][ T5893] usb 5-1: config 179 has no interface number 0 [ 1232.069040][ T5893] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1232.085599][ T5893] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1232.101007][ T5893] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1232.112590][ T6455] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1232.112899][ T5893] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1232.140727][ T5893] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1232.155886][ T5893] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1232.166517][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.194873][T19491] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1232.877845][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1232.886167][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1232.895304][ T10] usb 5-1: USB disconnect, device number 69 [ 1233.002508][ T6455] usb 3-1: Using ep0 maxpacket: 8 [ 1233.008844][ T6455] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1233.017184][ T6455] usb 3-1: config 179 has no interface number 0 [ 1233.023493][ T6455] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1233.034839][ T6455] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1233.038463][T19503] dvmrp17: entered allmulticast mode [ 1233.052513][ T6455] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1233.053595][T19504] dvmrp17: left allmulticast mode [ 1233.071998][ T6455] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1233.086100][ T6455] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1233.115027][ T6455] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1233.130616][ T6455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.141678][T19503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3748'. [ 1233.172118][T19493] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1233.968331][ T30] audit: type=1400 audit(1233.392:1454): avc: denied { ioctl } for pid=19505 comm="syz.0.3749" path="socket:[65903]" dev="sockfs" ino=65903 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1234.290097][T19515] netlink: 'syz.0.3752': attribute type 20 has an invalid length. [ 1234.333878][T19516] dvmrp17: entered allmulticast mode [ 1234.379605][ T10] usb 3-1: USB disconnect, device number 59 [ 1234.379659][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1234.394272][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1234.417286][T19520] dvmrp17: entered allmulticast mode [ 1234.418794][ T30] audit: type=1400 audit(1234.402:1455): avc: denied { accept } for pid=19509 comm="syz.5.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1234.464624][T19521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3751'. [ 1234.552881][T19517] dvmrp17: left allmulticast mode [ 1234.719990][T19515] dvmrp17: left allmulticast mode [ 1234.748621][T19520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3752'. [ 1236.289395][ T30] audit: type=1400 audit(1236.262:1456): avc: denied { ioctl } for pid=19539 comm="syz.0.3757" path="socket:[66030]" dev="sockfs" ino=66030 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1236.838356][T19546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3758'. [ 1236.847887][T19546] openvswitch: netlink: EtherType 0 is less than min 600 [ 1237.442759][T19552] netlink: 'syz.4.3760': attribute type 20 has an invalid length. [ 1237.506409][T19552] dvmrp17: entered allmulticast mode [ 1237.569042][T19552] dvmrp17: left allmulticast mode [ 1237.729454][T19554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3760'. [ 1238.012411][T15448] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1238.182623][T15448] usb 1-1: Using ep0 maxpacket: 8 [ 1238.258138][T15448] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1238.313122][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.324987][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.362646][T15448] usb 1-1: config 179 has no interface number 0 [ 1238.443336][T15448] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1238.464434][T19565] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1238.502493][T15448] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1238.517152][T15448] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1238.555913][T15448] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1238.588519][T15448] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1238.738307][T15448] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1238.798206][T19576] Invalid source name [ 1238.802315][T19576] UBIFS error (pid: 19576): cannot open "./file0", error -22 [ 1238.852572][ T30] audit: type=1400 audit(1238.812:1457): avc: denied { append } for pid=19573 comm="syz.4.3766" name="file0" dev="tmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1238.960553][T15448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.982114][ T30] audit: type=1400 audit(1238.812:1458): avc: denied { open } for pid=19573 comm="syz.4.3766" path="/218/file0" dev="tmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1239.009856][T19556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1239.290023][T15448] usb 1-1: USB disconnect, device number 104 [ 1239.296092][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1239.296138][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1240.781616][T19597] trusted_key: encrypted_key: hex blob is missing [ 1240.935587][T19609] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3773'. [ 1240.986136][T19607] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3773'. [ 1241.142399][T15448] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1241.367818][T15448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1241.622318][T15448] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1241.661913][T19612] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.671187][T19612] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.673514][T15448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1241.679988][T19612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.742593][T19612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.753807][T19612] geneve2: entered promiscuous mode [ 1241.791837][T15448] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1241.853005][T15448] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1241.862210][T15448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.883802][T15448] usb 1-1: config 0 descriptor?? [ 1242.111854][T18888] Bluetooth: Unexpected continuation frame (len 16) [ 1242.302448][ T30] audit: type=1326 audit(1242.102:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19615 comm="syz.5.3777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bf218e9a9 code=0x0 [ 1242.458534][ T6455] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1242.477238][T15448] hdpvr 1-1:0.0: firmware version 0x0 dated [ 1242.484231][T15448] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 1242.500466][ T30] audit: type=1400 audit(1242.492:1460): avc: denied { read append } for pid=19617 comm="syz.4.3776" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1242.533416][ T30] audit: type=1400 audit(1242.522:1461): avc: denied { open } for pid=19617 comm="syz.4.3776" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1242.612392][ T6455] usb 3-1: Using ep0 maxpacket: 32 [ 1242.625468][ T6455] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1242.642845][ T6455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1242.660683][ T6455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1242.672725][ T6455] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1242.681880][ T6455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.808565][ T6455] usb 3-1: config 0 descriptor?? [ 1242.843051][T19614] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1242.864018][ T6455] hub 3-1:0.0: USB hub found [ 1242.987001][T19630] 9pnet_fd: Insufficient options for proto=fd [ 1243.085994][ T6455] hub 3-1:0.0: 2 ports detected [ 1243.264093][ T30] audit: type=1400 audit(1243.242:1462): avc: denied { listen } for pid=19603 comm="syz.0.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1243.288239][T15448] hdpvr 1-1:0.0: Could not setup controls [ 1243.317503][T15448] hdpvr 1-1:0.0: registering videodev failed [ 1243.367049][T15448] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 1243.536113][T15448] usb 1-1: USB disconnect, device number 105 [ 1243.615103][T19644] FAULT_INJECTION: forcing a failure. [ 1243.615103][T19644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1243.628333][T19644] CPU: 1 UID: 0 PID: 19644 Comm: syz.5.3781 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1243.628357][T19644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1243.628368][T19644] Call Trace: [ 1243.628375][T19644] [ 1243.628382][T19644] dump_stack_lvl+0x16c/0x1f0 [ 1243.628419][T19644] should_fail_ex+0x512/0x640 [ 1243.628451][T19644] _copy_from_iter+0x29f/0x16f0 [ 1243.628472][T19644] ? __alloc_skb+0x200/0x380 [ 1243.628501][T19644] ? __pfx__copy_from_iter+0x10/0x10 [ 1243.628521][T19644] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1243.628556][T19644] netlink_sendmsg+0x829/0xdd0 [ 1243.628580][T19644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1243.628611][T19644] ____sys_sendmsg+0xa95/0xc70 [ 1243.628633][T19644] ? copy_msghdr_from_user+0x10a/0x160 [ 1243.628660][T19644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1243.628686][T19644] ? rcu_is_watching+0x12/0xc0 [ 1243.628709][T19644] ? finish_task_switch.isra.0+0x221/0xc10 [ 1243.628733][T19644] ? lockdep_hardirqs_on+0x7c/0x110 [ 1243.628763][T19644] ___sys_sendmsg+0x134/0x1d0 [ 1243.628791][T19644] ? __pfx____sys_sendmsg+0x10/0x10 [ 1243.628816][T19644] ? __lock_acquire+0x622/0x1c90 [ 1243.628854][T19644] ? rcu_watching_snap_stopped_since+0x80/0x110 [ 1243.628885][T19644] __sys_sendmsg+0x16d/0x220 [ 1243.628903][T19644] ? __pfx___sys_sendmsg+0x10/0x10 [ 1243.628936][T19644] do_syscall_64+0xcd/0x4c0 [ 1243.628956][T19644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.628974][T19644] RIP: 0033:0x7f4bf218e9a9 [ 1243.628989][T19644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1243.629006][T19644] RSP: 002b:00007f4bf2fd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1243.629024][T19644] RAX: ffffffffffffffda RBX: 00007f4bf23b6160 RCX: 00007f4bf218e9a9 [ 1243.629035][T19644] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 1243.629046][T19644] RBP: 00007f4bf2fd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.629057][T19644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.629068][T19644] R13: 0000000000000000 R14: 00007f4bf23b6160 R15: 00007ffd86bc3fc8 [ 1243.629091][T19644] [ 1243.848721][ T6455] usb 3-1: USB disconnect, device number 60 [ 1244.023730][ T5940] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1244.192647][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 1244.209452][ T5940] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1244.222569][ T5940] usb 5-1: config 179 has no interface number 0 [ 1244.229331][ T5940] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1244.240798][ T5940] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1244.252598][ T5940] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1244.264414][ T5940] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1244.274799][ T5940] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1244.288392][ T5940] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1244.295527][ T5940] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1244.304975][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.333932][ T5940] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input47 [ 1244.580072][T19656] trusted_key: encrypted_key: hex blob is missing [ 1244.595057][ T5879] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1244.602852][ T10] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1244.647782][T17063] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 1244.752429][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1244.757629][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 1244.764634][ T5879] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1244.773956][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1244.782910][ T5879] usb 1-1: config 179 has no interface number 0 [ 1244.789407][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1244.800106][ T5879] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1244.814817][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1244.824150][ T5879] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1244.836417][ T10] usb 6-1: config 1 has no interface number 1 [ 1244.852925][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1244.865908][ T5879] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1244.879829][ T5879] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1244.891623][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1244.903111][ T5879] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1244.917249][ T5879] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1244.927817][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.936554][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1244.945922][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.954221][ T10] usb 6-1: Product: syz [ 1244.962841][ T10] usb 6-1: Manufacturer: syz [ 1244.967830][ T10] usb 6-1: SerialNumber: syz [ 1244.973879][T19652] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1245.264655][ T5879] usb 1-1: USB disconnect, device number 106 [ 1245.270745][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1245.270786][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1245.291902][ T10] usb 6-1: USB disconnect, device number 77 [ 1245.937836][T19669] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3789'. [ 1246.242558][ T30] audit: type=1326 audit(1246.122:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.0.3788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4712f8e9a9 code=0x0 [ 1246.372014][ T10] usb 5-1: USB disconnect, device number 70 [ 1246.372087][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1246.516484][ T30] audit: type=1400 audit(1246.432:1464): avc: denied { read } for pid=19675 comm="syz.2.3792" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1246.574191][ T30] audit: type=1400 audit(1246.432:1465): avc: denied { open } for pid=19675 comm="syz.2.3792" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1246.939840][ T30] audit: type=1400 audit(1246.622:1466): avc: denied { ioctl } for pid=19675 comm="syz.2.3792" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1247.095643][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1247.137460][T19681] SELinux: failed to load policy [ 1247.152813][ T30] audit: type=1400 audit(1247.142:1467): avc: denied { mount } for pid=19685 comm="syz.1.3794" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1247.296359][T19687] bridge1: entered promiscuous mode [ 1247.301719][T19687] bridge1: entered allmulticast mode [ 1247.672768][T18888] Bluetooth: hci5: unexpected event 0x0f length: 53 > 4 [ 1247.718947][ T30] audit: type=1400 audit(1247.712:1468): avc: denied { unmount } for pid=18300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1247.751143][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1247.762148][T19692] FAULT_INJECTION: forcing a failure. [ 1247.762148][T19692] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.781033][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1247.789075][ T10] usb 5-1: config 0 has no interface number 0 [ 1247.806639][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1247.821169][T19692] CPU: 0 UID: 0 PID: 19692 Comm: syz.5.3796 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1247.821195][T19692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1247.821206][T19692] Call Trace: [ 1247.821212][T19692] [ 1247.821220][T19692] dump_stack_lvl+0x16c/0x1f0 [ 1247.821253][T19692] should_fail_ex+0x512/0x640 [ 1247.821280][T19692] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1247.821309][T19692] should_failslab+0xc2/0x120 [ 1247.821325][T19692] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1247.821351][T19692] ? __alloc_skb+0x2b2/0x380 [ 1247.821382][T19692] __alloc_skb+0x2b2/0x380 [ 1247.821407][T19692] ? __pfx___alloc_skb+0x10/0x10 [ 1247.821435][T19692] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1247.821459][T19692] netlink_alloc_large_skb+0x69/0x130 [ 1247.821480][T19692] netlink_sendmsg+0x6a1/0xdd0 [ 1247.821504][T19692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.821539][T19692] ____sys_sendmsg+0xa95/0xc70 [ 1247.821560][T19692] ? copy_msghdr_from_user+0x10a/0x160 [ 1247.821587][T19692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.821619][T19692] ___sys_sendmsg+0x134/0x1d0 [ 1247.821648][T19692] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.821672][T19692] ? __lock_acquire+0x622/0x1c90 [ 1247.821718][T19692] __sys_sendmsg+0x16d/0x220 [ 1247.821734][T19692] ? __pfx___sys_sendmsg+0x10/0x10 [ 1247.821766][T19692] do_syscall_64+0xcd/0x4c0 [ 1247.821784][T19692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.821801][T19692] RIP: 0033:0x7f4bf218e9a9 [ 1247.821814][T19692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1247.821831][T19692] RSP: 002b:00007f4bf301b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.821847][T19692] RAX: ffffffffffffffda RBX: 00007f4bf23b5fa0 RCX: 00007f4bf218e9a9 [ 1247.821858][T19692] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000003 [ 1247.821868][T19692] RBP: 00007f4bf301b090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.821878][T19692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.821888][T19692] R13: 0000000000000000 R14: 00007f4bf23b5fa0 R15: 00007ffd86bc3fc8 [ 1247.821910][T19692] [ 1247.851949][ T30] audit: type=1400 audit(1247.712:1469): avc: denied { unmount } for pid=18300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1247.902037][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1248.104723][T19698] netlink: 'syz.5.3798': attribute type 1 has an invalid length. [ 1248.224926][T18888] Bluetooth: Unexpected continuation frame (len 16) [ 1248.231993][ T30] audit: type=1326 audit(1248.212:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19695 comm="syz.1.3797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa09a18e9a9 code=0x0 [ 1248.559804][ T10] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1248.578153][T19698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1248.622359][ T10] usb 5-1: Product: syz [ 1248.627033][T19704] netlink: 'syz.0.3799': attribute type 20 has an invalid length. [ 1248.633857][ T10] usb 5-1: SerialNumber: syz [ 1248.647683][ T10] usb 5-1: config 0 descriptor?? [ 1248.657417][T19704] dvmrp17: entered allmulticast mode [ 1248.666899][ T10] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 1248.684868][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input48 [ 1248.707970][T19706] loop2: detected capacity change from 0 to 7 [ 1248.750252][T19704] dvmrp17: left allmulticast mode [ 1248.776159][T19706] Dev loop2: unable to read RDB block 7 [ 1248.789331][T19706] loop2: unable to read partition table [ 1248.796039][T19706] loop2: partition table beyond EOD, truncated [ 1248.912500][T19706] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1248.946088][T19707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3799'. [ 1250.449033][T18888] Bluetooth: Unexpected continuation frame (len 16) [ 1250.457933][ T30] audit: type=1326 audit(1249.972:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19715 comm="syz.5.3803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bf218e9a9 code=0x0 [ 1250.480746][ T5940] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1250.540479][T19716] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1250.618197][T18888] Bluetooth: hci5: command 0x0406 tx timeout [ 1250.632420][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 1250.639243][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.650403][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.667780][ T5940] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1250.677953][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.689467][ T5940] usb 3-1: config 0 descriptor?? [ 1251.472341][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1251.479806][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1251.487097][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1251.494221][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1251.501341][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1251.508454][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1251.515566][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1251.522687][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1251.525639][ T6455] usb 5-1: USB disconnect, device number 71 [ 1251.529624][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1251.619698][ T6455] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1251.753888][ T5940] ft260 0003:0403:6030.004D: unknown main item tag 0x7 [ 1252.223199][T19735] SELinux: failed to load policy [ 1252.505274][ T5940] ft260 0003:0403:6030.004D: failed to retrieve chip version [ 1252.521163][ T5940] ft260 0003:0403:6030.004D: probe with driver ft260 failed with error -71 [ 1252.532733][ T5940] usb 3-1: USB disconnect, device number 61 [ 1253.082400][T15448] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1253.277789][T15448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.559239][T15448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.687804][T15448] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1253.832108][T15448] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1253.890304][T15448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.934436][T15448] usb 2-1: config 0 descriptor?? [ 1254.164425][ T5847] Bluetooth: Unexpected continuation frame (len 16) [ 1254.171299][ T30] audit: type=1326 audit(1254.162:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19757 comm="syz.2.3815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89e898e9a9 code=0x0 [ 1254.534463][T15448] ryos 0003:1E7D:3232.004E: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 1254.867954][T19768] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1255.239896][T19770] netlink: 'syz.2.3818': attribute type 20 has an invalid length. [ 1255.246206][T19775] dvmrp17: entered allmulticast mode [ 1255.406233][T19777] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1255.412796][T19777] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1255.429217][T19777] vhci_hcd vhci_hcd.0: Device attached [ 1255.561721][T19770] dvmrp17: left allmulticast mode [ 1255.672468][ T10] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 1255.893438][T19783] SELinux: failed to load policy [ 1256.369882][ T43] usb 2-1: USB disconnect, device number 119 [ 1256.501041][T19775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3818'. [ 1256.686060][T19778] vhci_hcd: connection reset by peer [ 1256.736813][ T12] vhci_hcd: stop threads [ 1256.741216][ T12] vhci_hcd: release socket [ 1256.774467][ T12] vhci_hcd: disconnect device [ 1258.422185][ T5879] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1258.607723][T19803] 9pnet_fd: Insufficient options for proto=fd [ 1258.792459][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 1258.806614][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.818867][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.831825][T19812] netlink: 'syz.1.3828': attribute type 20 has an invalid length. [ 1258.854994][T19812] dvmrp17: entered allmulticast mode [ 1258.860665][ T5879] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1258.930760][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.949226][T19812] dvmrp17: left allmulticast mode [ 1259.292479][ T30] audit: type=1400 audit(1259.262:1473): avc: denied { read } for pid=19805 comm="syz.2.3827" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1259.320827][ T5879] usb 5-1: config 0 descriptor?? [ 1259.438014][T19817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3828'. [ 1259.465906][T19818] 9pnet_fd: Insufficient options for proto=fd [ 1259.483473][T19814] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3829'. [ 1260.196114][ T5879] ft260 0003:0403:6030.004F: unknown main item tag 0x7 [ 1260.286363][ T5879] ft260 0003:0403:6030.004F: failed to retrieve chip version [ 1260.334100][ T5879] ft260 0003:0403:6030.004F: probe with driver ft260 failed with error -71 [ 1260.373526][T19825] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3831'. [ 1260.402831][ T5879] usb 5-1: USB disconnect, device number 72 [ 1260.500560][T19825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1260.936171][ T10] vhci_hcd: vhci_device speed not set [ 1261.326099][T18888] Bluetooth: hci5: command 0x0406 tx timeout [ 1261.591800][T18888] Bluetooth: hci2: command 0x0406 tx timeout [ 1261.672251][T19810] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1262.023770][T19839] SELinux: failed to load policy [ 1262.029887][T19810] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1262.514677][T19810] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1262.520647][T19810] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1262.541735][T19854] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1262.649861][T19851] 9pnet_fd: Insufficient options for proto=fd [ 1262.828595][T19810] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1262.867805][T19810] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1263.355552][T19810] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1263.876839][T19810] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1263.923243][T19843] syz.4.3834: attempt to access beyond end of device [ 1263.923243][T19843] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1264.042547][T18888] Bluetooth: hci2: command 0x0406 tx timeout [ 1264.309788][T19869] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.3842'. [ 1264.805190][T19871] SELinux: failed to load policy [ 1265.152442][T18888] Bluetooth: hci6: command 0x0406 tx timeout [ 1265.161879][T18888] Bluetooth: hci3: command 0x0406 tx timeout [ 1265.402922][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 1266.057914][ T30] audit: type=1400 audit(1265.682:1474): avc: denied { relabelfrom } for pid=19882 comm="syz.2.3846" name="" dev="pipefs" ino=67698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1266.385859][ T30] audit: type=1400 audit(1266.052:1475): avc: denied { create } for pid=19877 comm="syz.0.3844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1266.420776][ T30] audit: type=1400 audit(1266.062:1476): avc: denied { write } for pid=19877 comm="syz.0.3844" path="socket:[67703]" dev="sockfs" ino=67703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1267.252617][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 1267.258741][ T5847] Bluetooth: hci6: command 0x0406 tx timeout [ 1267.476053][T19905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3848'. [ 1268.311716][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 1268.434469][T19909] wg1 speed is unknown, defaulting to 1000 [ 1269.624247][T19894] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3849'. [ 1269.686872][T19929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3855'. [ 1269.696052][T19929] openvswitch: netlink: EtherType 0 is less than min 600 [ 1270.002637][T19936] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1270.013053][T19936] SELinux: failed to load policy [ 1270.462475][ T5940] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1271.355935][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 1271.451914][ T5940] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1271.482378][ T5940] usb 2-1: config 179 has no interface number 0 [ 1271.488684][ T5940] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1271.552428][ T5940] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1271.566895][ T5940] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1271.668383][ T5940] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1271.703424][ T5940] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1271.726377][ T5940] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1272.740624][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.033901][T19955] SELinux: failed to load policy [ 1273.042493][ T5940] usb 2-1: can't set config #179, error -71 [ 1273.077755][ T5940] usb 2-1: USB disconnect, device number 120 [ 1273.284006][ T30] audit: type=1326 audit(1273.272:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19966 comm="syz.2.3864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89e898e9a9 code=0x0 [ 1273.306988][ T10] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1273.320541][ T5847] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1273.802803][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1274.006872][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1274.069496][ T10] usb 6-1: config 179 has no interface number 0 [ 1274.121122][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1274.146342][ T30] audit: type=1326 audit(1274.142:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19971 comm="syz.4.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3db8e9a9 code=0x7ffc0000 [ 1274.247851][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1274.286626][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1274.297982][ T30] audit: type=1326 audit(1274.142:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19971 comm="syz.4.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f2c3db8e9a9 code=0x7ffc0000 [ 1274.322772][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1274.348245][ T10] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1274.377317][ T30] audit: type=1326 audit(1274.172:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19971 comm="syz.4.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3db8e9a9 code=0x7ffc0000 [ 1274.408586][ T10] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1274.432426][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1274.446259][ T30] audit: type=1326 audit(1274.172:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19971 comm="syz.4.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3db8e9a9 code=0x7ffc0000 [ 1274.471528][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.495080][T19982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3869'. [ 1274.515123][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input49 [ 1274.532431][T19982] openvswitch: netlink: EtherType 0 is less than min 600 [ 1274.577818][ T30] audit: type=1326 audit(1274.172:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19971 comm="syz.4.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2c3db8e9a9 code=0x7ffc0000 [ 1274.601981][ T30] audit: type=1326 audit(1274.172:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19971 comm="syz.4.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3db8e9a9 code=0x7ffc0000 [ 1274.626029][ T30] audit: type=1326 audit(1274.172:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19971 comm="syz.4.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c3db8e9a9 code=0x7ffc0000 [ 1274.649429][ T30] audit: type=1326 audit(1274.172:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19971 comm="syz.4.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3db8e9a9 code=0x7ffc0000 [ 1274.679750][ T30] audit: type=1326 audit(1274.172:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19971 comm="syz.4.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c3db8e9a9 code=0x7ffc0000 [ 1274.916864][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 1274.935905][T15448] usb 6-1: USB disconnect, device number 78 [ 1274.935989][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1275.333175][T19990] SELinux: failed to load policy [ 1276.216041][T19989] syz.1.3870: attempt to access beyond end of device [ 1276.216041][T19989] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1276.669726][T19998] SELinux: failed to load policy [ 1277.471960][T20000] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3874'. [ 1277.484822][T20009] 9pnet_fd: Insufficient options for proto=fd [ 1277.812499][T15448] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1277.972486][T15448] usb 1-1: device descriptor read/64, error -71 [ 1278.252755][T15448] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1278.442593][T15448] usb 1-1: device descriptor read/64, error -71 [ 1278.555714][T15448] usb usb1-port1: attempt power cycle [ 1279.182967][T15448] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1279.548602][T15448] usb 1-1: device descriptor read/8, error -71 [ 1279.822393][T15448] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1280.003336][T20049] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1280.014032][T20049] SELinux: failed to load policy [ 1280.599502][T15448] usb 1-1: device descriptor read/8, error -71 [ 1280.864172][T15448] usb usb1-port1: unable to enumerate USB device [ 1281.038231][T20052] 9pnet_fd: Insufficient options for proto=fd [ 1281.259699][T20057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3889'. [ 1281.277285][T20057] openvswitch: netlink: EtherType 0 is less than min 600 [ 1281.479651][ T5847] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1281.500305][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1281.500335][ T30] audit: type=1326 audit(1281.492:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20059 comm="syz.1.3891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa09a18e9a9 code=0x0 [ 1281.931388][T20067] netlink: 'syz.2.3890': attribute type 2 has an invalid length. [ 1281.939688][T20067] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3890'. [ 1282.044254][ T5847] Bluetooth: hci6: unexpected event for opcode 0x2031 [ 1282.263907][T20069] wg1 speed is unknown, defaulting to 1000 [ 1282.369022][ T30] audit: type=1400 audit(1282.302:1522): avc: denied { bind } for pid=20068 comm="syz.1.3893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1282.506644][T20073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3893'. [ 1285.605112][T20093] bridge2: entered promiscuous mode [ 1285.610345][T20093] bridge2: entered allmulticast mode [ 1285.678481][T20094] SELinux: failed to load policy [ 1285.866832][T20111] netlink: 'syz.1.3901': attribute type 20 has an invalid length. [ 1286.078021][T20111] dvmrp17: entered allmulticast mode [ 1286.469935][ T30] audit: type=1326 audit(1286.462:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.0.3903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4712f8e9a9 code=0x0 [ 1286.825199][T20108] dvmrp17: left allmulticast mode [ 1286.866821][ T30] audit: type=1400 audit(1286.862:1524): avc: denied { write } for pid=20109 comm="syz.2.3902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1286.893173][ T30] audit: type=1400 audit(1286.882:1525): avc: denied { bind } for pid=20109 comm="syz.2.3902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1286.918644][T20110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3902'. [ 1286.933330][T20110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1286.971261][T20110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.346169][T20132] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 1287.356662][T20132] SELinux: failed to load policy [ 1288.546123][T20133] netlink: 'syz.4.3907': attribute type 15 has an invalid length. [ 1288.554206][T20133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3907'. [ 1289.024754][ T30] audit: type=1400 audit(1288.942:1526): avc: denied { ioctl } for pid=20128 comm="syz.2.3908" path="socket:[68190]" dev="sockfs" ino=68190 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1289.243347][T20139] FAULT_INJECTION: forcing a failure. [ 1289.243347][T20139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.260280][T20139] CPU: 0 UID: 0 PID: 20139 Comm: syz.0.3911 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1289.260306][T20139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1289.260317][T20139] Call Trace: [ 1289.260323][T20139] [ 1289.260330][T20139] dump_stack_lvl+0x16c/0x1f0 [ 1289.260363][T20139] should_fail_ex+0x512/0x640 [ 1289.260394][T20139] _copy_from_user+0x2e/0xd0 [ 1289.260414][T20139] copy_msghdr_from_user+0x98/0x160 [ 1289.260442][T20139] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1289.260482][T20139] ___sys_sendmsg+0xfe/0x1d0 [ 1289.260511][T20139] ? __pfx____sys_sendmsg+0x10/0x10 [ 1289.260537][T20139] ? __lock_acquire+0x622/0x1c90 [ 1289.260585][T20139] __sys_sendmsg+0x16d/0x220 [ 1289.260602][T20139] ? __pfx___sys_sendmsg+0x10/0x10 [ 1289.260636][T20139] do_syscall_64+0xcd/0x4c0 [ 1289.260654][T20139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.260673][T20139] RIP: 0033:0x7f4712f8e9a9 [ 1289.260688][T20139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.260705][T20139] RSP: 002b:00007f4713e8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1289.260722][T20139] RAX: ffffffffffffffda RBX: 00007f47131b5fa0 RCX: 00007f4712f8e9a9 [ 1289.260733][T20139] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1289.260744][T20139] RBP: 00007f4713e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.260755][T20139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.260765][T20139] R13: 0000000000000000 R14: 00007f47131b5fa0 R15: 00007fff2a746ae8 [ 1289.260789][T20139] [ 1289.649726][ T30] audit: type=1400 audit(1289.642:1527): avc: denied { setopt } for pid=20150 comm="syz.1.3915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1290.381290][ T30] audit: type=1400 audit(1289.772:1528): avc: denied { listen } for pid=20150 comm="syz.1.3915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1290.611772][T20151] SELinux: failed to load policy [ 1290.680596][ T5847] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1291.045644][ T30] audit: type=1326 audit(1290.672:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20159 comm="syz.4.3917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c3db8e9a9 code=0x0 [ 1291.087161][T20166] FAULT_INJECTION: forcing a failure. [ 1291.087161][T20166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1291.100726][T20166] CPU: 0 UID: 0 PID: 20166 Comm: syz.0.3919 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1291.100750][T20166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1291.100760][T20166] Call Trace: [ 1291.100766][T20166] [ 1291.100773][T20166] dump_stack_lvl+0x16c/0x1f0 [ 1291.100805][T20166] should_fail_ex+0x512/0x640 [ 1291.100835][T20166] _copy_from_user+0x2e/0xd0 [ 1291.100854][T20166] move_addr_to_kernel+0x65/0x170 [ 1291.100877][T20166] __copy_msghdr+0x386/0x470 [ 1291.100904][T20166] copy_msghdr_from_user+0xc1/0x160 [ 1291.100930][T20166] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1291.100968][T20166] ___sys_sendmsg+0xfe/0x1d0 [ 1291.100996][T20166] ? __pfx____sys_sendmsg+0x10/0x10 [ 1291.101021][T20166] ? __lock_acquire+0x622/0x1c90 [ 1291.101065][T20166] __sys_sendmsg+0x16d/0x220 [ 1291.101082][T20166] ? __pfx___sys_sendmsg+0x10/0x10 [ 1291.101113][T20166] do_syscall_64+0xcd/0x4c0 [ 1291.101132][T20166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.101151][T20166] RIP: 0033:0x7f4712f8e9a9 [ 1291.101165][T20166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1291.101183][T20166] RSP: 002b:00007f4713e8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1291.101200][T20166] RAX: ffffffffffffffda RBX: 00007f47131b5fa0 RCX: 00007f4712f8e9a9 [ 1291.101212][T20166] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1291.101223][T20166] RBP: 00007f4713e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.101241][T20166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.101251][T20166] R13: 0000000000000000 R14: 00007f47131b5fa0 R15: 00007fff2a746ae8 [ 1291.101275][T20166] [ 1291.532459][T15448] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1291.653638][ T10] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1291.682691][T15448] usb 3-1: Using ep0 maxpacket: 8 [ 1291.689124][T15448] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 1291.698481][T15448] usb 3-1: config 4 has no interface number 0 [ 1291.705693][T15448] usb 3-1: config 4 interface 38 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1291.717944][T15448] usb 3-1: config 4 interface 38 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1291.728916][T15448] usb 3-1: config 4 interface 38 has no altsetting 0 [ 1291.737715][T15448] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=55.58 [ 1291.746989][T15448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.755070][T15448] usb 3-1: Product: syz [ 1291.759284][T15448] usb 3-1: Manufacturer: syz [ 1291.763939][T15448] usb 3-1: SerialNumber: syz [ 1291.771596][T20169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1291.812397][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1291.818928][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1291.833717][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1291.844553][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1291.854893][ T10] usb 1-1: config 1 has no interface number 1 [ 1291.860991][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1291.877648][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1291.890753][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1291.900109][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.908170][ T10] usb 1-1: Product: syz [ 1291.912371][ T10] usb 1-1: Manufacturer: syz [ 1291.917051][ T10] usb 1-1: SerialNumber: syz [ 1396.982230][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1396.988866][ C1] rcu: 1-...!: (10499 ticks this GP) idle=d62c/1/0x4000000000000000 softirq=106179/106183 fqs=0 [ 1397.000422][ C1] rcu: (t=10500 jiffies g=96437 q=126 ncpus=2) [ 1397.006660][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g96437 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1397.018972][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=69201 [ 1397.026849][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g96437 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1397.038208][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1397.048168][ C1] rcu: RCU grace-period kthread stack dump: [ 1397.054043][ C1] task:rcu_preempt state:I stack:27928 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1397.065964][ C1] Call Trace: [ 1397.069236][ C1] [ 1397.072175][ C1] __schedule+0x116a/0x5dd0 [ 1397.076702][ C1] ? __lock_acquire+0x622/0x1c90 [ 1397.081641][ C1] ? __pfx___schedule+0x10/0x10 [ 1397.086500][ C1] ? find_held_lock+0x2b/0x80 [ 1397.091180][ C1] ? schedule+0x2d7/0x3a0 [ 1397.095517][ C1] schedule+0xe7/0x3a0 [ 1397.099590][ C1] schedule_timeout+0x123/0x290 [ 1397.104441][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1397.109813][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1397.115106][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1397.121000][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1397.126473][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1397.131255][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1397.136536][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1397.141740][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1397.146674][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1397.151526][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1397.157338][ C1] rcu_gp_kthread+0x270/0x380 [ 1397.162010][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1397.167205][ C1] ? rcu_is_watching+0x12/0xc0 [ 1397.171973][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1397.177182][ C1] ? __kthread_parkme+0x19e/0x250 [ 1397.182209][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1397.187404][ C1] kthread+0x3c5/0x780 [ 1397.191470][ C1] ? __pfx_kthread+0x10/0x10 [ 1397.196056][ C1] ? rcu_is_watching+0x12/0xc0 [ 1397.200820][ C1] ? __pfx_kthread+0x10/0x10 [ 1397.205407][ C1] ret_from_fork+0x5d4/0x6f0 [ 1397.209999][ C1] ? __pfx_kthread+0x10/0x10 [ 1397.214586][ C1] ret_from_fork_asm+0x1a/0x30 [ 1397.219361][ C1] [ 1397.222402][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1397.222426][ C0] NMI backtrace for cpu 0 [ 1397.222439][ C0] CPU: 0 UID: 0 PID: 20182 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1397.222455][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1397.222463][ C0] RIP: 0010:__lock_acquire+0x6c5/0x1c90 [ 1397.222476][ C0] Code: 45 20 49 89 d0 25 00 80 04 00 3d 00 00 04 00 0f 84 c4 04 00 00 8b 35 0e 07 11 0f 85 f6 0f 84 79 fd ff ff 41 f6 45 22 10 75 2b <8b> 85 e8 0a 00 00 4c 89 85 e0 0a 00 00 83 c0 01 89 85 e8 0a 00 00 [ 1397.222489][ C0] RSP: 0018:ffffc90000007bc8 EFLAGS: 00000046 [ 1397.222506][ C0] RAX: ffffffff93d72760 RBX: 00000000000171dd RCX: ffffffff93d72760 [ 1397.222516][ C0] RDX: 07b24d8723fa41a2 RSI: 0000000000000001 RDI: ffff88802680d3e8 [ 1397.222525][ C0] RBP: ffff88802680c880 R08: 07b24d8723fa41a2 R09: 0000000000000001 [ 1397.222534][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802680d370 [ 1397.222542][ C0] R13: ffff88802680d3e8 R14: 00000000bbd3c56a R15: 0000000000000002 [ 1397.222551][ C0] FS: 000055559451b500(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 1397.222566][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1397.222575][ C0] CR2: 00007f2c3db18360 CR3: 000000004cb98000 CR4: 00000000003526f0 [ 1397.222584][ C0] Call Trace: [ 1397.222590][ C0] [ 1397.222599][ C0] lock_acquire+0x179/0x350 [ 1397.222611][ C0] ? debug_object_activate+0x14c/0x4c0 [ 1397.222629][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 1397.222646][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1397.222665][ C0] ? debug_object_activate+0x14c/0x4c0 [ 1397.222680][ C0] debug_object_activate+0x14c/0x4c0 [ 1397.222697][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1397.222714][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1397.222729][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1397.222745][ C0] enqueue_hrtimer+0x23/0x3b0 [ 1397.222760][ C0] __hrtimer_run_queues+0x8ff/0xad0 [ 1397.222778][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1397.222792][ C0] ? read_tsc+0x9/0x20 [ 1397.222810][ C0] hrtimer_interrupt+0x397/0x8e0 [ 1397.222829][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 1397.222851][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1397.222871][ C0] [ 1397.222875][ C0] [ 1397.222880][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1397.222895][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1397.222915][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 5c 0f f6 48 89 df e8 8e b0 0f f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 f5 d2 ff f5 65 8b 05 8e d9 46 08 85 c0 74 16 5b [ 1397.222928][ C0] RSP: 0018:ffffc9000457f748 EFLAGS: 00000246 [ 1397.222938][ C0] RAX: 0000000000000006 RBX: ffffffff8e5cfc80 RCX: 0000000000000006 [ 1397.222946][ C0] RDX: 0000000000000000 RSI: ffffffff8de2ff26 RDI: ffffffff8c1573e0 [ 1397.222955][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 1397.222964][ C0] R10: ffffffff90a94057 R11: 1ffff110045dc08a R12: ffffffff8e5cfd58 [ 1397.222973][ C0] R13: ffff888022ee0450 R14: ffffffff8e5cfc80 R15: ffff88802680c880 [ 1397.222988][ C0] rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 1397.223005][ C0] __rcu_read_unlock+0x2b4/0x580 [ 1397.223018][ C0] unwind_next_frame+0x3fe/0x20a0 [ 1397.223032][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.223046][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1397.223066][ C0] arch_stack_walk+0x94/0x100 [ 1397.223083][ C0] stack_trace_save+0x8e/0xc0 [ 1397.223100][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1397.223117][ C0] ? rcu_is_watching+0x12/0xc0 [ 1397.223134][ C0] ? kfree+0x24f/0x4d0 [ 1397.223151][ C0] ? security_compute_sid+0x1a61/0x2140 [ 1397.223171][ C0] kasan_save_stack+0x33/0x60 [ 1397.223189][ C0] ? kasan_save_stack+0x33/0x60 [ 1397.223207][ C0] ? kasan_save_track+0x14/0x30 [ 1397.223224][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1397.223243][ C0] ? kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 1397.223262][ C0] ? shmem_alloc_inode+0x25/0x50 [ 1397.223275][ C0] ? alloc_inode+0x64/0x240 [ 1397.223291][ C0] ? new_inode+0x22/0x1c0 [ 1397.223305][ C0] ? shmem_get_inode+0x19a/0xfb0 [ 1397.223318][ C0] ? shmem_symlink+0xf8/0x9f0 [ 1397.223336][ C0] ? vfs_symlink+0x400/0x680 [ 1397.223351][ C0] ? do_symlinkat+0x261/0x310 [ 1397.223363][ C0] ? __x64_sys_symlinkat+0x93/0xc0 [ 1397.223376][ C0] ? do_syscall_64+0xcd/0x4c0 [ 1397.223388][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.223412][ C0] kasan_save_track+0x14/0x30 [ 1397.223430][ C0] __kasan_slab_alloc+0x89/0x90 [ 1397.223449][ C0] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 1397.223470][ C0] ? shmem_alloc_inode+0x25/0x50 [ 1397.223484][ C0] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1397.223502][ C0] shmem_alloc_inode+0x25/0x50 [ 1397.223515][ C0] alloc_inode+0x64/0x240 [ 1397.223531][ C0] new_inode+0x22/0x1c0 [ 1397.223547][ C0] shmem_get_inode+0x19a/0xfb0 [ 1397.223563][ C0] shmem_symlink+0xf8/0x9f0 [ 1397.223583][ C0] ? __pfx_shmem_symlink+0x10/0x10 [ 1397.223601][ C0] ? bpf_lsm_inode_permission+0x9/0x10 [ 1397.223614][ C0] ? security_inode_permission+0xbf/0x260 [ 1397.223637][ C0] vfs_symlink+0x400/0x680 [ 1397.223654][ C0] do_symlinkat+0x261/0x310 [ 1397.223668][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 1397.223681][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 1397.223699][ C0] __x64_sys_symlinkat+0x93/0xc0 [ 1397.223712][ C0] do_syscall_64+0xcd/0x4c0 [ 1397.223726][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.223739][ C0] RIP: 0033:0x7f2c3db8df27 [ 1397.223751][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1397.223763][ C0] RSP: 002b:00007ffe12bf5df8 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 1397.223776][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2c3db8df27 [ 1397.223784][ C0] RDX: 00007f2c3dc125b5 RSI: 00000000ffffff9c RDI: 00007f2c3dc1112c [ 1397.223793][ C0] RBP: 00007ffe12bf5e3c R08: 0000000000000000 R09: 0000000000000000 [ 1397.223801][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000f8 [ 1397.223810][ C0] R13: 00000000000927c0 R14: 000000000013b5e4 R15: 00007ffe12bf5e90 [ 1397.223823][ C0] [ 1397.224423][ C1] CPU: 1 UID: 0 PID: 20168 Comm: syz.2.3920 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1397.224443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1397.224452][ C1] RIP: 0010:smp_call_function_many_cond+0xd7b/0x1510 [ 1397.224475][ C1] Code: e8 2a 10 0c 00 45 85 ed 74 46 48 8b 14 24 49 89 d6 49 89 d5 49 c1 ee 03 41 83 e5 07 4d 01 e6 41 83 c5 03 e8 c7 14 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 6f 05 00 00 8b 43 08 31 ff [ 1397.224490][ C1] RSP: 0018:ffffc90004ed79c0 EFLAGS: 00000293 [ 1397.224501][ C1] RAX: 0000000000000000 RBX: ffff8880b84421e0 RCX: ffffffff81afd3cd [ 1397.224512][ C1] RDX: ffff88802c36a440 RSI: ffffffff81afd3a9 RDI: 0000000000000005 [ 1397.224522][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1397.224532][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 1397.224542][ C1] R13: 0000000000000003 R14: ffffed101708843d R15: ffff8880b853b580 [ 1397.224553][ C1] FS: 0000555591a44500(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 1397.224570][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1397.224581][ C1] CR2: 000000110c26f5e1 CR3: 0000000035554000 CR4: 00000000003526f0 [ 1397.224592][ C1] Call Trace: [ 1397.224598][ C1] [ 1397.224605][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1397.224630][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1397.224658][ C1] ? __pfx___text_poke+0x10/0x10 [ 1397.224678][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1397.224695][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1397.224717][ C1] ? syscall_exit_work+0x91/0x1e0 [ 1397.224734][ C1] smp_text_poke_batch_finish+0x27b/0xdb0 [ 1397.224755][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1397.224773][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1397.224798][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1397.224818][ C1] ? find_held_lock+0x2b/0x80 [ 1397.224845][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1397.224866][ C1] jump_label_update+0x376/0x550 [ 1397.224891][ C1] static_key_disable_cpuslocked+0x158/0x1c0 [ 1397.224915][ C1] static_key_disable+0x1a/0x20 [ 1397.224936][ C1] tracepoint_probe_unregister+0x4fd/0xd70 [ 1397.224962][ C1] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 1397.224985][ C1] ? bpf_link_free+0x95/0x390 [ 1397.225002][ C1] ? rcu_is_watching+0x12/0xc0 [ 1397.225024][ C1] ? __pfx_bpf_link_release+0x10/0x10 [ 1397.225041][ C1] bpf_raw_tp_link_release+0x35/0x70 [ 1397.225057][ C1] bpf_link_free+0xec/0x390 [ 1397.225077][ C1] bpf_link_release+0x5d/0x80 [ 1397.225095][ C1] __fput+0x3ff/0xb70 [ 1397.225116][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1397.225142][ C1] task_work_run+0x14d/0x240 [ 1397.225161][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1397.225177][ C1] ? find_held_lock+0x2b/0x80 [ 1397.225204][ C1] exit_to_user_mode_loop+0xeb/0x110 [ 1397.225224][ C1] do_syscall_64+0x3f6/0x4c0 [ 1397.225242][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.225263][ C1] RIP: 0033:0x7f89e898e9a9 [ 1397.225278][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1397.225292][ C1] RSP: 002b:00007ffdf5c553d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1397.225307][ C1] RAX: 0000000000000000 RBX: 000000000013b411 RCX: 00007f89e898e9a9 [ 1397.225317][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1397.225327][ C1] RBP: 00007f89e8bb7ba0 R08: 0000000000000001 R09: 0000000df5c556cf [ 1397.225337][ C1] R10: 00007f89e8800000 R11: 0000000000000246 R12: 00007f89e8bb5fac [ 1397.225347][ C1] R13: 00007f89e8bb5fa0 R14: ffffffffffffffff R15: 00007ffdf5c554f0 [ 1397.225371][ C1]