last executing test programs: 18.42244343s ago: executing program 1 (id=767): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_usb_connect(0x0, 0x24, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x3b, 0x58, 0xf1, 0x20, 0x1df7, 0x2500, 0x8bf2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x10, 0x80, "", [{{0x9, 0x4, 0x71, 0x8, 0x0, 0xb2, 0xee, 0x1, 0x7}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) syz_emit_ethernet(0x94, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x86, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x19, 0x4, 0x0, 0x5, 0x8, 0x68, 0x4, 0x6f, 0xc, 0x5, @multicast2, @loopback, {[@rr={0x7, 0x7, 0x68, [@rand_addr=0x64010102]}, @generic={0x44, 0x4, "dc2b"}, @noop, @timestamp_prespec={0x44, 0x4, 0x7e, 0x3, 0x8}, @end, @ssrr={0x89, 0x7, 0x1e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xf1, 0x1, 0xc, [{@local, 0x8}, {@private=0xa010100, 0x3ff}, {@private=0xa010102, 0xac}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x14, 0x4f, 0x1, 0x5, [{@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xd}]}]}}, "4a8c777c9733"}}}}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r1, &(0x7f0000002180)="af", 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000080)=0x9) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x28, r0}, 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$sock(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000600)="e3f7513691114e1f99d062e41b73495b4b817fa9134e01b1079e19d5b990fda6e77e3df65ce1c85f51f34e977fc16184e912989eeba5423bf01bfbbc544c048a1d0650e434fc5c9058d6907eacd9f730146c9ae5d5b1ff736dbba5ab5a3a8b1886c188265e2033be69180eb1f3480b3da0351793f9644dfdf64eab91e1a5a728e726bfa07f702550313ae3df5443811a7e9b0ec79585fa5275a2ee7572651bf3716d843f482dc68e8a84ff93d91b5b445c003a7e04d499dbdd2a91143f2bf0ecf275bd5e204d2dc9a631027745a291099c66f0ccba5bc699911cb1458112f60d0d29170944e312844893bec57f67a37e046f0d5e5809cedd763daad69083f2087d65d745d37f0ba28ee2103771c4b560bbf0fb02e38fc96a03239666f7b12c3ff774d17408318c55e4ee563dcc5303ae071132487e13e06363065e2f3dd3a97c50e12f43b34f8b602102d212b8396506fd83cf21ef9f1cde317c8ffa079d4159ed8f90680df3898ff1cf768ea91a02dbd376548adeb7a0d565ace1b078f8dcf31e0b4110770c848b82f91c65031b2aa3fa7d5de436fdfd525492b9501bff5b476e300bf39a9c5510ceecdadc1f95ca7400fde839469c76da778c9e53d04062eb801de36ae572d3945e8371dd2f78e3ae925335923a9a09685057f723e75193d6cfdb7310bb21566ac0a1c05fc7c1d54d63e48bfc9cc44c38b8f698d41c9a7ec3a0a5db54ca78cba509e356048b4ab43f34ea0ed94385892a7c712e528f8be493938f58e8b6c28e3e64e7ebb9e608e9451f67bc694f9f06608af48c6fe89f3da724c8eb09203ed5acf09c17519fdd1ef1ad96c878d049a952fdd7cb65f953a849fe4fb960323ebfb5af9460ab6d51f98ddb6d38a4b60ea5902e0ba4301fa7c0ea5a106cb16ba716f1c9b4436172da7cc506b7a92db6ba4774a67db670b207a547a94b6192e1928d5629e411662a12306fb30815e0a5990fc3cc74983417aaae513689234759795be0f2853d929cdc7e022097b0dccf326fc9e20a145383d7a0cad552f3b40260eb3aa333364c67696c1271dea30995b574cc0caf1733c4e2b446bae824d32a6352d7bcb78971f078dfdac4db23e0296454a9cf9af8952f7c37a7b5f2492f26714f305b7ee973f5219480fa845b12437c5c1f5a162d6cccdc15f66f3670014c62244ff448ba0cd68b1d411632264412ee1c4ce99a72a8d592e69b5684db9cf8dbec37340e0e3d2aaeb46339f9529df0fca8c2d846fa585d9a90f001ade240d642638a7f844870842356c7fb8c59ebc44c0a7af827e480341c56cca735fb5d7c421a6977798f6ea9180da3ca796c5131fe71bfd2b9df18036b6c1eff447122d42e2901924203414e1a8581c78b1402fef94fc08cd436b68a78cf9c0d62a828e853bef1c3fe6f176ead7a9a4832362ab2ffb23fcd5c84514cc2b0da437dd23da5ebc643b9e78b36c98f57b544a2226a6fa13ec9635b0b59b252645ff7a7450952fcf8b22c4078270d122ac9faea8483c92fd99f8753a1d0c588f7645c6e9417349ae61cc11b75f42ea22a79dafa330dc5999add458c1dd7a6544fbee7f286f1bcde93262f409ffef389d11b85655e1f21820668a962609ec80e4247f391e2085f7e3a0da9c400e06046e0b058bd1731e0dca3ee7e0bf43110c1ca7a90e7967a2a9af8fa171078835e520d04636fadcca62694184042df89c252610cf284d99f8ff0b4215333644d69fcf9478c37e8273179bf570c377322e90f05e092343c80a914eb1874cf35a890073dd554b78f5ee230c7646f7a6e221f14f423e5a9c518bc4055db24dfc3ae647d3263e3585d77d6b4ae92b7511ba3e177e08d3f67ea7be4cb81314fa0eda736305485f6a884143bc2c6dbbd4193fcfeadddff1bee9f87e3b56a7cd2bea00839319b6943ff772acca867f3ccd94e3ad6e2e8e561fece5d7118705794cffd0d4f862f13990ad2b055108863c127d5cf7a2b30860dcf94859070b262e692d655bf5d8f3dcb4fa32585bc9e9424d630cdbd753d4fe6c8bf6494042c97373918cabd2e03e1acb72ba96946e6e29589b84e1645ed63893f0ca6a8925ec9264f80093876b69b054521ca9c38b38d674e8bc2e7faedfbf56e77bf6a95033edc55a7f7453fd6006dec2000ccb38fe33f585069c4e7d4e40a4f140ba0fd9a3edeffe9183a2db8bf9d52faf7162eff289403f7c71ad09c31a7547b31a600b540d5ba936abd66f8a818536ae874348b0d058657781f06cd62e79ed06d68f9b389da2c5802a9794825325218518696f538d95610eccbe90bdee6163c1d1592eb21da570f17ca2d982d8883693effafe2d4b39f29af5fb4e526badf1325ac4ec3b5a4394fe3e1a4f42a7192525eb56a0f3ab588639cdeb7c2ebac6066d8c06cd960b09aca5e6fe8ee18491ad684fd2ee172235410be1f0cecebd433a8e787fc6d16223488acd7e76073c9e85e2d28aefb072c87ee49177abeaa2ce84d8048d6465d51682eeb09c7aa45b80ca0579c0d83824ad087b8b910b967e803664a9ac4aea6f3b8dcafbbd2eb3754b81bba323516db81bd88ab6b9c39ab4376f28ae8ca50535cf95061c313182868907cacab6658c27748dd7d7ac2478bdd54d313fd604d00dd3a2ee77f5ddb211976fdb39d2f5e2304494e78179e9c2ecff76bd591dc7219179c04746afd4def37448e13d1c425a373f6fbf08eaabad89472ff4d0980e03275a0475fe0b439dcce3ff44fe7722980f638364d91bfa410191119361320e7e2f856909ccd7a2106ea248a3380285fa539fed4a14158cd50171878489d6e867641216160454e1f85f6a6e3fef810602e3ef80303d7076e6e425d6def9ddb10e19a03ddaea6a7b88afad00dd33de66a6a348135ec614617910e7870345cc8a4babb629a44e6bdf1651e13accf9181a64430ac07f2f5a9367576605ec34d90fe3d2b02c6c12222373ff064418ec29b57b8a2e7bb385bb10e0d96e04fe642aea434171f4022bc50c3b477fd549fc78c448d592ea4f3cf5342e6712e829eb1386e3c23ed6189a5d05d3a80c9ee81039105061d0f631e45062ff443b37635148704fb5e0661b9578752d22cfe5a7482958de6b8cc186765ad16207a9fac5c499bfc03ad4f3bdfc6dae5d6623163a0cd0858c13808435b86d958071c27419fc66c493afc48159eceda8555d3805677f87f4339166ad1c1142a74da650acc8f4cbbc504688ddce5a8cc32e00095bb235aad15c669fd9fbc65699264ea61a8ce3f16461b04fee0a4d44f5e61abe5fc6e633e3bc80fcc21ba50d2a8c598c6fb34ccfe97c979b858deda551dff5dd58e877248982bc5194bde3be0cc63273de5896408f8a820d0d3c4ff05f6c71a3638ecf4c530ee049ed8f93376b8acb7dd47ef647632374536dd60c6bb8a979f8ce9b4d4c713f0f9ac98cd25de7ba1b07354d64c54e561006e7027315e2e9885bf60219b6c497c443b84db7c9e122f27ff1257d4cf966b20e7b498c541cf309678524a8ca8be004cfbc7527e6308b4cece07f47d3f22705d3d7dad59d3c88f4cab3b1363eb10bc30f839a44989b21ac7d2ce5ff7d9b1b8da5dc9b2754d064319595ab302763bbc3c9edb6da54cdc4bf119cccf43418f0d1dfa9a6c36866f7d89749429f79fbb7f19d9a022fda19f7579242d9adde9b47cea712d660870589f6c7cc5f3442c2dd5c17dbb30e649c3605ccbc42b62832a322ea2c7f285f46bc63435112270cf732c2a56bd350b1796043f8b6b95b49880ec519fe3beb724dcd6bf64add9700bba63e44d29d209fc3001f8fe503644d3043ef2c06dbbef5c1d6b05f2021672a40c8749bca6ccd8406bc579d5a6a2cf3fa0619c845d412c3f52892d7c9fdae3185cef99c4da83eb0728405f18170382fbe4e1edae856d22dc9d897ebc4f0a868246407fc15bc2b388c80c42c2e04f9a68e76ec392b1902b9c5cde19224750f485bf6984f3c52f5f8c6e81e2c5b6a34eff7ae80b777da2488a233f7d54ba99d89c02c816605520468e8e8ca5ca145a9640dab8c82f786efc82f773f6cf9b25192022cbe7bb3242907d4bbea9380c11ae0a3195639d6364fc1829c4f518ee1fd9784a9430cd5e2d5b18595527dd035038b7ea782b0bfa9184697842e93cf9ced3ef6190b9725a349160ea759dbb9879d808d4331b3d2b042826fb8dd68686c37fdcfec9583d9ea99cbbc045a9eb7b671f6a4d2c581c81a6d2cf0786fcb1c19a67002ea500757e91b7e4ec0a67756c04501650a2267624a03f769ec7cd48cdebcb96ebde8e867caa4b9e7d4efdd2939c5f6ce346aef0e98d20e2204dcca2e47bbbe3e52ba9476d2d2f3dcc83de2b791b208bf0df50398b8a702fbc05fa3510424b0d00c7e4d3cafc06503ff10d844937d8fb0d6005940daff30e1edb37e0dd7746a6fc0bb001d3c1f7af9cbf46c42f93fecbd8fd28b16ea79097c1641803ec0e88eac66d333e0b08b0d8641bdec2e832606886678eca3a95b4ca95e2cabc06faf0f3370451cb2df83224dff16616d6d7b7886c4b01e6d862a4eaff57f162aedda605dd96b1d76d114dec8758599bb2e847aa0f2d6c1f30249d0782f47aba0dec369297778215518cbd69d3471167467633e8ed7f44e33435b593bbac6e144edc100b7934ef50492e9d6f7897c61e7f11bfcfd5de9efb416b0769098341ffe905406bf42c0255bdc2ce8ca899237244b4bb5b4582af0788996d81c7f9ff7e065d347c7a89a42bbd7691986f1b1e1139923d30efee756a40edd8a4dabdae5d8fd0b91e3b8d226157c137bb1b619d172f77e02e14c09d6192ff5d538db5e18d152419bd355df0ede0cd33fe18a32acea63a0e02d3d2e5b1e05393d317e26f985bc0cf63309cc7e4ea812443563aacde179d3bcaabff33c93a297a2a97d5c0023cf0f7da535307332869e0efa9a890fd745de7d79a4033143b692a77b17d7048ba8b61913e3ffacb4c8b3cf65caad17e0b46a3210bc3837da6d6f635abbd830b351a669478a6f29e17c695a0085867068e27e4e53f95711a54725598fd4e1d4ce1feeebd992d1c3da4dd27c7afb36ebc6608708d984c4983fc8f91d513a44be50dacb4e90045f72e98407e598c2e6e6b835674841ea100c9ccfced30603d64ebfd0429290e7d75f1148c8b56f3d79041f9ee3c9c65e97d0cee78a45809e7038292eb5bc659be070a8fc13c2ad76ce15ba935af099d86967b7850fdf00313d93b11f2480ec9b7a5afade7a4d2c52567b9d034bbddc43630d593dd90421e8d1a8a565e4338d55c01078b32d817e9de9af0953bbbd0d77c0575dbb800a154c1ab7c0cfc47ad45cd7f3f1cec428f928f3f597b1bf4e7f9cd0a35600155d1d92666d879fb39da265c8fb075d9fad52712d45ae2eda2d3e0798dca01bcb095f8fabb15e3342cc27bf06dde2ca25fdcf056eacf3529a8fdea054d4c6241e5aabc296d7ca99d9b07051a629b10b9f8651c240c925c4194a26945282b634ed33905fa42bd489361eeb90ef14af8696b65c7265be3fcbcd4ff07ad78b65d1cf694da34", 0xf50}], 0x1}}], 0x1, 0x50) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 14.254401115s ago: executing program 1 (id=778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x3) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0xffe0}, {0x0, 0xffff}}}, 0x24}}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r8 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) syz_usb_connect(0x2, 0x371, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) shmctl$SHM_INFO(r8, 0xe, &(0x7f0000000280)=""/219) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r10, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x8000000004, 0x4, 0x0, 0x4, 0x6, 0x6, 0x0, 0x100fff}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_CAP_STEAL_TIME(r9, 0x4068aea3, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f0000000080)={0x3, 0x0, [{0xb, 0x8000, 0x6, 0xff, 0x10000, 0x80000001, 0xb}, {0xb, 0x101, 0x2, 0x1, 0xca, 0x81, 0x5}, {0x2, 0x0, 0x6, 0x2, 0xace0, 0x1c, 0xfffeffff}]}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYRES8=r11, @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x80000) 11.122198013s ago: executing program 3 (id=786): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f0000000600)=""/83, 0x53}], 0x2}, 0x2001) 11.031803121s ago: executing program 1 (id=788): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x1ff, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x8}, 0x3c) (async, rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x10) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r1, &(0x7f0000000380)=""/144, 0x90) (async) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x40, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) 10.928091628s ago: executing program 1 (id=789): mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000001dc0)={0x9, 0xd, 0x200000}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x748, @remote, 0x0, 0x2}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009080709050203"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_read(r4, 0x2, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)=""/152, 0x1a0, 0x98, 0x0, 0x9}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xd, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xa) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0x2, 0xffffff01, 0x100001, 0x3, 0xfffffffe, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x2, 0x4006, 0xa, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8001, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x7, 0x8, 0x9, 0x9, 0x80047, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x90010, 0x3, 0x4, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa3, 0x7, 0x4000a9, 0x5, 0x6, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x5, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x2, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x41, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) 10.879831703s ago: executing program 3 (id=791): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x4000004) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 10.747887143s ago: executing program 2 (id=792): socket$kcm(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x1b, 0x19, 0x1, 0x70bd2b, 0x0, {0x80, 0x20, 0x0, 0x6, 0xfe, 0x3, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r6, 0xffffffffffffffff, 0x60000000}, 0xc) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000002100)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) getsockopt$inet6_buf(r1, 0x29, 0xb1, &(0x7f0000000080), &(0x7f00000000c0)) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) 10.623959829s ago: executing program 3 (id=793): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = socket(0x5, 0xe, 0x4) r1 = socket(0x28, 0x800, 0x36a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4) syz_create_resource$binfmt(0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) prlimit64(0x0, 0xa, &(0x7f00000000c0)={0x8, 0x8004}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x44d41, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000001d40)=[{&(0x7f0000000740)=""/244, 0xf4}, {&(0x7f0000000100)=""/151, 0x97}, {&(0x7f0000000900)=""/153, 0x99}, {&(0x7f00000009c0)=""/167, 0xa7}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/21, 0x15}, {&(0x7f0000001ac0)=""/239, 0xef}, {&(0x7f0000001bc0)=""/200, 0xc8}, {&(0x7f0000001cc0)=""/116, 0x74}], 0x9) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) sendmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000480)="6699b459", 0x40000}], 0x2}}], 0x1, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) syz_usb_connect$cdc_ecm(0x0, 0x108, &(0x7f0000000000)=ANY=[], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpriority(0x2, 0x0) 10.602529232s ago: executing program 2 (id=794): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x50, 0x7fff7ffc}]}) r0 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = io_uring_setup(0x33d3, &(0x7f0000000000)={0x0, 0xd496, 0x100, 0x4, 0x29a}) close(r1) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fddbdf25140000000c0007800800020000ea"], 0x20}}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="00164c000000e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="0011080000004b78ad081ce1822d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) 7.560927725s ago: executing program 0 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50186ddfffffdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.387923911s ago: executing program 3 (id=800): r0 = socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xf8f) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x358, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x8000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x7}, 0x2) r3 = fsmount(0xffffffffffffffff, 0x0, 0xc) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1f) r5 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="000700000000040014001a80100005800c000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r8], 0x34}, 0x1, 0x0, 0x0, 0x4000024}, 0x0) syz_pidfd_open(r5, 0x0) setns(r3, 0x4000080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x48, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) 7.350018249s ago: executing program 0 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x8fff, 0x4c881) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000a08774b30000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800100000001c9c67ca0000000000021811000071a7417c6b2535856493452b7fd9", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x6, 0x20000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 7.254711516s ago: executing program 2 (id=802): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x25, 0x301, 0x670bd24, 0x25dfdffb, {0x20}, [@typed={0x10, 0x15e, 0x0, 0x0, @binary="dacf8d9496ad2774895772c0"}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x58) execveat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 6.498327416s ago: executing program 0 (id=803): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x1005, @mcast1, 0x5}, 0x1c) r3 = dup2(r2, r2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x138, r4, 0x2a, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x88a2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4e}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x71d2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xeb}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4643}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x99}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x8881) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) 6.039800059s ago: executing program 2 (id=804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001500)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000004000000000000000040000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) (async) r3 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) getitimer(0x0, &(0x7f0000000000)) (async) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000200)=0x1) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r1, 0x1}, 0xc) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000080)={{0x1, 0x4}, {0x6, 0x1}, 0x5, 0xa, 0x41}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r6 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a) (async) renameat(r6, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001440)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000014c0)={r0, &(0x7f0000000440)="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", &(0x7f0000001480)=@udp6=r7, 0x2}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r3) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r10, r11, 0x1fc, 0x0) r12 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r12, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x2, 0xb}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x0) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) 5.799744098s ago: executing program 2 (id=806): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0xd4, &(0x7f0000000580)={@multicast, @random="0426eae7d53d", @void, {@ipv4={0x800, @udp={{0x1d, 0x4, 0x0, 0x2, 0xc6, 0x64, 0x0, 0x2, 0x11, 0x0, @private=0xa010102, @local, {[@lsrr={0x83, 0x1b, 0xe7, [@empty, @remote, @rand_addr=0x64010102, @multicast1, @remote, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x50, 0x3, 0x7, [{@local, 0xfffffffc}]}, @ssrr={0x89, 0x7, 0xfa, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x10, 0x90, 0x0, 0x6, [0x5, 0xfffffff9, 0x9]}, @noop, @lsrr={0x83, 0xf, 0xe2, [@loopback, @rand_addr=0x64010102, @multicast1]}, @ssrr={0x89, 0xf, 0x77, [@remote, @private=0xa010102, @broadcast]}]}}, {0x4e22, 0x4e24, 0x52, 0x0, @opaque="7a95f23304a6c2f85bbd9776911a208b1e65586960f54fdbe154df81755ca0d4fbb264c8995109bea9afa0d5bc4406984c8be8e929191ef99571492e58357daba2ec73cbcf1a538d73d8"}}}}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800f4759fea0002080002400000b55a080041400000000108000140000000010800024000000007080001349b10db06080001400000000808000240ffffdfda0880014000e000000c06"], 0x74}}, 0x4000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000000000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 5.795612336s ago: executing program 0 (id=807): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x5608, 0x3f00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x3000) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sched_setscheduler(r3, 0xa59d7dbe3af3ff24, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setresuid(0x0, 0xee01, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x52a10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8000000000000000}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) r7 = inotify_init1(0x80800) fcntl$setsig(r7, 0xa, 0xe) 5.473569685s ago: executing program 1 (id=808): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000008, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000659000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x200000000000008e, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.476460301s ago: executing program 0 (id=809): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0xb1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x12}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 4.070827711s ago: executing program 4 (id=810): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x4000880) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}], 0x2}) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x9, 0xfffffffffffffffd, 0x7) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864d2, &(0x7f0000000540)={0x1, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b}) 3.639608646s ago: executing program 3 (id=811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x1009, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x2, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8382, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x9, 0x1, 0x1001, 0x6, 0xb, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x40, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x800, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x3, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x8002, 0x9, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x8ad, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0x2fc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x8, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x85, 0x5, 0x80000002, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x1, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x4, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffa}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xfc}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="e4e647c9d9b8e9a2f2ab30da5800", 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delvlan={0x24, 0x70, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000480)={@multicast2, @private, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0xa, 0x4e21, 0xbeb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000200)="3c45169942bc8001e01a2314750b0202d57fce2870befb145c95009875dde23d28d194a9e8ce5c4e297007c05dd6b6715138f48b555a3d42208b8f6fc96c08d06e7b650b39f2ab1715043f5b6ecdfde8a38dd8ef7da27aec287505373b31b09b2b96d0d77b80706a89673272557dd3f64642b1aa91bd7f4cf2eda262380fe7e7254170bff27c55f761f4d5588aa5456b8c799e88872d3771081202d6305367bbb273f4b062882285600b316ac52040297e6be5500c00239031b050eba945b417d85c0599e3c4c1f5b5bc7d4ae5984b22bc4aa0f11871a8df", 0xd8}, {&(0x7f0000000300)="b36ff9c912f49f3bf917833f0f7d0d657dd33f4b76ea6a9ffcf0275b99578322e08271dffd4dfda3ab9cd88a80c10cf77443df65409009b5beed6334c9cd58c47d53a4ba8cd9dbbc63161a02bd759d6e8f02ec08d7ed3ad70ec65f0181775c3632160f3f81dcdb6186fa60baaebeac60903a356d03b3492b8c36540b981e4ae2bb9628683a88afe60aa439dd3c16b03f", 0x90}, {&(0x7f00000003c0)="03ddae19ba82fa241b3ec114407856435bab48e4f7745425563234e26cd8df1bc26e145ff70f7547c453934450896ff5ff41dad600ae17cd0bf756ab6744d452b4e4a82562fd5d7ef545c2ea39b09acd097c0ad1ba7238b9ee7fb7092cbf1dc174809429b651987b8d6b512ed7", 0x6d}], 0x3, &(0x7f0000000500)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0x6, 0xf, '\x00', [@jumbo, @calipso={0x7, 0x40, {0x1, 0xe, 0x8, 0x6, [0x10, 0x3, 0x9, 0x1, 0x0, 0xa1, 0x6]}}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @generic={0x5, 0x14, "6aed64492a0b4a1bbd4ebc43472ead53c288fbb7"}, @hao={0xc9, 0x10, @remote}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8b21}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r4}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r5}}}, @hopopts={{0x160, 0x29, 0x36, {0x8, 0x28, '\x00', [@generic={0x5, 0x95, "6543c1c2b48e2f76e33b733ac8b71b220c26ad62b658091aa60c7245bfe312c4f95f808838e6870bfc815d4e6089b61034519ccdcec5b8bc1bc1b3efccd7ee06499cc262b27d41d7cc0ade0eb1bf4275d0ae41aeae63b0161115f0d87db8d564589925ab460dff35812fc95ae634e69e993718e9a4380fd92725902ecc46a9f5f21d83477203a0ae18d4e8ceb14fe497ab9d93ea3c"}, @calipso={0x7, 0x30, {0x2, 0xa, 0xfd, 0x1ff, [0x8, 0x10, 0x3, 0x8000, 0x800]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @generic={0x8, 0x5b, "ae5ff52312d8c81ea41ff874edc9731b7e1f6d04f416143266ef1ee33a26c8e09b9944a83c806cc544ac118e7109965b68aadc7eabbfb344424d9ad1d7e80a76736ef6627e6354f08cab8ebddb155c7c1edc582a95d784b345123f"}, @ra={0x5, 0x2, 0xcca8}]}}}, @hoplimit={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1c82c91}}], 0x2a8}, 0x400c5) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) shutdown(r0, 0x1) 3.390777082s ago: executing program 0 (id=812): r0 = syz_open_dev$video4linux(&(0x7f0000000300), 0x10000, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) dup3(r3, r2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) unshare(0x26020400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r6 = dup(r5) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000004c0)) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000340)={0x7, 0x50007, "5d61b2ba6730005da1b54ae1798da4c41eda5873733f0b32", {0xc528, 0x7}, 0x3}) 2.176445762s ago: executing program 3 (id=813): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r2, 0xffffffff) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120120007516b7108c0d0e008f8e0018030109021b00010000000d0904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383a3b210890e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.973197232s ago: executing program 1 (id=814): syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008024a0000380000000000110500000000000000ffff44140901ffffffff800000000a0101010000000000004e20001090780200000000000000"], 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x20}}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0xd56, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x4000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298, 0x1, 0x0, 0x0, 0xfffffffe, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x401, 0xffffffc0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x81, 0x8000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x1fc, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x180000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x8, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x105, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0xf, 0x0, 0xc, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xff, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x3, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x401, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f50a0102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0xc8080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000280)={0x0, 0xa883, 0x1}) syz_fuse_handle_req(r1, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x1801, {0x40, 0x4}, 0x88, 0xee00, r4, 0x6c, 0x401, 0x1000, 0x0, 0x8, 0x4a35, 0x8001, 0x4, 0x2, 0x1000, 0x6, 0x9, 0x3, 0xf, 0x5}}, 0xa0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$alg(0x26, 0x5, 0x0) 1.740435659s ago: executing program 4 (id=815): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x17, 0x10, 0x0, "53bb"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 1.700972578s ago: executing program 4 (id=816): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc014) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0x8, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0xffffffff, 0x3, 0x22}, 0x7}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0xffffffff, 0x3, 0x22}, 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, 0x1000f) recvmmsg(r3, &(0x7f0000001c80), 0x2, 0x10062, &(0x7f0000001d00)={0x77359400}) (async) recvmmsg(r3, &(0x7f0000001c80), 0x2, 0x10062, &(0x7f0000001d00)={0x77359400}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @multicast2}}, 0xff, 0x3}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @multicast2}}, 0xff, 0x3}, 0x90) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000000)={0x80002000}) sendto$inet6(r6, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) 1.341091414s ago: executing program 4 (id=817): syz_open_dev$sg(&(0x7f00000060c0), 0xd, 0x472001) r0 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0xc, 0x4, @tid=r0}, &(0x7f0000000180)=0x0) syz_emit_vhci(&(0x7f00000036c0)=ANY=[@ANYBLOB="02c90010000c0005001704080007000d55"], 0x15) dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) 1.118805851s ago: executing program 4 (id=818): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20084084) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) cachestat(r3, &(0x7f0000000040)={0x81, 0x1f}, &(0x7f000009de80), 0x0) 1.115726072s ago: executing program 2 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x5608, 0x3f00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x3000) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sched_setscheduler(r3, 0xa59d7dbe3af3ff24, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setresuid(0x0, 0xee01, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x52a10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8000000000000000}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) r7 = inotify_init1(0x80800) fcntl$setsig(r7, 0xa, 0xe) 0s ago: executing program 4 (id=820): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000240)) r1 = io_uring_setup(0x21de, &(0x7f00000003c0)={0x0, 0x1fffff, 0x8, 0x0, 0xd5}) r2 = io_uring_setup(0x12ce, &(0x7f00000005c0)={0x0, 0x2883, 0x8, 0x2, 0x141, 0x0, r1}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f00000004c0)={0x2, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f0000000680)=""/81, 0x51}, {&(0x7f0000000700)=""/1, 0x1}, {&(0x7f0000000740)=""/74, 0x4a}, {&(0x7f0000000a40)=""/255, 0xff}, {&(0x7f0000000b40)=""/99, 0x63}, {&(0x7f0000000bc0)=""/103, 0x67}, {&(0x7f0000000cc0)=""/209, 0xd1}, {&(0x7f0000000dc0)=""/217, 0xd9}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000f80)=""/41, 0x29}], &(0x7f0000000340)=[0x8, 0x2, 0x4, 0x1, 0x9, 0xba1c, 0xfaf, 0x200000000000007], 0xc}, 0x20) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)=[0x8000]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/custom0\x00', 0x802, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x7fd, &(0x7f0000000300)) iopl(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8000002) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000003, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setuid(0xee01) keyctl$invalidate(0x15, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000040)={'veth1_to_hsr\x00'}) kernel console output (not intermixed with test programs): 365): pid=6682 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.209" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 141.703551][ T5701] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 141.719642][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.744391][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.757446][ T5616] usb 2-1: string descriptor 0 read error: -71 [ 141.845122][ T6708] random: crng reseeded on system resumption [ 141.969900][ T5616] ir_toy 2-1:8.177: required endpoints not found [ 142.143458][ T6708] Restarting kernel threads ... [ 142.162640][ T5616] usb 2-1: USB disconnect, device number 5 [ 142.191049][ T6708] Done restarting kernel threads. [ 142.424318][ T30] audit: type=1400 audit(1777917846.238:366): avc: denied { shutdown } for pid=6714 comm="syz.2.218" lport=35589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.807451][ T6718] capability: warning: `syz.4.219' uses deprecated v2 capabilities in a way that may be insecure [ 142.969148][ T6728] loop1: detected capacity change from 0 to 16384 [ 143.448492][ T30] audit: type=1400 audit(1777917846.898:367): avc: denied { setopt } for pid=6729 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.621243][ T5722] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 143.831496][ T5722] usb 5-1: Using ep0 maxpacket: 32 [ 143.848744][ T5722] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 143.868085][ T5722] usb 5-1: config 0 has no interface number 0 [ 143.870434][ T5714] usb 1-1: USB disconnect, device number 5 [ 143.885777][ T5722] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 143.924495][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.953793][ T5714] usblp0: removed [ 143.958805][ T5722] usb 5-1: Product: syz [ 143.998349][ T5722] usb 5-1: Manufacturer: syz [ 144.028784][ T6743] 9p: Bad value for 'rfdno' [ 144.041237][ T5722] usb 5-1: SerialNumber: syz [ 144.080557][ T5722] usb 5-1: config 0 descriptor?? [ 144.085353][ T5722] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 144.194167][ T30] audit: type=1400 audit(1777917847.978:368): avc: denied { bind } for pid=6744 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.240461][ T6750] netlink: 'syz.1.227': attribute type 7 has an invalid length. [ 144.299110][ T6750] Bluetooth: MGMT ver 1.23 [ 144.304584][ T30] audit: type=1400 audit(1777917848.108:369): avc: denied { write } for pid=6749 comm="syz.1.227" path="socket:[11891]" dev="sockfs" ino=11891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.389155][ T5722] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 144.389599][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 144.403630][ T5722] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 144.409071][ T30] audit: type=1400 audit(1777917848.168:370): avc: denied { write } for pid=6749 comm="syz.1.227" name="file0" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.439936][ T30] audit: type=1400 audit(1777917848.168:371): avc: denied { open } for pid=6749 comm="syz.1.227" path="/48/file0" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.451137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 144.554082][ T6753] random: crng reseeded on system resumption [ 144.647943][ T5714] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 144.655551][ T6753] Restarting kernel threads ... [ 144.655961][ T6753] Done restarting kernel threads. [ 144.800683][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 144.874620][ T30] audit: type=1400 audit(1777917848.688:372): avc: denied { setopt } for pid=6749 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.982807][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 145.019967][ T5714] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 145.052433][ T5714] usb 1-1: config 0 has no interface number 0 [ 145.074147][ T5714] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 155, changing to 11 [ 145.120983][ T5714] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 2034, setting to 1024 [ 145.274718][ T5714] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 145.284179][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.377371][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 145.781973][ T5714] usb 1-1: Product: syz [ 145.791559][ T5714] usb 1-1: Manufacturer: syz [ 145.801332][ T5714] usb 1-1: SerialNumber: syz [ 146.204738][ T5714] usb 1-1: config 0 descriptor?? [ 146.285709][ T6746] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.513436][ T5714] radio-si470x 1-1:0.35: this is not a si470x device. [ 146.526593][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 146.531755][ T24] usb 5-1: USB disconnect, device number 9 [ 146.618901][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 146.989383][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 147.028597][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 147.182123][ T24] quatech2 5-1:0.51: device disconnected [ 147.366788][ T30] audit: type=1400 audit(1777917851.168:373): avc: denied { bind } for pid=6764 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.650374][ T5714] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 147.701224][ T30] audit: type=1400 audit(1777917851.168:374): avc: denied { name_bind } for pid=6764 comm="syz.3.232" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 147.759613][ T30] audit: type=1400 audit(1777917851.178:375): avc: denied { node_bind } for pid=6764 comm="syz.3.232" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 148.392903][ T6779] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.235'. [ 148.980479][ T5701] usb 1-1: USB disconnect, device number 6 [ 149.106968][ T6788] random: crng reseeded on system resumption [ 149.255292][ T6788] Restarting kernel threads ... [ 149.263737][ T6788] Done restarting kernel threads. [ 149.703902][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 149.807322][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 149.892506][ T6804] random: crng reseeded on system resumption [ 149.975521][ T6804] Restarting kernel threads ... [ 149.983792][ T6804] Done restarting kernel threads. [ 150.023967][ T6804] binder: 6801:6804 ioctl c0306201 0 returned -14 [ 150.537246][ T5722] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.628270][ T5722] usb 1-1: Using ep0 maxpacket: 32 [ 151.646147][ T5722] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.662066][ T5722] usb 1-1: config 0 has no interface number 0 [ 151.678420][ T5722] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid maxpacket 13594, setting to 1024 [ 151.690069][ T5722] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 151.734926][ T5722] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.796889][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.095866][ T5722] usb 1-1: Product: syz [ 152.108319][ T5722] usb 1-1: Manufacturer: syz [ 152.130062][ T5722] usb 1-1: SerialNumber: syz [ 152.153718][ T5722] usb 1-1: config 0 descriptor?? [ 152.177997][ T6794] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.200829][ T5722] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 152.874797][ T6832] syzkaller0: entered promiscuous mode [ 152.880565][ T6832] syzkaller0: entered allmulticast mode [ 152.892533][ T5722] usb 1-1: qt2_attach - failed to power on unit: -71 [ 152.917715][ T5722] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 152.962360][ T5722] usb 1-1: USB disconnect, device number 7 [ 153.203906][ T6848] random: crng reseeded on system resumption [ 156.222548][ T30] audit: type=1400 audit(1777917860.028:376): avc: denied { bind } for pid=6886 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.321185][ T30] audit: type=1326 audit(1777917860.028:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.265" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d9cdd9 code=0x7ffc0000 [ 156.396430][ T30] audit: type=1326 audit(1777917860.028:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.265" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d9cdd9 code=0x7ffc0000 [ 156.425819][ T30] audit: type=1326 audit(1777917860.028:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.265" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d9cdd9 code=0x7ffc0000 [ 156.454643][ T30] audit: type=1326 audit(1777917860.038:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.265" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d9cdd9 code=0x7ffc0000 [ 156.574531][ T30] audit: type=1326 audit(1777917860.038:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.265" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe145d9cdd9 code=0x7ffc0000 [ 156.610098][ T30] audit: type=1326 audit(1777917860.038:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.265" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d9cdd9 code=0x7ffc0000 [ 156.684784][ T30] audit: type=1326 audit(1777917860.038:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.265" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d9cdd9 code=0x7ffc0000 [ 156.758841][ T30] audit: type=1326 audit(1777917860.038:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.265" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d9cdd9 code=0x7ffc0000 [ 156.793376][ T30] audit: type=1326 audit(1777917860.038:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.2.265" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe145d9cdd9 code=0x7ffc0000 [ 157.459297][ T6905] random: crng reseeded on system resumption [ 157.507069][ T6905] Restarting kernel threads ... [ 157.513045][ T6905] Done restarting kernel threads. [ 158.553786][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 159.363483][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.801463][ T24] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 159.817158][ T24] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 159.859437][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.866314][ T6929] random: crng reseeded on system resumption [ 159.868942][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.882780][ T24] usb 5-1: Product: syz [ 160.021958][ T24] usb 5-1: Manufacturer: syz [ 160.023823][ T6929] Restarting kernel threads ... [ 160.032872][ T6929] Done restarting kernel threads. [ 160.071204][ T6929] netlink: 108 bytes leftover after parsing attributes in process `syz.1.276'. [ 160.095187][ T6929] binder: 6925:6929 ioctl c0306201 0 returned -14 [ 160.224246][ T6931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.349348][ T804] usb 5-1: USB disconnect, device number 10 [ 160.461725][ T5722] hid_parser_main: 51 callbacks suppressed [ 160.461745][ T5722] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 160.515429][ T5722] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.787319][ T6949] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 161.168450][ T6940] netlink: 220 bytes leftover after parsing attributes in process `syz.2.282'. [ 161.177464][ T6940] tc_dump_action: action bad kind [ 161.190911][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 161.642675][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 161.642686][ T30] audit: type=1400 audit(1777917865.458:473): avc: denied { mount } for pid=6960 comm="syz.2.285" name="/" dev="hugetlbfs" ino=13041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 161.734279][ T30] audit: type=1400 audit(1777917865.528:474): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 162.773998][ T30] audit: type=1400 audit(1777917866.588:475): avc: denied { create } for pid=6969 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 163.253602][ T6980] random: crng reseeded on system resumption [ 163.306388][ T6980] Restarting kernel threads ... [ 163.312278][ T6980] Done restarting kernel threads. [ 163.343294][ T6980] netlink: 108 bytes leftover after parsing attributes in process `syz.2.289'. [ 163.357126][ T6980] binder: 6975:6980 ioctl c0306201 0 returned -14 [ 163.624643][ T30] audit: type=1400 audit(1777917867.418:476): avc: denied { write } for pid=6974 comm="syz.4.288" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 163.707029][ T30] audit: type=1400 audit(1777917867.508:477): avc: denied { ioctl } for pid=6974 comm="syz.4.288" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 164.183272][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.292'. [ 165.572157][ T5722] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 165.614515][ T5722] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 165.677922][ T30] audit: type=1400 audit(1777917869.488:478): avc: denied { setopt } for pid=7007 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.881596][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 166.000894][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 166.017167][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 166.262792][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 166.345948][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 166.442052][ T7006] netlink: 220 bytes leftover after parsing attributes in process `syz.2.295'. [ 166.451033][ T7006] tc_dump_action: action bad kind [ 166.459958][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 166.811904][ T30] audit: type=1400 audit(1777917870.618:479): avc: denied { ioctl } for pid=7007 comm="syz.4.296" path="socket:[13150]" dev="sockfs" ino=13150 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.105227][ T7033] random: crng reseeded on system resumption [ 168.162295][ T7033] Restarting kernel threads ... [ 168.168385][ T7033] Done restarting kernel threads. [ 168.188516][ T7033] netlink: 108 bytes leftover after parsing attributes in process `syz.2.301'. [ 168.206856][ T7033] binder: 7031:7033 ioctl c0306201 0 returned -14 [ 168.266809][ T30] audit: type=1400 audit(1777917872.018:480): avc: denied { write } for pid=7009 comm="syz.0.297" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 169.461210][ T804] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 169.616446][ T7042] syzkaller0: entered promiscuous mode [ 169.641402][ T804] usb 1-1: device descriptor read/64, error -71 [ 169.682676][ T7042] syzkaller0: entered allmulticast mode [ 169.996173][ T804] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 170.251226][ T804] usb 1-1: device descriptor read/64, error -71 [ 170.394267][ T804] usb usb1-port1: attempt power cycle [ 170.804900][ T7059] autofs: Unknown parameter '­5$Šqžôï5¸>.7`Úæ5sÙe‚Š}°H©ªRÉVu’ºOÍPðRt²žAå.¶–«°}èqd\ª30#'Bœ)’µaÞ' [ 170.911395][ T804] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 170.962011][ T804] usb 1-1: device descriptor read/8, error -71 [ 171.251832][ T804] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 171.300984][ T30] audit: type=1400 audit(1777917875.108:481): avc: denied { write } for pid=7062 comm="syz.1.309" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 171.335770][ T804] usb 1-1: device descriptor read/8, error -71 [ 171.471427][ T804] usb usb1-port1: unable to enumerate USB device [ 171.780234][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 172.059862][ T7063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.528305][ T7078] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 172.561192][ T804] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 172.741182][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 172.763019][ T804] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 172.793118][ T804] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 172.838517][ T804] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 172.868105][ T804] usb 2-1: config 127 has no interface number 0 [ 172.884011][ T804] usb 2-1: config 127 interface 171 has no altsetting 0 [ 172.905275][ T804] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 172.979984][ T7081] random: crng reseeded on system resumption [ 173.031283][ T7081] Restarting kernel threads ... [ 173.037172][ T7081] Done restarting kernel threads. [ 173.056452][ T7081] netlink: 108 bytes leftover after parsing attributes in process `syz.2.312'. [ 173.074815][ T7081] binder: 7079:7081 ioctl c0306201 0 returned -14 [ 173.235616][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.270326][ T804] usb 2-1: Product: syz [ 173.276401][ T804] usb 2-1: Manufacturer: syz [ 173.289703][ T804] usb 2-1: SerialNumber: syz [ 173.556129][ T30] audit: type=1400 audit(1777917877.368:482): avc: denied { getopt } for pid=7075 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 173.671931][ T804] usb 2-1: USB disconnect, device number 6 [ 173.681186][ T5722] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.704190][ T30] audit: type=1400 audit(1777917877.518:483): avc: denied { read } for pid=7082 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.774070][ T30] audit: type=1400 audit(1777917877.568:484): avc: denied { write } for pid=7082 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.835048][ T30] audit: type=1400 audit(1777917877.648:485): avc: denied { set_context_mgr } for pid=7082 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 173.889040][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.900312][ T7093] binder: 7082:7093 ioctl c0306201 200000000140 returned -11 [ 173.918586][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.929398][ T7090] serio: Serial port ttyS3 [ 173.935649][ T30] audit: type=1400 audit(1777917877.708:486): avc: denied { write } for pid=7082 comm="syz.3.313" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.951221][ T5722] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 174.010350][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.035931][ T30] audit: type=1400 audit(1777917877.778:487): avc: denied { mount } for pid=7077 comm="syz.0.311" name="/" dev="rpc_pipefs" ino=13583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 174.124644][ T5722] usb 3-1: config 0 descriptor?? [ 174.256036][ T30] audit: type=1400 audit(1777917878.068:488): avc: denied { create } for pid=7096 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 174.375284][ T30] audit: type=1400 audit(1777917878.178:489): avc: denied { watch } for pid=7096 comm="syz.1.316" path="/65" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 174.565630][ T30] audit: type=1400 audit(1777917878.178:490): avc: denied { watch_sb } for pid=7096 comm="syz.1.316" path="/65" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 174.848985][ T30] audit: type=1400 audit(1777917878.288:491): avc: denied { write } for pid=7084 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.955713][ T7108] block nbd0: server does not support multiple connections per device. [ 174.976534][ T7108] block nbd0: shutting down sockets [ 176.868134][ T5789] IPVS: starting estimator thread 0... [ 176.892962][ T7116] IPVS: sh: FWM 3 0x00000003 - no destination available [ 177.001305][ T7122] IPVS: using max 40 ests per chain, 96000 per kthread [ 177.011331][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 177.681643][ T7144] syzkaller0: entered promiscuous mode [ 177.692013][ T7144] syzkaller0: entered allmulticast mode [ 177.849886][ T5722] usbhid 3-1:0.0: can't add hid device: -71 [ 177.872131][ T5722] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 177.935712][ T5722] usb 3-1: USB disconnect, device number 5 [ 178.410998][ T7161] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 178.659497][ T5623] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 178.874846][ T7172] Bluetooth: MGMT ver 1.23 [ 179.185240][ T7179] netlink: 'syz.1.330': attribute type 10 has an invalid length. [ 179.194020][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.203050][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.215420][ T7179] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.222588][ T7179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.230016][ T7179] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.237173][ T7179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.247649][ T7179] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 181.695719][ T7199] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.334'. [ 181.735540][ T7198] process 'syz.2.334' launched './file0' with NULL argv: empty string added [ 181.816205][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 181.816218][ T30] audit: type=1400 audit(1777917885.628:498): avc: denied { execute_no_trans } for pid=7195 comm="syz.2.334" path="/66/file0" dev="tmpfs" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 181.977990][ T30] audit: type=1400 audit(1777917885.788:499): avc: denied { watch watch_reads } for pid=7209 comm="syz.2.338" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 181.978888][ T30] audit: type=1400 audit(1777917885.788:500): avc: denied { bind } for pid=7209 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 181.980291][ T30] audit: type=1400 audit(1777917885.788:501): avc: denied { setopt } for pid=7209 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 181.984182][ T7210] netlink: 'syz.2.338': attribute type 10 has an invalid length. [ 182.029511][ T7210] team0: Failed to send options change via netlink (err -105) [ 182.029530][ T7210] team0: Port device dummy0 added [ 182.042257][ T7210] netlink: 'syz.2.338': attribute type 10 has an invalid length. [ 182.042742][ T7210] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.050484][ T7210] team0: Failed to send options change via netlink (err -105) [ 182.050583][ T7210] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.050746][ T7210] team0: Port device dummy0 removed [ 182.056174][ T7210] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.429750][ T7214] netlink: 'syz.2.339': attribute type 1 has an invalid length. [ 182.578022][ T7214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.579311][ T7216] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 182.805623][ T5789] IPVS: starting estimator thread 0... [ 182.906600][ T7223] IPVS: using max 41 ests per chain, 98400 per kthread [ 184.671255][ T30] audit: type=1400 audit(1777917888.478:502): avc: denied { bind } for pid=7226 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.119648][ T30] audit: type=1326 audit(1777917888.718:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.1.344" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f424199cdd9 code=0x0 [ 185.119698][ T30] audit: type=1400 audit(1777917888.768:504): avc: denied { read write } for pid=7237 comm="syz.1.344" dev="sockfs" ino=13879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 185.678973][ T4929] Bluetooth: hci0: command 0x0406 tx timeout [ 185.679754][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 185.691072][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 185.692929][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 185.703942][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 185.916655][ T7242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7242 comm=syz.1.346 [ 186.062693][ T30] audit: type=1400 audit(1777917889.878:505): avc: denied { mounton } for pid=7244 comm="syz.2.345" path="/71/file0" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 186.184428][ T7246] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 186.265176][ T7247] vlan2: entered allmulticast mode [ 186.273170][ T7247] bond1: entered allmulticast mode [ 186.285988][ T7247] gretap1: entered allmulticast mode [ 186.911479][ T7252] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.348'. [ 187.631564][ T7258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.351'. [ 187.641473][ T7258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.351'. [ 187.913380][ T30] audit: type=1400 audit(1777917891.578:506): avc: denied { read write } for pid=7257 comm="syz.3.351" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.023636][ T30] audit: type=1400 audit(1777917891.578:507): avc: denied { open } for pid=7257 comm="syz.3.351" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.287554][ T30] audit: type=1400 audit(1777917891.588:508): avc: denied { ioctl } for pid=7257 comm="syz.3.351" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.717962][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.724449][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.757404][ T7270] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7270 comm=syz.3.353 [ 188.812216][ T30] audit: type=1400 audit(1777917892.608:509): avc: denied { call } for pid=7271 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 189.001515][ T30] audit: type=1400 audit(1777917892.808:510): avc: denied { create } for pid=7274 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.251200][ T30] audit: type=1400 audit(1777917892.838:511): avc: denied { write } for pid=7274 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.880183][ T30] audit: type=1400 audit(1777917893.688:512): avc: denied { append } for pid=7289 comm="syz.1.357" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 189.936745][ T7290] syzkaller0: entered promiscuous mode [ 189.976066][ T7290] syzkaller0: entered allmulticast mode [ 190.094260][ T30] audit: type=1804 audit(1777917893.908:513): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.359" name="/newroot/75/file0" dev="tmpfs" ino=411 res=1 errno=0 [ 190.841471][ T1217] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 191.022701][ T1217] usb 5-1: Using ep0 maxpacket: 8 [ 191.051882][ T1217] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 191.097687][ T1217] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 191.183490][ T1217] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 191.194081][ T30] audit: type=1400 audit(1777917894.998:514): avc: denied { setattr } for pid=7327 comm="syz.3.365" name="NETLINK" dev="sockfs" ino=14001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.279208][ T1217] usb 5-1: config 127 has no interface number 0 [ 191.303231][ T1217] usb 5-1: config 127 interface 171 has no altsetting 0 [ 191.385956][ T1217] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 191.531149][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.613668][ T1217] usb 5-1: Product: syz [ 191.651658][ T30] audit: type=1400 audit(1777917895.408:515): avc: denied { read } for pid=7330 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.675803][ T1217] usb 5-1: Manufacturer: syz [ 191.731160][ T1217] usb 5-1: SerialNumber: syz [ 193.929488][ T1217] usb 5-1: USB disconnect, device number 11 [ 194.111415][ T5789] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 194.303368][ T5789] usb 4-1: Using ep0 maxpacket: 16 [ 194.338775][ T5789] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 194.543637][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.044181][ T5789] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 195.053498][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.062217][ T5789] usb 4-1: Product: syz [ 195.066622][ T5789] usb 4-1: Manufacturer: syz [ 195.164103][ T5789] usb 4-1: SerialNumber: syz [ 195.570061][ T5789] usb 4-1: config 0 descriptor?? [ 195.882094][ T5789] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 195.926438][ T5789] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 196.849181][ T5789] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 196.888785][ T5789] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 196.937913][ T5789] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 197.070602][ T5789] em28xx 4-1:0.0: No AC97 audio processor [ 197.217098][ T7385] random: crng reseeded on system resumption [ 197.431332][ T5714] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 197.460615][ T7384] Restarting kernel threads ... [ 197.461543][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 197.465917][ T7384] Done restarting kernel threads. [ 197.476360][ T7385] binder: 7382:7385 ioctl c0306201 0 returned -14 [ 197.509885][ T5789] usb 4-1: USB disconnect, device number 6 [ 197.545461][ T5789] em28xx 4-1:0.0: Disconnecting em28xx [ 197.644184][ T5789] em28xx 4-1:0.0: Freeing device [ 197.672065][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 197.781237][ T5701] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 197.848499][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.872945][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.890534][ T5714] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 197.901586][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.920464][ T5714] usb 5-1: config 0 descriptor?? [ 197.952902][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.988282][ T5701] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.098052][ T5701] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 198.111296][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.112996][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.129095][ T5701] usb 3-1: Product: syz [ 198.135822][ T5701] usb 3-1: Manufacturer: syz [ 198.140489][ T5701] usb 3-1: SerialNumber: syz [ 198.149733][ T5701] usb 3-1: config 0 descriptor?? [ 198.158834][ T5701] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 198.177852][ T5701] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.188119][ T5701] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 198.197177][ T5701] usb 3-1: media controller created [ 198.211887][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.255536][ T5701] DVB: Unable to find symbol tda10046_attach() [ 198.261834][ T5701] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 198.270429][ T5701] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 198.321235][ T5789] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 198.331677][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 198.339516][ T5714] kye 0003:0458:5014.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 198.352996][ T24] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 198.361595][ T24] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 198.363871][ T5701] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 198.372870][ T5714] kye 0003:0458:5014.0007: unknown main item tag 0x0 [ 198.397935][ T24] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 198.411204][ T5714] kye 0003:0458:5014.0007: unknown main item tag 0x0 [ 198.419632][ T24] usb 2-1: config 127 has no interface number 0 [ 198.430752][ T5714] kye 0003:0458:5014.0007: unknown main item tag 0x0 [ 198.437591][ T24] usb 2-1: config 127 interface 171 has no altsetting 0 [ 198.451244][ T5714] kye 0003:0458:5014.0007: unknown main item tag 0x0 [ 198.457219][ T5701] usb 3-1: USB disconnect, device number 6 [ 198.458249][ T5714] kye 0003:0458:5014.0007: unknown main item tag 0x0 [ 198.482898][ T24] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 198.493106][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.505776][ T24] usb 2-1: Product: syz [ 198.510063][ T5714] kye 0003:0458:5014.0007: unknown main item tag 0x0 [ 198.519044][ T5789] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 198.527634][ T5789] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 198.535855][ T24] usb 2-1: Manufacturer: syz [ 198.552912][ T5714] kye 0003:0458:5014.0007: unknown main item tag 0x0 [ 198.562454][ T24] usb 2-1: SerialNumber: syz [ 198.568781][ T5789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 198.581151][ T5714] kye 0003:0458:5014.0007: unknown main item tag 0x0 [ 198.600604][ T5789] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 198.617265][ T5714] kye 0003:0458:5014.0007: unknown main item tag 0x0 [ 198.625388][ T5714] kye 0003:0458:5014.0007: unknown main item tag 0x0 [ 198.632422][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 198.645815][ T5789] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 198.646769][ T5714] kye 0003:0458:5014.0007: hidraw0: USB HID v0.08 Device [HID 0458:5014] on usb-dummy_hcd.4-1/input0 [ 198.671386][ T5714] kye 0003:0458:5014.0007: tablet-enabling feature report not found [ 198.679760][ T5714] kye 0003:0458:5014.0007: tablet enabling failed [ 198.693091][ T5789] usb 4-1: string descriptor 0 read error: -22 [ 198.699575][ T5789] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 198.720687][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.744420][ T5714] usb 5-1: USB disconnect, device number 12 [ 198.763600][ T5789] usb 4-1: config 0 descriptor?? [ 198.776195][ T7393] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 198.788534][ T7395] fido_id[7395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 198.826277][ T5789] hub 4-1:0.0: bad descriptor, ignoring hub [ 198.846654][ T5789] hub 4-1:0.0: probe with driver hub failed with error -5 [ 198.882805][ T5789] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 198.902004][ C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 199.052647][ C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 199.093743][ T30] audit: type=1400 audit(1777917902.908:516): avc: denied { read } for pid=7392 comm="syz.3.382" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 199.141283][ T30] audit: type=1400 audit(1777917902.908:517): avc: denied { open } for pid=7392 comm="syz.3.382" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 199.141600][ T7400] syzkaller0: entered promiscuous mode [ 199.253751][ T7400] syzkaller0: entered allmulticast mode [ 199.769951][ T7406] SET target dimension over the limit! [ 199.794941][ T5701] usb 4-1: USB disconnect, device number 7 [ 201.555681][ T24] usb 2-1: USB disconnect, device number 7 [ 201.601453][ T5625] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 202.012725][ T7430] tipc: Failed to remove unknown binding: 66,0,0/0:2080937066/2080937067 [ 202.026493][ T7430] tipc: Failed to remove unknown binding: 66,0,0/0:2080937066/2080937067 [ 202.281281][ T30] audit: type=1400 audit(1777917905.798:518): avc: denied { mounton } for pid=7423 comm="syz.1.389" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 202.975640][ T7443] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.392'. [ 203.673755][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.747089][ T7446] random: crng reseeded on system resumption [ 203.797748][ T7446] Restarting kernel threads ... [ 203.803911][ T7446] Done restarting kernel threads. [ 203.825374][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 203.857075][ T7446] binder: 7440:7446 ioctl c0306201 0 returned -14 [ 204.041761][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.078261][ T5701] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 204.291223][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 204.717491][ T30] audit: type=1400 audit(1777917908.158:519): avc: denied { module_request } for pid=7447 comm="syz.3.394" kmod="netdev-syztnl2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 204.755601][ T5701] usb 5-1: unable to get BOS descriptor or descriptor too short [ 204.781390][ T5701] usb 5-1: config 3 has an invalid interface number: 171 but max is 0 [ 204.799850][ T5701] usb 5-1: config 3 has no interface number 0 [ 204.856263][ T5701] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 204.893523][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.916086][ T5701] usb 5-1: Product: syz [ 204.925042][ T5701] usb 5-1: Manufacturer: syz [ 204.939615][ T5701] usb 5-1: SerialNumber: syz [ 205.183666][ T7458] netlink: 'syz.3.396': attribute type 15 has an invalid length. [ 205.245130][ T5701] (null): radio-mr800 - initialization failed [ 205.268583][ T5701] radio-mr800 5-1:3.171: probe with driver radio-mr800 failed with error -22 [ 205.315628][ T5701] usbhid 5-1:3.171: couldn't find an input interrupt endpoint [ 205.357701][ T5701] usb 5-1: USB disconnect, device number 13 [ 206.247825][ T30] audit: type=1400 audit(1777917910.058:520): avc: denied { remount } for pid=7454 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 206.247853][ T7455] hugetlbfs: Bad value 't' for mount option 'nr_inodes' [ 206.247853][ T7455] [ 206.294247][ T1217] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 206.305454][ T30] audit: type=1400 audit(1777917910.098:521): avc: denied { create } for pid=7468 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.346732][ T30] audit: type=1400 audit(1777917910.098:522): avc: denied { connect } for pid=7468 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.425957][ T7456] binder: 7454:7456 ioctl c0306201 2000000001c0 returned -14 [ 206.482087][ T1217] usb 4-1: Using ep0 maxpacket: 16 [ 206.495874][ T1217] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.520002][ T1217] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.552616][ T1217] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.587815][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.600856][ T30] audit: type=1400 audit(1777917910.408:523): avc: denied { setopt } for pid=7476 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 206.635418][ T1217] usb 4-1: Product: syz [ 206.641654][ T1217] usb 4-1: Manufacturer: syz [ 206.646811][ T1217] usb 4-1: SerialNumber: syz [ 206.901311][ T30] audit: type=1400 audit(1777917910.598:524): avc: denied { write } for pid=7476 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 206.903055][ T1217] usb 4-1: 0:2 : does not exist [ 207.202649][ T24] IPVS: starting estimator thread 0... [ 207.227136][ T30] audit: type=1326 audit(1777917911.028:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7479 comm="syz.4.401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e7859cdd9 code=0x0 [ 207.396050][ T7482] IPVS: using max 45 ests per chain, 108000 per kthread [ 207.694324][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 207.704459][ T1217] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 207.757456][ T1217] usb 4-1: USB disconnect, device number 8 [ 207.794845][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.515681][ T7499] random: crng reseeded on system resumption [ 208.553335][ T7499] Restarting kernel threads ... [ 208.559303][ T7499] Done restarting kernel threads. [ 208.577946][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 208.593471][ T7499] binder: 7497:7499 ioctl c0306201 0 returned -14 [ 208.657946][ T30] audit: type=1326 audit(1777917912.468:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.0.407" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99f4b9cdd9 code=0x0 [ 208.784246][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.791669][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.815885][ T7506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 208.924520][ T7506] bridge_slave_1: left allmulticast mode [ 208.932476][ T7506] bridge_slave_1: left promiscuous mode [ 208.940777][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.153089][ T7506] bridge_slave_0: left allmulticast mode [ 209.158905][ T7506] bridge_slave_0: left promiscuous mode [ 209.168932][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.448111][ T7506] bond0: (slave bridge0): Releasing backup interface [ 209.617044][ T7518] netlink: 'syz.3.410': attribute type 10 has an invalid length. [ 209.678070][ T7522] netlink: 'syz.3.410': attribute type 10 has an invalid length. [ 209.753015][ T7525] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 209.793099][ T7527] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 209.823913][ T7518] team0: Port device dummy0 added [ 209.835237][ T7522] team0: Port device dummy0 removed [ 209.878503][ T7522] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 209.972049][ T7525] team0: Port device dummy0 added [ 210.060018][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 210.462302][ T7527] team0: Port device dummy0 removed [ 210.497012][ T7527] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 211.634786][ T30] audit: type=1326 audit(1777917915.448:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.3.418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50b879cdd9 code=0x0 [ 212.074347][ T30] audit: type=1400 audit(1777917915.888:528): avc: denied { read } for pid=7550 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.364911][ T7549] loop1: detected capacity change from 0 to 16384 [ 212.613459][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 213.087789][ T7591] netlink: 27 bytes leftover after parsing attributes in process `syz.0.425'. [ 213.782301][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 214.751362][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 216.172679][ T7623] syzkaller0: entered promiscuous mode [ 216.178603][ T7623] syzkaller0: entered allmulticast mode [ 216.507930][ T5789] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 216.786039][ T5789] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 216.836689][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.859199][ T5789] usb 3-1: Product: syz [ 216.869137][ T5789] usb 3-1: Manufacturer: syz [ 216.881212][ T5789] usb 3-1: SerialNumber: syz [ 216.912527][ T5789] usb 3-1: config 0 descriptor?? [ 217.179199][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 217.538778][ T7647] FAT-fs (nullb0): bogus number of reserved sectors [ 217.545651][ T7647] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 217.595140][ T5789] usb 3-1: USB disconnect, device number 7 [ 217.663160][ T5714] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.710210][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.861314][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 217.870562][ T5714] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 217.900273][ T30] audit: type=1400 audit(1777917921.708:529): avc: denied { setopt } for pid=7650 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 217.923404][ T5714] usb 5-1: can't read configurations, error -22 [ 218.071618][ T5714] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 218.231170][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 218.245856][ T5714] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 218.268877][ T5714] usb 5-1: can't read configurations, error -22 [ 218.285917][ T5714] usb usb5-port1: attempt power cycle [ 218.632285][ T5714] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 218.661650][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 218.669848][ T5714] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 218.678848][ T5714] usb 5-1: can't read configurations, error -22 [ 218.831196][ T5714] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 218.862302][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 218.877576][ T5714] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 218.899580][ T5714] usb 5-1: can't read configurations, error -22 [ 218.917051][ T5714] usb usb5-port1: unable to enumerate USB device [ 219.394039][ T7668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.445'. [ 219.410822][ T7668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.445'. [ 222.169276][ T7705] netlink: 'syz.2.453': attribute type 40 has an invalid length. [ 222.360236][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 222.831676][ T5701] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 222.891536][ T5625] Bluetooth: hci4: unexpected event for opcode 0x0005 [ 223.011763][ T5701] usb 3-1: device descriptor read/64, error -71 [ 223.056975][ T7719] dummy0: Device is already in use. [ 223.385440][ T30] audit: type=1400 audit(1777917927.198:530): avc: denied { mounton } for pid=7718 comm="syz.4.457" path="/102/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 223.411658][ T5701] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 223.721444][ T5701] usb 3-1: device descriptor read/64, error -71 [ 223.768435][ T30] audit: type=1400 audit(1777917927.578:531): avc: denied { write } for pid=7732 comm="syz.1.461" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 223.830206][ T30] audit: type=1400 audit(1777917927.628:532): avc: denied { create } for pid=7732 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 223.856293][ T5701] usb usb3-port1: attempt power cycle [ 223.891615][ T30] audit: type=1400 audit(1777917927.628:533): avc: denied { write } for pid=7732 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 224.407443][ T5701] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 224.415279][ T30] audit: type=1400 audit(1777917928.088:534): avc: denied { mounton } for pid=7741 comm="syz.3.464" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 225.523357][ T5701] usb 3-1: device descriptor read/8, error -71 [ 225.554331][ T30] audit: type=1400 audit(1777917929.298:535): avc: denied { search } for pid=5273 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.664303][ T5625] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 225.681439][ T30] audit: type=1400 audit(1777917929.298:536): avc: denied { search } for pid=5273 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.711529][ T30] audit: type=1400 audit(1777917929.298:537): avc: denied { search } for pid=5273 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.743458][ T30] audit: type=1400 audit(1777917929.298:538): avc: denied { read } for pid=5273 comm="dhcpcd" name="n32" dev="tmpfs" ino=4076 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 226.000926][ T30] audit: type=1400 audit(1777917929.298:539): avc: denied { open } for pid=5273 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=4076 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 226.476315][ T7760] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 227.825132][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.476'. [ 227.919078][ T7786] overlayfs: invalid origin (0000) [ 228.066969][ T5625] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 228.191168][ T5701] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 228.382087][ T5701] usb 2-1: Using ep0 maxpacket: 16 [ 228.422618][ T5701] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 228.460869][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.504544][ T5701] usb 2-1: Product: syz [ 228.519843][ T5701] usb 2-1: Manufacturer: syz [ 228.543923][ T5701] usb 2-1: SerialNumber: syz [ 228.580884][ T5701] usb 2-1: config 0 descriptor?? [ 229.287106][ T5701] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 229.506113][ T7784] infiniband syz2: set active [ 229.530772][ T7784] infiniband syz2: added bond_slave_1 [ 229.595909][ T7784] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 229.633773][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 229.633791][ T30] audit: type=1400 audit(1777917933.438:542): avc: denied { listen } for pid=7818 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.812467][ T7784] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 229.997198][ T7784] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 230.195257][ T7784] RDS/IB: syz2: added [ 230.212298][ T7784] smc: adding ib device syz2 with port count 1 [ 230.218753][ T7784] smc: ib device syz2 port 1 has no pnetid [ 231.039034][ T7841] QAT: Invalid ioctl 1342215170 [ 231.071503][ T7841] autofs: Bad value for 'fd' [ 231.414297][ T5722] usb 2-1: USB disconnect, device number 8 [ 231.611265][ T1217] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 231.640682][ T5625] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 231.676596][ T7851] QAT: failed to copy from user. [ 231.693121][ T30] audit: type=1400 audit(1777917935.508:543): avc: denied { map } for pid=7838 comm="syz.0.487" path="socket:[15748]" dev="sockfs" ino=15748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.778971][ T30] audit: type=1400 audit(1777917935.578:544): avc: denied { read write } for pid=7854 comm="syz.3.491" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 231.826163][ T30] audit: type=1400 audit(1777917935.578:545): avc: denied { open } for pid=7854 comm="syz.3.491" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 231.866134][ T1217] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 231.885250][ T1217] usb 3-1: config 0 has no interface number 0 [ 231.975208][ T1217] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.986978][ T1217] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 232.000311][ T1217] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 232.013287][ T1217] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 232.024559][ T1217] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 232.037392][ T1217] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.062566][ T1217] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 232.081210][ T1217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.115445][ T1217] usb 3-1: config 0 descriptor?? [ 232.141707][ T7850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 232.221210][ T5714] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 232.257075][ T7850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 233.255810][ T1217] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 233.386342][ T5714] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 233.593772][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.615306][ T5714] usb 1-1: Product: syz [ 233.644750][ T5714] usb 1-1: Manufacturer: syz [ 233.658120][ T5714] usb 1-1: SerialNumber: syz [ 233.719383][ T5714] usb 1-1: config 0 descriptor?? [ 233.762678][ T7875] random: crng reseeded on system resumption [ 234.025484][ T1217] usb 3-1: USB disconnect, device number 12 [ 234.039629][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.043693][ T5714] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 234.050639][ T1217] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 234.085973][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.296915][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 234.308388][ T7874] binder: 7873:7874 ioctl c0306201 0 returned -14 [ 234.735931][ T5714] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 234.755215][ T5714] sq905c 1-1:0.0: Reading version command failed [ 234.767206][ T5714] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 234.796055][ T5714] usb 1-1: USB disconnect, device number 12 [ 234.802226][ T7875] Restarting kernel threads ... [ 234.811474][ T7875] Done restarting kernel threads. [ 236.760900][ T7900] tipc: Started in network mode [ 236.765968][ T7900] tipc: Node identity 4, cluster identity 4711 [ 236.773340][ T7900] tipc: Node number set to 4 [ 237.341829][ T7917] overlayfs: invalid origin (0000) [ 237.392085][ T7919] 9p: Bad value for 'wfdno' [ 237.532360][ T7929] tmpfs: Bad value for 'mpol' [ 238.051510][ T4519] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 238.511373][ T4519] usb 2-1: Using ep0 maxpacket: 16 [ 238.534646][ T4519] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 238.624661][ T4519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.633160][ T4519] usb 2-1: Product: syz [ 238.637370][ T4519] usb 2-1: Manufacturer: syz [ 238.644383][ T4519] usb 2-1: SerialNumber: syz [ 238.651334][ T4519] usb 2-1: config 0 descriptor?? [ 239.161260][ T30] audit: type=1400 audit(1777917942.968:546): avc: denied { setattr } for pid=7943 comm="syz.0.510" name="" dev="pipefs" ino=15861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 239.201727][ T4519] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 239.966807][ T1217] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 240.295665][ T4519] usb 2-1: USB disconnect, device number 9 [ 240.419076][ T1217] usb 1-1: config 5 has an invalid interface number: 11 but max is 0 [ 240.457140][ T1217] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 240.487742][ T1217] usb 1-1: config 5 has no interface number 0 [ 240.495820][ T1217] usb 1-1: config 5 interface 11 altsetting 9 endpoint 0xD has invalid maxpacket 33614, setting to 1024 [ 240.541471][ T1217] usb 1-1: config 5 interface 11 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 240.559150][ T1217] usb 1-1: config 5 interface 11 has no altsetting 0 [ 240.571656][ T1217] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= 3.b9 [ 240.581271][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.598349][ T1217] usb 1-1: Product: è§š [ 240.609991][ T1217] usb 1-1: Manufacturer: ถ噛䗵鄸퀅퀀赬뗘èœîª°éˆ¿æŒ²å®³æ­ ä è¸®ä–¦î¿‘䶗᱉冎턞혽ä»é­¹ì–ƒèµ‚慢滑á á®ãžä¤¨ã¹¥ëš‰ç’­è‡‚笋觤丘á£è¨–郢ç‘êŸ¾é­¹çŸ·é„æ¸·é ‚귪姺﯄嚑몽䇞â¿ë¹˜â‚±è»´èª¥å››å¦¹ã‘žæ§¯æ¹†ì½ìƒ²ç©®ë£³ì¤åš²ê‡®à·ˆç “痃䲗ᥣ [ 240.668537][ T7975] xt_socket: unknown flags 0x4 [ 240.675123][ T1217] usb 1-1: SerialNumber: 蓆 [ 240.737870][ T7977] openvswitch: netlink: Message has 8 unknown bytes. [ 240.981057][ T1217] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 241.011509][ T1217] usb 1-1: no configuration chosen from 1 choice [ 241.666079][ T1217] usb 1-1: USB disconnect, device number 13 [ 242.936816][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 244.464956][ T8018] usb usb8: usbfs: process 8018 (syz.1.526) did not claim interface 0 before use [ 244.933525][ T152] Bluetooth: hci5: Frame reassembly failed (-84) [ 244.996282][ T57] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 245.037463][ T30] audit: type=1400 audit(1777917948.848:547): avc: denied { firmware_load } for pid=8022 comm="syz.0.528" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 245.090774][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.137950][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.456397][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 246.010857][ T8034] netlink: 256 bytes leftover after parsing attributes in process `syz.1.530'. [ 246.036709][ T8034] netlink: 48 bytes leftover after parsing attributes in process `syz.1.530'. [ 246.046032][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 246.057016][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.077940][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.111466][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 246.142177][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.168462][ T9] usb 3-1: config 0 descriptor?? [ 246.594579][ T9] kye 0003:0458:5016.0008: control desc unexpectedly large [ 246.623334][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0008/input/input7 [ 246.802193][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0008/input/input8 [ 246.954193][ T5625] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 246.954244][ T5623] Bluetooth: hci5: command 0x1003 tx timeout [ 247.001929][ T8024] syz.0.528 (8024) used greatest stack depth: 19720 bytes left [ 247.120610][ T9] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 247.193390][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.233742][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.015541][ T9] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 248.093863][ T30] audit: type=1400 audit(1777917951.908:548): avc: denied { write } for pid=8025 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 248.616333][ T30] audit: type=1400 audit(1777917952.418:549): avc: denied { bind } for pid=8058 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 248.708039][ T30] audit: type=1400 audit(1777917952.418:550): avc: denied { write } for pid=8058 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 249.380096][ T5701] usb 3-1: USB disconnect, device number 13 [ 249.655850][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 250.153872][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.160831][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.321605][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 250.367213][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 251.077128][ T8084] fuse: Unknown parameter 'ÿÿ0x0000000000000004' [ 251.911193][ T4519] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 252.082159][ T4519] usb 5-1: Using ep0 maxpacket: 32 [ 252.107401][ T4519] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 252.225405][ T4519] usb 5-1: config 1 interface 0 has no altsetting 0 [ 252.365211][ T4519] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.40 [ 252.417972][ T4519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.762788][ T4519] usb 5-1: Product: syz [ 252.847023][ T4519] usb 5-1: Manufacturer: syz [ 252.851805][ T4519] usb 5-1: SerialNumber: syz [ 252.884712][ T30] audit: type=1400 audit(1777917956.698:551): avc: denied { getopt } for pid=8116 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.908674][ T8117] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 253.074462][ T8109] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.547'. [ 253.589135][ T5625] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 253.589190][ T5625] Bluetooth: hci4: Dropping invalid advertising data [ 253.606686][ T5625] Bluetooth: hci4: unknown advertising packet type: 0x40 [ 253.606741][ T5625] Bluetooth: hci4: Malformed LE Event: 0x02 [ 254.086340][ T30] audit: type=1400 audit(1777917957.898:552): avc: denied { write } for pid=8111 comm="syz.0.548" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 254.153695][ T8088] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 254.154529][ T8124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.206842][ T30] audit: type=1400 audit(1777917957.958:553): avc: denied { ioctl } for pid=8111 comm="syz.0.548" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 254.272977][ T30] audit: type=1400 audit(1777917958.068:554): avc: denied { connect } for pid=8111 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.368158][ T8124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.691129][ T1217] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 255.114089][ T5714] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 255.138310][ T4519] usbhid 5-1:1.0: can't add hid device: -71 [ 255.145129][ T4519] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 255.181278][ T4519] usb 5-1: USB disconnect, device number 18 [ 255.228730][ T1217] usb 3-1: Using ep0 maxpacket: 16 [ 255.272821][ T5714] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.334790][ T1217] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 255.355469][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.370379][ T1217] usb 3-1: config 251 has no interface number 0 [ 255.408906][ T1217] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.438814][ T5714] usb 1-1: config 0 descriptor?? [ 255.464153][ T1217] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.508946][ T1217] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 255.529833][ T5714] usb 1-1: can't set config #0, error -71 [ 255.565078][ T1217] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 255.567659][ T5714] usb 1-1: USB disconnect, device number 14 [ 255.620595][ T1217] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 255.698647][ T1217] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 56 [ 255.743708][ T30] audit: type=1400 audit(1777917959.558:555): avc: denied { kexec_image_load } for pid=8139 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 255.766328][ T1217] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.814139][ T1217] usb 3-1: config 251 interface 202 has no altsetting 0 [ 256.128078][ T30] audit: type=1400 audit(1777917959.808:556): avc: denied { ioctl } for pid=8146 comm="syz.0.557" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 256.160903][ T30] audit: type=1400 audit(1777917959.818:557): avc: denied { create } for pid=8146 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 256.191213][ T30] audit: type=1400 audit(1777917959.818:558): avc: denied { ioctl } for pid=8146 comm="syz.0.557" path="socket:[17535]" dev="sockfs" ino=17535 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 256.216877][ T30] audit: type=1400 audit(1777917959.818:559): avc: denied { accept } for pid=8146 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 256.246703][ T1217] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 256.255885][ T1217] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 256.264937][ T1217] usb 3-1: Product: syz [ 256.277802][ T1217] usb 3-1: SerialNumber: syz [ 256.298171][ T8128] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 256.742107][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 257.537850][ T30] audit: type=1326 audit(1777917961.348:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.2.552" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe145d9cdd9 code=0x0 [ 258.646483][ T8141] wireguard0: entered promiscuous mode [ 258.659686][ T8141] wireguard0: entered allmulticast mode [ 259.382824][ T5616] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 260.430164][ T5616] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 260.468332][ T5616] usb 1-1: config 0 has no interface number 0 [ 260.501982][ T5616] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 260.555718][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.725784][ T5616] usb 1-1: config 0 descriptor?? [ 260.842543][ T8198] loop1: detected capacity change from 0 to 16384 [ 261.039926][ T5616] usb 1-1: string descriptor 0 read error: -71 [ 261.083927][ T5616] cp210x 1-1:0.3: cp210x converter detected [ 261.125917][ T5616] cp210x 1-1:0.3: failed to get vendor val 0x370b size 1: -71 [ 261.159925][ T5616] cp210x 1-1:0.3: querying part number failed [ 261.201298][ T5616] usb 1-1: cp210x converter now attached to ttyUSB0 [ 261.262341][ T5616] usb 1-1: USB disconnect, device number 15 [ 261.339164][ T5616] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 261.376807][ T5616] cp210x 1-1:0.3: device disconnected [ 261.407057][ T1217] cxacru 3-1:251.202: submit of write urb for cm 0x90 failed (-90) [ 261.506907][ T1217] cxacru 3-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 261.594718][ T1217] cxacru 3-1:251.202: probe with driver cxacru failed with error -22 [ 261.736925][ T4519] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 261.949233][ T30] audit: type=1400 audit(1777917965.758:561): avc: denied { ioctl } for pid=8207 comm="syz.0.569" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 262.046217][ T4519] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 262.072148][ T4519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.106235][ T4519] usb 2-1: Product: syz [ 262.125502][ T4519] usb 2-1: Manufacturer: syz [ 262.145112][ T4519] usb 2-1: SerialNumber: syz [ 262.167920][ T4519] usb 2-1: config 0 descriptor?? [ 262.653195][ T4519] usb 2-1: Firmware: major: 229, minor: 0, hardware type: ATUSB (0) [ 262.884798][ T4519] usb 2-1: no permanent extended address found, random address set [ 263.183896][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.365876][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.572590][ T4519] usb 2-1: USB disconnect, device number 10 [ 264.637516][ T8222] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 265.303895][ T8234] usb usb8: usbfs: process 8234 (syz.1.573) did not claim interface 0 before use [ 266.503102][ T4519] usb 3-1: USB disconnect, device number 14 [ 267.369684][ T8250] block device autoloading is deprecated and will be removed. [ 267.744008][ T5625] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 268.088048][ T8263] netlink: 'syz.2.583': attribute type 10 has an invalid length. [ 268.167744][ T8266] netlink: 'syz.2.583': attribute type 10 has an invalid length. [ 268.214981][ T8263] bond0: (slave dummy0): Releasing backup interface [ 268.318260][ T8263] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 268.354106][ T8263] team0: Failed to send options change via netlink (err -105) [ 268.415406][ T8263] team0: Port device dummy0 added [ 268.445982][ T8266] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 268.728622][ T8266] team0: Failed to send options change via netlink (err -105) [ 268.885649][ T8266] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 268.987320][ T8266] team0: Port device dummy0 removed [ 269.048525][ T8266] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 270.510701][ T8292] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.187720][ T8299] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.590'. [ 272.486282][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 272.523295][ T8307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 272.531962][ T8307] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 272.581144][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 272.841967][ T8314] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.594'. [ 273.621628][ T8307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.627805][ T8307] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 273.723015][ T8307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.744691][ T8307] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 273.820407][ T8307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 273.826721][ T8307] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 273.973909][ T8307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.996176][ T8307] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 274.280474][ T8318] netlink: 48 bytes leftover after parsing attributes in process `syz.2.597'. [ 274.364111][ T8321] syzkaller0: entered promiscuous mode [ 274.375341][ T8321] syzkaller0: entered allmulticast mode [ 274.484408][ T5625] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 274.631562][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 274.682773][ T8325] syzkaller1: entered promiscuous mode [ 274.689814][ T30] audit: type=1400 audit(1777917978.498:562): avc: denied { ioctl } for pid=8324 comm="syz.3.599" path="socket:[17795]" dev="sockfs" ino=17795 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.747225][ T8325] syzkaller1: entered allmulticast mode [ 274.791669][ T9] hid_parser_main: 30 callbacks suppressed [ 274.791683][ T9] hid-generic 0009:0007:19400.0009: unknown main item tag 0x0 [ 274.858026][ T30] audit: type=1400 audit(1777917978.668:563): avc: denied { create } for pid=8324 comm="syz.3.599" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 275.027981][ T8332] usb usb8: usbfs: process 8332 (syz.2.600) did not claim interface 0 before use [ 275.136133][ T9] hid-generic 0009:0007:19400.0009: unknown main item tag 0x0 [ 275.151721][ T9] hid-generic 0009:0007:19400.0009: unknown main item tag 0x0 [ 275.161324][ T30] audit: type=1400 audit(1777917978.708:564): avc: denied { read } for pid=8324 comm="syz.3.599" name="file0" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 275.184637][ T9] hid-generic 0009:0007:19400.0009: unknown main item tag 0x0 [ 275.192680][ T9] hid-generic 0009:0007:19400.0009: unknown main item tag 0x0 [ 275.202745][ T9] hid-generic 0009:0007:19400.0009: unknown main item tag 0x0 [ 275.353579][ T9] hid-generic 0009:0007:19400.0009: unknown main item tag 0x0 [ 275.367956][ T9] hid-generic 0009:0007:19400.0009: unknown main item tag 0x0 [ 275.382430][ T9] hid-generic 0009:0007:19400.0009: unknown main item tag 0x0 [ 275.402807][ T9] hid-generic 0009:0007:19400.0009: unknown main item tag 0x0 [ 275.434988][ T9] hid-generic 0009:0007:19400.0009: hidraw0: HID v7fffff.ff Device [syz1] on syz1 [ 275.531985][ T8339] fido_id[8339]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.751473][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 275.851765][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 275.903739][ T8344] usb usb8: usbfs: process 8344 (syz.3.601) did not claim interface 0 before use [ 276.001718][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 276.445861][ T8351] ubi16: attaching mtd0 [ 276.501261][ T8351] ubi16: scanning is finished [ 276.506070][ T8351] ubi16: empty MTD device detected [ 276.750705][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 276.966105][ T30] audit: type=1400 audit(1777917980.778:565): avc: denied { write } for pid=8354 comm="syz.3.604" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 277.126349][ T8351] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 277.529766][ T8358] syzkaller0: entered promiscuous mode [ 277.603013][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 277.850556][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 278.001966][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 278.021982][ T8358] syzkaller0: entered allmulticast mode [ 278.071328][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 278.737859][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 278.766474][ T5625] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 279.127732][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 279.916414][ T8383] random: crng reseeded on system resumption [ 279.998901][ T8383] Restarting kernel threads ... [ 280.004884][ T8383] Done restarting kernel threads. [ 280.067225][ T8383] binder: 8381:8383 ioctl c0306201 0 returned -14 [ 280.230511][ T30] audit: type=1400 audit(1777917984.038:566): avc: denied { map } for pid=8384 comm="syz.0.613" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 280.578660][ T30] audit: type=1400 audit(1777917984.328:567): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 281.081779][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.616'. [ 281.671001][ T8400] loop1: detected capacity change from 0 to 16384 [ 281.779184][ T8407] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 281.831989][ T8407] team0: Port device dummy0 added [ 281.865158][ T8412] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 281.917066][ T8400] netlink: 56 bytes leftover after parsing attributes in process `syz.3.617'. [ 281.942705][ T8412] team0: Port device dummy0 removed [ 281.968851][ T8412] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 282.914146][ T8415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 283.057924][ T8415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.117248][ T8415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 283.165690][ T8415] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 283.214456][ T8415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 283.742584][ T30] audit: type=1400 audit(1777917987.558:568): avc: denied { bind } for pid=8433 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 283.765023][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'. [ 283.821265][ T8421] netlink: set zone limit has 4 unknown bytes [ 284.196536][ T8435] create_pit_timer: 142 callbacks suppressed [ 284.196547][ T8435] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 284.231577][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'. [ 284.312144][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 285.089443][ T4519] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 285.122259][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 285.201417][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 285.208098][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 285.276668][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 285.949936][ T4519] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 285.994145][ T4519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.031136][ T4519] usb 3-1: Product: syz [ 286.049551][ T4519] usb 3-1: Manufacturer: syz [ 286.094398][ T4519] usb 3-1: SerialNumber: syz [ 286.107765][ T4519] usb 3-1: config 0 descriptor?? [ 286.696596][ T4519] usb 3-1: Firmware: major: 229, minor: 0, hardware type: ATUSB (0) [ 286.886376][ T4519] usb 3-1: no permanent extended address found, random address set [ 287.212213][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 287.631283][ T4519] usb 3-1: USB disconnect, device number 15 [ 287.750012][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 288.508425][ T30] audit: type=1400 audit(1777917992.318:569): avc: denied { open } for pid=8495 comm="syz.0.642" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 289.634756][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 290.441271][ T4519] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 290.744713][ T4519] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 291.074566][ T4519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.114613][ T4519] usb 1-1: config 0 descriptor?? [ 291.136780][ T4519] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 291.571980][ T4519] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 291.772986][ T30] audit: type=1400 audit(1777917995.588:570): avc: denied { lock } for pid=8509 comm="syz.0.646" path="socket:[19315]" dev="sockfs" ino=19315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 291.797304][ T4519] gspca_cpia1: usb_control_msg 01, error -71 [ 291.811009][ T4519] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 291.866841][ T4519] usb 1-1: USB disconnect, device number 16 [ 292.091183][ T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 292.264336][ T9] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 292.279593][ T30] audit: type=1400 audit(1777917996.088:571): avc: denied { name_bind } for pid=8529 comm="syz.1.651" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 292.282645][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.361315][ T9] usb 3-1: config 0 has no interface number 0 [ 292.401159][ T30] audit: type=1400 audit(1777917996.128:572): avc: denied { node_bind } for pid=8529 comm="syz.1.651" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 292.426651][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 292.458527][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.493244][ T9] usb 3-1: Product: syz [ 292.516113][ T9] usb 3-1: Manufacturer: syz [ 292.541584][ T9] usb 3-1: SerialNumber: syz [ 292.564718][ T9] usb 3-1: config 0 descriptor?? [ 292.589363][ T9] hub 3-1:0.31: bad descriptor, ignoring hub [ 292.619084][ T9] hub 3-1:0.31: probe with driver hub failed with error -5 [ 292.685701][ T9] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 292.737325][ T9] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized! [ 293.031201][ T9] uvcvideo 3-1:0.31: Failed to create links for entity 32774 [ 293.071145][ T9] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 293.327846][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 293.360169][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 293.482636][ T5701] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 293.891470][ T5701] usb 2-1: config 0 has an invalid interface number: 199 but max is 0 [ 293.911147][ T5701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.998703][ T5701] usb 2-1: config 0 has no interface number 0 [ 294.137015][ T5701] usb 2-1: too many endpoints for config 0 interface 199 altsetting 193: 58, using maximum allowed: 30 [ 294.804354][ T5701] usb 2-1: config 0 interface 199 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 294.896338][ T5701] usb 2-1: config 0 interface 199 has no altsetting 0 [ 294.922488][ T5701] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 294.978714][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.061454][ T804] usb 3-1: USB disconnect, device number 16 [ 295.076580][ T5701] usb 2-1: config 0 descriptor?? [ 295.466719][ T5701] usb 2-1: string descriptor 0 read error: -71 [ 295.515971][ T5701] usb 2-1: USB disconnect, device number 11 [ 295.530512][ T8559] netlink: 'syz.0.657': attribute type 10 has an invalid length. [ 295.581763][ T8560] netlink: 'syz.0.657': attribute type 10 has an invalid length. [ 295.627873][ T8559] bond0: (slave dummy0): Releasing backup interface [ 295.727756][ T8559] team0: Port device dummy0 added [ 295.796229][ T8560] team0: Port device dummy0 removed [ 296.139783][ T8560] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 296.221149][ T5701] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 296.402747][ T5701] usb 2-1: config 0 has an invalid interface number: 199 but max is 0 [ 296.697205][ T5701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.753103][ T5701] usb 2-1: config 0 has no interface number 0 [ 296.784070][ T5701] usb 2-1: too many endpoints for config 0 interface 199 altsetting 193: 58, using maximum allowed: 30 [ 296.842516][ T5701] usb 2-1: config 0 interface 199 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 296.895372][ T5701] usb 2-1: config 0 interface 199 has no altsetting 0 [ 297.028026][ T5701] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 297.143819][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.155365][ T5701] usb 2-1: config 0 descriptor?? [ 297.167441][ T5701] usb 2-1: can't set config #0, error -71 [ 297.615027][ T5701] usb 2-1: USB disconnect, device number 12 [ 299.100813][ T30] audit: type=1400 audit(1777918002.908:573): avc: denied { map } for pid=8593 comm="syz.4.665" path="socket:[18289]" dev="sockfs" ino=18289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 299.177367][ T30] audit: type=1400 audit(1777918002.908:574): avc: denied { read } for pid=8593 comm="syz.4.665" path="socket:[18289]" dev="sockfs" ino=18289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 300.520159][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.665'. [ 300.781155][ T5616] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 300.875402][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 301.359788][ T5616] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.606828][ T5616] usb 4-1: config 0 has no interface number 0 [ 301.619836][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 301.647249][ T5616] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 301.687860][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.722057][ T5616] usb 4-1: Product: syz [ 301.728455][ T5616] usb 4-1: Manufacturer: syz [ 301.741564][ T5616] usb 4-1: SerialNumber: syz [ 301.766056][ T5616] usb 4-1: config 0 descriptor?? [ 301.811280][ T5616] usb 4-1: selecting invalid altsetting 1 [ 301.864257][ T5616] dvb_ttusb_budget: ttusb_init_controller: error [ 301.880076][ T8627] netlink: 'syz.1.673': attribute type 10 has an invalid length. [ 301.896123][ T5616] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 301.916852][ T8627] bond0: (slave dummy0): Releasing backup interface [ 301.942969][ T8627] team0: Port device dummy0 added [ 301.962458][ T8628] netlink: 'syz.1.673': attribute type 10 has an invalid length. [ 302.161620][ T8628] team0: Port device dummy0 removed [ 302.185461][ T8628] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 302.304467][ T5616] DVB: Unable to find symbol stv0299_attach() [ 302.484139][ T5616] DVB: Unable to find symbol tda8083_attach() [ 302.941689][ T5616] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 303.943874][ T5616] usb 4-1: USB disconnect, device number 9 [ 304.880907][ T30] audit: type=1400 audit(1777918008.668:575): avc: denied { map } for pid=8654 comm="syz.4.678" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 305.089974][ T30] audit: type=1400 audit(1777918008.898:576): avc: denied { map } for pid=8659 comm="syz.2.672" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 305.184817][ T30] audit: type=1400 audit(1777918008.938:577): avc: denied { execute } for pid=8659 comm="syz.2.672" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 308.861158][ T5701] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 309.432717][ T5701] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 309.461310][ T5701] usb 2-1: config 0 has no interface number 0 [ 309.557680][ T5701] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.611603][ T5701] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 309.626809][ T5701] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.083588][ T5701] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 310.155462][ T5701] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 310.203798][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.317599][ T5701] usb 2-1: config 0 descriptor?? [ 310.400888][ T5701] usb 2-1: can't set config #0, error -71 [ 310.441622][ T5701] usb 2-1: USB disconnect, device number 13 [ 310.443431][ T8702] netlink: 'syz.1.689': attribute type 4 has an invalid length. [ 310.554534][ T8703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.594921][ T8706] netlink: 'syz.2.690': attribute type 10 has an invalid length. [ 310.624354][ T30] audit: type=1400 audit(1777918014.428:578): avc: denied { mount } for pid=8701 comm="syz.1.689" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 310.696507][ T8704] netlink: 280 bytes leftover after parsing attributes in process `syz.1.689'. [ 310.977888][ T8707] netlink: 'syz.2.690': attribute type 10 has an invalid length. [ 311.021542][ T8706] bond0: (slave dummy0): Releasing backup interface [ 311.353987][ T8706] team0: Port device dummy0 added [ 311.462507][ T8707] team0: Port device dummy0 removed [ 311.533316][ T8707] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 311.597491][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.603953][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.857999][ T8713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.692'. [ 311.919115][ T8713] tmpfs: Bad value for 'mpol' [ 313.226897][ T8724] loop1: detected capacity change from 0 to 16384 [ 314.156595][ T8737] netlink: 60 bytes leftover after parsing attributes in process `syz.3.696'. [ 314.188550][ T8726] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.691'. [ 314.271405][ T8737] unsupported nlmsg_type 40 [ 314.298710][ T8718] netlink: 56 bytes leftover after parsing attributes in process `syz.2.693'. [ 314.756788][ T8741] netlink: 45 bytes leftover after parsing attributes in process `syz.3.696'. [ 314.926438][ T8743] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 316.622623][ T8763] random: crng reseeded on system resumption [ 316.674256][ T8763] Restarting kernel threads ... [ 316.680088][ T8763] Done restarting kernel threads. [ 316.701807][ T8763] netlink: 108 bytes leftover after parsing attributes in process `syz.4.702'. [ 316.721227][ T8763] binder: 8760:8763 ioctl c0306201 0 returned -14 [ 318.839310][ T8777] misc userio: Invalid payload size [ 319.311911][ T4519] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 319.511164][ T4519] usb 2-1: Using ep0 maxpacket: 8 [ 319.528290][ T4519] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.540475][ T8798] overlayfs: invalid origin (0000) [ 319.549186][ T4519] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.611153][ T5616] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 319.620576][ T4519] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.675522][ T4519] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.807459][ T4519] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 319.820496][ T5616] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 319.830019][ T4519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.838976][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.848704][ T5701] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 319.853766][ T5616] usb 5-1: Product: syz [ 320.322408][ T5616] usb 5-1: Manufacturer: syz [ 320.335032][ T5616] usb 5-1: SerialNumber: syz [ 320.351342][ T5616] usb 5-1: config 0 descriptor?? [ 320.368047][ T5616] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 320.431146][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 320.462312][ T5701] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 320.485145][ T4519] usb 2-1: GET_CAPABILITIES returned 0 [ 320.492226][ T4519] usbtmc 2-1:16.0: can't read capabilities [ 320.526821][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.623688][ T5701] usb 3-1: Product: syz [ 320.647332][ T5701] usb 3-1: Manufacturer: syz [ 320.675830][ T5701] usb 3-1: SerialNumber: syz [ 320.712115][ T5701] usb 3-1: config 0 descriptor?? [ 320.758713][ T24] usb 2-1: USB disconnect, device number 14 [ 320.922887][ T5616] sonixb 5-1:0.0: Error reading register 00: -110 [ 320.934617][ T8808] netlink: 'syz.3.714': attribute type 10 has an invalid length. [ 321.343843][ T30] audit: type=1400 audit(1777918024.838:579): avc: denied { audit_write } for pid=8805 comm="syz.0.713" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 321.388106][ T5701] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 321.405501][ T30] audit: type=1400 audit(1777918024.898:580): avc: denied { watch watch_reads } for pid=8805 comm="syz.0.713" path="/proc/453/fd" dev="proc" ino=20609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 321.438916][ T8808] bond0: (slave dummy0): Releasing backup interface [ 321.439150][ T5701] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.493422][ T8812] netlink: 'syz.3.714': attribute type 10 has an invalid length. [ 321.510733][ T5701] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 321.526196][ T8808] team0: Port device dummy0 added [ 321.541958][ T5701] usb 3-1: media controller created [ 321.575159][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.659234][ T8812] team0: Port device dummy0 removed [ 321.678238][ T8812] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 321.876387][ T30] audit: type=1400 audit(1777918025.688:581): avc: denied { map } for pid=8823 comm="syz.1.717" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 321.926270][ T30] audit: type=1400 audit(1777918025.688:582): avc: denied { execute } for pid=8823 comm="syz.1.717" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 321.979516][ T8827] IPv6: NLM_F_CREATE should be specified when creating new route [ 322.261072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 322.348876][ T8831] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.718'. [ 323.097409][ T5701] zl10353_read_register: readreg error (reg=127, ret==0) [ 323.111092][ T5701] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 323.131122][ T5701] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 323.288116][ T5701] usb 5-1: USB disconnect, device number 19 [ 323.336165][ T5616] usb 3-1: USB disconnect, device number 17 [ 323.492331][ T5616] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 323.525997][ T30] audit: type=1800 audit(1777918027.328:583): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.720" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 324.671174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 325.573471][ T8878] netlink: 256 bytes leftover after parsing attributes in process `syz.1.723'. [ 325.904569][ T8878] netlink: 48 bytes leftover after parsing attributes in process `syz.1.723'. [ 326.398242][ T8884] netlink: 256 bytes leftover after parsing attributes in process `syz.2.727'. [ 326.421704][ T8884] netlink: 48 bytes leftover after parsing attributes in process `syz.2.727'. [ 327.929503][ T30] audit: type=1400 audit(1777918031.738:584): avc: denied { setopt } for pid=8898 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 328.028920][ T30] audit: type=1400 audit(1777918031.808:585): avc: denied { mount } for pid=8898 comm="syz.4.730" name="/" dev="autofs" ino=19980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 329.257245][ T30] audit: type=1400 audit(1777918033.068:586): avc: denied { append } for pid=8915 comm="syz.0.735" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 329.300344][ T8916] netlink: 'syz.0.735': attribute type 8 has an invalid length. [ 329.347142][ T8916] fuse: Unknown parameter '' [ 329.949713][ T8925] netlink: 52 bytes leftover after parsing attributes in process `syz.2.737'. [ 330.015179][ T8925] netlink: 9 bytes leftover after parsing attributes in process `syz.2.737'. [ 330.038402][ T8925] netlink: 52 bytes leftover after parsing attributes in process `syz.2.737'. [ 330.050054][ T8925] netlink: 9 bytes leftover after parsing attributes in process `syz.2.737'. [ 330.080137][ T8925] netlink: 52 bytes leftover after parsing attributes in process `syz.2.737'. [ 330.431139][ T5616] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 331.431668][ T5616] usb 3-1: device descriptor read/64, error -71 [ 331.452678][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 331.632926][ T30] audit: type=1400 audit(1777918035.388:587): avc: denied { connect } for pid=8949 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 331.711338][ T5616] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 331.984291][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 26232, setting to 64 [ 332.013679][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 332.031240][ T5616] usb 3-1: device descriptor read/64, error -71 [ 332.061498][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 332.101638][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 332.128238][ T9] usb 1-1: Product: syz [ 332.137487][ T9] usb 1-1: Manufacturer: syz [ 332.144183][ T5616] usb usb3-port1: attempt power cycle [ 332.151135][ T9] usb 1-1: SerialNumber: syz [ 332.261444][ T9] usb 1-1: config 0 descriptor?? [ 332.511430][ T5616] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 332.780125][ T9] usb 1-1: selecting invalid altsetting 0 [ 332.792642][ T5616] usb 3-1: device descriptor read/8, error -71 [ 333.081963][ T5616] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 333.113852][ T5616] usb 3-1: device descriptor read/8, error -71 [ 333.172787][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 333.244242][ T5616] usb usb3-port1: unable to enumerate USB device [ 333.264075][ T30] audit: type=1400 audit(1777918037.058:588): avc: denied { getopt } for pid=8959 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 333.744237][ T8971] NILFS (nullb0): couldn't find nilfs on the device [ 334.128972][ T9] usb 1-1: USB disconnect, device number 17 [ 334.222715][ T5616] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 334.401189][ T5616] usb 5-1: Using ep0 maxpacket: 8 [ 334.489554][ T5616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.702061][ T5616] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 334.811823][ T5616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.823050][ T5616] usb 5-1: config 0 descriptor?? [ 335.441470][ T30] audit: type=1400 audit(1777918039.248:589): avc: denied { ioctl } for pid=8977 comm="syz.3.751" path="socket:[20866]" dev="sockfs" ino=20866 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 335.472421][ T5616] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 335.558156][ T30] audit: type=1800 audit(1777918039.248:590): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.751" name="file0" dev="tmpfs" ino=808 res=0 errno=0 [ 335.859757][ T8990] Failed to initialize the IGMP autojoin socket (err -2) [ 336.982604][ T8990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.995337][ T8990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.747509][ T30] audit: type=1400 audit(1777918041.558:591): avc: denied { create } for pid=9006 comm="syz.2.757" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 337.772895][ T30] audit: type=1400 audit(1777918041.578:592): avc: denied { write } for pid=9006 comm="syz.2.757" name="file0" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 337.846365][ T30] audit: type=1400 audit(1777918041.578:593): avc: denied { open } for pid=9006 comm="syz.2.757" path="/175/file0" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 337.965549][ T9009] mmap: syz.1.758 (9009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 338.012021][ T9011] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 338.039525][ T9011] bond0: (slave dummy0): Releasing backup interface [ 338.077226][ T9011] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 338.102527][ T9011] team0: Failed to send options change via netlink (err -105) [ 338.102627][ T9017] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 338.117129][ T9011] team0: Port device dummy0 added [ 338.254691][ T9015] SQUASHFS error: Failed to read block 0x0: -5 [ 338.287270][ T9015] unable to read squashfs_super_block [ 338.309832][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.317135][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.467639][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.485056][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.596303][ T30] audit: type=1400 audit(1777918042.398:594): avc: denied { unlink } for pid=5609 comm="syz-executor" name="file0" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 338.672312][ T9] usb 5-1: USB disconnect, device number 20 [ 339.096292][ T9031] CUSE: info not properly terminated [ 339.509787][ T5789] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 339.517559][ T30] audit: type=1400 audit(1777918042.888:595): avc: denied { read } for pid=9026 comm="syz.4.763" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 339.543411][ T30] audit: type=1400 audit(1777918042.888:596): avc: denied { open } for pid=9026 comm="syz.4.763" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 339.603108][ T30] audit: type=1400 audit(1777918042.898:597): avc: denied { ioctl } for pid=9026 comm="syz.4.763" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 339.695846][ T9017] team0: Port device dummy0 removed [ 339.707485][ T9017] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 339.723858][ T5789] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 339.733055][ T152] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.742233][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.751761][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.763083][ T5789] usb 3-1: Product: syz [ 339.777754][ T5789] usb 3-1: Manufacturer: syz [ 339.826427][ T9030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.861408][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.905440][ T5789] usb 3-1: SerialNumber: syz [ 339.937898][ T5789] usb 3-1: config 0 descriptor?? [ 339.944021][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.946779][ T5789] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 340.301138][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 340.481164][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 340.495701][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 340.514895][ T9] usb 2-1: config 8 has an invalid interface number: 113 but max is 0 [ 340.525764][ T9050] netlink: 256 bytes leftover after parsing attributes in process `syz.0.768'. [ 340.539178][ T9] usb 2-1: config 8 has no interface number 0 [ 340.552637][ T9] usb 2-1: config 8 interface 113 has no altsetting 0 [ 340.565764][ T9050] netlink: 48 bytes leftover after parsing attributes in process `syz.0.768'. [ 340.590097][ T9] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=8b.f2 [ 340.602459][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.622793][ T9] usb 2-1: Product: syz [ 340.629235][ T9] usb 2-1: Manufacturer: syz [ 340.640964][ T9] usb 2-1: SerialNumber: syz [ 340.929667][ T9054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 340.939006][ T9054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 341.921084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 341.996270][ T9054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 342.010541][ T9054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 342.258158][ T1217] usb 3-1: USB disconnect, device number 22 [ 342.360642][ T30] audit: type=1804 audit(1777918046.168:598): pid=9041 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.767" name="/newroot/158/bus/file0" dev="overlay" ino=890 res=1 errno=0 [ 342.371537][ T9041] evm: overlay not supported [ 343.089438][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 343.588784][ T9073] netlink: 'syz.4.773': attribute type 10 has an invalid length. [ 343.650156][ T9076] netlink: 'syz.4.773': attribute type 10 has an invalid length. [ 343.656124][ T9073] team0: Failed to send options change via netlink (err -105) [ 343.868260][ T9073] team0: Port device dummy0 added [ 343.929264][ T9076] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 343.974709][ T30] audit: type=1400 audit(1777918047.788:599): avc: denied { append } for pid=9086 comm="syz.0.776" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 344.005057][ T9089] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 344.006022][ T9076] team0: Failed to send options change via netlink (err -105) [ 344.030343][ T9076] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 344.039587][ T9076] team0: Port device dummy0 removed [ 344.095878][ T9076] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 344.170424][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.778'. [ 344.182867][ T9] msi2500 2-1:8.113: Registered as swradio24 [ 344.198346][ T9] msi2500 2-1:8.113: SDR API is still slightly experimental and functionality changes may follow [ 344.235786][ T9] usb 2-1: USB disconnect, device number 15 [ 344.703725][ T9107] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.781'. [ 345.680213][ T9111] syz.0.783 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 346.231152][ T9] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 346.404325][ T9] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 347.127726][ T9] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 347.160081][ T9] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 347.183321][ T9] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 347.195101][ T9] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 347.237946][ T9] usb 2-1: string descriptor 0 read error: -71 [ 347.258504][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 347.295295][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.346764][ T9] usb 2-1: can't set config #155, error -71 [ 347.369662][ T9] usb 2-1: USB disconnect, device number 16 [ 347.821912][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 347.991225][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 348.005556][ T9] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 348.031144][ T5616] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 348.046252][ T9] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 348.122938][ T5701] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 348.177164][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.180174][ T5616] usb 4-1: device descriptor read/64, error -71 [ 348.188256][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 348.365819][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.383661][ T5701] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 348.399397][ T9] usb 2-1: config 0 descriptor?? [ 348.408378][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.423709][ T5701] usb 3-1: Product: syz [ 348.432375][ T5701] usb 3-1: Manufacturer: syz [ 348.440989][ T5701] usb 3-1: SerialNumber: syz [ 348.459386][ T5701] usb 3-1: config 0 descriptor?? [ 348.622735][ T5616] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 348.653551][ T30] audit: type=1400 audit(1777918052.468:600): avc: denied { setopt } for pid=9157 comm="syz.4.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 348.676750][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 348.743280][ T30] audit: type=1400 audit(1777918052.558:601): avc: denied { ioctl } for pid=9157 comm="syz.4.782" path="socket:[21519]" dev="sockfs" ino=21519 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 348.769149][ T5616] usb 4-1: device descriptor read/64, error -71 [ 348.844443][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 348.853632][ T9] hid_parser_main: 129 callbacks suppressed [ 348.853677][ T9] corsair-cpro 0003:1B1C:0C10.000A: unknown main item tag 0x0 [ 348.881401][ T5616] usb usb4-port1: attempt power cycle [ 348.901362][ T9] corsair-cpro 0003:1B1C:0C10.000A: unknown main item tag 0x0 [ 348.927145][ T9] corsair-cpro 0003:1B1C:0C10.000A: unknown main item tag 0x0 [ 348.964528][ T9] corsair-cpro 0003:1B1C:0C10.000A: unknown main item tag 0x0 [ 348.991271][ T9] corsair-cpro 0003:1B1C:0C10.000A: unknown main item tag 0x0 [ 349.023559][ T9] corsair-cpro 0003:1B1C:0C10.000A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 349.090002][ T5701] usb 3-1: Firmware: major: 75, minor: 120, hardware type: UNKNOWN (173) [ 349.141013][ T9] corsair-cpro 0003:1B1C:0C10.000A: probe with driver corsair-cpro failed with error -90 [ 349.241164][ T5616] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 349.250461][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 349.381068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 349.861320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 350.241061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 350.376080][ T5701] usb 3-1: failed to fetch extended address, random address set [ 350.381557][ T5616] usb 4-1: device descriptor read/8, error -71 [ 350.633899][ T5701] usb 3-1: atusb_probe: initialization failed, error = -524 [ 350.668875][ T5701] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 350.692708][ T5701] usb 3-1: USB disconnect, device number 23 [ 350.741144][ T5616] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 350.791011][ T30] audit: type=1400 audit(1777918054.598:602): avc: denied { nlmsg_read } for pid=9172 comm="syz.4.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.813064][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 350.883832][ T5616] usb 4-1: device descriptor read/8, error -71 [ 351.011315][ T5616] usb usb4-port1: unable to enumerate USB device [ 351.264642][ T9186] netlink: 'syz.2.802': attribute type 10 has an invalid length. [ 351.320469][ T9187] netlink: 'syz.2.802': attribute type 10 has an invalid length. [ 351.837157][ T9186] bond0: (slave dummy0): Releasing backup interface [ 351.885046][ T9186] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 351.901308][ T9186] team0: Failed to send options change via netlink (err -105) [ 351.939935][ T9186] team0: Port device dummy0 added [ 352.428638][ T5701] usb 2-1: USB disconnect, device number 17 [ 354.681516][ T5701] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 354.793880][ T804] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 354.860188][ T804] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 354.911860][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.928474][ T5701] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 354.974974][ T5701] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 355.020212][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.041929][ T9218] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.806'. [ 355.100984][ T5701] usb 5-1: config 0 descriptor?? [ 355.135387][ T5701] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 355.162604][ T5701] dvb-usb: bulk message failed: -22 (3/0) [ 355.200887][ T5701] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 355.252267][ T5701] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 355.297942][ T5701] usb 5-1: media controller created [ 355.315115][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.356025][ T30] audit: type=1326 audit(1777918059.168:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.3.811" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50b879cdd9 code=0x0 [ 355.384286][ T9217] wireguard: wireguard0: Could not create IPv4 socket [ 355.402257][ T5701] dvb-usb: bulk message failed: -22 (6/0) [ 355.427315][ T5701] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 355.444797][ T5701] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 355.475046][ T5701] dvb-usb: schedule remote query interval to 150 msecs. [ 355.502795][ T5701] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 355.663668][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 355.715573][ T5701] dvb-usb: error while querying for an remote control event. [ 355.913968][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 355.953888][ T5701] dvb-usb: error while querying for an remote control event. [ 355.992554][ T9] usb 5-1: USB disconnect, device number 21 [ 356.149186][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 356.215222][ T30] audit: type=1400 audit(1777918060.028:604): avc: denied { listen } for pid=9233 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.481422][ T5789] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 356.662704][ T5789] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 356.672405][ T5616] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 356.690805][ T5789] usb 4-1: config 0 has no interface number 0 [ 356.691615][ T9242] ALSA: seq fatal error: cannot create timer (-22) [ 356.724862][ T9243] ALSA: seq fatal error: cannot create timer (-22) [ 356.725605][ T5789] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 356.779962][ T5789] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 356.861095][ T5616] usb 2-1: Using ep0 maxpacket: 32 [ 356.867479][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 356.891189][ T5616] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 356.925099][ T5789] usb 4-1: Product: syz [ 356.942210][ T5616] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 356.954410][ T5789] usb 4-1: SerialNumber: syz [ 356.992922][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.005378][ T5789] usb 4-1: config 0 descriptor?? [ 357.029451][ T5616] usb 2-1: Product: syz [ 357.036466][ T5789] cm109 4-1:0.8: invalid payload size 24, expected 4 [ 357.053833][ T5616] usb 2-1: Manufacturer: syz [ 357.074522][ T5789] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input11 [ 357.087430][ T5616] usb 2-1: SerialNumber: syz [ 357.102409][ T5623] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 357.105459][ T5616] usb 2-1: config 0 descriptor?? [ 357.164138][ T9237] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 357.176054][ T5616] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 358.415137][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 358.415342][ T9] usb 4-1: USB disconnect, device number 14 [ 358.422151][ C1] ------------[ cut here ]------------ [ 358.422219][ C1] URB ffff888076adee00 submitted while active [ 358.422235][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#1: swapper/1/0 [ 358.449678][ C1] Modules linked in: [ 358.453755][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.464255][ C1] Tainted: [L]=SOFTLOCKUP [ 358.468555][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.478588][ C1] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 358.484204][ C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d c7 b2 fa 48 8d 3d d6 a6 8e 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 358.503790][ C1] RSP: 0018:ffffc90000a08af0 EFLAGS: 00010087 [ 358.509829][ C1] RAX: 00000000000039e8 RBX: ffff888076adee00 RCX: ffffc900022c2000 [ 358.517779][ C1] RDX: 0000000000040000 RSI: ffff888076adee00 RDI: ffffffff90e46b70 [ 358.525724][ C1] RBP: ffff88802bc74660 R08: 0000000000000001 R09: 0000000000000000 [ 358.533684][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000087 [ 358.541815][ C1] R13: ffff88803894f058 R14: 000000000000000f R15: 0000000000000001 [ 358.549777][ C1] FS: 0000000000000000(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 358.558697][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.565290][ C1] CR2: 000020000004a000 CR3: 0000000078841000 CR4: 00000000003526f0 [ 358.573254][ C1] Call Trace: [ 358.576627][ C1] [ 358.579477][ C1] cm109_urb_irq_callback+0x473/0xa70 [ 358.584860][ C1] __usb_hcd_giveback_urb+0x38d/0x610 [ 358.590229][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 358.595424][ C1] dummy_timer+0xda1/0x36c0 [ 358.599927][ C1] ? find_held_lock+0x2b/0x80 [ 358.604612][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 358.610420][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 358.616065][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 358.622027][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 358.626951][ C1] ? rcu_is_watching+0x12/0xc0 [ 358.631698][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 358.637482][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 358.642396][ C1] __hrtimer_run_queues+0x470/0xa00 [ 358.647582][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 358.652691][ C1] handle_softirqs+0x1ea/0xa00 [ 358.657449][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 358.662717][ C1] ? _raw_spin_unlock+0x28/0x50 [ 358.667545][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 358.673156][ C1] __irq_exit_rcu+0x162/0x210 [ 358.677877][ C1] irq_exit_rcu+0x9/0x30 [ 358.682110][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 358.687717][ C1] [ 358.690622][ C1] [ 358.693544][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.699499][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 358.705194][ C1] Code: 46 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 80 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 358.724793][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 358.730838][ C1] RAX: 000000000227f233 RBX: ffff88801e2c2500 RCX: ffffffff8b8a1045 [ 358.738813][ C1] RDX: 0000000000000000 RSI: ffffffff8df1fe7a RDI: ffffffff8c1c3600 [ 358.746828][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 358.754775][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 358.762721][ C1] R13: ffffed1003c584a0 R14: 0000000000000001 R15: ffffffff90d79b50 [ 358.770688][ C1] ? ct_kernel_exit+0x125/0x180 [ 358.775537][ C1] default_idle+0x9/0x10 [ 358.779774][ C1] default_idle_call+0x6c/0xb0 [ 358.784540][ C1] do_idle+0x464/0x590 [ 358.788606][ C1] ? __pfx_do_idle+0x10/0x10 [ 358.793176][ C1] ? do_idle+0x30c/0x590 [ 358.797422][ C1] cpu_startup_entry+0x4f/0x60 [ 358.802160][ C1] start_secondary+0x21d/0x2d0 [ 358.806918][ C1] ? __pfx_start_secondary+0x10/0x10 [ 358.812186][ C1] common_startup_64+0x13e/0x148 [ 358.817110][ C1] [ 358.820106][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 358.827361][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.837838][ C1] Tainted: [L]=SOFTLOCKUP [ 358.842143][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.852182][ C1] Call Trace: [ 358.855438][ C1] [ 358.858260][ C1] dump_stack_lvl+0x100/0x190 [ 358.862915][ C1] vpanic+0x552/0x970 [ 358.866869][ C1] ? __pfx_vpanic+0x10/0x10 [ 358.871352][ C1] panic+0xd1/0xe0 [ 358.875049][ C1] ? __pfx_panic+0x10/0x10 [ 358.879444][ C1] check_panic_on_warn.cold+0x19/0x34 [ 358.884793][ C1] ? usb_submit_urb+0x15fa/0x1910 [ 358.889806][ C1] __warn.cold+0x191/0x328 [ 358.894216][ C1] __report_bug+0x296/0x3d0 [ 358.898794][ C1] ? usb_submit_urb+0x15fa/0x1910 [ 358.903807][ C1] ? __pfx___report_bug+0x10/0x10 [ 358.908810][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 358.914076][ C1] ? kasan_save_stack+0x30/0x50 [ 358.918909][ C1] report_bug_entry+0xe1/0x290 [ 358.923661][ C1] ? usb_submit_urb+0x15fd/0x1910 [ 358.928670][ C1] handle_bug+0x1cd/0x2a0 [ 358.932977][ C1] exc_invalid_op+0x17/0x50 [ 358.937457][ C1] asm_exc_invalid_op+0x1a/0x20 [ 358.942283][ C1] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 358.947892][ C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d c7 b2 fa 48 8d 3d d6 a6 8e 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 358.967473][ C1] RSP: 0018:ffffc90000a08af0 EFLAGS: 00010087 [ 358.973511][ C1] RAX: 00000000000039e8 RBX: ffff888076adee00 RCX: ffffc900022c2000 [ 358.981541][ C1] RDX: 0000000000040000 RSI: ffff888076adee00 RDI: ffffffff90e46b70 [ 358.989485][ C1] RBP: ffff88802bc74660 R08: 0000000000000001 R09: 0000000000000000 [ 358.997441][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000087 [ 359.005388][ C1] R13: ffff88803894f058 R14: 000000000000000f R15: 0000000000000001 [ 359.013359][ C1] cm109_urb_irq_callback+0x473/0xa70 [ 359.018718][ C1] __usb_hcd_giveback_urb+0x38d/0x610 [ 359.024072][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 359.029263][ C1] dummy_timer+0xda1/0x36c0 [ 359.033742][ C1] ? find_held_lock+0x2b/0x80 [ 359.038396][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 359.044181][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 359.049790][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 359.055760][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 359.060678][ C1] ? rcu_is_watching+0x12/0xc0 [ 359.065421][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 359.071198][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 359.076109][ C1] __hrtimer_run_queues+0x470/0xa00 [ 359.081303][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 359.086394][ C1] handle_softirqs+0x1ea/0xa00 [ 359.091140][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 359.096406][ C1] ? _raw_spin_unlock+0x28/0x50 [ 359.101231][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 359.106840][ C1] __irq_exit_rcu+0x162/0x210 [ 359.111498][ C1] irq_exit_rcu+0x9/0x30 [ 359.115719][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 359.121689][ C1] [ 359.124636][ C1] [ 359.127551][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 359.133523][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 359.139149][ C1] Code: 46 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 80 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 359.158745][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 359.164801][ C1] RAX: 000000000227f233 RBX: ffff88801e2c2500 RCX: ffffffff8b8a1045 [ 359.172759][ C1] RDX: 0000000000000000 RSI: ffffffff8df1fe7a RDI: ffffffff8c1c3600 [ 359.180714][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 359.188659][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 359.196615][ C1] R13: ffffed1003c584a0 R14: 0000000000000001 R15: ffffffff90d79b50 [ 359.204830][ C1] ? ct_kernel_exit+0x125/0x180 [ 359.209662][ C1] default_idle+0x9/0x10 [ 359.213896][ C1] default_idle_call+0x6c/0xb0 [ 359.218669][ C1] do_idle+0x464/0x590 [ 359.222716][ C1] ? __pfx_do_idle+0x10/0x10 [ 359.227285][ C1] ? do_idle+0x30c/0x590 [ 359.231520][ C1] cpu_startup_entry+0x4f/0x60 [ 359.236257][ C1] start_secondary+0x21d/0x2d0 [ 359.240997][ C1] ? __pfx_start_secondary+0x10/0x10 [ 359.246258][ C1] common_startup_64+0x13e/0x148 [ 359.251183][ C1] [ 360.323852][ C1] Shutting down cpus with NMI [ 360.328976][ C1] Kernel Offset: disabled [ 360.333288][ C1] Rebooting in 86400 seconds..