last executing test programs: 8m29.974407814s ago: executing program 2 (id=340): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x200000000000000) 8m29.289337148s ago: executing program 2 (id=341): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) io_setup(0x8, &(0x7f0000000000)=0x0) r7 = eventfd2(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) io_cancel(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 8m27.647565499s ago: executing program 2 (id=348): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000280), 0x42, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r5 = socket$alg(0x26, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040)={'#! ', '.', [{}]}, 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x8008551d, &(0x7f00000000c0)={0xc484, 0x1, [{0x9, 0x1}]}) recvmmsg(r6, &(0x7f0000000000), 0x0, 0x0, 0x0) 8m25.809398414s ago: executing program 2 (id=353): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8f98a5ab04000000000000002a0a292c114b01162fe252115b3f5a5c22ba48f631510b29bf580d0447bf28e273dd00", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf253f00000030005e80080003000008000008000500110000000800060007000000140001000900000002000000050000000900000044005e80080005005b00000008000200018000000800020009000000080002000001000008000500230000000800090000000e0008000600e700000008000700920400004c005e8008000900c5d3ef4e08000900020000000800060080ffffff080005001d000000080007006904000008000900040000000800050004000000080006006a000000080005006400000060005e801c0001000600000000000100e9000000d3bf0000f702000000010000080006000700000018000100f7ffffff100000003700000003000080050000000800030008000000080006000500000008000300faffffff08000500090000001c005e80080003000900000008000200ff01000008000700da020000"], 0x150}, 0x1, 0x0, 0x0, 0x24000014}, 0x4040008) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000600)="f672ca3481", 0x5, 0x80c5, &(0x7f00000001c0)={0xa, 0x0, 0x400, @local, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x1000000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa5322000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0xd400}, [@IFLA_LINKINFO={0x22, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}, @IFLA_MASTER={0x8}]}, 0xfe09}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f00000002c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000002000/0x1000)=nil) 8m24.839935769s ago: executing program 2 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f00000002c0)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f042, 0x6}) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/38, 0x26}, {&(0x7f00000003c0)=""/35, 0x23}, {&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000400)=""/46, 0x2e}], 0x4) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x4004550e, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0x9) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r10) r11 = inotify_init1(0x0) fcntl$setstatus(r10, 0x4, 0x2c00) fcntl$setsig(r11, 0xa, 0xe) inotify_add_watch(r11, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r9, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32, @ANYBLOB="050029"], 0x24}}, 0x4000040) ioctl$TUNSETCARRIER(r8, 0x400454ce, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x4004, @fd=r5, 0x6, 0x0, 0x0, 0x9, 0x1, {0x2}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x501200, 0x8e) 8m24.657136577s ago: executing program 2 (id=355): timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) tkill(r0, 0xd) socket(0x23, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000000c0)=0x9, 0x8, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3000000, 0x11, r4, 0x100000000) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000500)=""/173) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x24) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 8m23.857860944s ago: executing program 32 (id=355): timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) tkill(r0, 0xd) socket(0x23, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000000c0)=0x9, 0x8, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3000000, 0x11, r4, 0x100000000) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000500)=""/173) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x24) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 6m10.375412446s ago: executing program 1 (id=790): syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000402505a1a440000102030109023f0001010d0004090400000202060002052406000005240002001b240f010400000040000900030424130109058202400015020f0905"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r2) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r5, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x6c, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x4, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "dc0c05f8"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x12, 0x1, 0x7}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x21}, @dmm={0x7, 0x24, 0x14, 0x7f, 0x4c08}, @dmm={0x7, 0x24, 0x14, 0x6, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0xff, 0x0, 0x18}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x80, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x79, 0x9}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x82, 0xcd, 0x7a, 0xa0c8c8a319976b62, 0x1}, 0x2d, &(0x7f0000000200)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "7f2f3b138e5f23c52dfdba6c98385f44"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "4c8afdcab80aecc817da6645d2c1441f"}]}, 0x7, [{0x5, &(0x7f0000000240)=@string={0x5, 0x3, "879e00"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4c, &(0x7f0000000300)=@string={0x4c, 0x3, "8eadefb3cb677947aacaf3b1692a6b202c3ecd3c9213339bd141252cfeb34cafcde873595e76b710df45e08379480cf29d27fe35017f6130bc93f82383637f9c7d01c763d01b45703de8"}}, {0x70, &(0x7f0000000380)=@string={0x70, 0x3, "ec9d2c77613a51d4f7633bfaecaef24aefa20ba8079c8929a491b80f27ec3a76880f996975c7a51d39f44370ad8d6067d0f8777c9c584955c2a40a16d7c28d439624dc71f739b16a7388e4ec1818c204ebf3d76d8b5f9a275275d8c2a212643fe3c29c84bfd46373e6cb5ac7ec48"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}]}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) write$P9_RWALK(r6, &(0x7f00000000c0)={0x4a, 0x6f, 0x2, {0x5, [{0x10, 0x0, 0x6}, {0x20, 0x1, 0x1}, {0x0, 0x4, 0x5}, {0x6, 0x1, 0x5}, {0x2, 0x0, 0x2}]}}, 0x4a) 6m8.401826037s ago: executing program 1 (id=802): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) syz_clone3(&(0x7f00000002c0)={0x207000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'batadv0\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "42cdac1073dc0bab06f328a43c7e0a8c057c2488f51800a74a7c45e7d129d8be", "0b127a5c0f446c5916408f92894f4127ab0d85b9af2b8297cb3ddc35719b2fa7", "90c0fd72671bae4986ce4f4a90c00e11e056bf8395739dcf7d7bb8d46ae76146", "5bc0bc251e987ada9d74fc5f355e14a964111fb8db3bc84e79cbedc1b82d5a4b", "4e8ae4b3fb5e04c2b5d17d1957b4f8c71399c13f8576c257134428b61d26b7be", "00000010836d00", 0x4, 0x2, 0x7, 0xffc00000, 0x9}}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f00000001c0)="614c434f9d54d5376bcaae00cd3801c312e68a3043a251a5a7237963639d4659e6acba96", 0x24}], 0x1, 0x3e, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0xb, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r5, r5, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000068c9000001000000000000007f"]) getsockopt$rose(r0, 0x104, 0xfe9b4d8f51d3bfb5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 6m8.237111389s ago: executing program 1 (id=806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000001480)='sched_switch\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffb, 0x2}, 0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) write$bt_hci(r2, &(0x7f0000000580)=ANY=[], 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f0000000180)=""/117, 0x75) ioctl(r9, 0x8b19, &(0x7f0000000040)) 6m7.184994001s ago: executing program 1 (id=811): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2b93089, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m6.983976679s ago: executing program 1 (id=813): r0 = syz_open_dev$loop(0x0, 0x7fdfffffffffffff, 0x8080) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001000), 0xe09) syz_emit_ethernet(0x36, &(0x7f0000000300)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet(0x2, 0x2000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x120) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="e5", 0x1}], 0x1}, 0x90) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x8800, 0xb2b, 0x10000000000000], 0x2, &(0x7f0000000080), 0x0, [{}, {}]}, 0x98) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a010000000000f3000003d74b4f3d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01ef50619551f14dc961ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 6m6.373047155s ago: executing program 1 (id=815): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x288f4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x81a}, {0xa, 0x0, 0x100000, @ipv4={'\x00', '\xff\xff', @local}}, 0x2, {[0x0, 0x1, 0xdffffffe, 0x0, 0x0, 0x0, 0xfdffffff, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, {0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x10, {[0x3, 0x3, 0x2, 0x0, 0x0, 0x18, 0x0, 0x3]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000140)=0xf, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc063000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 6m4.690517105s ago: executing program 33 (id=815): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x288f4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x81a}, {0xa, 0x0, 0x100000, @ipv4={'\x00', '\xff\xff', @local}}, 0x2, {[0x0, 0x1, 0xdffffffe, 0x0, 0x0, 0x0, 0xfdffffff, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, {0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x10, {[0x3, 0x3, 0x2, 0x0, 0x0, 0x18, 0x0, 0x3]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000140)=0xf, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc063000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 9.137481967s ago: executing program 4 (id=2143): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mlockall(0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x28, 0x3, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) keyctl$revoke(0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000003c0), 0x200, 0x2042) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000440)=""/141) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xca, 0x20, 0x5c, 0x40, 0x525, 0xa4a0, 0xc866, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x8a, 0x0, 0x2, 0xc2, 0x88, 0x2b, 0x0, [], [{{0x9, 0x5, 0xd919b6373fffbd61, 0x2, 0x20, 0x57, 0x6, 0xff}}, {{0x9, 0x5, 0xb, 0x1, 0x0, 0x7, 0x6, 0x10}}]}}]}}]}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) preadv(r2, &(0x7f0000003780)=[{&(0x7f0000000300)=""/170, 0xaa}], 0x1000000000000013, 0xffff, 0x0) 7.779463627s ago: executing program 3 (id=2147): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@ldst={0x1, 0x3, 0x6, 0x9, 0x6, 0x0, 0x1}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001ac0)="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", 0x5bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000180)="9246", 0x2}], 0x1}}], 0x3, 0x240080e4) sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f00000004c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@RTA_IIF={0x8}, @RTA_UID={0x8, 0x19, 0xee01}]}, 0x2c}}, 0x2404c810) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000f16232c7644fbae41592c89900"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.956750599s ago: executing program 3 (id=2149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4080000) r4 = syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) r6 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000100)=0x5) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000011ff03000001"], 0x1c) r10 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r9, &(0x7f0000000100), 0xfef0) splice(r8, 0x0, r10, 0x0, 0x80000001, 0x0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r4, 0x1, 0x70bd25, 0x4, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x40010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_tid_address(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6.657922478s ago: executing program 5 (id=2151): socket$inet(0x2, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) unshare(0x200) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x802442, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FICLONE(r4, 0x40049409, r4) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYRES16=r5, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="0000000000000000000000004092df418c7e0000000000"], 0x48) unshare(0x20000400) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x2284, &(0x7f0000000000)) 6.499422592s ago: executing program 3 (id=2152): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) brk(0x55d55ede6004) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f00000028c0)=""/4098, 0x1052}], 0x2) 5.863160037s ago: executing program 4 (id=2154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='.'], 0x20) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.62238209s ago: executing program 5 (id=2155): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0xfffffffc, {{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x100001) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='mm_vmscan_lru_shrink_inactive\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_emit_ethernet(0x4a, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.608997372s ago: executing program 6 (id=2156): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r4) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000380)='./file0\x00', 0xa3000951) read(r6, 0x0, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000380)={0x2fe, 0x7d, 0x0, {{0x500, 0x1bd, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\x1f\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0xfffffea6, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0xde, '\xef\xc2\x00\x10\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00\xdf\x8f}i\xdfs\xd5UC\xb6\xf5\xe8\x81\xf6\a\x8eXl1\x88)`8\x15RZ\xbd\xf3\xc4\xbd\x105_\xcb\xa8O\x93\xb6g\xb2\xd8n\xb9n\xcb\xaa=\x910p^XD\xc3B\xd3e\xce\xd0\x176\x9a\x1a\xc6\x92\xeeX\x83;\x16\x94\xce1s\xcf@\xb8\x8f\x04\xd5P\xf4\xd15 \'T(\xa1\x86qN\xd1q\x160&\x13\x18\xe4\xe4#\xefz\xa1\xc0\xb8\x896\x9c\x8bE%{h\x0fk\xea\xfc\xfat\x03\x8d\xd9V=\x17\xbd<\xa8\xa1\xd8Z\xfa\x18?\xe0\xc8A\x91\xa4\xa6\x84Z=\xf3\xb7C\x85\xb3\xce\xa72\x9f\xaa\x06\xb2\x95\x18C}\xe3,\n\xb4\xc70h\xef\x9eI\x1c\xa4\xaeOK\xb0\x05\x90\x1a\x9c\x84\x16\x10\xb7u\xd7A\x89\x8e\xe15m5\x00\xf3\xd2\x8d2\x16\xc5\xad\x00\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x2fe) 4.701760496s ago: executing program 5 (id=2157): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host}, {@hyper}, 0x400, "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"}, 0x418}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000001c0)={0x0, @adiantum, 0x0, @desc2}) recvmmsg(r1, &(0x7f0000002dc0)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/245, 0xf5}, {&(0x7f0000000180)=""/38, 0x26}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f0000002e80)=""/133, 0x85}, {&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000005c0)=""/227, 0xe3}], 0x9, &(0x7f0000000780)=""/118, 0x76}, 0x69b13333}, {{&(0x7f0000000800)=@nfc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/39, 0x27}, {&(0x7f0000000940)=""/56, 0x38}], 0x3, &(0x7f00000009c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f00000019c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001a40)=""/182, 0xb6}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/5, 0x5}, {&(0x7f0000002b40)=""/86, 0x56}, {&(0x7f0000002bc0)=""/147, 0x93}], 0x5, &(0x7f0000002d00)=""/189, 0xbd}, 0xc}], 0x3, 0x12020, 0x0) 4.542617069s ago: executing program 0 (id=2158): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed={{}, [], {0x95, 0x0, 0x0, 0x3fffffff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.499968374s ago: executing program 6 (id=2159): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000002c0)=[{{&(0x7f0000000600)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000700)=""/134, 0x86}, {&(0x7f00000007c0)=""/66, 0x42}, {&(0x7f0000000840)=""/209, 0xd1}, {&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/168, 0xa8}, {&(0x7f0000000a80)=""/86, 0x56}], 0x7, 0x0, 0xffffffffffffff74}}], 0x1, 0x60002000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) openat$audio(0xffffffffffffff9c, 0x0, 0x9e966e64318092aa, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040b090000000524b2002987f91c269b85d90a460087b35fc0f1044ec640abeb6e7b88af5ef49a07ff6a7428a84c13e3752b67"], 0xe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = request_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='sched_switch\x00', 0xfffffffffffffffe) r7 = add_key(&(0x7f00000003c0)='pkcs7_test\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000500)="14a0fc15d269a3523a7dea685da36a300909cbe0aba8074bdfe7551333d7016251775fad74a68ddc5e18861e2e6a44a4eba2c2768aff295a2d166fc4048f2b1ee6b772659141fbee0423fdf5d750ae383fa2b1dee861052ec402a4eedbd535332d9219a6b4e01e0c1ef9bb43194f83b66448dfe6d9a03c8c5f0d6091e546a244b05fdd931e73f300f78053d4c832efe6a44022c456361e8fb7b4220b4bff57163b7debb9ec7cdc3d2eb7f07d77c3a78aeb10ac2fc4b5358a3d395828750457674ad03cbec0b7f18994f20edd750563be608a600dfd0c64989c324ff30cabb04850fd", 0xe2, 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r6, r7, r8, 0x1) 3.777148971s ago: executing program 5 (id=2160): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@ldst={0x1, 0x3, 0x6, 0x9, 0x6, 0x0, 0x1}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001ac0)="0561ce7e42cea4dc22f0dc9db04ccdd5268478bfb820459d80d37db29af373d4f43776135dafc401a50b43638bf1956441491ed40b2d894c3b1217f24398ea1ec3763a3e8763ddfcaa86632ff7312c5678c99c01fed94f62749a09f30450f216b121b4daf30ebe721ebe245b5d21985af3ed12913734e0fe1aee7b9c17cac7e185fd2df902e93f5d702f489c6bb2f13cf6fe762b80093023c69ef05d58f73ed8ef7a07b0e3a86854754c7b0088bc8ced64dcb2f7958b5171a1931802504b1a535e249ed25d841af22cac0a622459c0d2a2b307638ec88f0e9a9e648d777d709d8244fe1d1acdfd1fe9c00f1bcae449b0eb8a0272a330483f343762da6d63fc44d3a5a9be6f97483cbc70c39373e67909fd92be3c05996142fe5187d808f3e3ea8771e7b119b91488aa5d5314280762a55165d2a23d1fd1639011d81715259086b4bc7f0b5e6274dcc0472f16b94745c9f151b629ac4567fe63425e31f1ca9198e8df7b34f1bd65c5cfa77dc4af80787963665fd3223ab429ad2ad1f3f7cee5c3830d7090ecd70c28c5b0e1829bbbcff38e06345aa8b95189cdfaa84099c74e55106c3e68bbef58df00a069fba429853df50c5c7e053d5cf7610b1265021dc4c9ec39e333ca359ec24e23c3f22e5b8028b7abe96e9647b3037b11a77d89fcaa799d84d4dfb15a0fda3f2ee641d341aaf1e55d08f6a55e4a2cfcb780c44ce89bd6059c3b8c334f572e8f17f75b820eff6e7e7849ed4242569afa4dd01e15db2f687f8bae86548047e7b2fdc748e5df628a72e992ed8d942fd2dd224dd39e0f12f8071afed2f814d45f09592e679f8b670f56b3d9ec187e9ea8fff560f765a87b4a2abfcff8f751218aee3fdf0f7dbe9fb81d619e3454365ae6994c5918b822546db1d979bc83e63b5a34f18e5ce48d33270ca2e17bbd7523473adca2251b86d9926ac844bcbd85b6fb0f30299f72c61dc71fad6d3c410b51cd7a09946e4b9640375eaae7508cc3af7bb5856670869a78b8b7ffca1b67aa33b9b1c9c0dbbcf63c0625e4a5ec57d6a52332c3ae13307b39a17814b055e9e27ed6782f8b3f3911199a6bec0eeb9e0eb2bf7877b80981d9d600b3b894d01885c1f9c1a71a47a79d615e931c4aa6725d34834704aff578d6aed11b86ee3c4fe48fe286178a3fc5567ce4ce7106acba8ab41993ec3d18b7e8c0fe83098da102415308976b339ccb9bcf3ab4ff71498361bb5a19c289d3dddeb278dde9fbd49159931fdc7618e70261a9262a0412b8ee69bf0444ec60821f1ac8a5d3847bb7db544acb6b0c08a3817514e8e48cad3fde3152e48e6af25c6d6150cae421f2f10124831a3d6d621a69045f06a69be15efaa7d02074f7ce43eec410a49dbd7d098a41ed5da587785e3f6c5efcc5278fb7f274d3f969924c5c968ce9cb0d593e4da6a95f721ddb0447da7ed1490db67c6c4441c17f76e22a3069bf4e0fa6c86a1329fa0613cb8bddba2745a3c23996eb5e06b648101d859948a228c5190a7d8ae1ee2560b095ee8239f2234f4b56f066a0975ebece106c585d806f476142d767ac0a05b7b0d114b18a0053bfc59bbe96c1f15a6fe2208ec7b6aaca0a4db3fdedb48cdafbb5a7eae19eaf0c4631038b6f4f55d940461da4bffec664ec1b10bdf19f4d1d3b9d2691bffe913212cfc0d15674cbb0b353249a74a72fe8846a9bbe78c6be7cda51daef615805e8ab7a8ab319e94222af72591d7ce0d909bc7c6745d03695548d696cce0f86664331c27d167a01f0c59c214e33e45ceb72946b9ea7a34d2c16bc0dd60cb868e2701f54945215fbd35da46fa3477b760df846f0f67af3be77950f3b880a5076c6a9f6adb98d18f7d7d875bb9831fb64559ffd5ac204b153093a6ff9dadd60563edf2febfdaf69e2b7934893744301b2b52bc4c85f06465082163436fe9cab926f990ab34d50c305babcc52f288a1e3263d653727d2f8fae46b254308a3bd66f530c299d6afda45f11c05e42ba57df59745ddd62b8f2c7bf33e4bbc65da7e385554349bb8c1669ac2a0137cf8964a977e7513096d84d7359b51fb94bbf58363f43fe23", 0x5bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000180)="9246", 0x2}], 0x1}}], 0x3, 0x240080e4) sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f00000004c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@RTA_IIF={0x8}, @RTA_UID={0x8, 0x19, 0xee01}]}, 0x2c}}, 0x2404c810) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000f16232c7644fbae41592c89900"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.776625796s ago: executing program 4 (id=2161): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) request_key(0x0, 0x0, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x7fffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000600000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0xc4c85513, &(0x7f0000000040)={0xb}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0xc1105511, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r3, {0x7}, {0x9}, {0x1}}}, 0x24}}, 0x40044) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r3}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000001540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="01000500000000dcdf251b00000008000300", @ANYRES32=r11, @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) 3.717596739s ago: executing program 5 (id=2162): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0xfffffffc, {{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x100001) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='mm_vmscan_lru_shrink_inactive\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_emit_ethernet(0x4a, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.669249185s ago: executing program 0 (id=2163): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000440)={0x1d, r1, 0x0, {0x0, 0xf0}, 0x2}, 0x18) 3.668869022s ago: executing program 3 (id=2164): r0 = socket(0x2, 0x800, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x1d7d1e60016badad}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000000)={0x2, 0xe1a, 0x2, 0x7, 0x14, 0x4}) 2.97562964s ago: executing program 6 (id=2165): socket$inet(0x2, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) unshare(0x200) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x802442, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FICLONE(r4, 0x40049409, r4) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYRES16=r5, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="0000000000000000000000004092df418c7e0000000000"], 0x48) unshare(0x20000400) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x2284, &(0x7f0000000000)) 2.488682463s ago: executing program 3 (id=2166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a70525", 0x3a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x0) memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40186f40, 0x20000502) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x44010) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/93, 0x5d, 0x1, &(0x7f00000003c0)=""/18, 0x12}, &(0x7f0000000440)=0x40) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1b0000003e1de16e3e8392498bab2d0d4ad686843e73e67bdd6fff799a873b5713a28c913fb3fcc555177ce2978020e219653d3ddf4c6475230b1db746b9c4a89b373ab0e6e6bb58bc278d9128ae626dcf8d3ef7f09857b4143f73e20b0b3a47c9e5e2656de7e303fc72ec73b253f77c9ce03763dda415935efd6c051b90979a68c5a8d648ac6292aa7a81d63d7db5b7a3d7876bd19a2d554344aac58dad02f2f56ad05c0460c0cf26fd616f4b", @ANYRES16=r4, @ANYBLOB="0500000f11b90f0000000800000008000300", @ANYRES32=r5], 0x30}}, 0x0) r8 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r8, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) syz_open_procfs$namespace(r8, &(0x7f0000000000)='ns/time\x00') 2.47372055s ago: executing program 5 (id=2167): syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_open_dev$radio(&(0x7f0000000480), 0x3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5a401, 0x80) socket(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x116, &(0x7f0000000140)={0x0, 0xfbd5, 0x400, 0x200000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) creat(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0xffffffffffffffff, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x101}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000acc000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{r5, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0) close(r5) syz_io_uring_setup(0x1f85, &(0x7f0000000080)={0x0, 0x6559, 0x1, 0x3}, &(0x7f0000000040), &(0x7f0000000140)) 2.464450211s ago: executing program 0 (id=2168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x1ec}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000002060102000000000000c70000050000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x45) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000180)=0xb29) 1.721920082s ago: executing program 4 (id=2169): r0 = io_uring_setup(0x57a4, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x16, 0x20000002, 0x0) 1.719985661s ago: executing program 0 (id=2170): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = fsopen(&(0x7f0000000140)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_setlink={0x38, 0x13, 0xa29, 0x1, 0x0, {0x7, 0x0, 0x68, r3}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4050) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/145, 0x91}], 0x1) fsmount(r0, 0x0, 0x0) tkill(r1, 0xb) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) 1.639385786s ago: executing program 6 (id=2171): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x24008081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a40)='H', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x88481, 0x0) close(r2) chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4, 0x0, 0x10}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x40000000) r5 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x294fa, 0x80, 0x0, 0x105}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) gettid() 1.499988833s ago: executing program 4 (id=2172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_io_uring_setup(0x3a9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x190, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {0x0, 0x7}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x8000000, 0x1000000}) fcntl$addseals(r5, 0x409, 0xb) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x12100, 0x8) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x80) 1.459507488s ago: executing program 3 (id=2173): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) mremap(&(0x7f000062b000/0x2000)=nil, 0x1d5000, 0x40000000, 0x3, &(0x7f00009f6000/0x3000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@ldst={0x1, 0x3, 0x6, 0x9, 0x6, 0x0, 0x1}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001ac0)="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", 0x5bf}], 0x1}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000180)="9246", 0x2}], 0x1}}], 0x3, 0x240080e4) sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f00000004c0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@RTA_IIF={0x8}, @RTA_UID={0x8, 0x19, 0xee01}]}, 0x2c}}, 0x2404c810) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000f16232c7644fbae41592c89900"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 936.463937ms ago: executing program 4 (id=2174): socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)='}', 0x1, 0x1fff8, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 280.057493ms ago: executing program 6 (id=2175): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x24008040) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x40000002}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 270.650495ms ago: executing program 6 (id=2176): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="b40800000000000073113b000000000018340000050000000000000000000000b70000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c004f00b7000000000000009500001200000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = creat(&(0x7f0000000380)='./file0\x00', 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8000) r3 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x8, 0x700, 0x0, 0x10000, {{0x6, 0x4, 0x3, 0x3f, 0x18, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0xf}, {[@end]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000002d6dd964060000000500000030300000", @ANYRES32=r1, @ANYBLOB="0200000000000023000000060000000000000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="0400000004000000030000000700"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f0000000040)) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000001200)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x3, {0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffa}}}, 0x80, 0x0}, 0x20000841) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5393, &(0x7f0000000000)) 199.594167ms ago: executing program 0 (id=2177): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0xc00, 0x2f00}}], 0x1, 0x0) 0s ago: executing program 0 (id=2178): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001180)={0x80002, 0x1, 0x6}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000001200)='./file0\x00', 0xa6) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0x8, 0x401, 0x8000040000004, 0x10}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) r5 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r5, @ANYRES32=r4], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) unshare(0x22020600) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000402000008"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000004000000040000000700000000c00000", @ANYRES32=r9, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB="fcffffff00"/20, @ANYBLOB="82bd47514df1e6743cb0fe8e24288b81fed9dc0bb8cfb09dea80e4c3e9eacb828e40273ea0b6dcc4c330024d178fe111fee020", @ANYBLOB="aff96765fc2406005f39940401421a5540166dce"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, 0x0, &(0x7f00000001c0)=r9}, 0x20) kernel console output (not intermixed with test programs): omm="syz.6.1513" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 491.761192][T12101] dvmrp0: entered allmulticast mode [ 491.773347][T12101] dvmrp0: left allmulticast mode [ 491.848740][T12106] 9pnet_fd: Insufficient options for proto=fd [ 492.241217][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 492.456139][T12110] trusted_key: encrypted_key: insufficient parameters specified [ 492.593914][T12117] ptrace attach of "./syz-executor exec"[7501] was attempted by "./syz-executor exec"[12117] [ 494.094751][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1533'. [ 494.378463][T12139] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1533'. [ 494.528783][T12140] loop6: detected capacity change from 0 to 524287999 [ 494.546007][ C1] blk_print_req_error: 25 callbacks suppressed [ 494.546029][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.561416][ C1] buffer_io_error: 25 callbacks suppressed [ 494.561431][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 494.576948][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.586165][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 494.648845][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.658024][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 494.710421][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.719655][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 494.729162][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 494.738176][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.747333][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 494.756395][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.765656][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 494.773672][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.782938][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 494.796990][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 494.806242][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 495.111430][T12140] ldm_validate_partition_table(): Disk read failed. [ 495.284452][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.293751][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 495.309588][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.318821][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 495.333161][T12140] Dev loop6: unable to read RDB block 0 [ 495.346236][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 495.357917][T12140] loop6: unable to read partition table [ 495.369266][T12140] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 495.428614][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 495.436370][ T9] usb 7-1: config 0 has an invalid interface number: 121 but max is 0 [ 495.445202][ T9] usb 7-1: config 0 has no interface number 0 [ 495.458908][ T9] usb 7-1: config 0 interface 121 altsetting 139 endpoint 0x5 has invalid wMaxPacketSize 0 [ 495.469247][ T9] usb 7-1: config 0 interface 121 has no altsetting 0 [ 495.478009][ T9] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 495.487593][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.505980][ T9] usb 7-1: Product: syz [ 495.515707][ T9] usb 7-1: Manufacturer: syz [ 495.522975][ T9] usb 7-1: SerialNumber: syz [ 495.632475][ T9] usb 7-1: config 0 descriptor?? [ 496.187709][ T9] as10x_usb: device has been detected [ 496.193816][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 496.209070][ T9] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 496.283422][ T9] as10x_usb: error during firmware upload part1 [ 496.295305][ T9] Registered device Abilis Systems DVB-Titan [ 496.361440][ T29] audit: type=1400 audit(1736841688.440:2144): avc: denied { read } for pid=12173 comm="syz.0.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 496.416822][ T29] audit: type=1400 audit(1736841688.490:2145): avc: denied { read } for pid=12173 comm="syz.0.1543" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 496.450431][ T25] usb 7-1: USB disconnect, device number 22 [ 496.492301][ T25] Unregistered device Abilis Systems DVB-Titan [ 496.498905][ T25] as10x_usb: device has been disconnected [ 496.510976][ T29] audit: type=1400 audit(1736841688.490:2146): avc: denied { open } for pid=12173 comm="syz.0.1543" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 496.632358][ T29] audit: type=1400 audit(1736841688.630:2147): avc: denied { ioctl } for pid=12173 comm="syz.0.1543" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 496.678190][ T5898] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 497.000153][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 497.037172][ T5898] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 497.126856][ T5898] usb 6-1: config 8 has no interface number 0 [ 497.239967][ T5898] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 497.378167][ T5898] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 497.388956][ T5898] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 497.399886][ T5898] usb 6-1: config 8 interface 39 has no altsetting 0 [ 497.417635][ T5898] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 497.551731][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.582182][ T5898] usb 6-1: Product: syz [ 497.586590][ T5898] usb 6-1: Manufacturer: syz [ 497.618170][ T5898] usb 6-1: SerialNumber: syz [ 499.178237][ T29] audit: type=1400 audit(1736841691.220:2148): avc: denied { listen } for pid=12244 comm="syz.6.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 499.375941][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 499.481292][T12249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1549'. [ 500.463393][ T5898] ipheth 6-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 500.470984][ T5898] ipheth 6-1:8.39: probe with driver ipheth failed with error -71 [ 500.488479][ T5898] usb 6-1: USB disconnect, device number 46 [ 500.580369][T12265] block nbd0: NBD_DISCONNECT [ 500.587709][T12265] block nbd0: Disconnected due to user request. [ 500.596571][T12265] block nbd0: shutting down sockets [ 500.690113][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 501.424142][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.436375][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.537752][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.612013][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.812681][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 501.834803][ T9] usb 4-1: SerialNumber: syz [ 501.865766][ T9] usb 4-1: bad CDC descriptors [ 502.818746][ T5865] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 502.990302][ T5865] usb 7-1: Using ep0 maxpacket: 32 [ 503.014411][ T5865] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 503.067770][ T5865] usb 7-1: config 0 has no interface number 0 [ 503.075242][ T5865] usb 7-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 503.159254][T12262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.193518][T12262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.202604][ T5865] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 503.233070][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.268854][ T5865] usb 7-1: Product: syz [ 503.290506][ T5865] usb 7-1: Manufacturer: syz [ 503.316825][ T5865] usb 7-1: SerialNumber: syz [ 503.438352][ T5898] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 503.463785][ T5865] usb 7-1: config 0 descriptor?? [ 503.511942][T12281] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 503.547659][ T5865] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 503.558494][ T5865] em28xx 7-1:0.132: Video interface 132 found: bulk [ 503.741166][ T5898] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.765135][ T5898] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 503.777668][ T5898] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.792150][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.826235][T12290] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 503.845834][ T5898] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.511562][ T5865] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 504.741089][T12313] netlink: 'syz.4.1565': attribute type 2 has an invalid length. [ 504.749233][T12313] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1565'. [ 505.333444][ T5865] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 505.343883][ T5865] em28xx 7-1:0.132: board has no eeprom [ 505.364195][ T9] usb 4-1: USB disconnect, device number 45 [ 505.419692][ T5865] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 505.456644][ T5865] em28xx 7-1:0.132: analog set to bulk mode. [ 505.464613][ T969] em28xx 7-1:0.132: Registering V4L2 extension [ 505.551116][ T5898] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 505.798427][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 505.870122][ T5865] usb 7-1: USB disconnect, device number 23 [ 506.101089][ T5865] em28xx 7-1:0.132: Disconnecting em28xx [ 506.120238][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.131420][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.156223][ T5864] usb 1-1: USB disconnect, device number 37 [ 506.193786][ T5898] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 506.216521][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.398038][ T969] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 506.405745][ T969] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 506.421457][ T969] em28xx 7-1:0.132: No AC97 audio processor [ 506.433004][ T5898] usb 6-1: config 0 descriptor?? [ 506.442316][ T969] usb 7-1: Decoder not found [ 506.447160][ T969] em28xx 7-1:0.132: failed to create media graph [ 506.455488][ T969] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 507.285921][ T969] em28xx 7-1:0.132: Remote control support is not available for this card. [ 507.314733][ T5865] em28xx 7-1:0.132: Closing input extension [ 507.368000][T12333] [U] ^C [ 507.432421][ T5865] em28xx 7-1:0.132: Freeing device [ 507.788626][ T5898] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 507.795560][ T5898] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 507.896516][ T5898] ft260 0003:0403:6030.0016: chip code: 0000 0000 [ 507.968578][T12347] tmpfs: Unknown parameter '' [ 508.268398][ T5898] ft260 0003:0403:6030.0016: failed to retrieve system status [ 508.278453][ T5898] ft260 0003:0403:6030.0016: probe with driver ft260 failed with error -71 [ 508.295851][ T5898] usb 6-1: USB disconnect, device number 47 [ 509.220757][ T29] audit: type=1400 audit(1736841701.270:2149): avc: denied { getopt } for pid=12348 comm="syz.0.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 509.936023][T12368] input: syz0 as /devices/virtual/input/input31 [ 509.945007][ T29] audit: type=1400 audit(1736841702.020:2150): avc: denied { ioctl } for pid=12348 comm="syz.0.1575" path="socket:[47765]" dev="sockfs" ino=47765 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 510.008258][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 510.163441][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 510.419660][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 510.431446][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 510.449571][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 510.468120][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.514953][ T9] usb 4-1: config 0 descriptor?? [ 510.955740][T12360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.964579][T12360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.997200][T12360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.048723][T12360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.076126][ T9] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 511.084970][ T9] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x0 [ 511.155355][T12402] input: syz1 as /devices/virtual/input/input32 [ 511.613584][ T9] kovaplus 0003:1E7D:2D50.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 511.779412][ T9] kovaplus 0003:1E7D:2D50.0017: couldn't init struct kovaplus_device [ 511.802273][ T9] kovaplus 0003:1E7D:2D50.0017: couldn't install mouse [ 512.051196][ T9] kovaplus 0003:1E7D:2D50.0017: probe with driver kovaplus failed with error -32 [ 512.063699][ T9] usb 4-1: USB disconnect, device number 46 [ 512.638241][ T29] audit: type=1326 audit(1736841704.710:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 512.678388][ T29] audit: type=1326 audit(1736841704.710:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 512.701892][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.322745][ T29] audit: type=1326 audit(1736841704.710:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 513.378183][ T29] audit: type=1326 audit(1736841704.710:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 513.401712][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.407976][ T29] audit: type=1326 audit(1736841704.710:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 513.441638][ T29] audit: type=1326 audit(1736841704.710:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 513.476381][ T29] audit: type=1326 audit(1736841704.710:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 513.566460][ T29] audit: type=1326 audit(1736841704.710:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.5.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 513.590041][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.785247][T12444] loop6: detected capacity change from 0 to 524287999 [ 513.804536][ C1] blk_print_req_error: 7 callbacks suppressed [ 513.804554][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 513.819901][ C1] buffer_io_error: 7 callbacks suppressed [ 513.819914][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 513.833880][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 513.843088][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 513.857104][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 513.866306][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 513.874678][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 513.883874][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 513.928163][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 513.937345][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 513.948613][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 513.957879][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 513.966813][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 513.976029][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 513.985046][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 513.994222][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 514.002137][T12444] ldm_validate_partition_table(): Disk read failed. [ 514.005651][ T5864] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 514.028377][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 514.037577][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 514.045777][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 514.055020][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 514.063431][T12444] Dev loop6: unable to read RDB block 0 [ 514.075287][T12444] loop6: unable to read partition table [ 514.081222][T12444] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 514.094937][T12447] ldm_validate_partition_table(): Disk read failed. [ 514.104840][T12447] Dev loop6: unable to read RDB block 0 [ 514.130942][T12447] loop6: unable to read partition table [ 514.149259][T12447] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 514.188298][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 514.205284][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.222608][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.252479][ T5864] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.290611][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0 [ 514.317756][ T5864] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 514.342718][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.355017][ T5864] usb 1-1: config 0 descriptor?? [ 514.755233][T12459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1600'. [ 515.358785][ T5865] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 515.540082][ T5865] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 515.563333][ T5865] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 515.584556][ T5865] usb 6-1: New USB device found, idVendor=056a, idProduct=2037, bcdDevice= 0.00 [ 515.593829][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 515.625953][ T5865] usb 6-1: Product: syz [ 516.279429][ T5865] usb 6-1: config 0 descriptor?? [ 516.494873][T12470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.507915][T12470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.532706][ T5865] usb 6-1: USB disconnect, device number 48 [ 516.743389][ T5864] usbhid 1-1:0.0: can't add hid device: -71 [ 516.761260][ T5864] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 516.796002][ T5864] usb 1-1: USB disconnect, device number 38 [ 516.976488][T12492] loop9: detected capacity change from 0 to 7 [ 516.992622][T12492] Dev loop9: unable to read RDB block 7 [ 517.004087][T12492] loop9: unable to read partition table [ 517.010174][T12492] loop9: partition table beyond EOD, truncated [ 517.016427][T12492] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 517.283831][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1618'. [ 517.398665][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 517.398682][ T29] audit: type=1400 audit(1736841709.470:2180): avc: denied { getopt } for pid=12505 comm="syz.0.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 517.648401][ T25] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 517.888544][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 517.946013][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.957776][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.968193][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 517.978871][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.999447][ T25] usb 1-1: config 0 descriptor?? [ 518.008651][ T25] hub 1-1:0.0: USB hub found [ 518.214123][ T25] hub 1-1:0.0: 9 ports detected [ 518.225371][ T25] hub 1-1:0.0: insufficient power available to use all downstream ports [ 518.932517][T12513] [U] ^C [ 518.934041][ T29] audit: type=1400 audit(1736841711.000:2181): avc: denied { mount } for pid=12505 comm="syz.0.1622" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 519.038316][ T25] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 519.045427][ T25] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 519.100355][T12529] dccp_invalid_packet: pskb_may_pull failed [ 519.136647][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 519.143785][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 519.180788][ T25] usb 1-1: USB disconnect, device number 39 [ 519.276813][T12534] ubi: mtd0 is already attached to ubi0 [ 519.684363][T12519] netlink: 'syz.6.1626': attribute type 16 has an invalid length. [ 519.702525][T12519] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.1626'. [ 520.528302][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 521.208316][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 521.232164][ T9] usb 7-1: config 8 has an invalid interface number: 39 but max is 0 [ 521.240410][ T9] usb 7-1: config 8 has no interface number 0 [ 521.246473][ T9] usb 7-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 521.258524][ T9] usb 7-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 521.278165][ T9] usb 7-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 521.319335][ T9] usb 7-1: config 8 interface 39 has no altsetting 0 [ 521.342547][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 521.358590][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.392608][ T9] usb 7-1: Product: syz [ 521.396821][ T9] usb 7-1: Manufacturer: syz [ 521.434131][ T9] usb 7-1: SerialNumber: syz [ 522.424328][T12608] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1646'. [ 522.760689][T12618] Invalid logical block size (17746) [ 522.835222][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1649'. [ 522.927411][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1652'. [ 524.348412][ T9] ipheth 7-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 524.363593][ T9] ipheth 7-1:8.39: probe with driver ipheth failed with error -71 [ 524.395031][ T9] usb 7-1: USB disconnect, device number 24 [ 524.647993][T12649] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1659'. [ 524.692728][T12654] netlink: 'syz.3.1662': attribute type 1 has an invalid length. [ 524.700667][T12654] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1662'. [ 524.769063][T12657] trusted_key: encrypted_key: master key parameter 'def:syz' is invalid [ 524.782639][T12657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1658'. [ 524.791792][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 525.454416][T12671] tc_dump_action: action bad kind [ 525.740729][T12684] binder: 12674:12684 ioctl c0306201 20000580 returned -22 [ 526.236003][T12686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1669'. [ 526.341281][T12689] syz.6.1667: attempt to access beyond end of device [ 526.341281][T12689] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 526.354409][T12689] (syz.6.1667,12689,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 526.362151][T12689] (syz.6.1667,12689,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 526.369586][T12689] (syz.6.1667,12689,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 526.378325][T12689] (syz.6.1667,12689,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 526.557849][T12691] vivid-000: kernel_thread() failed [ 526.666946][ T29] audit: type=1400 audit(1736841718.510:2182): avc: denied { append } for pid=12693 comm="syz.5.1670" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 527.026446][T12711] overlayfs: conflicting lowerdir path [ 529.332576][ T5132] Bluetooth: hci4: command tx timeout [ 529.415195][T12733] FAULT_INJECTION: forcing a failure. [ 529.415195][T12733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.429922][T12733] CPU: 0 UID: 0 PID: 12733 Comm: syz.4.1680 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 529.440700][T12733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 529.450755][T12733] Call Trace: [ 529.454032][T12733] [ 529.456963][T12733] dump_stack_lvl+0x16c/0x1f0 [ 529.461671][T12733] should_fail_ex+0x497/0x5b0 [ 529.466388][T12733] _copy_to_user+0x32/0xd0 [ 529.470820][T12733] simple_read_from_buffer+0xd0/0x160 [ 529.476208][T12733] proc_fail_nth_read+0x198/0x270 [ 529.481243][T12733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.486798][T12733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.492368][T12733] vfs_read+0x1df/0xbe0 [ 529.496534][T12733] ? __fget_files+0x1fc/0x3a0 [ 529.501212][T12733] ? __pfx___mutex_lock+0x10/0x10 [ 529.506245][T12733] ? __pfx_vfs_read+0x10/0x10 [ 529.510935][T12733] ? __fget_files+0x206/0x3a0 [ 529.515623][T12733] ksys_read+0x12b/0x250 [ 529.519871][T12733] ? __pfx_ksys_read+0x10/0x10 [ 529.524653][T12733] do_syscall_64+0xcd/0x250 [ 529.529164][T12733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.535063][T12733] RIP: 0033:0x7fc79258473c [ 529.539480][T12733] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 529.559089][T12733] RSP: 002b:00007fc793397030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 529.567505][T12733] RAX: ffffffffffffffda RBX: 00007fc792775fa0 RCX: 00007fc79258473c [ 529.575472][T12733] RDX: 000000000000000f RSI: 00007fc7933970a0 RDI: 0000000000000003 [ 529.583441][T12733] RBP: 00007fc793397090 R08: 0000000000000000 R09: 0000000000000000 [ 529.591416][T12733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.599389][T12733] R13: 0000000000000000 R14: 00007fc792775fa0 R15: 00007ffe624011d8 [ 529.607384][T12733] [ 529.647775][ T29] audit: type=1400 audit(1736841721.700:2183): avc: denied { relabelfrom } for pid=12734 comm="syz.0.1681" name="" dev="pipefs" ino=49684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 529.761192][ T29] audit: type=1400 audit(1736841721.830:2184): avc: denied { setattr } for pid=12739 comm="syz.4.1685" name="NETLINK" dev="sockfs" ino=48969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 529.815749][ T29] audit: type=1326 audit(1736841721.890:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 529.817676][ T29] audit: type=1326 audit(1736841721.890:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 529.875348][ T29] audit: type=1326 audit(1736841721.920:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8151847df code=0x7ffc0000 [ 529.898963][ T29] audit: type=1326 audit(1736841721.920:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 529.923072][ T29] audit: type=1326 audit(1736841721.920:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 529.946729][ T29] audit: type=1400 audit(1736841721.920:2190): avc: denied { bind } for pid=12741 comm="syz.5.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 529.967583][ T29] audit: type=1326 audit(1736841721.950:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.6.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 531.838445][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 531.838465][ T29] audit: type=1326 audit(1736841723.890:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.4.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 531.908170][ T29] audit: type=1326 audit(1736841723.890:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.4.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 532.007338][ T29] audit: type=1326 audit(1736841723.890:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.4.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 532.082057][ T29] audit: type=1326 audit(1736841723.890:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.4.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 532.134670][ T29] audit: type=1326 audit(1736841723.890:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.4.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 532.179188][ T29] audit: type=1800 audit(1736841723.890:2214): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1694" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 532.242348][ T29] audit: type=1326 audit(1736841723.890:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.4.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 532.305362][ T29] audit: type=1326 audit(1736841723.890:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.4.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 532.373956][ T29] audit: type=1326 audit(1736841723.890:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.4.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 532.453439][ T29] audit: type=1326 audit(1736841723.890:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.4.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 532.863706][T12791] ptrace attach of "./syz-executor exec"[6772] was attempted by "./syz-executor exec"[12791] [ 534.478767][T12812] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 534.504251][ T5864] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 535.407330][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 535.992437][ T5864] usb 6-1: unable to read config index 0 descriptor/all [ 535.999609][ T5864] usb 6-1: can't read configurations, error -71 [ 536.069624][T12831] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1709'. [ 537.214411][T12840] [U] ^C [ 537.634636][T12847] ALSA: mixer_oss: invalid OSS volume '' [ 538.066420][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 538.162571][T12854] ptrace attach of "./syz-executor exec"[7501] was attempted by "./syz-executor exec"[12854] [ 540.111792][T12865] [U] ^C^C [ 540.365987][T12873] netlink: 'syz.3.1726': attribute type 5 has an invalid length. [ 541.305809][T12877] [U] ^C [ 541.849744][T12896] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1729'. [ 541.878200][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 542.112169][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 542.192576][ T9] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 542.222249][ T9] usb 4-1: config 0 has no interface number 0 [ 542.299309][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 542.301031][T12901] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 542.313573][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.340382][ T9] usb 4-1: Product: syz [ 542.342973][ T5864] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 542.346848][ T9] usb 4-1: Manufacturer: syz [ 542.346865][ T9] usb 4-1: SerialNumber: syz [ 542.447725][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 542.447743][ T29] audit: type=1400 audit(1736841734.500:2251): avc: denied { accept } for pid=12903 comm="syz.6.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 542.475218][ T9] usb 4-1: config 0 descriptor?? [ 542.557374][T12911] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1736'. [ 542.623206][T12914] dccp_invalid_packet: pskb_may_pull failed [ 543.064004][ T9] radio-si470x 4-1:0.35: DeviceID=0x2512 ChipID=0x8a48 [ 543.162591][ T9] radio-si470x 4-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 543.176387][ T9] radio-si470x 4-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 543.195469][ T9] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 543.211791][ T5864] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 543.239312][ T9] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 543.281478][ T9] usb 4-1: USB disconnect, device number 47 [ 543.588318][ T5864] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 544.144406][T12925] [U] ^C [ 544.238222][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 544.247760][ T5864] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 544.258819][ T5864] usb 1-1: config 0 has no interface number 0 [ 544.264994][ T5864] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 544.295977][ T5864] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 544.310112][ T5864] usb 1-1: config 0 interface 41 has no altsetting 0 [ 544.322072][ T5864] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 544.324407][T12939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.369885][T12939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.788362][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 545.008211][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 545.091208][ T9] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 545.287433][ T9] usb 7-1: config 0 has no interface number 0 [ 545.293983][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.302126][ T5864] usb 1-1: Product: syz [ 545.306295][ T5864] usb 1-1: Manufacturer: syz [ 545.310964][ T5864] usb 1-1: SerialNumber: syz [ 545.317605][ T5864] usb 1-1: config 0 descriptor?? [ 545.324594][T12924] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 545.325125][ T9] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 545.331840][T12924] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 545.531765][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.669207][ T9] usb 7-1: Product: syz [ 545.748582][T12955] nbd3: detected capacity change from 0 to 12 [ 545.775356][ T9] usb 7-1: Manufacturer: syz [ 545.861578][ T9] usb 7-1: SerialNumber: syz [ 545.919858][T12958] block nbd3: Send control failed (result -89) [ 545.971786][ T9] usb 7-1: config 0 descriptor?? [ 546.428184][T12958] block nbd3: Request send failed, requeueing [ 546.959792][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 547.468265][ T42] block nbd3: Dead connection, failed to find a fallback [ 547.475360][ T42] block nbd3: shutting down sockets [ 547.480622][ T42] blk_print_req_error: 24 callbacks suppressed [ 547.480635][ T42] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.619894][ T42] buffer_io_error: 24 callbacks suppressed [ 547.619932][ T42] Buffer I/O error on dev nbd3, logical block 0, async page read [ 547.667756][ T29] audit: type=1326 audit(1736841739.740:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12951 comm="syz.5.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 547.668003][T12962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.699097][ T5864] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 547.731386][ T5864] usb 1-1: USB disconnect, device number 40 [ 547.830445][ T29] audit: type=1326 audit(1736841739.740:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12951 comm="syz.5.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 547.990574][T12955] nbd3: detected capacity change from 12 to 18 [ 547.998390][T12958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.007695][T12958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 548.046155][T12958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.075150][ T29] audit: type=1326 audit(1736841739.740:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12951 comm="syz.5.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 548.102426][T12958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 548.111192][T12958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.124841][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -110) [ 548.138398][ T29] audit: type=1326 audit(1736841739.740:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12951 comm="syz.5.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 548.158492][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -32) [ 548.167156][T12958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 548.185395][T12958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.204707][T12970] random: crng reseeded on system resumption [ 548.212893][T12958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 548.235331][T12958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.265521][ T29] audit: type=1326 audit(1736841739.740:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12951 comm="syz.5.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 548.295360][T12958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 548.308262][T12958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.338198][T12958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 548.346095][ T29] audit: type=1326 audit(1736841739.740:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12951 comm="syz.5.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 548.393359][T12958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.413265][T12958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 548.439720][T12958] ldm_validate_partition_table(): Disk read failed. [ 548.448147][ T29] audit: type=1326 audit(1736841739.740:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12951 comm="syz.5.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 548.460977][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -32) [ 548.481390][T12958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.481425][T12958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 548.481514][T12958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.498641][T12975] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1750'. [ 548.529384][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -32) [ 548.539151][ T29] audit: type=1326 audit(1736841739.740:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12951 comm="syz.5.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 548.562785][ T29] audit: type=1400 audit(1736841740.280:2260): avc: denied { write } for pid=12969 comm="syz.4.1751" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 548.596183][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -32) [ 548.606615][T12958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 548.614824][T12958] Dev nbd3: unable to read RDB block 0 [ 548.620561][T12958] nbd3: unable to read partition table [ 548.626430][T12958] nbd3: partition table beyond EOD, truncated [ 548.632731][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -32) [ 548.734269][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -32) [ 548.747106][ T9] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 548.766996][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 548.784225][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 548.794172][ T9] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 548.807730][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 548.817722][ T9] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 548.828023][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 548.849565][ T9] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 548.861644][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 548.874578][ T9] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 548.884822][ T9] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 548.894894][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 548.905585][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35 [ 548.923093][ T9] usb 7-1: USB disconnect, device number 25 [ 549.691867][T12980] [U] ^C [ 549.707235][T12989] 8021q: VLANs not supported on lo [ 549.737568][T12989] netlink: 'syz.4.1756': attribute type 9 has an invalid length. [ 549.773772][T12989] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1756'. [ 549.777751][ T5825] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 549.941666][ T5825] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 549.951220][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.965103][T12998] ptrace attach of "./syz-executor exec"[11685] was attempted by "./syz-executor exec"[12998] [ 549.968250][ T5825] pwc: Logitech ViewPort AV 100 webcam detected. [ 550.643782][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1755'. [ 551.310436][T13010] fuse: Bad value for 'fd' [ 551.344631][T13008] xt_hashlimit: max too large, truncated to 1048576 [ 551.568588][ T29] audit: type=1400 audit(1736841743.640:2261): avc: denied { view } for pid=13012 comm="syz.3.1763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 551.774417][T13023] dccp_invalid_packet: pskb_may_pull failed [ 551.898301][ T5865] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 552.078342][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 552.089086][ T5865] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.115652][ T5865] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 552.125419][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.153490][ T5865] usb 6-1: config 0 descriptor?? [ 552.168978][ T5865] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input36 [ 552.363236][ T5825] pwc: Failed to set LED on/off time (-71) [ 552.570990][T13030] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1767'. [ 552.596949][ T5825] pwc: send_video_command error -71 [ 552.602316][ T5825] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 552.610172][ T5825] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71 [ 553.164764][ T5825] usb 1-1: USB disconnect, device number 41 [ 553.975271][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 554.080783][T13033] [U] ^C [ 554.373662][ T1206] usb 6-1: USB disconnect, device number 52 [ 554.393392][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 554.404457][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.413387][T13046] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[13046] [ 554.448895][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.469419][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 554.485994][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 555.072663][ T9] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 555.081002][ T9] usb 7-1: Manufacturer: syz [ 555.087267][ T9] usb 7-1: config 0 descriptor?? [ 555.168141][ T5825] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 555.396519][ T29] audit: type=1400 audit(1736841747.470:2262): avc: denied { ioctl } for pid=13056 comm="syz.5.1775" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 555.568790][ T29] audit: type=1400 audit(1736841747.630:2263): avc: denied { ioctl } for pid=13056 comm="syz.5.1775" path="socket:[50500]" dev="sockfs" ino=50500 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 555.677736][ T9] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 555.717964][ T5825] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 555.804366][ T9] appleir 0003:05AC:8243.0018: No inputs registered, leaving [ 555.834250][ T5825] usb 4-1: can't read configurations, error -61 [ 555.855409][ T9] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 555.988300][ T5825] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 556.340281][ T29] audit: type=1400 audit(1736841748.420:2264): avc: denied { watch } for pid=13068 comm="syz.0.1779" path="/proc/1015/task" dev="proc" ino=51550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 556.489895][ T5825] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 556.497516][ T5825] usb 4-1: can't read configurations, error -61 [ 556.504053][ T5825] usb usb4-port1: attempt power cycle [ 557.000747][ T9626] usb 7-1: USB disconnect, device number 26 [ 557.029755][ T5825] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 557.052643][ T5825] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 557.067092][ T5825] usb 4-1: can't read configurations, error -61 [ 557.766404][T13089] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1784'. [ 557.838247][ T5864] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 557.861073][ T5825] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 558.042859][ T5864] usb 6-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 558.079757][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.309076][ T5825] usb 4-1: device descriptor read/8, error -71 [ 558.331935][T13093] ptrace attach of "./syz-executor exec"[11685] was attempted by "./syz-executor exec"[13093] [ 558.352028][ T5864] pwc: Logitech ViewPort AV 100 webcam detected. [ 558.801038][ T5825] usb usb4-port1: unable to enumerate USB device [ 560.459818][T13113] 9pnet_fd: Insufficient options for proto=fd [ 560.518241][ T5864] pwc: Failed to set LED on/off time (-71) [ 560.539901][ T5864] pwc: send_video_command error -71 [ 560.545139][ T5864] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 560.588761][T13113] vlan2: entered promiscuous mode [ 560.594186][T13113] bond0: entered promiscuous mode [ 560.599365][T13113] bond_slave_0: entered promiscuous mode [ 560.605119][T13113] bond_slave_1: entered promiscuous mode [ 560.624610][T13113] bond0: left promiscuous mode [ 560.632274][T13113] bond_slave_0: left promiscuous mode [ 560.648757][T13113] bond_slave_1: left promiscuous mode [ 560.655228][ T5864] Philips webcam 6-1:127.0: probe with driver Philips webcam failed with error -71 [ 560.706386][ T5864] usb 6-1: USB disconnect, device number 53 [ 561.118300][ T5864] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 561.668180][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 562.202921][ T5864] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 562.221702][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.229976][ T5864] usb 6-1: Product: syz [ 562.234216][ T5864] usb 6-1: Manufacturer: syz [ 562.239038][ T5864] usb 6-1: SerialNumber: syz [ 562.245392][ T5864] usb 6-1: config 0 descriptor?? [ 562.266850][ T5864] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 562.283283][ T5864] usb 6-1: Detected FT-X [ 562.455772][ T29] audit: type=1400 audit(1736841754.530:2265): avc: denied { connect } for pid=13148 comm="syz.3.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 562.468216][ T5825] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 562.490527][T13120] netlink: 'syz.5.1794': attribute type 5 has an invalid length. [ 562.504579][ T5864] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 562.512931][ T29] audit: type=1400 audit(1736841754.590:2266): avc: denied { write } for pid=13148 comm="syz.3.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 562.534491][ T5864] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 562.542749][ T5864] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 562.724365][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.753755][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.814290][ T5825] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 562.871201][ T5825] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 562.872512][ T5864] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 562.938147][ T5825] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 562.955285][ T5864] usb 6-1: USB disconnect, device number 54 [ 562.963224][ T5864] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 562.972796][ T5864] ftdi_sio 6-1:0.0: device disconnected [ 563.004517][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.071760][T13146] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 564.268477][ T5825] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 564.284679][ T29] audit: type=1326 audit(1736841755.600:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13162 comm="syz.6.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 564.308288][ T29] audit: type=1326 audit(1736841755.600:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13162 comm="syz.6.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 564.331914][ T29] audit: type=1326 audit(1736841755.610:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13162 comm="syz.6.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 564.355402][ T29] audit: type=1326 audit(1736841755.610:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13162 comm="syz.6.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 564.378872][ T29] audit: type=1326 audit(1736841755.610:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13162 comm="syz.6.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 564.402377][ T29] audit: type=1326 audit(1736841755.610:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13162 comm="syz.6.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 564.425808][ T29] audit: type=1326 audit(1736841755.610:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13162 comm="syz.6.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 564.449388][ T29] audit: type=1326 audit(1736841755.610:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13162 comm="syz.6.1806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 564.888405][ T5864] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 565.038229][ T5864] usb 6-1: device descriptor read/64, error -71 [ 565.103953][ T5898] usb 1-1: USB disconnect, device number 42 [ 565.358375][ T5864] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 565.508205][ T5864] usb 6-1: device descriptor read/64, error -71 [ 565.618311][ T5864] usb usb6-port1: attempt power cycle [ 565.824976][T13191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 565.978514][ T5864] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 566.033417][ T5864] usb 6-1: device descriptor read/8, error -71 [ 566.217522][T13192] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 566.279088][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1813'. [ 566.439240][ T5864] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 566.459538][ T5864] usb 6-1: device descriptor read/8, error -71 [ 567.024038][ T5864] usb usb6-port1: unable to enumerate USB device [ 567.133563][T13206] IPVS: length: 225 != 24 [ 567.275313][T13213] ptrace attach of "./syz-executor exec"[6772] was attempted by "./syz-executor exec"[13213] [ 568.982983][T13236] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1826'. [ 569.684487][T13232] [U] ^C [ 569.685056][T13242] unknown channel width for channel at 909000KHz? [ 569.817919][T13254] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[13254] [ 569.837728][T13256] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1834'. [ 570.529136][T13256] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.538513][T13256] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.666587][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1839'. [ 571.676183][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1839'. [ 571.731317][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1839'. [ 571.740782][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1839'. [ 571.752004][ T5132] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 571.856649][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1839'. [ 571.872219][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1839'. [ 572.659279][T13291] [U] ^C [ 572.797034][T13305] ptrace attach of "./syz-executor exec"[9520] was attempted by "./syz-executor exec"[13305] [ 572.888774][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.166559][ T5864] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 574.408261][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 574.414763][ T5864] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 574.422994][ T5864] usb 6-1: config 8 has no interface number 0 [ 574.449991][ T5864] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 574.465125][ T969] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 574.479979][ T969] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 574.491972][ T5864] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 574.513486][ T5864] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 574.532417][ T5864] usb 6-1: config 8 interface 39 has no altsetting 0 [ 574.545234][ T5864] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 574.557983][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.587294][ T5864] usb 6-1: Product: syz [ 574.592146][ T5864] usb 6-1: Manufacturer: syz [ 574.597770][ T5864] usb 6-1: SerialNumber: syz [ 574.928905][ T969] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 575.116488][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 575.269419][ T969] usb 1-1: unable to get BOS descriptor or descriptor too short [ 575.308320][ T969] usb 1-1: config 1 has an invalid descriptor of length 211, skipping remainder of the config [ 575.341378][ T969] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 575.385130][ T969] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 575.404363][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.442854][ T969] usb 1-1: Product: syz [ 575.447032][ T969] usb 1-1: Manufacturer: syz [ 575.461789][ T969] usb 1-1: SerialNumber: syz [ 575.936063][T13327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13327 comm=syz.6.1853 [ 575.948810][ T5132] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 575.959038][ T5132] Bluetooth: hci4: Injecting HCI hardware error event [ 575.962386][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 575.962400][ T29] audit: type=1400 audit(1736841768.040:2277): avc: denied { remount } for pid=13326 comm="syz.6.1853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 575.968459][ T5832] Bluetooth: hci4: hardware error 0x00 [ 576.849827][ T969] usb 1-1: USB disconnect, device number 43 [ 576.857563][ T5864] ipheth 6-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 576.865857][ T5864] ipheth 6-1:8.39: probe with driver ipheth failed with error -71 [ 576.904817][ T5864] usb 6-1: USB disconnect, device number 59 [ 578.068444][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'. [ 578.429632][ T5832] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 578.458724][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'. [ 580.030819][T13384] xt_TPROXY: Can be used only with -p tcp or -p udp [ 580.077896][ T29] audit: type=1400 audit(1736841772.140:2278): avc: denied { relabelfrom } for pid=13379 comm="syz.6.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 580.098240][ T29] audit: type=1400 audit(1736841772.140:2279): avc: denied { relabelto } for pid=13379 comm="syz.6.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 580.435133][T13394] vcan0: tx address claim with dlc 1 [ 580.446435][ T29] audit: type=1400 audit(1736841772.520:2280): avc: denied { setopt } for pid=13385 comm="syz.5.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 580.550148][T13380] [U] ^C [ 580.720664][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 580.968548][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 581.033007][ T9] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 581.048159][ T9] usb 7-1: config 0 has no interface number 0 [ 581.054323][ T9] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 581.144614][ T9] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 581.167408][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.184399][ T9] usb 7-1: Product: syz [ 581.192300][T13404] netlink: 'syz.0.1873': attribute type 1 has an invalid length. [ 581.202226][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1873'. [ 581.215064][ T9] usb 7-1: Manufacturer: syz [ 581.227396][ T9] usb 7-1: SerialNumber: syz [ 581.235656][ T29] audit: type=1400 audit(1736841773.310:2281): avc: denied { read } for pid=13401 comm="syz.0.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 581.239404][ T9] usb 7-1: config 0 descriptor?? [ 581.558418][ T9] usbtouchscreen 7-1:0.214: Failed to read FW rev: 0 [ 581.571264][ T9] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 582.327773][ T5864] usb 7-1: USB disconnect, device number 27 [ 582.695439][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'. [ 583.236430][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1882'. [ 585.188250][ T969] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 585.351031][ T29] audit: type=1400 audit(1736841777.420:2282): avc: denied { read } for pid=13462 comm="syz.6.1889" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 585.375422][ T29] audit: type=1400 audit(1736841777.420:2283): avc: denied { open } for pid=13462 comm="syz.6.1889" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 585.637355][ T29] audit: type=1400 audit(1736841777.430:2284): avc: denied { ioctl } for pid=13462 comm="syz.6.1889" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 585.679829][ T969] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 585.707914][ T969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.755978][ T969] usb 1-1: config 0 has no interface number 0 [ 585.787500][ T969] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 585.873311][ T969] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.887988][T13470] ucma_write: process 690 (syz.6.1891) changed security contexts after opening file descriptor, this is not allowed. [ 586.063592][ T969] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 586.073111][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.081280][ T969] usb 1-1: Product: syz [ 586.086396][ T969] usb 1-1: Manufacturer: syz [ 586.092108][ T969] usb 1-1: SerialNumber: syz [ 586.107795][ T969] usb 1-1: config 0 descriptor?? [ 586.251317][T13481] ALSA: mixer_oss: invalid OSS volume '' [ 587.903950][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1899'. [ 588.592618][T13507] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1901'. [ 588.653429][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1901'. [ 588.763633][T13517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.774394][T13517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.808567][ T5825] usb 1-1: USB disconnect, device number 44 [ 589.154189][T13527] random: crng reseeded on system resumption [ 589.559017][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'. [ 590.329904][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.337614][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.351627][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.398437][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.437644][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.531912][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.562528][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.573817][ T9626] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 590.580840][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.651665][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.709018][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.757272][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.790221][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.797665][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.805677][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.813907][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.821470][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.836945][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.844500][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.852014][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.859455][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.866841][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.874296][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.881886][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.889461][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.896848][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.904368][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.911812][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.919268][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.926651][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.934088][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.941543][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.948971][ T969] hid-generic 0000:0000:0003.001A: unknown main item tag 0x0 [ 590.959696][ T969] hid-generic 0000:0000:0003.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 591.006008][ T29] audit: type=1400 audit(1736841783.080:2285): avc: denied { getopt } for pid=13550 comm="syz.5.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 591.040968][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1917'. [ 591.056859][T13551] netlink: 'syz.5.1917': attribute type 2 has an invalid length. [ 591.065585][T13551] vivid-001: disconnect [ 591.221215][ T9626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.232177][ T9626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.281047][ T9626] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 591.290595][ T1206] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 591.298579][ T9626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.308283][ T969] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 591.308814][ T9626] usb 4-1: config 0 descriptor?? [ 591.328610][T13553] netlink: 'syz.0.1918': attribute type 14 has an invalid length. [ 591.458205][ T1206] usb 7-1: Using ep0 maxpacket: 16 [ 591.467056][ T1206] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.469718][ T969] usb 6-1: unable to get BOS descriptor or descriptor too short [ 591.478190][ T1206] usb 7-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 591.485877][ T969] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 591.503340][ T1206] usb 7-1: config 0 interface 0 has no altsetting 0 [ 591.509083][ T969] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 591.525352][ T1206] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 591.525397][ T1206] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.542613][ T969] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 591.553657][ T1206] usb 7-1: config 0 descriptor?? [ 591.562990][ T1206] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 591.563403][ T969] usb 6-1: string descriptor 0 read error: -22 [ 591.577816][ T969] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.586975][ T969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.688227][ T5864] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 591.809884][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.818664][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.838249][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 591.846386][ T5864] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 591.854570][ T5864] usb 1-1: config 8 has no interface number 0 [ 591.860767][ T5864] usb 1-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 591.872396][ T5864] usb 1-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 591.882279][ T5864] usb 1-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 591.892225][ T5864] usb 1-1: config 8 interface 39 has no altsetting 0 [ 591.902064][ T5864] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 591.911219][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.919621][ T5864] usb 1-1: Product: syz [ 591.923811][ T5864] usb 1-1: Manufacturer: syz [ 591.928530][ T5864] usb 1-1: SerialNumber: syz [ 591.955758][T13542] 9pnet_fd: Insufficient options for proto=fd [ 592.241828][T13563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.285826][T13563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.600659][ T9626] usbhid 4-1:0.0: can't add hid device: -71 [ 592.606660][ T9626] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 592.616792][ T9626] usb 4-1: USB disconnect, device number 52 [ 592.660648][T13551] vivid-001: reconnect [ 592.669161][ T969] cdc_ncm 6-1:1.0: bind() failure [ 592.683598][ T969] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 592.697140][ T969] cdc_ncm 6-1:1.1: bind() failure [ 592.712887][ T969] usb 6-1: USB disconnect, device number 60 [ 592.727101][ T29] audit: type=1400 audit(1736841784.800:2286): avc: denied { write } for pid=13565 comm="syz.5.1922" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 592.753987][ T29] audit: type=1400 audit(1736841784.810:2287): avc: denied { ioctl } for pid=13565 comm="syz.5.1922" path="socket:[52618]" dev="sockfs" ino=52618 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 594.054670][ T9626] usb 7-1: USB disconnect, device number 28 [ 594.101973][T13571] [U] ^C [ 594.729552][ T29] audit: type=1326 audit(1736841786.640:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 594.753070][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.765895][ T29] audit: type=1326 audit(1736841786.640:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 594.789401][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.860517][ T29] audit: type=1326 audit(1736841786.640:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 594.884469][ T29] audit: type=1326 audit(1736841786.640:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 594.895923][ T5864] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 594.923773][ T9626] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 594.937544][ T29] audit: type=1326 audit(1736841786.640:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 594.961295][ T5864] ipheth 1-1:8.39: probe with driver ipheth failed with error -71 [ 594.990491][ T5864] usb 1-1: USB disconnect, device number 45 [ 594.999114][ T29] audit: type=1326 audit(1736841786.640:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 595.022487][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.028896][ T29] audit: type=1326 audit(1736841786.640:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 595.052335][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.248264][ T9626] usb 7-1: device descriptor read/64, error -71 [ 595.533149][ T9626] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 595.679770][ T9626] usb 7-1: device descriptor read/64, error -71 [ 595.799016][ T9626] usb usb7-port1: attempt power cycle [ 596.380609][T13612] 9pnet_fd: Insufficient options for proto=fd [ 596.428136][ T9626] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 596.448631][ T9626] usb 7-1: device descriptor read/8, error -71 [ 596.771188][ T9626] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 596.801712][ T5132] Bluetooth: hci5: command 0x1003 tx timeout [ 596.810583][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 596.855883][ T9626] usb 7-1: device descriptor read/8, error -71 [ 596.986868][ T9626] usb usb7-port1: unable to enumerate USB device [ 597.800105][T13623] [U] ^C [ 598.086752][ T25] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 598.308442][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 598.328595][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 598.405097][T13641] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1943'. [ 598.428178][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 598.514273][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 598.523116][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 598.531961][ T25] usb 4-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 598.542359][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.566472][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 598.650062][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.668686][ T25] usb 4-1: Product: 颁ꚏ␟갎ꤟꂓ⻭佬垣ꪽ郇䯷葳辖ḇ≪䳾⠹䗥ꐣܫ耥ひ荎ﯨ呃늞ᧃ禵쿬菱ߚ뿫壄ӌ⯼悊❵䪓鮋唿벯痫굝ѥ跛껉敚ᜄ횀綷뷱㻵▦Ⱳ鵉ᕔ皶줁퍚笴⪛쥋뒴냩쯭㵒譐ፔ裷࠙䷟죋졎᜺뢎豤Ⓓ틋揼뎡忖⫱ﶳ፳㗲푒ể鲩鿡淪倘ᆺ齂기䉰渋뜾꒼믎㗯҉꠱ꓬ漙ᜊ⻨ﵨ쪮魥㠇괸稵 [ 598.704536][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.718737][ T25] usb 4-1: Manufacturer: 㰊 [ 598.723431][ T25] usb 4-1: SerialNumber: Ⰺ [ 599.851177][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1950'. [ 600.651687][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 600.651703][ T29] audit: type=1326 audit(1736841792.110:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13660 comm="syz.5.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 600.708129][ T29] audit: type=1326 audit(1736841792.110:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13660 comm="syz.5.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 600.751921][ T29] audit: type=1326 audit(1736841792.110:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13660 comm="syz.5.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 600.789762][T13654] delete_channel: no stack [ 600.805683][ T29] audit: type=1326 audit(1736841792.110:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13660 comm="syz.5.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 600.858090][ T29] audit: type=1326 audit(1736841792.110:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13660 comm="syz.5.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 600.898094][ T29] audit: type=1326 audit(1736841792.110:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13660 comm="syz.5.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 600.948131][ T29] audit: type=1326 audit(1736841792.110:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13660 comm="syz.5.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 600.998089][ T29] audit: type=1326 audit(1736841792.110:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13660 comm="syz.5.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aad85d29 code=0x7ffc0000 [ 601.048084][ T29] audit: type=1400 audit(1736841792.870:2304): avc: denied { bind } for pid=13654 comm="syz.6.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 602.025946][ T25] usb 4-1: 0:2 : does not exist [ 602.037823][ T25] usb 4-1: USB disconnect, device number 53 [ 602.533270][T13685] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 602.542673][T13685] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 602.551576][T13685] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 602.560540][T13685] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 603.491481][T13701] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1959'. [ 606.070340][T13729] FAULT_INJECTION: forcing a failure. [ 606.070340][T13729] name failslab, interval 1, probability 0, space 0, times 0 [ 606.083175][T13729] CPU: 1 UID: 0 PID: 13729 Comm: syz.4.1966 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 606.093955][T13729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 606.104027][T13729] Call Trace: [ 606.107314][T13729] [ 606.110249][T13729] dump_stack_lvl+0x16c/0x1f0 [ 606.114943][T13729] should_fail_ex+0x497/0x5b0 [ 606.119643][T13729] ? fs_reclaim_acquire+0xae/0x150 [ 606.124765][T13729] should_failslab+0xc2/0x120 [ 606.129439][T13729] __kmalloc_cache_noprof+0x68/0x410 [ 606.134714][T13729] ? lockdep_hardirqs_on+0x7c/0x110 [ 606.139907][T13729] alloc_fs_context+0x57/0x9c0 [ 606.144665][T13729] __x64_sys_fsopen+0xeb/0x240 [ 606.149419][T13729] do_syscall_64+0xcd/0x250 [ 606.153915][T13729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.159813][T13729] RIP: 0033:0x7fc792585d29 [ 606.164211][T13729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.183802][T13729] RSP: 002b:00007fc793397038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 606.192199][T13729] RAX: ffffffffffffffda RBX: 00007fc792775fa0 RCX: 00007fc792585d29 [ 606.200155][T13729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 606.208109][T13729] RBP: 00007fc793397090 R08: 0000000000000000 R09: 0000000000000000 [ 606.216063][T13729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.224016][T13729] R13: 0000000000000001 R14: 00007fc792775fa0 R15: 00007ffe624011d8 [ 606.231982][T13729] [ 606.235435][T13721] [U] ^C [ 606.915963][ T29] audit: type=1326 audit(1736841798.980:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b82d85d29 code=0x7ffc0000 [ 607.278187][ T29] audit: type=1326 audit(1736841798.980:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b82d85d29 code=0x7ffc0000 [ 607.301862][ T29] audit: type=1326 audit(1736841798.980:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f0b82d85d29 code=0x7ffc0000 [ 607.325302][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.417090][ T29] audit: type=1326 audit(1736841798.980:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b82d85d29 code=0x7ffc0000 [ 607.463946][T13745] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1968'. [ 607.558822][T13745] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1968'. [ 607.768022][ T29] audit: type=1326 audit(1736841798.980:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b82d85d29 code=0x7ffc0000 [ 608.310371][ T29] audit: type=1326 audit(1736841798.990:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b82d85d29 code=0x7ffc0000 [ 608.648115][ T29] audit: type=1326 audit(1736841798.990:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b82d85d29 code=0x7ffc0000 [ 608.676353][ T29] audit: type=1326 audit(1736841798.990:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b82d85d29 code=0x7ffc0000 [ 608.756410][T13745] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1968'. [ 608.799333][T13745] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1968'. [ 608.920785][T13745] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1968'. [ 608.957877][T13762] kvm: MWAIT instruction emulated as NOP! [ 609.163412][T13772] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 610.002078][T13782] ALSA: mixer_oss: invalid OSS volume '' [ 611.599587][T13804] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13804 comm=syz.6.1983 [ 611.659964][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1984'. [ 611.705712][ T29] audit: type=1326 audit(1736841803.780:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 611.834851][ T29] audit: type=1326 audit(1736841803.810:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 611.989341][ T29] audit: type=1326 audit(1736841803.810:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 612.014466][ T29] audit: type=1326 audit(1736841803.810:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 612.038617][ T29] audit: type=1326 audit(1736841803.810:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 612.084369][ T29] audit: type=1326 audit(1736841803.820:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 612.143589][ T29] audit: type=1326 audit(1736841803.820:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 612.295358][T13816] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1987'. [ 612.304816][T13816] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1987'. [ 612.313768][T13816] netlink: 'syz.5.1987': attribute type 6 has an invalid length. [ 612.321543][T13816] netlink: 'syz.5.1987': attribute type 5 has an invalid length. [ 612.329287][T13816] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1987'. [ 612.365216][ T29] audit: type=1326 audit(1736841803.820:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 612.398094][ T29] audit: type=1326 audit(1736841803.820:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 612.514282][ T29] audit: type=1326 audit(1736841803.820:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 612.615199][ T29] audit: type=1326 audit(1736841803.820:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 612.676719][ T29] audit: type=1326 audit(1736841803.830:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13805 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 613.224822][T13858] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 613.407913][T13855] siw: device registration error -23 [ 613.693434][T13864] loop6: detected capacity change from 0 to 524287999 [ 613.706365][ C0] blk_print_req_error: 5 callbacks suppressed [ 613.706384][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.721629][ C0] buffer_io_error: 5 callbacks suppressed [ 613.721637][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.755132][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.764366][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.808280][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.817508][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.818581][T13867] loop9: detected capacity change from 0 to 7 [ 613.834918][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.844148][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.852866][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.862098][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.871036][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.880228][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.891323][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.895628][T13867] Dev loop9: unable to read RDB block 7 [ 613.900543][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.914395][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 613.923601][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.933680][T13864] ldm_validate_partition_table(): Disk read failed. [ 613.968136][T13867] loop9: unable to read partition table [ 613.973931][T13867] loop9: partition table beyond EOD, truncated [ 613.988101][T13867] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 613.993789][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 614.006580][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.014678][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 614.023895][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.033157][T13864] Dev loop6: unable to read RDB block 0 [ 614.053931][T13864] loop6: unable to read partition table [ 614.071107][T13864] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 614.287591][T13865] ldm_validate_partition_table(): Disk read failed. [ 614.303439][T13865] Dev loop6: unable to read RDB block 0 [ 614.315858][T13865] loop6: unable to read partition table [ 614.333698][T13865] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 615.558115][ T5825] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 615.593018][T13893] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.622368][T13893] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.928948][T13898] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2012'. [ 615.988204][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 616.008576][ T5825] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 616.016753][ T5825] usb 4-1: config 0 has no interface number 0 [ 616.052846][ T5825] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 616.062251][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.085377][ T5825] usb 4-1: Product: syz [ 616.097885][ T5825] usb 4-1: Manufacturer: syz [ 616.128140][ T5825] usb 4-1: SerialNumber: syz [ 616.201133][ T5825] usb 4-1: config 0 descriptor?? [ 616.248300][ T5825] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 616.556449][ T5825] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 616.606913][ T5825] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 616.647741][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 616.953027][T13888] Bluetooth: hci5: Frame reassembly failed (-84) [ 617.063085][T13919] input: syz0 as /devices/virtual/input/input40 [ 617.887940][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 617.887975][ T29] audit: type=1326 audit(1736841809.950:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 618.225191][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2022'. [ 618.241973][ T29] audit: type=1326 audit(1736841809.950:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 618.392270][ T29] audit: type=1326 audit(1736841809.960:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 618.533832][ T29] audit: type=1326 audit(1736841809.960:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 618.632648][ T29] audit: type=1326 audit(1736841809.960:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 618.755583][ T29] audit: type=1326 audit(1736841809.960:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 618.887008][ T29] audit: type=1326 audit(1736841809.960:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 618.981449][ T29] audit: type=1326 audit(1736841809.960:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13925 comm="syz.4.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc792585d29 code=0x7ffc0000 [ 619.038248][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 619.063626][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 619.068284][ T969] usb 4-1: USB disconnect, device number 54 [ 619.118727][ T969] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 619.185102][ T969] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 620.008179][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2025'. [ 620.175660][ T969] quatech2 4-1:0.51: device disconnected [ 620.498453][ T29] audit: type=1326 audit(1736841812.580:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.6.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 620.522595][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.728302][ T969] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 620.863512][ T29] audit: type=1326 audit(1736841812.940:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.6.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 620.918207][ T969] usb 4-1: Using ep0 maxpacket: 8 [ 620.925406][ T969] usb 4-1: config 6 has an invalid interface number: 160 but max is 2 [ 620.933913][ T969] usb 4-1: config 6 has an invalid interface number: 143 but max is 2 [ 620.964577][ T969] usb 4-1: config 6 has an invalid descriptor of length 203, skipping remainder of the config [ 621.008142][ T969] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 621.051487][ T969] usb 4-1: config 6 has no interface number 0 [ 621.057632][ T969] usb 4-1: config 6 has no interface number 1 [ 621.097849][ T969] usb 4-1: config 6 interface 160 altsetting 204 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 621.124152][ T969] usb 4-1: config 6 interface 160 altsetting 204 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 621.147843][ T969] usb 4-1: config 6 interface 143 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 621.150674][T13968] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2032'. [ 621.166327][ T969] usb 4-1: config 6 interface 160 has no altsetting 0 [ 621.177278][ T969] usb 4-1: config 6 interface 143 has no altsetting 0 [ 621.195072][ T969] usb 4-1: New USB device found, idVendor=044e, idProduct=3001, bcdDevice=50.04 [ 621.206680][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.216781][ T969] usb 4-1: Product: syz [ 621.232087][ T969] usb 4-1: Manufacturer: 㸖曌疣긞黦〹ꫨ具ฺ햔❻섃⣃藿啡푹㑍қ౸됧뛞忟輿㘢嫧繆叉䩜曉⍪疖附쥼イ㆗⇻띮姯⟵E阱枥楍辇譭赚댧緅有퐥 [ 621.263681][ T969] usb 4-1: SerialNumber: syz [ 621.323799][ T5825] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 621.358461][ T9626] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 621.485843][ T5825] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 621.510246][ T5825] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 621.561480][ T5825] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 621.568288][ T969] usb 4-1: USB disconnect, device number 55 [ 621.574863][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.602491][T13964] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 621.626489][ T5825] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 622.103580][T13984] netlink: 'syz.0.2031': attribute type 3 has an invalid length. [ 622.149970][T13984] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2031'. [ 622.474322][T13993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2036'. [ 622.783582][T13996] o2cb: This node has not been configured. [ 622.789799][T13996] o2cb: Cluster check failed. Fix errors before retrying. [ 622.797007][T13996] (syz.6.2037,13996,1):user_dlm_register:674 ERROR: status = -22 [ 622.804893][T13996] (syz.6.2037,13996,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 622.983274][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 622.983310][ T29] audit: type=1400 audit(1736841814.850:2346): avc: denied { write } for pid=13991 comm="syz.6.2037" name="/" dev="ocfs2_dlmfs" ino=54746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 623.014223][ T29] audit: type=1400 audit(1736841814.860:2347): avc: denied { add_name } for pid=13991 comm="syz.6.2037" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 623.250861][ T29] audit: type=1400 audit(1736841814.860:2348): avc: denied { create } for pid=13991 comm="syz.6.2037" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 623.277286][ T969] usb 1-1: USB disconnect, device number 46 [ 623.311465][ T29] audit: type=1400 audit(1736841814.860:2349): avc: denied { associate } for pid=13991 comm="syz.6.2037" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 623.397562][ T29] audit: type=1400 audit(1736841815.450:2350): avc: denied { unmount } for pid=9520 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 623.407158][T14000] random: crng reseeded on system resumption [ 624.092617][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.099717][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.274886][ T9626] usb 6-1: unable to get BOS descriptor or descriptor too short [ 624.289027][ T9626] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 624.307261][ T9626] usb 6-1: can't read configurations, error -71 [ 624.476305][T14011] netlink: 'syz.4.2042': attribute type 1 has an invalid length. [ 624.698131][ T9626] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 624.815913][T14015] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2044'. [ 624.910865][ T9626] usb 6-1: device descriptor read/64, error -71 [ 624.987981][T14018] binder: BC_ATTEMPT_ACQUIRE not supported [ 624.995047][T14018] binder: 14017:14018 ioctl c0306201 200001c0 returned -22 [ 625.028508][ T9626] usb usb6-port1: attempt power cycle [ 625.578380][ T9626] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 625.747988][ T29] audit: type=1400 audit(1736841817.820:2351): avc: denied { map } for pid=14027 comm="syz.0.2050" path="socket:[54811]" dev="sockfs" ino=54811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 625.824544][T14031] trusted_key: encrypted_key: master key parameter 'def:syz' is invalid [ 625.834712][T14031] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2050'. [ 625.843796][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'. [ 625.879539][ T9626] usb 6-1: device descriptor read/8, error -71 [ 626.229321][ T9626] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 626.322371][ T9626] usb 6-1: device descriptor read/8, error -71 [ 626.434413][T14036] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2051'. [ 626.448462][ T9626] usb usb6-port1: unable to enumerate USB device [ 627.031438][ T29] audit: type=1400 audit(1736841819.110:2352): avc: denied { write } for pid=14029 comm="syz.3.2049" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 627.064680][T14030] [ 627.169069][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2054'. [ 627.534802][T14050] xt_l2tp: missing protocol rule (udp|l2tpip) [ 627.571682][T14052] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2057'. [ 628.945668][T14070] [U] ^C [ 629.162737][T14080] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2063'. [ 630.391879][ T25] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 630.477957][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 630.528231][ T29] audit: type=1400 audit(1736841822.600:2353): avc: denied { create } for pid=14094 comm="syz.4.2070" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 630.714584][ T25] usb 6-1: device descriptor read/all, error -71 [ 631.273799][ T5825] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 631.526914][ T5825] usb 4-1: config 0 has an invalid interface number: 90 but max is 0 [ 631.676490][ T5825] usb 4-1: config 0 has no interface number 0 [ 631.686935][ T5825] usb 4-1: config 0 interface 90 has no altsetting 0 [ 631.689229][ T29] audit: type=1400 audit(1736841823.690:2354): avc: denied { ioctl } for pid=14106 comm="syz.4.2072" path="socket:[54985]" dev="sockfs" ino=54985 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 631.721074][ T5825] usb 4-1: New USB device found, idVendor=2040, idProduct=b910, bcdDevice=b1.81 [ 631.730659][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.738844][ T5825] usb 4-1: Product: syz [ 631.744558][ T5825] usb 4-1: Manufacturer: syz [ 631.749334][ T5825] usb 4-1: SerialNumber: syz [ 631.760144][ T5825] usb 4-1: config 0 descriptor?? [ 631.778203][ T25] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 631.863885][ T29] audit: type=1326 audit(1736841823.940:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14111 comm="syz.6.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 631.908272][ T29] audit: type=1326 audit(1736841823.940:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14111 comm="syz.6.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 631.939558][ T25] usb 6-1: config 51 has an invalid descriptor of length 190, skipping remainder of the config [ 631.948382][ T29] audit: type=1326 audit(1736841823.940:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14111 comm="syz.6.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 631.990511][ T5825] smsusb:smsusb_probe: board id=8, interface number 90 [ 631.992612][ T25] usb 6-1: config 51 has 0 interfaces, different from the descriptor's value: 1 [ 632.005692][ T5825] usb 4-1: USB disconnect, device number 56 [ 632.023876][ T29] audit: type=1326 audit(1736841823.940:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14111 comm="syz.6.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 632.065342][ T29] audit: type=1326 audit(1736841823.940:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14111 comm="syz.6.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 632.096944][ T25] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 632.130304][ T29] audit: type=1326 audit(1736841823.970:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14111 comm="syz.6.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 632.157815][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.177929][ T25] usb 6-1: Product: syz [ 632.191343][ T29] audit: type=1326 audit(1736841823.970:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14111 comm="syz.6.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 632.224801][ T25] usb 6-1: Manufacturer: syz [ 632.236027][ T25] usb 6-1: SerialNumber: syz [ 632.242995][ T29] audit: type=1326 audit(1736841823.970:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14111 comm="syz.6.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb815185d29 code=0x7ffc0000 [ 632.505667][ T25] usb 6-1: USB disconnect, device number 66 [ 632.906392][T14128] binfmt_misc: register: failed to install interpreter file ./file0 [ 634.291164][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2081'. [ 635.240853][T14152] use of bytesused == 0 is deprecated and will be removed in the future, [ 635.249883][T14152] use the actual size instead. [ 636.127673][ T5825] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 637.184591][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 637.194195][ T5825] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 637.203055][ T5825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.216002][ T5825] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.229558][ T5825] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 637.243224][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.253945][ T5825] usb 6-1: Product: syz [ 637.261416][ T5825] usb 6-1: Manufacturer: syz [ 637.266028][ T5825] usb 6-1: SerialNumber: syz [ 637.910087][ T9626] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 638.181107][ T5825] usb 6-1: 0:2 : does not exist [ 638.341561][ T9626] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 638.350822][ T9626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.385548][ T9626] pwc: Logitech ViewPort AV 100 webcam detected. [ 638.576544][T14156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.585955][T14156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.652257][ T5825] usb 6-1: USB disconnect, device number 67 [ 640.383830][T14203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.481799][T14207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=14207 comm=syz.4.2097 [ 641.305279][ T9626] pwc: Failed to set LED on/off time (-71) [ 641.311572][ T9626] pwc: send_video_command error -71 [ 641.316889][ T9626] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 641.339305][ T9626] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 641.482538][ T9626] usb 4-1: USB disconnect, device number 57 [ 641.545548][T14227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2104'. [ 642.210300][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 642.216489][ T29] audit: type=1400 audit(1736841834.270:2401): avc: denied { mount } for pid=14218 comm="syz.3.2100" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 642.362193][T14224] [U] ^C [ 642.682739][ T29] audit: type=1400 audit(1736841834.760:2402): avc: denied { unmount } for pid=11685 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 643.121029][ T29] audit: type=1400 audit(1736841834.840:2403): avc: denied { ioctl } for pid=14223 comm="syz.6.2102" path="/dev/ptyr1" dev="devtmpfs" ino=136 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 643.232414][T14247] netlink: 'syz.3.2106': attribute type 3 has an invalid length. [ 643.240579][T14247] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2106'. [ 643.307530][T14248] NILFS (loop3): device size too small [ 643.766266][T14257] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 643.788510][ T969] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 644.776282][ T969] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 645.653354][T14281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2115'. [ 645.818179][ T969] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 645.960300][ T969] usb 6-1: device descriptor read/64, error -71 [ 646.693286][T14287] [U] ^C [ 646.975755][ T969] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 647.466562][T14311] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 647.475904][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2119'. [ 649.239307][ T969] usb 6-1: device descriptor read/64, error -71 [ 649.544284][ T969] usb usb6-port1: attempt power cycle [ 649.674951][T14332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2128'. [ 650.068823][T14340] ufs: You didn't specify the type of your ufs filesystem [ 650.068823][T14340] [ 650.068823][T14340] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 650.068823][T14340] [ 650.068823][T14340] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 650.100090][T14340] ufs: ufstype=old is supported read-only [ 650.107091][T14340] syz.0.2129: attempt to access beyond end of device [ 650.107091][T14340] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 650.130428][ T29] audit: type=1400 audit(1736841842.140:2404): avc: denied { mounton } for pid=14336 comm="syz.0.2129" path="/367/file0" dev="tmpfs" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 651.056192][T14346] [U] ^C [ 651.359915][ T5825] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 652.032886][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.043962][ T5825] usb 7-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 652.062757][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.087557][ T5825] usb 7-1: config 0 descriptor?? [ 652.268216][ T9626] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 652.426762][T14373] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2139'. [ 652.515036][ T9626] usb 1-1: Using ep0 maxpacket: 16 [ 652.573477][ T5825] wacom 0003:056A:037A.001B: unknown main item tag 0x0 [ 652.588233][ T5825] wacom 0003:056A:037A.001B: unknown main item tag 0x0 [ 653.078488][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 653.238242][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 653.252475][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 654.004455][ T9626] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 654.687626][ T9] usb 4-1: config 0 has no interface number 0 [ 654.693842][ T9626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.707302][ T5825] wacom 0003:056A:037A.001B: unknown main item tag 0x0 [ 654.714267][ T5825] wacom 0003:056A:037A.001B: unknown main item tag 0x0 [ 654.721409][ T5825] wacom 0003:056A:037A.001B: unknown main item tag 0x0 [ 654.728895][ T5825] wacom 0003:056A:037A.001B: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 654.842045][ T9] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 654.851447][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.859518][ T9] usb 4-1: Product: syz [ 654.863690][ T9] usb 4-1: Manufacturer: syz [ 654.868344][ T9] usb 4-1: SerialNumber: syz [ 654.873729][ T9626] usb 1-1: config 0 descriptor?? [ 654.879375][ T5825] wacom 0003:056A:037A.001B: hidraw0: USB HID v10.00 Device [HID 056a:037a] on usb-dummy_hcd.6-1/input0 [ 654.892133][ T5825] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:037A.001B/input/input41 [ 654.905312][ T9626] usb 1-1: can't set config #0, error -71 [ 655.000179][ T9626] usb 1-1: USB disconnect, device number 47 [ 655.039687][ T9] usb 4-1: config 0 descriptor?? [ 655.046956][ T9] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 655.053885][ T5825] usb 7-1: USB disconnect, device number 33 [ 655.418136][ T5864] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 655.568350][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 655.576654][ T5864] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 655.592235][ T5864] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 655.600777][ T5864] usb 6-1: Product: syz [ 655.609933][ T5864] usb 6-1: Manufacturer: syz [ 655.614634][ T5864] usb 6-1: SerialNumber: syz [ 655.628770][ T5864] usb 6-1: config 0 descriptor?? [ 655.707193][ T5864] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 656.106907][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -110) [ 656.258154][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -32) [ 656.268112][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -32) [ 656.824169][ T5864] gspca_zc3xx: reg_r err -110 [ 656.829296][ T5864] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 656.946882][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 656.966561][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 657.148205][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 657.162355][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 657.175744][ T9] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 657.186197][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 657.196448][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 657.207464][ T9] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 657.691317][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 657.707310][ T9] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 657.728224][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 657.740158][ T9] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 657.751144][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 657.762519][ T9] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 657.772572][ T9] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 657.782527][ T9] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 657.793310][ T9] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 657.811482][ T9] usb 4-1: USB disconnect, device number 58 [ 657.926443][ T29] audit: type=1326 audit(1736841850.000:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0886185d29 code=0x7ffc0000 [ 658.024679][ T969] usb 6-1: USB disconnect, device number 71 [ 658.107852][ T29] audit: type=1326 audit(1736841850.040:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0886185d29 code=0x7ffc0000 [ 658.293896][ T29] audit: type=1326 audit(1736841850.050:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f0886185d29 code=0x7ffc0000 [ 658.877349][ T29] audit: type=1326 audit(1736841850.050:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0886185d29 code=0x7ffc0000 [ 658.934859][ T29] audit: type=1326 audit(1736841850.050:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0886185d29 code=0x7ffc0000 [ 659.031256][ T29] audit: type=1326 audit(1736841850.170:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0886185d29 code=0x7ffc0000 [ 659.070467][ T29] audit: type=1326 audit(1736841850.170:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0886185d29 code=0x7ffc0000 [ 659.095032][T14435] loop9: detected capacity change from 0 to 7 [ 659.112533][T14435] Dev loop9: unable to read RDB block 7 [ 659.138122][T14435] loop9: unable to read partition table [ 659.143914][T14435] loop9: partition table beyond EOD, truncated [ 659.181618][ T29] audit: type=1326 audit(1736841850.170:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0886185d29 code=0x7ffc0000 [ 659.205646][T14435] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 660.185382][ T29] audit: type=1400 audit(1736841852.200:2413): avc: denied { read } for pid=14444 comm="syz.5.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 661.884229][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 662.991270][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 663.067144][T14492] ubi: mtd0 is already attached to ubi0 [ 663.165277][T14495] overlayfs: missing 'lowerdir' [ 663.218242][ T5864] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 663.479697][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 664.623816][ T5864] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 664.635026][ T5864] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 664.645120][ T5864] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 664.700851][ T5864] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 664.715679][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.776258][ T5864] usb 6-1: Product: syz [ 664.780751][ T5864] usb 6-1: Manufacturer: syz [ 664.785444][ T5864] usb 6-1: SerialNumber: syz [ 665.170877][T14519] [ 665.173247][T14519] ====================================================== [ 665.180273][T14519] WARNING: possible circular locking dependency detected [ 665.187294][T14519] 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 Not tainted [ 665.194405][T14519] ------------------------------------------------------ [ 665.201424][T14519] syz.0.2178/14519 is trying to acquire lock: [ 665.207495][T14519] ffff8880290e7b38 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x132/0x4f0 [ 665.216929][T14519] [ 665.216929][T14519] but task is already holding lock: [ 665.224297][T14519] ffff8880290e7bc8 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 665.233979][T14519] [ 665.233979][T14519] which lock already depends on the new lock. [ 665.233979][T14519] [ 665.244364][T14519] [ 665.244364][T14519] the existing dependency chain (in reverse order) is: [ 665.253357][T14519] [ 665.253357][T14519] -> #5 (&q->sysfs_dir_lock){+.+.}-{4:4}: [ 665.261248][T14519] __mutex_lock+0x19b/0xa60 [ 665.266265][T14519] blk_mq_sysfs_unregister_hctxs+0x92/0x2d0 [ 665.272671][T14519] __blk_mq_update_nr_hw_queues+0x93f/0x14e0 [ 665.279154][T14519] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 665.285203][T14519] nbd_start_device+0x15b/0xd70 [ 665.290554][T14519] nbd_ioctl+0x21a/0xfd0 [ 665.295300][T14519] blkdev_ioctl+0x276/0x6d0 [ 665.300308][T14519] __x64_sys_ioctl+0x190/0x200 [ 665.305583][T14519] do_syscall_64+0xcd/0x250 [ 665.310592][T14519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.316991][T14519] [ 665.316991][T14519] -> #4 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 665.325575][T14519] blk_mq_submit_bio+0x1fb6/0x24c0 [ 665.331188][T14519] __submit_bio+0x384/0x540 [ 665.336194][T14519] submit_bio_noacct_nocheck+0x698/0xd70 [ 665.342324][T14519] submit_bio_noacct+0x93a/0x1e20 [ 665.347849][T14519] block_read_full_folio+0x812/0xa50 [ 665.353640][T14519] filemap_read_folio+0xc6/0x2a0 [ 665.359081][T14519] filemap_get_pages+0x155f/0x1be0 [ 665.364697][T14519] filemap_read+0x3ca/0xd70 [ 665.369705][T14519] blkdev_read_iter+0x187/0x480 [ 665.375056][T14519] vfs_read+0x87f/0xbe0 [ 665.379710][T14519] ksys_read+0x12b/0x250 [ 665.384452][T14519] do_syscall_64+0xcd/0x250 [ 665.389460][T14519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.395858][T14519] [ 665.395858][T14519] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 665.404359][T14519] down_read+0x9a/0x330 [ 665.409020][T14519] filemap_fault+0x62c/0x2820 [ 665.414198][T14519] __do_fault+0x10a/0x490 [ 665.419049][T14519] do_pte_missing+0xebd/0x3e00 [ 665.424340][T14519] __handle_mm_fault+0x103c/0x2a40 [ 665.429968][T14519] handle_mm_fault+0x3fa/0xaa0 [ 665.435236][T14519] do_user_addr_fault+0x7a3/0x13f0 [ 665.440847][T14519] exc_page_fault+0x5c/0xc0 [ 665.445856][T14519] asm_exc_page_fault+0x26/0x30 [ 665.451213][T14519] rep_movs_alternative+0x4a/0x70 [ 665.456738][T14519] _copy_from_iter+0x385/0x1560 [ 665.462098][T14519] tipc_msg_build+0x308/0x1120 [ 665.467362][T14519] __tipc_sendstream+0x6fa/0x1190 [ 665.472892][T14519] tipc_sendstream+0x4f/0x70 [ 665.477988][T14519] sock_write_iter+0x4fe/0x5b0 [ 665.483259][T14519] vfs_write+0x5ae/0x1150 [ 665.488090][T14519] ksys_write+0x207/0x250 [ 665.492919][T14519] do_syscall_64+0xcd/0x250 [ 665.497928][T14519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.504329][T14519] [ 665.504329][T14519] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 665.511866][T14519] __might_fault+0x11b/0x190 [ 665.516962][T14519] _copy_from_user+0x29/0xd0 [ 665.522050][T14519] __blk_trace_setup+0xa8/0x180 [ 665.527403][T14519] blk_trace_ioctl+0x163/0x290 [ 665.532664][T14519] blkdev_ioctl+0x109/0x6d0 [ 665.537674][T14519] __x64_sys_ioctl+0x190/0x200 [ 665.542943][T14519] do_syscall_64+0xcd/0x250 [ 665.547949][T14519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.554349][T14519] [ 665.554349][T14519] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 665.562155][T14519] __mutex_lock+0x19b/0xa60 [ 665.567162][T14519] blk_register_queue+0x13c/0x4f0 [ 665.572692][T14519] add_disk_fwnode+0x785/0x1300 [ 665.578046][T14519] brd_alloc.isra.0+0x5a2/0x840 [ 665.583398][T14519] brd_init+0x12b/0x1d0 [ 665.588057][T14519] do_one_initcall+0x128/0x700 [ 665.593327][T14519] kernel_init_freeable+0x5c7/0x900 [ 665.599026][T14519] kernel_init+0x1c/0x2b0 [ 665.603854][T14519] ret_from_fork+0x45/0x80 [ 665.608772][T14519] ret_from_fork_asm+0x1a/0x30 [ 665.614043][T14519] [ 665.614043][T14519] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 665.621577][T14519] __lock_acquire+0x249e/0x3c40 [ 665.626929][T14519] lock_acquire.part.0+0x11b/0x380 [ 665.632539][T14519] __mutex_lock+0x19b/0xa60 [ 665.637548][T14519] blk_register_queue+0x132/0x4f0 [ 665.643075][T14519] add_disk_fwnode+0x785/0x1300 [ 665.648426][T14519] loop_add+0x901/0xb60 [ 665.653086][T14519] loop_probe+0x70/0x90 [ 665.657745][T14519] blk_request_module+0x115/0x1e0 [ 665.663267][T14519] blkdev_get_no_open+0x7a/0xe0 [ 665.668620][T14519] blkdev_open+0x13c/0x400 [ 665.673536][T14519] do_dentry_open+0xf59/0x1ea0 [ 665.678802][T14519] vfs_open+0x82/0x3f0 [ 665.683376][T14519] path_openat+0x1e6a/0x2d60 [ 665.688466][T14519] do_filp_open+0x20c/0x470 [ 665.693471][T14519] do_sys_openat2+0x17a/0x1e0 [ 665.698651][T14519] __x64_sys_creat+0xcd/0x120 [ 665.703833][T14519] do_syscall_64+0xcd/0x250 [ 665.708841][T14519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.715240][T14519] [ 665.715240][T14519] other info that might help us debug this: [ 665.715240][T14519] [ 665.725447][T14519] Chain exists of: [ 665.725447][T14519] &q->sysfs_lock --> &q->q_usage_counter(io)#52 --> &q->sysfs_dir_lock [ 665.725447][T14519] [ 665.739593][T14519] Possible unsafe locking scenario: [ 665.739593][T14519] [ 665.747018][T14519] CPU0 CPU1 [ 665.752360][T14519] ---- ---- [ 665.757701][T14519] lock(&q->sysfs_dir_lock); [ 665.762358][T14519] lock(&q->q_usage_counter(io)#52); [ 665.770232][T14519] lock(&q->sysfs_dir_lock); [ 665.777403][T14519] lock(&q->sysfs_lock); [ 665.781712][T14519] [ 665.781712][T14519] *** DEADLOCK *** [ 665.781712][T14519] [ 665.789829][T14519] 2 locks held by syz.0.2178/14519: [ 665.795009][T14519] #0: ffffffff8ecc1048 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x29/0x1e0 [ 665.804906][T14519] #1: ffff8880290e7bc8 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x5c/0x4f0 [ 665.814976][T14519] [ 665.814976][T14519] stack backtrace: [ 665.820840][T14519] CPU: 1 UID: 0 PID: 14519 Comm: syz.0.2178 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 665.831577][T14519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 665.841611][T14519] Call Trace: [ 665.844882][T14519] [ 665.847806][T14519] dump_stack_lvl+0x116/0x1f0 [ 665.852490][T14519] print_circular_bug+0x419/0x5d0 [ 665.857506][T14519] check_noncircular+0x31a/0x400 [ 665.862427][T14519] ? __pfx_check_noncircular+0x10/0x10 [ 665.867867][T14519] ? hlock_class+0x4e/0x130 [ 665.872361][T14519] ? lockdep_lock+0xc6/0x200 [ 665.876937][T14519] ? __pfx_lockdep_lock+0x10/0x10 [ 665.881950][T14519] __lock_acquire+0x249e/0x3c40 [ 665.886784][T14519] ? __pfx___lock_acquire+0x10/0x10 [ 665.891972][T14519] ? xa_find_after+0x291/0x480 [ 665.896746][T14519] lock_acquire.part.0+0x11b/0x380 [ 665.901859][T14519] ? blk_register_queue+0x132/0x4f0 [ 665.907064][T14519] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 665.912701][T14519] ? rcu_is_watching+0x12/0xc0 [ 665.917460][T14519] ? trace_lock_acquire+0x14e/0x1f0 [ 665.922649][T14519] ? blk_register_queue+0x132/0x4f0 [ 665.927834][T14519] ? lock_acquire+0x2f/0xb0 [ 665.932319][T14519] ? blk_register_queue+0x132/0x4f0 [ 665.937504][T14519] __mutex_lock+0x19b/0xa60 [ 665.941995][T14519] ? blk_register_queue+0x132/0x4f0 [ 665.947178][T14519] ? blk_register_queue+0x132/0x4f0 [ 665.952360][T14519] ? __pfx___mutex_lock+0x10/0x10 [ 665.957369][T14519] ? kobject_add+0x17c/0x240 [ 665.961951][T14519] ? blk_register_queue+0x132/0x4f0 [ 665.967134][T14519] blk_register_queue+0x132/0x4f0 [ 665.972153][T14519] add_disk_fwnode+0x785/0x1300 [ 665.976991][T14519] loop_add+0x901/0xb60 [ 665.981133][T14519] ? rcu_is_watching+0x12/0xc0 [ 665.985888][T14519] ? __pfx_loop_add+0x10/0x10 [ 665.990559][T14519] loop_probe+0x70/0x90 [ 665.994699][T14519] ? __pfx_loop_probe+0x10/0x10 [ 665.999532][T14519] blk_request_module+0x115/0x1e0 [ 666.004539][T14519] blkdev_get_no_open+0x7a/0xe0 [ 666.009369][T14519] blkdev_open+0x13c/0x400 [ 666.013767][T14519] do_dentry_open+0xf59/0x1ea0 [ 666.018511][T14519] ? __pfx_blkdev_open+0x10/0x10 [ 666.023429][T14519] ? inode_permission+0xdd/0x5f0 [ 666.028354][T14519] vfs_open+0x82/0x3f0 [ 666.032408][T14519] ? may_open+0x1f2/0x400 [ 666.036723][T14519] path_openat+0x1e6a/0x2d60 [ 666.041316][T14519] ? __pfx_path_openat+0x10/0x10 [ 666.046256][T14519] ? __pfx___lock_acquire+0x10/0x10 [ 666.051448][T14519] ? lock_acquire.part.0+0x11b/0x380 [ 666.056717][T14519] ? find_held_lock+0x2d/0x110 [ 666.061468][T14519] do_filp_open+0x20c/0x470 [ 666.065952][T14519] ? __pfx_do_filp_open+0x10/0x10 [ 666.070955][T14519] ? find_held_lock+0x2d/0x110 [ 666.075710][T14519] ? _raw_spin_unlock+0x28/0x50 [ 666.080545][T14519] ? alloc_fd+0x41f/0x760 [ 666.084860][T14519] do_sys_openat2+0x17a/0x1e0 [ 666.089523][T14519] ? __pfx_do_sys_openat2+0x10/0x10 [ 666.094708][T14519] ? __x64_sys_futex+0x1e1/0x4c0 [ 666.099624][T14519] ? __x64_sys_futex+0x1ea/0x4c0 [ 666.104540][T14519] __x64_sys_creat+0xcd/0x120 [ 666.109204][T14519] ? __pfx___x64_sys_creat+0x10/0x10 [ 666.114472][T14519] ? rcu_is_watching+0x12/0xc0 [ 666.119224][T14519] ? do_syscall_64+0x91/0x250 [ 666.123887][T14519] do_syscall_64+0xcd/0x250 [ 666.128379][T14519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.134258][T14519] RIP: 0033:0x7f0b82d85d29 [ 666.138652][T14519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.158241][T14519] RSP: 002b:00007f0b83b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 666.166633][T14519] RAX: ffffffffffffffda RBX: 00007f0b82f75fa0 RCX: 00007f0b82d85d29 [ 666.174583][T14519] RDX: 0000000000000000 RSI: 00000000000000a6 RDI: 0000000020001200 [ 666.182533][T14519] RBP: 00007f0b82e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 666.190485][T14519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.198437][T14519] R13: 0000000000000000 R14: 00007f0b82f75fa0 R15: 00007fffa2ed88a8 [ 666.206391][T14519] [ 666.281386][T14519] block device autoloading is deprecated and will be removed. [ 667.580103][ T5864] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 667.588548][ T5864] usb 6-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 667.606916][ T5864] usb 6-1: USB disconnect, device number 72