last executing test programs: 4m16.384726771s ago: executing program 4 (id=1050): bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2(&(0x7f00000000c0), 0x0) (async) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000000000"], 0x50}}, 0x10) (async) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000000000"], 0x50}}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xbe) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 4m14.92437061s ago: executing program 4 (id=1057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 4m12.779705181s ago: executing program 4 (id=1060): r0 = socket(0x2a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x10000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xa, 0xfff3}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) 4m11.251194328s ago: executing program 4 (id=1071): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 4m11.160980448s ago: executing program 4 (id=1072): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x1, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "9cc18437269182954156db8db1d7014fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab75a4cfd8d760c853d36fb7cd232e8103ff26"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 4m10.889394944s ago: executing program 4 (id=1074): socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@nat={'nat\x00', 0x2, 0x5, 0x488, 0x0, 0x0, 0xffffffff, 0x0, 0x334, 0x42c, 0x42c, 0xffffffff, 0x42c, 0x42c, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0xff000000, 'pim6reg\x00', 'dvmrp0\x00'}, 0xac030000, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x6, 0x818, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}, {0x400, 0xfffffffe}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @private=0xa010102, @gre_key=0x400, @port=0x4e23}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'vlan1\x00', 'ip6_vti0\x00', 0x3, 0x1, 0x3, 0x4, 0x1000, 0x2cf, {}, {0x40007f}}}, @common=@inet=@set2={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv6=@private1, @ipv6=@private1, @gre_key=0x2, @gre_key=0x5}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e21, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x4e22]}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @broadcast, @local, @icmp_id, @port=0x2}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x8, 0x72, {{0x14, 0x4, 0x1, 0xc, 0x50, 0x68, 0x0, 0x5, 0x4, 0x0, @empty, @loopback, {[@cipso={0x86, 0x13, 0x3, [{0x4, 0x2}, {0x0, 0xb, "0f266e3fe2ee25716f"}]}, @rr={0x7, 0x7, 0xf8, [@multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x30, 0x3, 0xe, [{@loopback, 0x9a3}, {@multicast2, 0x8}, {@empty, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3314) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000100)={r4}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r5, &(0x7f0000005140)={0x2020}, 0x2020) r6 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="05022cbd7000000000000f00000008000300", @ANYRES32=r13, @ANYBLOB="c5653809f9b36901c1a560c1538efb2317990f9668b59e6bdc9f93"], 0x1c}}, 0x4000050) 3m55.752795048s ago: executing program 32 (id=1074): socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@nat={'nat\x00', 0x2, 0x5, 0x488, 0x0, 0x0, 0xffffffff, 0x0, 0x334, 0x42c, 0x42c, 0xffffffff, 0x42c, 0x42c, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0xff000000, 'pim6reg\x00', 'dvmrp0\x00'}, 0xac030000, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x6, 0x818, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}, {0x400, 0xfffffffe}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @private=0xa010102, @gre_key=0x400, @port=0x4e23}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'vlan1\x00', 'ip6_vti0\x00', 0x3, 0x1, 0x3, 0x4, 0x1000, 0x2cf, {}, {0x40007f}}}, @common=@inet=@set2={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv6=@private1, @ipv6=@private1, @gre_key=0x2, @gre_key=0x5}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e21, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x4e22]}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @broadcast, @local, @icmp_id, @port=0x2}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x8, 0x72, {{0x14, 0x4, 0x1, 0xc, 0x50, 0x68, 0x0, 0x5, 0x4, 0x0, @empty, @loopback, {[@cipso={0x86, 0x13, 0x3, [{0x4, 0x2}, {0x0, 0xb, "0f266e3fe2ee25716f"}]}, @rr={0x7, 0x7, 0xf8, [@multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x30, 0x3, 0xe, [{@loopback, 0x9a3}, {@multicast2, 0x8}, {@empty, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3314) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000100)={r4}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r5, &(0x7f0000005140)={0x2020}, 0x2020) r6 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="05022cbd7000000000000f00000008000300", @ANYRES32=r13, @ANYBLOB="c5653809f9b36901c1a560c1538efb2317990f9668b59e6bdc9f93"], 0x1c}}, 0x4000050) 8.931373427s ago: executing program 3 (id=1989): r0 = socket$isdn(0x22, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) r3 = socket$isdn(0x22, 0x2, 0x2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup3(r3, r0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0)={0xfff, 0x9, 0x4, 0x3, 0x6, 0x1, 0xf8b}, 0xc) 8.931029621s ago: executing program 2 (id=1990): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x1c, 0x24000010) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) open$dir(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8.796028791s ago: executing program 2 (id=1992): r0 = socket$netlink(0x10, 0x3, 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x6700c0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') socket$kcm(0xa, 0x2, 0x73) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100006d0000009500"/25], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7, 0x0, 0x2}, 0x18) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) r8 = dup(r0) open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r8, 0x100200008) 8.367408825s ago: executing program 5 (id=1993): socketpair$unix(0x1, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x242, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0xffffffffffffffff, r4, 0x2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce", 0xb3) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x14, 0x0, 0x1, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r9) 8.157110129s ago: executing program 0 (id=1995): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (rerun: 64) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf={0x1000, &(0x7f0000004200)="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"}) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x20018001) syz_io_uring_setup(0x3e5d, &(0x7f0000000300)={0x0, 0x2a32, 0x800, 0xfffffffd, 0x294}, &(0x7f0000000080), 0x0) (async, rerun: 32) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000080)) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000002180)={{0x3, 0x0, 0x80, {0xd000, 0x4000, 0x5}}, "c2bf505353d01f107293f27cc9550ba955fb66534010098d1abdfe09366ac8111f7d0ad8fc762e362d838fa2f75da4307c821b71d49ac2777a3ad6e6267c0decf16685d178b3a35c6533377404e99d3eea83e3e5823e84ebd4235dffd4c21bd31f41b3680e1cf9c9caf8879f3c005c89d714440cd51a979f27a6f73fb1951b1dab94bbd63138f7c23cea9d555a1fae7a36cd033a82513a4ee1f1322b6e899e5eac6f6b263d98e7c75cf39381253e85a9052c920ce1d55353423be086f3873a6cb05320ec4a0ad356455cdeb56e31f10e8ab3984cea1d6280a6f4ff3a02d3fe9a11b13614bfe240b572a4c5be6afb5a0b83f30a1e86446399cfadfa4a2f07c5bbee6af260692da4b90b51f5b33fff9bff4db03d934c78564a2ffd471512ff28bd644eec260def9e8aafc422ab0ea5a4fbcc12ba82909630597a17785e34884a22274d25cc4f4c84d8ccb0e77b7d3ddae8ff9f56036e9a933e9cfc3458057001db09e2571be99706ab6844d6991dedd39fe17d2d776db9021426d70415209130392f03f7f2d6de943b4237cb25e17a31be46f31621269fff0f87363e76fceb0e029707c2ba9e0e48c1e830c1d4a83d871effd57be1153ad0615ad577d01f6e6cc9e6bcac9bbb58fea4840f0ceade431d3cb14c57cf3d47a1ff52a5384abd4fb6c0ac11f2b3a2952224d4d952bac23f5d132d63f6c740db0bd5a433e026b7ab0d16aa57b4f18db1d3489e42d01e50b425df58b917c69c175d1d060a6a30d5638befc19b93d93489731b732ee83a1094ed3700ecaacb9d405f6b51c78e0817abe30ad9f22af07488aa13c0acb2a1a61be1195ba2c5ad820c45678566739ac7a80f9da750f3aad48eab06d28e78fdad111a57d66f36972bf2252068664e0d03e6fff31ceb562aee9cf03098b579fc73c5c1acbc4a75cc8c99550f75181ef1a2ee672225ccc48fd5cafc6442beab425f9a29f9867aed44f923fa1ce5452f9696c310a65fb23e89fe0e039a5ae275b3d17cf744dd2ac982b653f8264a7b4fbe80f961c9d16d2388073409ddeaeffa926a6cc9ed8eb04b7504dde304150705c143619e09839889336027a368c837b505653c5412433c6495c6e00516847fc8c3a68a20d63378a661d1706da37ae4bfd862c77116a35ae87ef696091a0f7368eb0d0e2fffe8360069addef6d10f1785f90471b666fde411b135d7217ac0bbf6e1a86bd6d0834e032fda26c651b97a19b29962a75c4ee5e33f232bd8da041aa38bfdd5ce7fa5c2964387ca7cd4e58b125cb2a7e1cc06d76ee6c01ef56a471114ad84bde7e8fae117c419117221c05c949c2f7dd767c27bd03329690898617717b1b3617533dbdd96d6dc00ce6261bcde4c846a62f2238d2aab4300232a725ef8954401b52648d41da0614a8e3a5d15a13038b1b8a8bce78e4928074491142865f77e786e61f4506bea844d9ecb34d7dcaeffcb7f9ddffe799f6e3189fe3d3f08d473d1053bcff0d820edc4848a259069a607c3c6d2238a47e3a8726fc048b22e7d2818871e27950e8a1318bbdef3612e2a2a6b225c62dffe4145b9b39b05ef3d3ca4118861beb1d59e620820c0bc91d94796ce4a2f899b149f463844cc5c24aaef15245269f8e1be17c897464c08ec54b41fea0dce6b4f8d3484e635ce9c7493290796b2bbbf31c7e26f6b31b517f9b2bac866d6428bc08f99d15e79f78833f75b443e1a7fb7b626a4c1d470db27da74c4c2cdb84ca31274c2c9022137c9afc9e133835e7fde79b718473330bbe0eb5a6b5b06ae7171bda1a93ab65903527c07431f9fd4dd7580766413256c8650c06bc491a871f5dce194640d7e698410646d73711071df501d8877ad71cce3e1b2f3da516a16e36699728e73e5eacf05754eeaa0698d973f46134f18b24f59af434599e9f10615ce730a1368f71dd0e6f923728bc974a5f4ec125f68e8217bd2baf5a279f923cc9e23479b7e681ea43f855580d1b6a57da72ffce50fb4dbbeb11cfd0db6863bf5c3e060b5aed2b155c071d862c24feaf6046cb93b127ab845e5216d979bbefdaf9fd0e2fdba90e5f2710eda5b259f365a908eef6abf98b03371a1e590beec9b68649af549cf9aae74f5cb66729a904c5e0e3a56fc8c46d607c3db0c7c89154f64564c6078363d9e77cdf499df2942efa9538882babbacd81960e71836c1f707975945b49fce1cbecdfd67711e2606dc4dd372b87165dce1cb40efb1f1ddd402956c7ac9cb78d19c3e42da4837dc06915eb78339d3d8021f48e5a7a6879c5811497ece903c565c446482153ac4125852fa66395d8f6007c352a7c2a7223d0b6754a36e8b8090f2e75fbadb8f69747f34f3bc7644346003f24434a92c5d439789c908ef13a5577f742371e09925253ea4628bd26b74ce69b1a5b7ee9b02cee5ab4cd503adfef4c515bd35225e12a82420bc61746e4505da50a2844b55712970cfc0f6a42e35a204650c571c91fab51155934a23b2bee016e6b7614a7f865da85eb7ae9c6edae2c214737b570514123bd00f961e2ecfe368f3b67080ae614500857b69e221531934a3604c57435d75db76be4e7fea75743ef7e5a8722c33ebde527f60483581738613ab7b09d1e4753c54e00e239211ffa98d7c299d45a43e8b78031b592d748a320572c5eceac527713687caf533a361c3e39424eddacb6c844e2edcfa9e6a0eca8bd4b615351832aeeab7712be639f25dd5c812adb6e0d48a629a8c2f04b81a4bd3f8b98393ccc6d12fc90f1c3f2c58a7d92466b77983162b5473d596e5d36beb3a979eda6027cc428aa039e86216e61640e8782ac5d70cccf0bfe0a80fedad237e9027d9cb2728cfee76f0f2893ee97dc3162855294881f0071973abd96091926ba72839ad42d5479e632367d780559a07f994e9eea1d310eb70df781be860c85b64c54bdbd4017c5b1609584ce1ecc967150232e801491044db5944c9ba0f22b3ecb10ee5c7c4373d61b9b644c2c74a8dd78787865bf9c5a1aa2d6f9bc94e9e205a70c27c6fe62e34cc8c9e13e820634b6659dd23abbd2e088fcd7e9401c02090e1fc950b00d249d121a1956c0346ef95cbc3680713ed354356323bf75f0a8e9b18a25be592e765e91a1ec603ddba3a93b89f600a2f25d81bad98a05996899c0b5b39a17b8bdc6926baad332546da2e3de25945fd9d3333972e0ec468f308ce75fbc40893395740c0ad3624dd70f09f68b33953360ebeb198f7660498e1bd5ea135f6c27a4f86265392ecde1fa7c942372395c43c7b2780937466d065cb466b573c1cf3fb97c5f3cc4de44ebd21c2b06adfaf1abc0545d03c51bb378eefe651d6bf32932d9d139fa38fff0b02aad0f6da14363194426f23eeebfd28902684dbbd082e8c9b9896cad437c95c3f7e31425591da1f24c26f6ca99eafaef22c1dc4c398bd9d3a988733ec570fb7f40840b705385428c9f6df25c83269d716e0895a9b10d5944c7c4f4116527ac54df708970bc5b5e8ff241e606905734b3a8e0fc0ac58a58a2632a05b5fe5a2cb43bb596d302f49136ce80f2a9803b54b9d34116602f4f78e5e2f4c1eeb0959f5fe5b50de9688a97ae867c4b9db4ddd3adcf7bbc3982236cd20fde0ed7ba813a530f088978207ec7045917bdb9a2829d1b28b9303d9d6fef5ec08beb220cc5cc9e64ce28754d067e1cb0764b6b3acf5f43b6a45414091b97a41e4d433472d434475786ca968fe145cdcae8d1ab9173ad86b943c3c9d034de4736a890e861253d5a8e6c08cd552f11d2d6ea8823ab3afe5449f478da61addb6f4263fca82b2f7fc90def685d9c6caa59f84a8cc0e459bd972032bf3a4b74739ef8d2d1c8682e8ad99de2a163222985bf04641f0ec43c1168e9b9529f27c883158e652522cf5a386335bf15b260636c836e360a9eb2c6437cd04dbe94f2dc554143f31e14b3a98214fe423a731c65cfea24c658f751d44515408eaecf639e38e0dd0cdaed3f914e01897314f7c378241fc46d5fb9b13486d3bba8c93f3bba868fc21faa295475c4f188dbad0e6321bfb931f3b55e02f91c5bcef1a588219d8fb1b22482563e9d1d3642c0aadf47ae5f08900966c2aad31db2533d60ddf5ec08fab62d5e0ada5f55a7f35d6746032c78a5f9bea1d83ede3b8a1ee5218c9f146edb5f36275cf1f026d06074fb16c56359abb39f77c1b3dea85eb7630cc440c5af743b2234c5b0d509e8343fa0607dbe8dc7b5fb01c0784aa79d31ebae81f60af33f487101528b69f0095c0deeabacc9bacf4c752fbf0dba495b3501fb5f3e4a37060bd164d00fae458400dbbe122a3558f4af364fa13b411af01d83fbfb8075ba97bf28e7be1efe291485ca0f5b2ab22e3b22b3037b346444e6e2757dea721c1a8739da235e03edf8c289428bdc33ccf15500c4b93a54b93f98329f3bcc4ddc17a2bdf3d275e3a248f200dcdb1e02b93c163e0db24724024aeca1ff0a3cf2b4706ed69ee11153e5262ccaecb5815cbcf0620273e6f09d677a8e51339af4a5e28b4921d4d0beadfb7c9058376a6e830d311f519a91622c5133dd84b48904325d0767f906c3fa95f8260fe572098ca596836a6d1cddc6396e6bc32c080970955bf5c46056e372e5b5a525f94aa8f3a117ddda29d094bc9d79be49fdc4d840598838fd33392d5aee7d83474a9d5f97bbe8a42f5098925929cd3565c6c005f986add451c780feb7cfc61ab8e2cef71e150634befbce27abea305702dde8592713add7ac9057e5d2d57cd78aa5f827ee5dee9f78bd3478d614575ac90037e77ea8990e35581ed97cd3e6ce2dea7d0258321dc64c6906fb244a38b78980afac4ebc4baa192318eaf1d86213c45fc6e6cda526c444dc36489255dab8e1c5841be14be33cb281bc9d3b665258f359fe31fe26659bcd4ce732d3a7ba474b920dbf8bfc12cee333d3e0dfff3987869e2f93d0a28165a7715fc97ecda3ba893d465fff68be814997cb17a8159f166f10835e0cad1e01ef73022f1251114fb41b1ac738180ff32d00512d96acb44a2ecef8dbadb3a323ec9cab0ad12986dc3aaa4751a05d5b6cdf51855e533e33a579a5672083a814659a5cd951770267535c948140fd2918457d200d20a315ea49a310bc9405f0de7d1421c016f39d1ed80c8c9157662894f4ab5a2204888459eb6b94be4a11b4018dbd7ba7c014bdfed6ebb1e66882cdeca5756540b51a22735d4d53800ac6f0da76dcdc36842f662d58f649ddb168d9cfadfe2eff845c804e9d422441604fae4d384d773ae6e1e4a5fa9b8285ca8fda4e0859b11f5d1675e0bc48186d1bc24538290cf0f61b14e24a163985a86c868522f03c4652712d63f3d07565e2d7acac591083bd7ebbb51f801d6792bb8803ef385723c453c0cd0dddb197fb75895a45492f44c7a1b349f7d081cee3580d0e0acb1b1ce3609590d95f86c1aca3c3f736d0b5d9ec2f4b97b19a06c181aee7c5efadd8c5e1305c372ca79d5c974d84e214f6e26f5dc4b9be2cd4344767e90ced8e29dba05d4f1af571105612a9ec29035edcc44543fc7b3e45b9cfb22baab7d0bf8863554e6a6f8fead8b7c9baa8f48d88f2aba1439cfcaf4a89862b35bca72e74d8871724c209599c3da7fefe71bc0f5779386b3297c598b3db07ad7a1bc008d8bc82805c50a7cad8b2c3e50884ee0c9d909a6150ac43a75f3d7a3cf7c4bbd80dff514c15ebf7f376f60e66007c6601bd5967cc729ef4d6f82ce5a60981d4238fe90ba2305aba221778837765c4a9be698af5941af727688755194395ab01756d143c5328b871b2738", "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"}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') (async, rerun: 32) r4 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) bind$unix(r4, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000060000000800000002"], 0x48) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/route\x00') preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4084, 0xff4}], 0x1, 0x304, 0x21000008) 7.586113158s ago: executing program 2 (id=1996): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000002180)='net/ip_mr_vif\x00') syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, &(0x7f0000000140)="510a7db3f80d03f3f1c034eaaa166632b2ddc0fa2e92c381934b9341314d438d43a2f27ac68c5170775b634b915f31e442346134fcdbf3a310d1f9ab104bc098dbd6a254397b8092e32c6f7ef7d2e5675ca9b8b4", 0x0, 0x24048014}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 7.500960977s ago: executing program 2 (id=1997): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="ad4300000000010000000f"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0xa, &(0x7f0000000040)=[{0x2afd, 0x7, 0x3, 0x880}, {0x40, 0x2, 0x9, 0x9}, {0x3fd, 0x7, 0x3, 0xa75c}, {0x7fff, 0x7, 0x9}, {0x7, 0x1, 0x80, 0x6}, {0x7, 0x1, 0x8, 0x944e}, {0x1, 0x2, 0x9, 0x1}, {0x401, 0x47, 0xf8, 0x10}, {0x4, 0x0, 0x40, 0x3}, {0x9, 0x4, 0x6, 0xdd}]}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008aec1, &(0x7f0000000000)) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008aec1, &(0x7f0000000000)) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) (async) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x578410eb) r4 = getpid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$kcm(0x29, 0x5, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xf3e, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x37, 0x1}, &(0x7f0000000100)) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x37, 0x1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) 7.403840687s ago: executing program 5 (id=1998): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0x7f}}}}}]}}]}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000500)=@keyring) syz_open_dev$usbmon(0x0, 0x0, 0x0) close(0xffffffffffffffff) inotify_init1(0x800) rseq(0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7.348105894s ago: executing program 0 (id=1999): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0x7f}}}}}]}}]}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000500)=@keyring) syz_open_dev$usbmon(0x0, 0x0, 0x0) close(0xffffffffffffffff) inotify_init1(0x800) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6.113874914s ago: executing program 1 (id=2001): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000002c0)=0x19) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x105, 0xa, 0x200, 0x3d, 0x5e, 0x1000, 0x1, 0x8, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0xd, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x80e, 0x401, 0xfffff801, 0x2b, 0xa, 0x8, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0x27d7, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0x100, 0x5, 0x2, 0x0, 0x2, 0x8, 0x80, 0xd4c, 0x80, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x84, 0x0, 0x4, 0x105, 0x5, 0x7, 0x3, 0x1, 0xfffffffa]}}) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) 4.968101379s ago: executing program 3 (id=2002): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x0, {{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf}}, 0x1, 0x7, [{{0xa, 0x4e20, 0xdc, @remote, 0x954}}, {{0xa, 0x4e21, 0x5609, @remote, 0x2}}, {{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, {{0xa, 0x4e20, 0xd6a, @loopback, 0x7}}, {{0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}, {{0xa, 0x4e22, 0x8000, @mcast1, 0xff}}, {{0xa, 0x4e22, 0x9, @private2, 0x4}}]}, 0x410) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48090}, 0x4010) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x10, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) open$dir(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.842346054s ago: executing program 1 (id=2003): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x20000, 0x6) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0x440) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x31a, 0x12, 0x10, 0x19, "a99b0ded5eeac3d37b5a7ed9e250928e5b078d8b5dde4d2c2b1f11842dd40360ca19312836decf240dd0d17e0af6a4f8e61ddb85ab1af2fde536c383becdc134", "b548bd3fb3d3dfb10aa3900c4dd900080000a077830d405efb0d593d91852987", [0xc1, 0x8000000000000001]}) r5 = fsopen(&(0x7f0000000440)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f00000006c0)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\xb0\t\x00\x00\x00\x00\x00\x00U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/\xb4\x00\x80_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b7\x8aH\xd6\xd8\xbf\xe7\xc4|y\x1b\xd3\x88\x139\x8a/L;)?\x80J\x85\xf0[?\x01\xa3\x02~5*\x94`\x1a\"g\x8aV\xb6q{\xbc\x18\x99Y\x12\xd2\xc2\n>\xbb)\xf6|*\xbb\x14F\nZ\xact\xc5\x12\xdd\xda\xe4\x91\x0f\xdf\xb1\xf4\xf7\xa8?tO\xa6|\x11clY\x02\x17 \xf6\xe7\x8a\x93vr\x80A\xbc\xdd#\xd5y\v\xf5\xd6\xe7B\xf1@\xe1w\xfa[\xa4;\xf6\x99\x02\xa8\xcbu\xf1jdV<\xe4y\xf6\xb9\xadHN\a_w ?\xe7\x83\"\xf5\x1f\xb2\x04\x80\xcay\x03`\xa3\xf0+i2jQ\xea\x00um\xe1g\xa4\xd4\xec;\x87\x9c\xef\xc9\x91\xa8\xb2\xef\xee\x98\x12\xd2!\x89\x98T\xdb%R\'\x01\f\xb4\xf4a\x81\x00X\xea\x1c\x03<\xc05\x0e\xd8\xfe9\xd9\x99\xe7\xf5\xc3\x97.\xf4Y\xb7!/yy\xee\x84\xef\bw=\xab\xea\x18\xdaS\xf2\'S:\x86\xf6o\x89\xf1\xe0\xcc\x13P\xa7\x06\xc6\xe9\xfe\xed\xf7\x04\xadJ\xfd:\x9fL>=\xdbQ\xde\xb0\x1e$\xd1\x17\f\xddiN\xf5\xca\x84\xf3\xd5[\x1e\xb2\x9d6\x89\xc7w\x14\xb6\xb9G\x80\xb3\xd4C', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) rt_tgsigqueueinfo(r7, 0x0, 0x1f, &(0x7f0000000500)={0x3e, 0x3a, 0x10001}) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x147581) pselect6(0x40, &(0x7f0000000180)={0x2, 0x7, 0x100000002, 0x80000000000101, 0x3ff, 0x67, 0x8}, 0x0, &(0x7f0000000280)={0xff, 0x8, 0x4, 0x8, 0x9, 0x5, 0x3, 0x7}, &(0x7f00000002c0), 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800001010004b240000007c5900880000000000", @ANYRES32=0x0, @ANYBLOB="00000000429300002800128008000100677265001c00028006000e0001000000060003008000000008001500fc8a0400"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 4.274529464s ago: executing program 3 (id=2004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 4.219167946s ago: executing program 5 (id=2005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x11e, 0x1e, 0xffffffffffffffff, &(0x7f0000000340)=0xfffffffffffffeb8) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x2}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r8, 0x3, 0x0) getdents(r8, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r9, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r7, r5, 0x7, 0x0, 0x0, @void, @value=r5}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 4.083009142s ago: executing program 1 (id=2006): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x103001) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000400)={0x0, @reserved}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000c00)={0x2020, 0x0, 0x0}, 0x2020) r3 = getgid() write$FUSE_ATTR(r1, &(0x7f0000002c40)={0x78, 0x0, r2, {0x2, 0x9, 0x0, {0x5, 0x100, 0x3b3, 0x5, 0x8, 0x8, 0x2, 0x4, 0x10000, 0xc000, 0xb66, 0xffffffffffffffff, r3, 0xfffffffd, 0x6}}}, 0x78) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604d0000000000000000000000fe800000000000000000000000009c7efe389801", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000003020000"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r4, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000002cc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1d, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x100}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x80, &(0x7f0000000540)=""/128, 0x41100, 0x5, '\x00', r5, @fallback=0x17, r4, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xb, 0x7e116297, 0x91b9}, 0x10, r6, r4, 0x0, &(0x7f0000000940)=[r4, r4, 0x1, r4], 0x0, 0x10, 0x4}, 0x94) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x10, r9, 0x8000000) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x96}) 3.84651029s ago: executing program 0 (id=2007): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000002180)='net/ip_mr_vif\x00') syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, &(0x7f0000000140)="510a7db3f80d03f3f1c034eaaa166632b2ddc0fa2e92c381934b9341314d438d43a2f27ac68c5170775b634b915f31e442346134fcdbf3a310d1f9ab104bc098dbd6a254397b8092e32c6f7ef7d2e5675ca9b8b4", 0x0, 0x24048014}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 2.864031637s ago: executing program 3 (id=2008): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48a00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x3, 0x800, 0x1, 0x1, 0x50228, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000000fc31856fc19e503684b1154f0afd00000000000000000000000000000000000800cf5044f2c99dd83420c4ad6d08f59fb7a99382f08238b2572920f003ba751fa5eae0401eadb72224453678aa585c10f7ff0758225f332063689825ccced7406d8e205e2ffd10953c7f6df17bccb6e982d1a67e837046762ffa3774479ecaed6a719936296a6fae7cb8963e1e6937724d3f12c4e727cc8e3ee8a51702ce4eb93b1412618d93f82f64cfd3f971b5572860d9118da6e53ee8e674ac3030f371cf762110"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYBLOB="0100000007000000000000000040794bcb000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x50) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 2.862935996s ago: executing program 5 (id=2009): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.796124154s ago: executing program 0 (id=2010): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 2.679804626s ago: executing program 5 (id=2011): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2, 0x34f}, &(0x7f0000000000), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={'\x00', @link_local}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3e7"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3e7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="200616"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006140)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x53, 0x5, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000240), &(0x7f00000002c0)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x1, 0x7, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000240), &(0x7f00000002c0)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x1, 0x7, 0x3}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000980)) (async) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000980)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x7, 0x2, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x7, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x4000005) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x4000005) socket$inet6(0xa, 0x80002, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000740)={0x3}) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000740)={0x3}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x4, 0x7, 0x6, 0x3}) 2.615753015s ago: executing program 1 (id=2012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000500bfff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000"], 0x4c}}, 0x4000080) 2.085648619s ago: executing program 0 (id=2013): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x91, 0x40000) r1 = semget(0x2, 0x3, 0x456) semtimedop(r1, &(0x7f0000000040)=[{0x4, 0x100, 0x800}, {0x4, 0x1}, {0x3, 0x6b84, 0x800}], 0x3, &(0x7f0000000080)={0x0, 0x3938700}) r2 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ethernet={0x0, @multicast}, &(0x7f0000000140)=0x80, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x6}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)={0x3f4, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x3e0, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_b, @from_mac, {0x8, 0x9}}, 0x0, @random=0x5, 0x0, @void, @val={0x1, 0x3, [{0x24}, {0x30, 0x1}, {0x3}]}, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x1, 0x8, 0x8}}, @val={0x76, 0x6, {0x4, 0x9, 0x3b, 0x3}}, [{0xdd, 0xf5, "510596b789b5ec7ffa00b1a52ceae0951830379cb843629970d67f5f73f39b34af28b5a8b76989c1f853fbe59bb31e67aaa0ed56895189d7ae2c2916f74df5a491045cee88768d9ff5763a9422a2dc6735a0d879623d514699baa73a7cc08ca8ef74d1841407f7bc64cf7e80a79718a9cd5710034705af8e9781578a510f65849e4c46996073ba8d2fd179806c89f736445aaa567d6148444b979d4487dc4908452163c76402238fb767f1351cfeb00908915e8e38f149c6495e3f90ab6c9d6cbb354e27930a25388aa3e6083240c2f078ac3b68543ede0a572709aedafcec7a620dcd36e753ee8f95733de8839f276eb035c385a3"}, {0xdd, 0x43, "560feaea03b773eaaa96f84ff9dc1df50e7fecaa863d578466eb9b7b7e588c045bfe40f4bb0bfb977ec5054788cb35802752703ae8654dbc36c1de3bc2b0e1ee0b3005"}, {0xdd, 0xac, "77016751318152a5b60fc4fb25ad8a0b21c0a2f45ad505a3f716178da3ef8ffc462eaa77266eef9344701aeabe0dfa7c66ab5328a48063008ab1ae7af4d164545c3caf656a10fd92a26d13428a589b3a3a23bd89b57c9e863652c664332bad0e46f4b597c373afc54bcd4f176a6f74a7a3b331d5c9d6694a54b31e1e60b5fff51c92e5bd3819b14b406fa6428cff4a4267bb84b74b07485082d041d85bc4943d6e3577a6f42d21537a24c5f7"}, {0xdd, 0x91, "36ba348b115a179dada31e5e5aed8fe3261de224875c15fa873299ecbbbc20069585fab0a659c05136f9afdb42ee9a959a8f20c119c61aa741a347ba80ec163bee665a7ae64f93d3b2450fb845c158d2d8acde8dc47f7be23c71ff374566ecfbf3b93638d12f231bcb0798651ced9c37910e72c639ace48bf223f117c933d0da70925f5fe114deb2512cb4469949310095"}, {0xdd, 0x29, "09d15be9edc18304aa60908483bb06dd9cbcf3628669509a3c5981a690dfcc281a783ef22b252bc901"}, {0xdd, 0xec, "8a767b958e1025b0010be487f652e62f004f9228025addde6007b8839d9e074c179ee9eaf5c07f1e61dad8f0feccdd0eb0c60508cb51ac7a03deb2a1bb58c84e8c73b38f22fc728e6a97c5bb623cf754fa3f0056eed8be19c03c5a864f8f098d942f257382169406444d7cf72c4c678ca4014030ffceecca776f8352c24b20db578a08ccfd821b59854bfb6ec42ec6132768c967471d37e7c241da82f62e44f7f9465d13514922fa0f55c70e212f6aa36fdd63cd312029ff38c0151851c773da8f16755e61b52a3d18f77fef58beeedbd507102464299caae8d25407b7d431964e52e7d7b245930ccadbcdb4"}]}}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x400}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002a00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = getegid() ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000004a40)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000004a80)={0x2, 0xffffff9d, {0xffffffffffffffff}, {0xee00}, 0xf, 0xa31c}) r9 = getuid() r10 = getegid() r11 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x33b2879a) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000004ac0), 0xc0000, 0x0) r14 = socket$nl_sock_diag(0x10, 0x3, 0x4) r15 = getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000005200)={0xb26fb2d, 0xd, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x80000001, 0x8}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000005240)={'\x00', 0x1, 0x4b, 0x9, 0x3ca060ec, 0x58, 0x0}) lstat(&(0x7f00000052c0)='./file0\x00', &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000005380)=0x0) r20 = syz_open_dev$dmmidi(&(0x7f00000053c0), 0xefb, 0x400001) r21 = dup2(r2, r0) r22 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000005800)={0x1, 0x4, [{0xffffffffffffffff, 0x0, 0x4000, 0x10000}, {0xffffffffffffffff, 0x0, 0x10000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x4000}, {0xffffffffffffffff, 0x0, 0x4000, 0x100000000}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000005880)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000058c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r25 = getegid() sendmmsg$unix(r2, &(0x7f0000009ac0)=[{{&(0x7f00000006c0), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000740)="bbfd00b8f47125cf46034c6396aca3bbcc83bdde6911b533786e035ca9544d4f5406bd12c1ceed1b7b57681849d4838fbe47f032b056a516d4e606d79481284b5295ac37da38e7dd26d2b09ef7ae71d51fc541096d735b79e6048effaa2714e3ab9cc8e047b3f4be832b96a9f45f86f87b06163c4d47b05cae86df5d4a8c01aec12aa46ed3aa10f2df3ce0fdce5cf3dac25fbae48ae0a0347085126a14dc6ae56f6744a92da84283ca42360029698e0a26f17260f9e79c5706ec5c0d69afd78f247c5c6ce05fb2ffdb6ef9dd423082f774f8fc4feff78a9ac80fa609422ce0ab572d27d07dc912121bf6fb127f33bdf4873239", 0xf3}, {&(0x7f0000000840)="fb4a3a5b22759b3a17bb6d677b7005db5a06ec3dcaf8e4731903079aaf52e5a9b8bf187704e214ac7fac8d276caaa0ec155f9308f38718b031e90b4868447c12692a75fcfef9f716fc9e08fc3a1c57dc1fa60f2ab4904e1016b65c7846ae43bfbfde2f0d02b1ee8ad67330fca3a21026f6f818ee51a69d94110aa32bbb29ba20a4f28b613a4670f968514a27801a1bffe86bb477d46cd0fd1c24ab33b90e069965732ed691da3cceb2e2b381797a21e567", 0xb1}, {&(0x7f0000000900)="13a69a3a50edfb046e88f6a9a06fcf32ceda016a998ed812bce9cf7c3a5ea226c7b398717cd51140d5e2b8dccd762da28120450b97ca14acdfbf91c97a81c90d06a04fa03f31f57927372545d83442859a6bf0e300ee15b031719bb5c94d11ae35b28c1199797098a4936784cab2c5db18a000f5987e2ca344", 0x79}], 0x3, &(0x7f0000004b00)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r2, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r2, r11, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r2, r12, r0]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r13, r2, r0, r14]}}], 0xe8, 0x50}}, {{&(0x7f0000004c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000004c80)="5bc44d23ca2f8f7241f58133d6f4988336ce260162", 0x15}, {&(0x7f0000004cc0)="0af6e300b99c82c96190613c63720a6c63af16e5d928a67de65e8446dd3ed3ca63987bfac925ed785ba363aa2cd5efae78a5ba8e61d2b01c48ed719a17929122d456b10e8f6625e8064b9d7904b0a5e7ff06ae5206cba598489063145f21d4ce4c979b0de476763c47fa1651dfb9c12845ed9fd6e0ddf485d5ac4cbca2daae3c15096a0919eb8d60baef550f5cbeca71b9c4b442f13cfd8344e9dc1e2f1b99dba348b24f0722c3641a811256cca780b207c21afe7fd798d54553872e6e0dc6399c71e0a79396b0f701215410de39b1fecbaebc61c090b148a3dffe66684d01b856e885fe0a309c", 0xe7}, {&(0x7f0000004dc0)="a3f0be469d55875016f6d8cdc342afc6b43024b94540a3b29136fd230646b9e95b379adba5dd8b9e5e68ca6c615de1019156d4e19faeb1fbd44f9649bbf08a389380cb0f30f4fd9b1fe99be985a0464cb09eb26cdd0a8ff98064ed89e709a70f37eb7297201701f9b547a31bfdbc65cf950c7cd76401173a2618e00cad2209e1eef55a0118c2a9594b616754dd928741f5013546c92366c1e547120028e8ff59c84046c874e896477a2b1fd73e47af23dd4e58cc7722dd4d0ba2b87d82dcf8ce7289c201c38f658a362fae551816ddd84fc174c9314497bdfe", 0xd9}, {&(0x7f0000004ec0)="72feb2088d0f9283a1b688a6a260807c7c337c1362ee301c3967ad743a86306d44bfe8f35c384cc277d049c188b7fcf5377800a1565e766ddfd779dc307fbf7b443cc7739b331e4b99cd50ce0cc944cd5e7403584bbfd759d272e2119178ec718d1f163cd21443e158c9a1e58a84230fc8f544dbb7a727a76e49e6af9bb86a57ffe16494707ace42de1e00112c5759850d1ed8cd109920b87e2b0ee4fa6fe326e45f4d", 0xa3}, {&(0x7f0000004f80)="7f8743c7b12d1fff40878993808d27cb342ecb7c5b2553158755cc3936ebec21d724f541c92150471ac31d70d571f4dfd2d7eb493f4855099144bf45934c9de2fffdb377288ca0116e5e16cb6d5ce2d1ab97cf0f2701971ba624925f10f3292f7b36f176323693dfe35a2848abfec52fea40c0b7c0f3afbc4c0edd3622d123bfacfb8ef32c62b72cc22df089a8c4128b54e69d1b18fc1090dac05952fa12f82306f720e79993dab05757518a8f4fa20a40e584353f31769f60f4c45f96576929f889589d209f7352089eb931ff15a23a624499afb227e395b4bf974ecfe7cc76eec4fcf69afda574852d99aea818c49434148282d19247297b", 0xf9}, {&(0x7f0000005080)="073304ab75c6950ac96c4dc4db4483c661df1de0da1e35f5c2857db548fc7714cc130df2db6523c9177a0feefe0df51285e6899f8eb42f853b49853dd001cdc4800c5c6776f3efec42f590f9248f01241528591ab963ffcbb14fa4811e1b801fac5b523cd2c35979697263ff6f84b71aa106f55e7544595738177ea6e00b4328a2733f0cf85e2957ff3a1ece938a558c5aff207c8b241e6b40370570aa4509e9571a4ed48c187503a54f2cbee5f2d6372a49d46cec383bb7a498994153c95603931c5f358ee29b", 0xc7}], 0x6, &(0x7f0000005400)=[@cred={{0x1c, 0x1, 0x2, {r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, 0xee00, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, r2, r2, r0, r20, r0]}}], 0x88, 0x1}}, {{&(0x7f00000054c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000057c0)=[{&(0x7f0000005540)="018b9edd05f9134a1297b7f295d4251d68ca88e8d0b0d5066737e7a1d499f52ddf81cbb8a0e33e32aae9494c3903b63509ac7ad3bd4155f9b0c54e8cc864032004c77dbb80bb396927897bec655de559178fadedd7ef9a63afa56d", 0x5b}, {&(0x7f00000055c0)="e29afdbee2be605d60c1a3bcfaaaf9964049061e27b8a7e0ac97736b8a956c64efa4c2dd921c3e90a526da963c1c44b5ffe86b1e013fb7a3cf4f2e0801fcf7d6f1ed36768697e080bc7c15bac702ec8e67572eaeab86f84a4f43d3", 0x5b}, {&(0x7f0000005640)="81b3efc26bfec52f9936c2fc24f6fec906d3d0ea5f304e683f1478e51132119b82790a4d969b61678f4fe0bdd19876bebdc5d5910f673bdb569b91f3ed20b2ee94fb35e7856bdf5888dfa5b374416544a89fa799961f5932685a866d4a32134317b43f65556d3a322dda9a2d21b50c74b94a9c9b7d0c40b0ab771a687b7f56358475ba5bcda2edce9d1344e9150ffadd6e6372df0296be9998a7fcad626d23c11e5662f8b53d326d3a3592c0bffd936931b93f53d4dc", 0xb6}, {&(0x7f0000005700)="98f451e7e9fedd79940c1214838318821141cfdbbf4f6a634d3741821e6989f61260c579cd7240647d2d1b43505837a81c3dd2832268c330dfadcc3b40174ca8d23bac00d1ef614c9b98df0b6028f284e7a5f63935e60f2354e3852a0ddd890eb8dc548dcb741dbe25d2a227c3a46d712e636306330bb398ad29031ee57f6a0f3f518d91f81fe15cfd79754e985290171488968115ed36581b1dae70e404495604f73e4ac75449294f0948", 0xab}], 0x4, &(0x7f0000007ac0)=[@rights={{0x24, 0x1, 0x1, [r21, r0, r0, r22, r2]}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r0, 0xffffffffffffffff, r2]}}], 0xd0, 0x8003}}, {{0x0, 0x0, &(0x7f0000007c80)=[{&(0x7f0000007bc0)="bebaf04c666fe264f4481b6914739ea769f0628888a8a7010fd3a15593c4d3dc1e1a193b41585d776dd5aac938fd7053ddb83d5eae", 0x35}, {&(0x7f0000007c00)="b39fc2642b145040b66b53461e9066baad9b8a97b9ac5ef3549dc120018e06ba7b414571d2c799729141ddddf572b6d82d00428c82dc5d7865ba033fea0b5aaac75e664e87298aaa119e5a7bc966d8f57d049ff922814b9b", 0x58}], 0x2, &(0x7f0000007d40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000007d80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000009180)=[{&(0x7f0000007e00)="664f80ef9c622b1da9b43fe46023889e2a5f832f901e77511215afaa628d1c98bd2969b71bc18f5aa4db494751726254a63b7f12f78b4e18bcf5ab612ead4fddf2d050181b8f2f63305815627a7f6894e5df2a690bf068190664912f98a36c5d7ceb399a409a4d0a38793e15b1103bee8979ee91441eded837a9a268e404835afe33c23ab4b012468b2c1e835021f7552c4c1ca2cc05caa8df7b89a1b3fbe589745dd2ae7d3aee1d", 0xa8}, {&(0x7f0000007ec0)="dc3e94acff9fba24471b5e8979c2a474ec07948322c8fd940fe95d7a9eb78a50aa01c74d3e34a8960c468340cb4889eff83b8bf22de2ea725be2e1f59e0a9c2ec605dfb7b31fb2d48ca7a194221bbfd4b098be555c5e3301bc7332c5c1a7d8d536135858cf61390d8d2d5d8b2e79baf6bd76cc2bb8a1b4e91f8f0bc3f3b1fce06b10aae717a32dedbf5f3ebaaea57f41a1a47621", 0x94}, {&(0x7f0000007f80)="835d9ca4c162b63c0ead7d63f6e0380fca8b8194cb7274b15532b80ef62f69eb6c2afbdc986e895f398d52118039c9ba91ac9149ae113ff7332e61177f1e527dc209fb59927c80a09a05f16dac2a5b0d0764904774e523aa4738bf927955cd9921c66c04033afbbd34c60062ff00e127fd9513a94f3f5e1f46e7235d2512b94c56afdfd50be76c1642350d09238adc", 0x8f}, {&(0x7f0000008040)="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", 0x1000}, {&(0x7f0000009040)="25770748c50d1630da42b88dad732800995c69bb90aeddf6568fd00c86dcc337d16e9b2cec5e2bea0a42c90ca71c4829bcffb7c8e6201f9b94fed9279186ed40fafaa4016abc9637", 0x48}, {&(0x7f00000090c0)="085cb9b596307ee0c7dbba90f199091a7e03d0", 0x13}, {&(0x7f0000009100)="273c2e42c6b00ff13e9ba3b3fa4edded814631aac61eff159c5f492ca415fa28608cd5fbe2243b734b12720d16fa4c718fb4f1e65abe510e06997e11462f76a5357b720a91b499833f7687cd48f6e68ef51220b4fc4aa4ab0a83d261949efd7a", 0x60}], 0x7, &(0x7f00000099c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r0, r2, r2, r2, r2, r2, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xf0, 0x40890}}], 0x5, 0x4) 1.764131965s ago: executing program 1 (id=2014): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x88a8}]}}}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r0, r0}) read(r0, &(0x7f0000000080)=""/146, 0x92) 1.687798505s ago: executing program 3 (id=2015): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000445000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0x80, 0x2, 0x800002, 0xfffffffffffffffd, 0x7, 0x40, 0x0, 0xfffffffffffffffe, 0x40000, 0x2, 0x7f, 0x9, 0x978, 0x1, 0x1002], 0x1, 0x3e2987}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000430000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000000c0)="ba4300ed2e0f01c4660f3820cf66900f06f466b9af01000066b80020000066ba000000000f300f32660f72f7a10fc72d", 0x30}], 0x1, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@delchain={0x4c, 0x65, 0x400, 0x4070bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xe, 0x2}, {0x3, 0xfff2}, {0xffff, 0x8}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x40, 0x1}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0xb, 0x5}}]}, 0x4c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x4e20, @private=0xa010101}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='veth1_to_hsr\x00', 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) io_uring_enter(0xffffffffffffffff, 0xae0, 0x20d3, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) open$dir(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) close(0x3) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$kcm(0x1e, 0x1, 0x0) 1.509284116s ago: executing program 0 (id=2016): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0x7f}}}}}]}}]}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000500)=@keyring) syz_open_dev$usbmon(0x0, 0x0, 0x0) close(0xffffffffffffffff) inotify_init1(0x800) rseq(0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.28403417s ago: executing program 5 (id=2017): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0x7f}}}}}]}}]}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000500)=@keyring) syz_open_dev$usbmon(0x0, 0x0, 0x0) close(0xffffffffffffffff) inotify_init1(0x800) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200070000103d030100000000009500000000000000bc26000000000000bf67200000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 975.723953ms ago: executing program 3 (id=2018): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(generic-gcm-aesni)\x00'}, 0x58) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10}, 0x1c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000005c0), 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mmap(&(0x7f0000f21000/0x4000)=nil, 0x4000, 0x3000000, 0x11, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="f90000000000000200000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x3, 0xfd, 0x7, 0x7}}, @void, @void, @void, @void}, 0x34) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b0000000ada56faca136faf2ffffffff080211000000100000000200003f"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x27) unshare(0x6a040000) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 915.086879ms ago: executing program 2 (id=2019): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000002c0)={0x0, 0x0, 0xd71e, '\x00', &(0x7f0000000280)=0x2}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap(&(0x7f0000725000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mmap(&(0x7f00005b3000/0x3000)=nil, 0x3000, 0x1000003, 0x20010, r0, 0x1ec78000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) r7 = getuid() sched_setscheduler(r4, 0x3, &(0x7f00000000c0)=0x101) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40402, &(0x7f0000000180)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@noprefix}, {@xattr}], [{@uid_gt={'uid>', r7}}, {@audit}, {@measure}]}) 261.959311ms ago: executing program 1 (id=2020): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1a}}]}, 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000002940)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0, 0x82}, {0x0, 0x0}, {0x0, 0x0}], 0x36, 0x0, &(0x7f0000003300), 0x0) 0s ago: executing program 2 (id=2021): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_usb_control_io(r4, &(0x7f0000000cc0)={0x2c, &(0x7f00000008c0)={0x0, 0xc, 0xb4, {0xb4, 0xb, "8133b6a98f7430a638f4341cb67aecc3cdcda845c6be3c2d1bc76fe1e035a494ed3f8d1e7b7cc26a48c5c99b64577a28b57e400a05c02eeac7ab1993be8a1bab9e26b78600167b5dbae54d6d04f462821b53eccc205f0f271930a07e5a14dfabda1905a9aca7d64a62556c3fb69bed0d6c6426cb0ec5adda8ac4b99360c8146d493819a93de6609247edaf77b6365cae75d882774684e6255b6d5b9a09674236d5a0eb5c3b4005f7aafc296da7b743d7f78d"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f00000009c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xf4, 0x1, 0x3}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0x1, 0xff, "87912092", "dfff65bf"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x17, 0x3, 0x33, 0xf, 0x29, 0x9468, 0x200}}}, &(0x7f0000001140)={0x84, &(0x7f0000000d00)={0x0, 0xc, 0x63, "0c33257613c0a50060022f017d327c744b2e52b081f7d97e4c235a71117a0721dca4c63be3068f5878686fd7696fab30603be2da36b5ed5a7e14e65d3b57161c3ff3c59f004bc2b510fe2db4ad0b180a7e1c749b6ec921dc38110876f5b11623d72ea4"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000e40)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0x1efee]}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "7e1d"}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000001000)={0x40, 0x19, 0x2, "b460"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x250}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0xeb}, &(0x7f00000010c0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0x7}}) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000680)={0x400, r5, 0x2}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3}, 0x50) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000740)={0x3, r5, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x3, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @alu={0x4, 0x1, 0xc, 0x9, 0x7, 0x0, 0xfffffffffffffffc}], &(0x7f00000002c0)='syzkaller\x00', 0x7fff, 0x59, &(0x7f0000000380)=""/89, 0x40f00, 0x6c, '\x00', r2, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r8, r9, r10, r11, r12, r5], 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x20, 0x9, 0x1d, {0x1d, 0x0, "efd3f2d0c525fc8780a6dabdd3e44ab3109bbe5be405e89ce34525"}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): criptor's value: 3 [ 502.811799][ T5950] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.823994][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.832407][ T5950] usb 4-1: Product: syz [ 502.836599][ T5950] usb 4-1: Manufacturer: syz [ 502.850561][ T5950] usb 4-1: SerialNumber: syz [ 503.023422][T12548] binder: BINDER_SET_CONTEXT_MGR already set [ 503.029929][T12548] binder: 12542:12548 ioctl 4018620d 200000000040 returned -16 [ 503.064682][ T30] audit: type=1400 audit(2000000004.030:1036): avc: denied { read } for pid=12542 comm="syz.0.1493" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 503.214324][ T30] audit: type=1400 audit(2000000004.030:1037): avc: denied { open } for pid=12542 comm="syz.0.1493" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 503.270112][ T5950] usb 4-1: 0:2 : does not exist [ 503.708254][T12551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.725077][T12551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.901221][ T5950] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 504.060599][ T5950] usb 4-1: USB disconnect, device number 77 [ 504.490758][T12563] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 504.508563][T12563] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1498'. [ 505.076798][T12561] net_ratelimit: 100 callbacks suppressed [ 505.076816][T12561] openvswitch: netlink: Message has 4 unknown bytes. [ 505.430549][T11959] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 505.776044][T11959] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 505.792128][T11959] usb 1-1: config 0 has no interface number 0 [ 505.806975][T11959] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 505.817653][T11959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.826035][T11959] usb 1-1: Product: syz [ 505.831180][T11959] usb 1-1: Manufacturer: syz [ 505.835972][T11959] usb 1-1: SerialNumber: syz [ 505.853727][T11959] usb 1-1: config 0 descriptor?? [ 506.096702][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 506.096718][ T30] audit: type=1400 audit(2000000007.110:1057): avc: denied { connect } for pid=12588 comm="syz.5.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 506.606526][T12595] capability: warning: `syz.3.1507' uses 32-bit capabilities (legacy support in use) [ 508.032840][T11959] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 508.042940][T11959] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 508.050975][T11959] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 508.153306][T11959] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 508.162686][T11959] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 508.177943][T11959] usb 1-1: USB disconnect, device number 76 [ 508.196499][T11959] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 508.209178][T11959] keyspan 1-1:0.133: device disconnected [ 508.274246][T12625] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=32000 sclass=netlink_xfrm_socket pid=12625 comm=syz.1.1514 [ 508.287219][T12625] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=12625 comm=syz.1.1514 [ 508.566897][ T30] audit: type=1400 audit(2000000009.290:1058): avc: denied { write } for pid=12618 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 508.709651][T12620] overlayfs: missing 'workdir' [ 508.752785][ T30] audit: type=1400 audit(2000000009.650:1059): avc: denied { connect } for pid=12622 comm="syz.5.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 509.615000][T12637] kAFS: No cell specified [ 510.063320][T12636] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 510.224689][ T30] audit: type=1400 audit(2000000011.190:1060): avc: denied { append } for pid=12642 comm="syz.2.1518" name="v4l-subdev7" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 510.406178][ T30] audit: type=1400 audit(2000000011.380:1061): avc: denied { ioctl } for pid=12646 comm="syz.5.1520" path="socket:[35721]" dev="sockfs" ino=35721 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 510.550558][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 510.710557][ T10] usb 2-1: device descriptor read/64, error -71 [ 510.910773][ T5950] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 511.158047][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 511.310549][ T10] usb 2-1: device descriptor read/64, error -71 [ 511.323850][ T5950] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 511.337634][ T5950] usb 4-1: config 0 has no interface number 0 [ 511.349528][ T5950] usb 4-1: config 0 interface 98 has no altsetting 0 [ 511.364588][ T5950] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 511.375898][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.389325][ T5950] usb 4-1: Product: syz [ 511.396930][ T5950] usb 4-1: Manufacturer: syz [ 511.403968][ T5950] usb 4-1: SerialNumber: syz [ 511.430937][ T10] usb usb2-port1: attempt power cycle [ 511.595501][ T5950] usb 4-1: config 0 descriptor?? [ 511.890575][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 511.912170][ T10] usb 2-1: device descriptor read/8, error -71 [ 512.132131][T12665] JFS: discard option not supported on device [ 512.141040][T12665] Mount JFS Failure: -22 [ 512.145354][T12665] jfs_mount failed w/return code = -22 [ 512.492924][ T30] audit: type=1400 audit(2000000013.140:1062): avc: denied { read } for pid=12662 comm="syz.2.1524" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 512.532404][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 512.564215][ T30] audit: type=1400 audit(2000000013.140:1063): avc: denied { open } for pid=12662 comm="syz.2.1524" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 512.595574][ T30] audit: type=1400 audit(2000000013.140:1064): avc: denied { ioctl } for pid=12662 comm="syz.2.1524" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 512.624938][ T10] usb 2-1: device descriptor read/8, error -71 [ 512.931895][ T10] usb usb2-port1: unable to enumerate USB device [ 514.749001][ T30] audit: type=1400 audit(2000000015.730:1065): avc: denied { read } for pid=12676 comm="syz.1.1527" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 515.015877][ T30] audit: type=1400 audit(2000000015.740:1066): avc: denied { open } for pid=12676 comm="syz.1.1527" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 515.137035][ T30] audit: type=1400 audit(2000000015.760:1067): avc: denied { ioctl } for pid=12676 comm="syz.1.1527" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 515.289622][T12689] kAFS: No cell specified [ 516.124004][ T30] audit: type=1400 audit(2000000017.130:1068): avc: denied { create } for pid=12693 comm="syz.1.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 516.384517][ T30] audit: type=1400 audit(2000000017.170:1069): avc: denied { ioctl } for pid=12693 comm="syz.1.1533" path="socket:[36042]" dev="sockfs" ino=36042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 516.409863][ T30] audit: type=1400 audit(2000000017.170:1070): avc: denied { write } for pid=12693 comm="syz.1.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 516.429728][ T30] audit: type=1326 audit(2000000017.420:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012c38e929 code=0x7ffc0000 [ 516.601654][T12699] vxfs: WRONG superblock magic 00000000 at 1 [ 516.609853][T12699] vxfs: WRONG superblock magic 00000000 at 8 [ 516.615957][T12699] vxfs: can't find superblock. [ 516.839895][T12698] ceph: No mds server is up or the cluster is laggy [ 516.848303][T11959] libceph: connect (1)[c::]:6789 error -22 [ 516.863150][T11959] libceph: mon0 (1)[c::]:6789 connect error [ 516.884076][ T5950] usb 4-1: can't set config #0, error -71 [ 516.895533][ T5950] usb 4-1: USB disconnect, device number 78 [ 516.953730][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 517.280572][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 517.347965][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 517.480556][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 517.538333][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.578856][T12697] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 517.586220][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 517.586234][ T30] audit: type=1326 audit(2000000018.590:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f012c38e52b code=0x7ffc0000 [ 517.628332][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 517.665832][ T30] audit: type=1326 audit(2000000018.590:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f012c38e52b code=0x7ffc0000 [ 517.709721][ T30] audit: type=1326 audit(2000000018.590:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f012c38e52b code=0x7ffc0000 [ 517.736716][ T30] audit: type=1326 audit(2000000018.590:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f012c38e52b code=0x7ffc0000 [ 517.782489][ T30] audit: type=1326 audit(2000000018.640:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f012c38e52b code=0x7ffc0000 [ 517.975938][ T30] audit: type=1326 audit(2000000018.640:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f012c3c11e5 code=0x7ffc0000 [ 517.999915][ T30] audit: type=1326 audit(2000000018.840:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012c38e929 code=0x7ffc0000 [ 518.053132][ T30] audit: type=1326 audit(2000000018.840:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012c38e929 code=0x7ffc0000 [ 518.458870][ T30] audit: type=1326 audit(2000000018.840:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f012c38e929 code=0x7ffc0000 [ 518.483727][ T30] audit: type=1326 audit(2000000018.840:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12696 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012c38e929 code=0x7ffc0000 [ 518.929879][T12729] can0: slcan on ttyS3. [ 519.421077][T12729] can0 (unregistered): slcan off ttyS3. [ 519.433510][ T5901] usb 2-1: USB disconnect, device number 77 [ 519.462063][T12734] kAFS: No cell specified [ 519.768529][T12735] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 521.160627][ T5901] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 521.362176][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 521.401141][ T5901] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 521.441028][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 521.685214][ T5901] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 521.702812][ T5901] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 521.831935][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.372090][ T5901] usb 4-1: Product: syz [ 522.392408][ T5901] usb 4-1: Manufacturer: syz [ 522.436541][ T5901] usb 4-1: SerialNumber: syz [ 522.448857][ T5901] usb 4-1: config 0 descriptor?? [ 522.458684][ T5901] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 522.880139][T12785] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1556'. [ 522.932196][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 522.952378][ T30] audit: type=1400 audit(2000000023.930:1167): avc: denied { bind } for pid=12776 comm="syz.0.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 523.431572][ T30] audit: type=1400 audit(2000000023.930:1168): avc: denied { read write } for pid=12776 comm="syz.0.1555" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 523.440757][ T5901] scsi host1: usb-storage 4-1:0.0 [ 523.470211][ T30] audit: type=1400 audit(2000000023.930:1169): avc: denied { open } for pid=12776 comm="syz.0.1555" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 523.537414][T12793] kAFS: No cell specified [ 523.580383][ T30] audit: type=1400 audit(2000000023.930:1170): avc: denied { map } for pid=12776 comm="syz.0.1555" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 523.607210][ T5901] usb 4-1: USB disconnect, device number 79 [ 523.857222][ T30] audit: type=1400 audit(2000000023.930:1171): avc: denied { execute } for pid=12776 comm="syz.0.1555" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 523.894642][ T30] audit: type=1400 audit(2000000024.230:1172): avc: denied { name_bind } for pid=12784 comm="syz.2.1556" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 523.918531][ T30] audit: type=1400 audit(2000000024.230:1173): avc: denied { write } for pid=12784 comm="syz.2.1556" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 523.943969][ T30] audit: type=1400 audit(2000000024.230:1174): avc: denied { name_connect } for pid=12784 comm="syz.2.1556" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 524.161612][ T5901] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 524.461273][ T5901] usb 4-1: device descriptor read/64, error -71 [ 524.481466][T12814] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1566'. [ 524.498416][ T30] audit: type=1400 audit(2000000025.510:1175): avc: denied { bind } for pid=12810 comm="syz.5.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 524.535693][ T30] audit: type=1400 audit(2000000025.510:1176): avc: denied { connect } for pid=12810 comm="syz.5.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 524.700722][ T5901] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 524.763860][T12817] netlink: 'syz.0.1568': attribute type 1 has an invalid length. [ 524.782847][T12819] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 524.792552][T12819] team0: Device macvtap1 is already an upper device of the team interface [ 524.835030][T12817] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.931787][ T5901] usb 4-1: device descriptor read/64, error -71 [ 525.078835][ T5901] usb usb4-port1: attempt power cycle [ 525.550596][ T5901] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 525.746870][ C0] vcan0: j1939_tp_rxtimer: 0xffff888045ea3c00: rx timeout, send abort [ 525.756914][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888045ea3c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 526.123060][T12827] kAFS: No cell specified [ 526.140020][ T5901] usb 4-1: device descriptor read/8, error -71 [ 526.510915][ T5950] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 526.570589][ T5901] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 526.592052][ T5901] usb 4-1: device descriptor read/8, error -71 [ 526.686788][ T5950] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 526.696240][ T5950] usb 2-1: config 0 has no interface number 0 [ 526.700844][ T5901] usb usb4-port1: unable to enumerate USB device [ 526.705924][ T5950] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 526.737416][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.754015][ T5950] usb 2-1: Product: syz [ 526.759406][ T5950] usb 2-1: Manufacturer: syz [ 526.765772][ T5950] usb 2-1: SerialNumber: syz [ 526.773649][ T5950] usb 2-1: config 0 descriptor?? [ 526.984312][T12832] random: crng reseeded on system resumption [ 527.020842][T11959] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 527.274926][T11959] usb 1-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 527.702817][T12862] kAFS: No cell specified [ 528.064105][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 528.064120][ T30] audit: type=1326 audit(2000000028.390:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12856 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 528.126940][T11959] usb 1-1: config 18 has 0 interfaces, different from the descriptor's value: 1 [ 528.375774][T11959] usb 1-1: New USB device found, idVendor=494f, idProduct=7e69, bcdDevice=51.78 [ 528.390647][T11959] usb 1-1: New USB device strings: Mfr=123, Product=174, SerialNumber=30 [ 528.399759][ T30] audit: type=1326 audit(2000000028.390:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12856 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 528.423727][T11959] usb 1-1: Product: syz [ 528.428022][T11959] usb 1-1: Manufacturer: syz [ 528.432796][T11959] usb 1-1: SerialNumber: syz [ 528.636896][ T30] audit: type=1326 audit(2000000028.390:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12856 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 528.712483][ T30] audit: type=1326 audit(2000000028.390:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12856 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 528.741967][ T30] audit: type=1326 audit(2000000028.400:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12856 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 528.766966][ T30] audit: type=1326 audit(2000000028.400:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12856 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 528.893576][ T30] audit: type=1326 audit(2000000028.400:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12856 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 528.919225][ T30] audit: type=1326 audit(2000000028.400:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12856 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 528.949715][ T30] audit: type=1326 audit(2000000028.400:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12856 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 529.583328][T11959] usb 1-1: USB disconnect, device number 77 [ 529.857978][ T30] audit: type=1400 audit(2000000030.870:1195): avc: denied { watch watch_reads } for pid=12885 comm="syz.2.1586" path="pipe:[3989]" dev="pipefs" ino=3989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 530.600678][ T5958] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 530.750818][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 530.759378][ T5958] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 530.767904][ T5958] usb 1-1: config 0 has no interface number 0 [ 530.779652][ T5958] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 530.791259][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.799432][ T5958] usb 1-1: Product: syz [ 530.803815][ T5958] usb 1-1: Manufacturer: syz [ 530.808553][ T5958] usb 1-1: SerialNumber: syz [ 530.816218][ T5958] usb 1-1: config 0 descriptor?? [ 530.825197][ T5958] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 530.832873][ T5958] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 531.031677][ T5958] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 531.072751][ T5958] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 532.445383][ T5950] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110 [ 532.455955][T12913] kAFS: No cell specified [ 532.488499][ T5950] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -110 [ 532.525384][ T5950] asix 2-1:0.251: probe with driver asix failed with error -5 [ 532.667677][ T5950] usb 2-1: USB disconnect, device number 78 [ 532.897964][T12922] overlay: Bad value for 'upperdir' [ 533.541693][ T5901] usb 1-1: USB disconnect, device number 78 [ 533.547976][ T5901] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 533.590848][T12929] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 533.857754][T12939] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1597'. [ 533.953715][T12929] mkiss: ax0: crc mode is auto. [ 533.990037][T12944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.022717][T12944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.166676][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 534.166691][ T30] audit: type=1400 audit(2000000035.180:1201): avc: denied { read } for pid=12945 comm="syz.3.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 534.316503][T12951] kAFS: No cell specified [ 534.916708][T12954] FAULT_INJECTION: forcing a failure. [ 534.916708][T12954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.092195][T12954] CPU: 1 UID: 0 PID: 12954 Comm: syz.3.1605 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 535.092224][T12954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.092234][T12954] Call Trace: [ 535.092240][T12954] [ 535.092248][T12954] dump_stack_lvl+0x16c/0x1f0 [ 535.092278][T12954] should_fail_ex+0x512/0x640 [ 535.092305][T12954] _copy_from_user+0x2e/0xd0 [ 535.092331][T12954] copy_msghdr_from_user+0x98/0x160 [ 535.092356][T12954] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 535.092385][T12954] ? lock_acquire+0x179/0x350 [ 535.092402][T12954] ? find_held_lock+0x2b/0x80 [ 535.092427][T12954] ___sys_sendmsg+0xfe/0x1d0 [ 535.092451][T12954] ? rcu_is_watching+0x12/0xc0 [ 535.092476][T12954] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.092497][T12954] ? __lock_acquire+0x622/0x1c90 [ 535.092546][T12954] __sys_sendmsg+0x16d/0x220 [ 535.092570][T12954] ? __pfx___sys_sendmsg+0x10/0x10 [ 535.092592][T12954] ? rcu_is_watching+0x12/0xc0 [ 535.092630][T12954] do_syscall_64+0xcd/0x4c0 [ 535.092658][T12954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.092675][T12954] RIP: 0033:0x7fdd4258e929 [ 535.092689][T12954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.092706][T12954] RSP: 002b:00007fdd4334a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.092724][T12954] RAX: ffffffffffffffda RBX: 00007fdd427b5fa0 RCX: 00007fdd4258e929 [ 535.092735][T12954] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 535.092746][T12954] RBP: 00007fdd4334a090 R08: 0000000000000000 R09: 0000000000000000 [ 535.092757][T12954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.092767][T12954] R13: 0000000000000000 R14: 00007fdd427b5fa0 R15: 00007ffca69f2538 [ 535.092791][T12954] [ 535.325941][T12958] netlink: 'syz.2.1607': attribute type 4 has an invalid length. [ 535.333785][T12958] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1607'. [ 535.345765][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.354430][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.371274][ T30] audit: type=1400 audit(2000000036.390:1202): avc: denied { execute } for pid=12957 comm="syz.2.1607" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 535.441444][ T30] audit: type=1400 audit(2000000036.440:1203): avc: denied { read write } for pid=12955 comm="syz.0.1606" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 535.540540][ T30] audit: type=1400 audit(2000000036.440:1204): avc: denied { open } for pid=12955 comm="syz.0.1606" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 538.203839][ T30] audit: type=1400 audit(2000000039.220:1205): avc: denied { create } for pid=12962 comm="syz.1.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 538.228457][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1609'. [ 538.489241][ T30] audit: type=1400 audit(2000000039.500:1206): avc: denied { read } for pid=12972 comm="syz.0.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 539.144014][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1616'. [ 539.267548][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.321126][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.371539][ T5950] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 540.120512][T12992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.133746][T12992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.300133][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 540.320914][ T5950] usb 1-1: unable to get BOS descriptor or descriptor too short [ 540.331412][ T5950] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 540.360541][ T5934] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 540.361171][ T5950] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 540.431675][T12993] kAFS: No cell specified [ 540.922941][T12994] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 540.939321][ T5950] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 540.996091][ T5950] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.007613][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.028218][ T5950] usb 1-1: Product: syz [ 541.043693][ T5950] usb 1-1: Manufacturer: syz [ 541.053849][ T5950] usb 1-1: SerialNumber: syz [ 541.082163][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.093564][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.103770][ T5934] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 541.112875][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.236084][ T30] audit: type=1326 audit(2000000042.250:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.3.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4258e929 code=0x7ffc0000 [ 541.317976][ T5950] usb 1-1: 0:2 : does not exist [ 541.461207][ T5934] usb 2-1: config 0 descriptor?? [ 541.487638][ T30] audit: type=1326 audit(2000000042.250:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.3.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4258e929 code=0x7ffc0000 [ 541.540588][ T30] audit: type=1326 audit(2000000042.250:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.3.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fdd4258e929 code=0x7ffc0000 [ 541.565823][ T30] audit: type=1326 audit(2000000042.250:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.3.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4258e929 code=0x7ffc0000 [ 541.590935][ T30] audit: type=1326 audit(2000000042.250:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.3.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4258e929 code=0x7ffc0000 [ 541.620680][ T30] audit: type=1400 audit(2000000042.530:1212): avc: denied { read write } for pid=12978 comm="syz.0.1614" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 541.645296][ T30] audit: type=1400 audit(2000000042.530:1213): avc: denied { open } for pid=12978 comm="syz.0.1614" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 541.873557][T12989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.887535][T12989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.020938][ T5934] usbhid 2-1:0.0: can't add hid device: -71 [ 542.030832][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 542.038644][ T5934] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 542.049213][ T5934] usb 2-1: USB disconnect, device number 79 [ 542.067247][ T30] audit: type=1400 audit(2000000043.080:1214): avc: denied { read append } for pid=13007 comm="syz.1.1622" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 542.092882][ T30] audit: type=1400 audit(2000000043.080:1215): avc: denied { open } for pid=13007 comm="syz.1.1622" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 542.118934][ T30] audit: type=1400 audit(2000000043.110:1216): avc: denied { ioctl } for pid=13007 comm="syz.1.1622" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 542.145528][T13008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.190519][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 542.197349][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 542.217553][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 542.237596][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.313048][ T10] usb 4-1: config 0 descriptor?? [ 542.537753][T13003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.562118][T13003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.577029][ T10] usb 4-1: string descriptor 0 read error: -71 [ 542.586922][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33 [ 542.608102][T13018] 9pnet_virtio: no channels available for device 127.0.0.1 [ 542.611763][ T5186] bcm5974 4-1:0.0: could not read from device [ 542.621969][ T10] usb 4-1: USB disconnect, device number 84 [ 542.846978][T13028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1628'. [ 542.910509][ T5950] usb 1-1: USB disconnect, device number 79 [ 542.998785][T13033] kAFS: No cell specified [ 544.978345][T13049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.991499][T13049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.002361][T13049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.016552][T13049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.150581][ T5958] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 545.314125][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.494683][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 545.507325][ T5958] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.587770][ T5958] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 545.620766][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.654974][ T5958] usb 4-1: config 0 descriptor?? [ 545.676186][T13063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1639'. [ 545.842807][T13067] kAFS: No cell specified [ 545.983992][T13042] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 546.019466][T13042] CIFS mount error: No usable UNC path provided in device string! [ 546.019466][T13042] [ 546.040446][T13042] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 546.290966][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 546.290982][ T30] audit: type=1400 audit(2000000046.970:1229): avc: denied { ioctl } for pid=13037 comm="syz.3.1632" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 547.022084][T13080] netlink: 'syz.2.1643': attribute type 3 has an invalid length. [ 547.030009][T13080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1643'. [ 547.216877][ T30] audit: type=1400 audit(2000000048.230:1230): avc: denied { cmd } for pid=13075 comm="syz.2.1643" path="socket:[37529]" dev="sockfs" ino=37529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 547.777098][ T30] audit: type=1400 audit(2000000048.790:1231): avc: denied { append } for pid=13101 comm="syz.2.1648" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 547.855020][ T5958] usb 4-1: USB disconnect, device number 85 [ 547.927993][ T30] audit: type=1326 audit(2000000048.940:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a658e929 code=0x7ffc0000 [ 547.957215][ T30] audit: type=1326 audit(2000000048.940:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a658e929 code=0x7ffc0000 [ 548.992822][T13116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1650'. [ 549.087228][T13122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.096031][T13122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.390578][ T5934] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 549.540577][ T5934] usb 4-1: device descriptor read/64, error -71 [ 549.852182][ T5934] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 549.990571][ T5934] usb 4-1: device descriptor read/64, error -71 [ 550.067901][T13138] misc userio: Invalid payload size [ 550.100850][ T5934] usb usb4-port1: attempt power cycle [ 550.125889][T13140] misc userio: The device must be registered before sending interrupts [ 550.151674][ T30] audit: type=1400 audit(2000000051.150:1234): avc: denied { append } for pid=13137 comm="syz.1.1656" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 550.195475][ T30] audit: type=1400 audit(2000000051.150:1235): avc: denied { map } for pid=13137 comm="syz.1.1656" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 550.221589][ T30] audit: type=1400 audit(2000000051.150:1236): avc: denied { execute } for pid=13137 comm="syz.1.1656" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 550.443073][ T5934] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 550.482673][ T5934] usb 4-1: device descriptor read/8, error -71 [ 550.720576][ T5934] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 550.741020][ T5934] usb 4-1: device descriptor read/8, error -71 [ 550.851376][ T5934] usb usb4-port1: unable to enumerate USB device [ 551.220567][ T5958] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 551.390749][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 551.398843][ T5958] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 551.408205][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.416376][ T5958] usb 2-1: Product: syz [ 551.424491][ T5958] usb 2-1: Manufacturer: syz [ 551.429126][ T5958] usb 2-1: SerialNumber: syz [ 551.446473][ T5958] usb 2-1: config 0 descriptor?? [ 551.681207][ T5958] peak_usb 2-1:0.0: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 551.727508][ T30] audit: type=1326 audit(2000000052.720:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 551.787891][ T30] audit: type=1326 audit(2000000052.720:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 551.815523][ T30] audit: type=1326 audit(2000000052.740:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 551.853090][ T30] audit: type=1326 audit(2000000052.740:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 551.881601][ T30] audit: type=1326 audit(2000000052.740:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.5.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 551.914464][ T30] audit: type=1400 audit(2000000052.900:1242): avc: denied { append } for pid=13154 comm="syz.1.1660" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 551.960650][ T30] audit: type=1400 audit(2000000052.930:1243): avc: denied { map } for pid=13154 comm="syz.1.1660" path="socket:[37642]" dev="sockfs" ino=37642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 552.185992][ T30] audit: type=1400 audit(2000000053.200:1244): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 552.308041][T13177] overlay: Bad value for 'upperdir' [ 553.429403][T13192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.440795][T13192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.687719][T13192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.711862][T13192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.062502][ T5950] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 554.097093][ T5958] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 554.108974][ T5958] peak_usb 2-1:0.0: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 554.240857][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 554.324132][ T5950] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 554.556069][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.577458][ T5950] usb 4-1: config 0 descriptor?? [ 554.594813][ T5958] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 554.634530][ T5958] usb 2-1: USB disconnect, device number 80 [ 554.642205][ T5950] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 555.343707][T13225] overlay: Bad value for 'upperdir' [ 555.581176][ T30] audit: type=1400 audit(2000000056.580:1245): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 556.182423][ T30] audit: type=1400 audit(2000000057.200:1246): avc: denied { name_bind } for pid=13237 comm="syz.5.1685" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 556.478297][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1684'. [ 556.703023][ T5950] gspca_sonixj: reg_w1 err -71 [ 556.707926][ T5950] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 556.776711][ T5950] usb 4-1: USB disconnect, device number 90 [ 556.793043][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 556.793060][ T30] audit: type=1400 audit(2000000057.810:1250): avc: denied { setattr } for pid=13247 comm="syz.2.1686" name="anycast6" dev="proc" ino=4026532891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 557.939542][T13271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.040583][T13275] comedi comedi3: reset error (fatal) [ 560.316696][ T30] audit: type=1400 audit(2000000060.130:1251): avc: denied { create } for pid=13273 comm="syz.0.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 560.337544][ T30] audit: type=1400 audit(2000000060.140:1252): avc: denied { setopt } for pid=13273 comm="syz.0.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 560.433781][ T30] audit: type=1400 audit(2000000061.450:1253): avc: denied { create } for pid=13279 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 560.930587][ T30] audit: type=1400 audit(2000000061.450:1254): avc: denied { getopt } for pid=13279 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 561.529084][ T30] audit: type=1400 audit(2000000062.540:1255): avc: denied { audit_write } for pid=13295 comm="syz.3.1698" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 561.824683][T13300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1699'. [ 561.936524][T13311] x_tables: duplicate underflow at hook 1 [ 561.952123][T13313] syzkaller0: entered promiscuous mode [ 561.957662][T13313] syzkaller0: entered allmulticast mode [ 561.964860][T13312] tipc: Enabled bearer , priority 0 [ 561.977634][T13312] tipc: Resetting bearer [ 562.187261][T13308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.198577][T13308] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.367088][T13308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 562.454187][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.645338][T13315] tipc: Resetting bearer [ 562.681637][T13315] tipc: Disabling bearer [ 562.744225][ T30] audit: type=1400 audit(2000000063.760:1256): avc: denied { ioctl } for pid=13327 comm="syz.2.1706" path="pid:[4026532797]" dev="nsfs" ino=4026532797 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 562.927870][ T30] audit: type=1400 audit(2000000063.940:1257): avc: denied { getopt } for pid=13337 comm="syz.2.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 563.691708][ T30] audit: type=1400 audit(2000000064.710:1258): avc: denied { accept } for pid=13339 comm="syz.0.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 563.750336][T13341] netlink: 'syz.0.1710': attribute type 1 has an invalid length. [ 563.758381][T13341] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1710'. [ 564.027697][ T30] audit: type=1400 audit(2000000065.040:1259): avc: denied { mounton } for pid=13358 comm="syz.2.1714" path="/376/file0" dev="tmpfs" ino=2035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 564.093074][T13362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1715'. [ 564.103266][ T30] audit: type=1400 audit(2000000065.120:1260): avc: denied { getopt } for pid=13349 comm="syz.1.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 564.123572][T13362] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1715'. [ 564.438226][ T30] audit: type=1400 audit(2000000065.400:1261): avc: denied { getopt } for pid=13375 comm="syz.0.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 564.495677][T13376] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1718'. [ 564.532829][T13376] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 564.590189][T10779] Bluetooth: hci5: command 0x0406 tx timeout [ 566.106876][T13406] overlayfs: missing 'lowerdir' [ 566.128654][ T30] audit: type=1400 audit(2000000067.140:1262): avc: denied { bind } for pid=13401 comm="syz.5.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 566.129168][T13406] netlink: 'syz.5.1723': attribute type 10 has an invalid length. [ 566.160269][T13406] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1723'. [ 566.211132][T13406] team0: Port device geneve0 added [ 566.260532][ T5894] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 566.447092][T13408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.471433][T13408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.479658][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.489908][ T5894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 566.542503][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.551754][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.570511][ T5894] usb 4-1: Product: syz [ 566.574713][ T5894] usb 4-1: Manufacturer: syz [ 566.579310][ T5894] usb 4-1: SerialNumber: syz [ 566.800076][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.819572][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.867316][ T5894] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 566.911698][ T5894] usb 4-1: USB disconnect, device number 91 [ 567.310594][ T5934] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 567.471797][ T5934] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 567.479897][ T5934] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 567.490010][ T5934] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 567.498992][ T5934] usb 2-1: config 0 has no interface number 0 [ 567.505196][ T5934] usb 2-1: config 0 has no interface number 1 [ 567.511394][ T5934] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 567.513131][ T5950] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 567.522525][ T5934] usb 2-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 567.522554][ T5934] usb 2-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 567.522591][ T5934] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 567.522615][ T5934] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 567.522639][ T5934] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 567.522661][ T5934] usb 2-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 567.522683][ T5934] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 567.522703][ T5934] usb 2-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 567.522726][ T5934] usb 2-1: config 0 interface 66 has no altsetting 0 [ 567.542614][ T5934] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 567.664481][T13426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.678152][T13427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.689641][T13426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.701161][T13427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.747134][ T5950] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 567.758834][ T5950] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 567.787585][ T5950] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.799200][ T5950] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 567.802903][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.813608][ T5950] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 567.835104][ T5950] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.840554][ T5934] usb 2-1: Product: syz [ 567.849134][ T5934] usb 2-1: Manufacturer: syz [ 567.849270][ T5950] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 567.860503][ T5934] usb 2-1: SerialNumber: syz [ 567.866646][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.877461][ T5934] usb 2-1: config 0 descriptor?? [ 567.885774][ T5934] ljca 2-1:0.84: bulk endpoints not found [ 568.080594][T11959] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 568.094449][ T5950] usb 4-1: usb_control_msg returned -71 [ 568.095642][ T5934] ljca 2-1:0.66: probe with driver ljca failed with error -71 [ 568.100175][ T5950] usbtmc 4-1:16.0: can't read capabilities [ 568.112002][ T5934] usb 2-1: USB disconnect, device number 81 [ 568.116847][ T5950] usbtmc 4-1:16.0: Failed to submit iin_urb [ 568.126313][ T5950] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -90 [ 568.139282][ T5950] usb 4-1: USB disconnect, device number 92 [ 568.241825][T11959] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 568.250029][T11959] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 568.258226][T11959] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 568.267375][T11959] usb 1-1: config 0 has no interface number 0 [ 568.273573][T11959] usb 1-1: config 0 has no interface number 1 [ 568.279672][T11959] usb 1-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 568.290948][T11959] usb 1-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 568.304443][T11959] usb 1-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 568.316501][T11959] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 568.326620][T11959] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 568.340292][T11959] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 568.361887][T11959] usb 1-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 568.374398][T11959] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 568.385094][T11959] usb 1-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 568.398928][T11959] usb 1-1: config 0 interface 66 has no altsetting 0 [ 568.412120][T11959] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 568.422355][T11959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.430475][T11959] usb 1-1: Product: syz [ 568.434675][T11959] usb 1-1: Manufacturer: syz [ 568.439270][T11959] usb 1-1: SerialNumber: syz [ 568.446161][T11959] usb 1-1: config 0 descriptor?? [ 568.468100][T11959] ljca 1-1:0.84: bulk endpoints not found [ 568.540985][T13432] binder: 13430:13432 ioctl 4018620d 0 returned -22 [ 568.726313][T11959] ljca 1-1:0.66: probe with driver ljca failed with error -71 [ 568.814207][T11959] usb 1-1: USB disconnect, device number 80 [ 568.964485][T13440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1737'. [ 569.004946][ T30] audit: type=1400 audit(2000000070.020:1263): avc: denied { listen } for pid=13437 comm="syz.3.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 569.053637][ T30] audit: type=1400 audit(2000000070.020:1264): avc: denied { connect } for pid=13437 comm="syz.3.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 569.088230][ T30] audit: type=1400 audit(2000000070.020:1265): avc: denied { accept } for pid=13437 comm="syz.3.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 569.115644][ T30] audit: type=1400 audit(2000000070.020:1266): avc: denied { write } for pid=13437 comm="syz.3.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 569.144290][T13448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13448 comm=syz.5.1739 [ 569.208149][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.224055][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.566101][ T5894] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 570.330908][ T5894] usb 2-1: device descriptor read/all, error -61 [ 570.532801][ T5894] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 570.565276][ T30] audit: type=1326 audit(2000000071.580:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13463 comm="syz.5.1743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x0 [ 570.691779][T13470] syz_tun: entered allmulticast mode [ 570.703476][ T30] audit: type=1400 audit(2000000071.710:1268): avc: denied { write } for pid=13469 comm="syz.0.1745" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 570.780345][ T30] audit: type=1400 audit(2000000071.790:1269): avc: denied { setopt } for pid=13472 comm="syz.1.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 570.804899][T13469] syz_tun: left allmulticast mode [ 571.023195][T13484] dlm: no local IP address has been set [ 571.043440][T13484] dlm: cannot start dlm midcomms -107 [ 571.240941][ T30] audit: type=1400 audit(2000000072.250:1270): avc: denied { connect } for pid=13480 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 571.549015][ T30] audit: type=1400 audit(2000000072.510:1271): avc: denied { accept } for pid=13482 comm="syz.1.1748" lport=46145 faddr=::ffff:10.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 572.373914][T13501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.402506][T13501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.414517][T13501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.426318][T13501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.751830][ T30] audit: type=1400 audit(2000000073.770:1272): avc: denied { relabelfrom } for pid=13502 comm="syz.1.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 573.427101][T13512] kvm: kvm [13511]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000f) [ 573.870482][T13525] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 575.824498][T11959] IPVS: starting estimator thread 0... [ 575.875490][T13550] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1767'. [ 575.894304][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 575.894319][ T30] audit: type=1400 audit(2000000076.910:1276): avc: denied { getopt } for pid=13549 comm="syz.0.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 575.920693][T13548] IPVS: using max 76 ests per chain, 182400 per kthread [ 575.931664][ T30] audit: type=1400 audit(2000000076.950:1277): avc: denied { ioctl } for pid=13549 comm="syz.0.1767" path="socket:[39690]" dev="sockfs" ino=39690 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 576.779525][T13575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.803918][T13575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.926890][T13577] Bluetooth: hci4: Frame reassembly failed (-84) [ 576.936654][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'. [ 576.945701][T13577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'. [ 577.248169][T12109] Bluetooth: hci4: Frame reassembly failed (-84) [ 578.989221][T13594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1780'. [ 579.093089][T13598] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1782'. [ 579.329768][ T5838] Bluetooth: hci4: command 0x1003 tx timeout [ 579.340211][T10779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 579.605116][T13608] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1785'. [ 579.689329][ T5894] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 579.841545][T13608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.883305][T13608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.910972][T13608] bond0 (unregistering): (slave team0): Releasing backup interface [ 579.925579][ T5894] usb 4-1: device descriptor read/64, error -71 [ 580.008924][T13608] bond0 (unregistering): Released all slaves [ 580.615227][ T5894] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 580.641745][T13626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1787'. [ 580.769706][ T30] audit: type=1400 audit(2000000081.780:1278): avc: denied { name_bind } for pid=13615 comm="syz.1.1787" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 580.810715][ T5894] usb 4-1: device descriptor read/64, error -71 [ 580.997193][ T5894] usb usb4-port1: attempt power cycle [ 581.072406][T13635] overlay: Bad value for 'upperdir' [ 581.517460][ T30] audit: type=1326 audit(2000000082.530:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13638 comm="syz.2.1792" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ebeb8e929 code=0x10000000 [ 581.520552][ T5894] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 582.050532][ T5894] usb 4-1: device descriptor read/8, error -71 [ 582.068191][ T30] audit: type=1400 audit(2000000083.080:1280): avc: denied { ioctl } for pid=13645 comm="syz.5.1794" path="socket:[39911]" dev="sockfs" ino=39911 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 582.290692][ T5894] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 582.364502][T13655] openvswitch: netlink: Flow actions attr not present in new flow. [ 582.404216][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 582.432466][ T30] audit: type=1400 audit(2000000083.430:1281): avc: denied { create } for pid=13656 comm="syz.5.1798" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 582.453239][ C0] vkms_vblank_simulate: vblank timer overrun [ 582.520865][ T5894] usb 4-1: device not accepting address 96, error -71 [ 582.530800][T11959] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 582.531333][ T5894] usb usb4-port1: unable to enumerate USB device [ 582.590592][ T10] usb 2-1: device descriptor read/64, error -71 [ 582.725257][T11959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.745966][T11959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.777049][T11959] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 582.786313][T11959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.801547][T11959] usb 1-1: config 0 descriptor?? [ 582.830729][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 582.980546][ T10] usb 2-1: device descriptor read/64, error -71 [ 583.090934][ T10] usb usb2-port1: attempt power cycle [ 583.460688][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 583.517440][ T10] usb 2-1: device descriptor read/8, error -71 [ 583.850958][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 583.893264][ T10] usb 2-1: device descriptor read/8, error -71 [ 584.069286][ T10] usb usb2-port1: unable to enumerate USB device [ 585.105170][ T5950] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 585.484439][ T30] audit: type=1326 audit(2000000086.240:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13678 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 585.507932][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.515213][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 585.545566][ T5950] usb 4-1: config 64 has an invalid interface number: 184 but max is 0 [ 585.562247][ T5950] usb 4-1: config 64 has no interface number 0 [ 585.572872][T11959] usbhid 1-1:0.0: can't add hid device: -71 [ 585.582724][T11959] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 585.609145][ T5950] usb 4-1: config 64 interface 184 has no altsetting 0 [ 585.628391][ T5950] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0801, bcdDevice=dd.60 [ 585.644889][ T30] audit: type=1326 audit(2000000086.240:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13678 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 585.693984][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.702174][ T5950] usb 4-1: Product: syz [ 585.706370][ T5950] usb 4-1: Manufacturer: syz [ 585.711145][ T30] audit: type=1326 audit(2000000086.240:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13678 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 585.781138][T11959] usb 1-1: USB disconnect, device number 81 [ 585.794252][ T5950] usb 4-1: SerialNumber: syz [ 585.822196][ T30] audit: type=1326 audit(2000000086.240:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13678 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 586.130538][T11959] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 586.248003][ T5950] qmi_wwan 4-1:64.184: probe with driver qmi_wwan failed with error -22 [ 586.279544][ T5950] usb 4-1: USB disconnect, device number 97 [ 586.436047][T11959] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 586.444545][ T30] audit: type=1400 audit(2000000087.450:1286): avc: denied { bind } for pid=13688 comm="syz.2.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 586.470589][T11959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.489942][T11959] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 586.503432][T11959] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 586.566919][T11959] usb 1-1: Manufacturer: syz [ 586.573753][T11959] usb 1-1: config 0 descriptor?? [ 586.973878][T11959] rc_core: IR keymap rc-hauppauge not found [ 586.984852][T11959] Registered IR keymap rc-empty [ 586.999385][T11959] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 587.021969][T11959] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 587.063351][ T30] audit: type=1400 audit(2000000088.080:1287): avc: denied { ioctl } for pid=5186 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=5001 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 587.100106][T13702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.136015][ T30] audit: type=1400 audit(2000000088.110:1288): avc: denied { lock } for pid=13700 comm="syz.2.1811" path="socket:[40129]" dev="sockfs" ino=40129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 587.136264][T13702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.299141][T13701] rc rc0: two consecutive events of type space [ 587.448234][T13707] JFS: discard option not supported on device [ 587.455912][T13707] Mount JFS Failure: -22 [ 587.460225][T13707] jfs_mount failed w/return code = -22 [ 587.677304][ T30] audit: type=1400 audit(2000000088.680:1289): avc: denied { mount } for pid=13703 comm="syz.1.1812" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 587.779876][ T5894] usb 1-1: USB disconnect, device number 82 [ 587.882374][T13714] netlink: 'syz.3.1814': attribute type 10 has an invalid length. [ 587.890292][T13714] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1814'. [ 587.914736][T13714] team0: Port device bond0 removed [ 587.920340][T13714] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 589.600815][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1819'. [ 589.630940][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1819'. [ 589.747667][ T30] audit: type=1326 audit(2000000090.760:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13736 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a658e929 code=0x7ffc0000 [ 589.830680][ T30] audit: type=1326 audit(2000000090.830:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13736 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f96a658e929 code=0x7ffc0000 [ 589.854394][ T30] audit: type=1326 audit(2000000090.830:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13736 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a658e929 code=0x7ffc0000 [ 589.893243][ T30] audit: type=1326 audit(2000000090.830:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13736 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f96a658e929 code=0x7ffc0000 [ 589.930617][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 589.940789][T13744] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1824'. [ 589.949893][ T30] audit: type=1326 audit(2000000090.898:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13736 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a658e929 code=0x7ffc0000 [ 589.975152][ T30] audit: type=1326 audit(2000000090.898:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13736 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f96a658e929 code=0x7ffc0000 [ 589.999092][ T30] audit: type=1326 audit(2000000090.898:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13736 comm="syz.0.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a658e929 code=0x7ffc0000 [ 590.090638][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 590.097325][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 590.107610][ T10] usb 4-1: config 0 has no interface number 0 [ 590.115216][ T10] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 590.128649][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 590.135883][ T5901] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 590.148437][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 590.158161][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.166284][ T10] usb 4-1: Product: syz [ 590.170596][ T10] usb 4-1: Manufacturer: syz [ 590.175239][ T10] usb 4-1: SerialNumber: syz [ 590.182235][ T10] usb 4-1: config 0 descriptor?? [ 590.290574][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 590.298062][ T5901] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 590.305915][ T5901] usb 2-1: can't read configurations, error -61 [ 590.398875][ T10] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 590.407887][ T10] cx231xx 4-1:0.1: Not found matching IAD interface [ 590.415753][ T10] usb 4-1: USB disconnect, device number 98 [ 590.451418][ T5901] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 590.465989][T13759] cgroup: fork rejected by pids controller in /syz2 [ 590.600972][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 590.615100][ T5901] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 590.623968][ T5901] usb 2-1: can't read configurations, error -61 [ 590.630965][ T5901] usb usb2-port1: attempt power cycle [ 590.801640][ T5958] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 591.059954][ T5901] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 591.071532][ T5958] usb 1-1: Using ep0 maxpacket: 16 [ 591.081278][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 591.088311][ T5901] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 591.096335][ T5958] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 591.110562][ T5901] usb 2-1: can't read configurations, error -61 [ 591.133549][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.211671][ T5958] usb 1-1: Product: syz [ 591.248090][ T5958] usb 1-1: Manufacturer: syz [ 591.640904][ T5958] usb 1-1: SerialNumber: syz [ 591.666255][ T5958] usb 1-1: config 0 descriptor?? [ 591.680560][ T5901] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 591.701794][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 591.708783][ T5901] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 591.724756][ T5901] usb 2-1: can't read configurations, error -61 [ 591.748508][ T5901] usb usb2-port1: unable to enumerate USB device [ 591.879484][T15047] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1836'. [ 591.888811][ T5958] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 591.913813][ T5958] usb 1-1: USB disconnect, device number 83 [ 591.985081][T15051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.030794][T15051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.062274][T15051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.090365][T15053] openvswitch: netlink: VXLAN extension 206 out of range max 1 [ 592.098401][T15051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.455760][T15060] netlink: 'syz.0.1841': attribute type 10 has an invalid length. [ 592.470534][ T5958] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 592.623864][ T5958] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 592.640550][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.655417][ T5958] usb 4-1: config 0 descriptor?? [ 592.817956][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 592.817977][ T5950] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 592.817988][ T30] audit: type=1400 audit(2000000093.828:1310): avc: denied { nlmsg_write } for pid=15062 comm="syz.2.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 593.117571][ T5958] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 593.310604][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 593.350246][T15068] syzkaller0: entered promiscuous mode [ 593.355894][T15068] syzkaller0: entered allmulticast mode [ 593.404421][ T30] audit: type=1400 audit(2000000094.478:1311): avc: denied { create } for pid=15067 comm="syz.2.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 593.520121][T15073] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-:/": -EINTR [ 593.653675][ T30] audit: type=1400 audit(2000000094.718:1312): avc: denied { watch } for pid=15056 comm="syz.3.1840" path="/333/file1" dev="tmpfs" ino=1810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 593.770502][ T5950] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 593.804647][ T5950] usb 1-1: config 0 has no interface number 0 [ 593.812927][T15069] tipc: Started in network mode [ 593.817814][T15069] tipc: Node identity 0eafe71b2e84, cluster identity 4711 [ 593.859634][ T5950] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 593.870713][T15069] tipc: Enabled bearer , priority 0 [ 593.882064][ T30] audit: type=1400 audit(2000000094.718:1313): avc: denied { watch_sb watch_reads } for pid=15056 comm="syz.3.1840" path="/333/file1" dev="tmpfs" ino=1810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 593.909175][ T5950] usb 1-1: New USB device strings: Mfr=128, Product=8, SerialNumber=0 [ 593.933683][ T5950] usb 1-1: Product: syz [ 593.954359][ T5950] usb 1-1: Manufacturer: syz [ 594.171477][T15067] tipc: Resetting bearer [ 594.174297][ T5950] usb 1-1: config 0 descriptor?? [ 594.326744][T15067] tipc: Disabling bearer [ 595.538292][ T30] audit: type=1400 audit(2000000096.608:1314): avc: denied { accept } for pid=15059 comm="syz.0.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 595.621001][T15090] x_tables: duplicate underflow at hook 2 [ 595.782261][ T30] audit: type=1400 audit(2000000096.698:1315): avc: denied { setopt } for pid=15087 comm="syz.2.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 596.093069][ T5946] usb 1-1: USB disconnect, device number 84 [ 596.284464][ T5958] [drm:udl_init] *ERROR* Selecting channel failed [ 596.339956][ T5958] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 596.357293][ T5958] [drm] Initialized udl on minor 2 [ 596.408342][T15105] syz_tun: entered allmulticast mode [ 596.476570][T15108] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:0 [ 596.514619][ T5958] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 596.526100][ T5958] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 596.536288][ T5946] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 596.547884][ T5958] usb 4-1: USB disconnect, device number 99 [ 596.554617][ T5946] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 596.704592][T15116] syz.5.1852: attempt to access beyond end of device [ 596.704592][T15116] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 596.718074][T15116] FAT-fs (loop11): unable to read boot sector [ 596.760818][ T30] audit: type=1400 audit(2000000097.758:1316): avc: denied { getopt } for pid=15099 comm="syz.5.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 597.690004][ T30] audit: type=1400 audit(2000000097.768:1317): avc: denied { mounton } for pid=15099 comm="syz.5.1852" path="/131/file0" dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 597.780338][T15103] syz_tun: left allmulticast mode [ 598.077042][ T30] audit: type=1326 audit(2000000099.148:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4258e929 code=0x7ffc0000 [ 598.125720][ T30] audit: type=1326 audit(2000000099.148:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4258e929 code=0x7ffc0000 [ 598.160908][ T30] audit: type=1326 audit(2000000099.148:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fdd4258e929 code=0x7ffc0000 [ 598.334991][ T30] audit: type=1326 audit(2000000099.148:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4258e929 code=0x7ffc0000 [ 598.361729][ T5958] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 598.399016][ T30] audit: type=1326 audit(2000000099.148:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15104 comm="syz.3.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4258e929 code=0x7ffc0000 [ 598.542591][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 598.549306][ T5958] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 598.557821][ T5958] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 598.566353][ T5958] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 598.574604][ T5958] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 598.583085][ T5958] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 598.592153][ T5958] usb 2-1: config 0 has no interface number 0 [ 598.598378][ T5958] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 598.620795][ T5958] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 598.630829][ T5958] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 598.644686][ T5958] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 598.659958][ T5958] usb 2-1: config 0 interface 125 has no altsetting 0 [ 598.667050][ T5958] usb 2-1: config 0 interface 125 has no altsetting 2 [ 598.676163][ T5958] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 598.686526][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.694847][ T5958] usb 2-1: Product: syz [ 598.699060][ T5958] usb 2-1: Manufacturer: syz [ 598.700556][ T5901] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 598.703754][ T5958] usb 2-1: SerialNumber: syz [ 598.718190][ T5958] usb 2-1: config 0 descriptor?? [ 598.730737][ T5958] usb 2-1: selecting invalid altsetting 2 [ 598.734528][T15138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.746426][T15138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.754424][ T5894] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 598.870851][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 598.881410][ T5901] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 598.898070][ T5901] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 598.907659][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 598.919689][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 598.925157][ T5901] usb 1-1: Product: syz [ 598.929647][ T5901] usb 1-1: Manufacturer: syz [ 598.935158][ T5901] usb 1-1: SerialNumber: syz [ 598.943377][ T5894] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 598.952691][ T5894] usb 4-1: config 0 has no interface number 0 [ 598.959352][ T5901] usb 1-1: config 0 descriptor?? [ 598.964439][ T5894] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 598.975555][ T5894] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 598.987739][ T5894] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.988068][T15128] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 598.999130][ T5894] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 599.024400][ T5894] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 599.221237][ T5950] libceph: connect (1)[c::]:6789 error -22 [ 599.234563][ T5950] libceph: mon0 (1)[c::]:6789 connect error [ 599.557485][ T5950] libceph: connect (1)[c::]:6789 error -22 [ 599.702812][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.712076][ T5950] libceph: mon0 (1)[c::]:6789 connect error [ 599.730720][ T5894] usb 4-1: config 0 descriptor?? [ 599.736544][T15143] ceph: No mds server is up or the cluster is laggy [ 599.764604][ T30] audit: type=1400 audit(2000000100.838:1323): avc: denied { read } for pid=15127 comm="syz.0.1859" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 599.828377][ T5894] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 599.855661][ T30] audit: type=1400 audit(2000000100.838:1324): avc: denied { open } for pid=15127 comm="syz.0.1859" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 599.879872][ T30] audit: type=1400 audit(2000000100.948:1325): avc: denied { view } for pid=15149 comm="syz.2.1866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 600.035262][T15131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.044569][T15131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.059804][ T30] audit: type=1400 audit(2000000101.138:1326): avc: denied { mount } for pid=15123 comm="syz.1.1858" name="/" dev="autofs" ino=41574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 600.146255][ T5950] usb 2-1: USB disconnect, device number 92 [ 600.183698][ T5894] usb 4-1: USB disconnect, device number 100 [ 600.197696][ T5894] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 600.639960][ T30] audit: type=1400 audit(2000000101.708:1327): avc: denied { mount } for pid=15175 comm="syz.5.1873" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 600.768862][T15180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.777892][T15180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.904062][T15178] overlayfs: failed to get inode (-116) [ 600.910827][T15178] overlayfs: failed to look up (bus) for ino (-116) [ 601.466459][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1878'. [ 601.485775][T15186] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1878'. [ 601.510966][ T5958] usb 1-1: USB disconnect, device number 85 [ 601.667338][T15189] overlay: Bad value for 'upperdir' [ 601.902969][T15198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 601.910906][T15198] IPv6: NLM_F_CREATE should be set when creating new route [ 601.918238][T15198] IPv6: NLM_F_CREATE should be set when creating new route [ 601.925517][T15198] IPv6: NLM_F_CREATE should be set when creating new route [ 602.418456][T15215] kernel profiling enabled (shift: 16) [ 602.591289][T15234] netlink: 'syz.5.1891': attribute type 13 has an invalid length. [ 602.647752][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'. [ 602.659850][T10779] Bluetooth: hci5: unexpected cc 0x0402 length: 4 > 1 [ 602.666785][T10779] Bluetooth: hci5: unexpected event for opcode 0x0402 [ 602.700908][ T5950] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 602.725090][T15234] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.733886][T15234] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.760682][ T5901] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 602.806622][T15234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.821577][T15234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.853218][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.865997][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.880114][ T5950] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 602.891700][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.903317][ T5950] usb 2-1: config 0 descriptor?? [ 602.914296][ T5901] usb 1-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 602.937223][ T5901] usb 1-1: config 18 has 0 interfaces, different from the descriptor's value: 1 [ 602.949940][T15234] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.959369][T15234] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.970310][T15234] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.979426][T15234] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.989696][ T5901] usb 1-1: New USB device found, idVendor=494f, idProduct=7e69, bcdDevice=51.78 [ 603.001527][ T5901] usb 1-1: New USB device strings: Mfr=123, Product=174, SerialNumber=30 [ 603.012465][ T5901] usb 1-1: Product: syz [ 603.016709][ T5901] usb 1-1: Manufacturer: syz [ 603.023311][ T5901] usb 1-1: SerialNumber: syz [ 604.260585][ T5894] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 604.276122][ T5901] usb 1-1: USB disconnect, device number 86 [ 604.413643][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 604.425223][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.451284][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.471415][ T5894] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 604.481165][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.491393][ T5894] usb 4-1: config 0 descriptor?? [ 604.501251][ T5894] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35 [ 604.708022][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 604.708038][ T30] audit: type=1400 audit(2000000105.778:1333): avc: denied { read } for pid=15244 comm="syz.3.1894" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 604.747102][ T5894] usb 4-1: USB disconnect, device number 101 [ 605.086572][T15265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.134107][T15265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.286711][ T30] audit: type=1400 audit(2000000106.358:1334): avc: denied { write } for pid=15269 comm="syz.0.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 605.294382][ T30] audit: type=1400 audit(2000000106.368:1335): avc: denied { map } for pid=15269 comm="syz.0.1902" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 605.335584][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.454465][ T30] audit: type=1400 audit(2000000106.438:1336): avc: denied { execute } for pid=15269 comm="syz.0.1902" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 605.478705][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.573274][ T5950] usbhid 2-1:0.0: can't add hid device: -71 [ 605.579366][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 605.589681][ T5950] usb 2-1: USB disconnect, device number 93 [ 605.721864][T15278] binder: 15274:15278 ioctl 400c620e 2000000000c0 returned -22 [ 606.039796][T15277] XFS (nullb0): Invalid superblock magic number [ 606.268214][ T30] audit: type=1400 audit(2000000107.338:1337): avc: denied { bind } for pid=15287 comm="syz.3.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 606.462264][ T5950] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 606.645020][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.679740][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.709321][ T5950] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 606.728940][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.746621][ T5950] usb 2-1: config 0 descriptor?? [ 606.845755][T15294] FAULT_INJECTION: forcing a failure. [ 606.845755][T15294] name failslab, interval 1, probability 0, space 0, times 0 [ 606.858668][T15294] CPU: 0 UID: 0 PID: 15294 Comm: syz.0.1908 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 606.858692][T15294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.858702][T15294] Call Trace: [ 606.858709][T15294] [ 606.858715][T15294] dump_stack_lvl+0x16c/0x1f0 [ 606.858743][T15294] should_fail_ex+0x512/0x640 [ 606.858764][T15294] ? fs_reclaim_acquire+0xae/0x150 [ 606.858782][T15294] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 606.858804][T15294] should_failslab+0xc2/0x120 [ 606.858828][T15294] __kmalloc_noprof+0xd2/0x510 [ 606.858855][T15294] tomoyo_realpath_from_path+0xc2/0x6e0 [ 606.858882][T15294] ? tomoyo_profile+0x47/0x60 [ 606.858911][T15294] tomoyo_path_number_perm+0x245/0x580 [ 606.858932][T15294] ? tomoyo_path_number_perm+0x237/0x580 [ 606.858955][T15294] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 606.858976][T15294] ? find_held_lock+0x2b/0x80 [ 606.859022][T15294] ? find_held_lock+0x2b/0x80 [ 606.859042][T15294] ? hook_file_ioctl_common+0x145/0x410 [ 606.859075][T15294] ? __fget_files+0x20e/0x3c0 [ 606.859102][T15294] security_file_ioctl+0x9b/0x240 [ 606.859127][T15294] __x64_sys_ioctl+0xb7/0x210 [ 606.859150][T15294] do_syscall_64+0xcd/0x4c0 [ 606.859176][T15294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.859194][T15294] RIP: 0033:0x7f96a658e929 [ 606.859209][T15294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.859227][T15294] RSP: 002b:00007f96a73b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.859244][T15294] RAX: ffffffffffffffda RBX: 00007f96a67b6080 RCX: 00007f96a658e929 [ 606.859255][T15294] RDX: 00002000000083c0 RSI: 0000000040345410 RDI: 0000000000000006 [ 606.859266][T15294] RBP: 00007f96a73b2090 R08: 0000000000000000 R09: 0000000000000000 [ 606.859277][T15294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.859288][T15294] R13: 0000000000000000 R14: 00007f96a67b6080 R15: 00007ffdcf39f838 [ 606.859313][T15294] [ 606.859389][T15294] ERROR: Out of memory at tomoyo_realpath_from_path. [ 607.182004][ T30] audit: type=1400 audit(2000000108.198:1338): avc: denied { append } for pid=15300 comm="syz.2.1909" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.119633][T15306] loop6: detected capacity change from 0 to 63 [ 608.160528][T15306] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.170201][T15306] Buffer I/O error on dev loop6, logical block 1, async page read [ 608.178895][T15306] Buffer I/O error on dev loop6, logical block 2, async page read [ 608.187771][T15306] Buffer I/O error on dev loop6, logical block 3, async page read [ 608.198657][T15306] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.207971][T15306] Buffer I/O error on dev loop6, logical block 1, async page read [ 608.218113][T15306] Buffer I/O error on dev loop6, logical block 2, async page read [ 608.227791][T15306] Buffer I/O error on dev loop6, logical block 3, async page read [ 608.238645][T15306] Buffer I/O error on dev loop6, logical block 0, async page read [ 608.249231][T15306] Buffer I/O error on dev loop6, logical block 1, async page read [ 608.377841][ T30] audit: type=1400 audit(2000000109.208:1339): avc: denied { map } for pid=15300 comm="syz.2.1909" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.570685][ T30] audit: type=1400 audit(2000000109.208:1340): avc: denied { execute } for pid=15300 comm="syz.2.1909" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.779132][T15314] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 608.796762][T15314] batman_adv: batadv0: Adding interface: gretap1 [ 608.803228][T15314] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.829108][T15314] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 608.872998][ T5958] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 609.040735][ T5958] usb 1-1: device descriptor read/64, error -71 [ 609.254775][ T5950] usbhid 2-1:0.0: can't add hid device: -71 [ 609.266435][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 609.278136][ T5950] usb 2-1: USB disconnect, device number 94 [ 609.327769][T15320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.339147][T15320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.428289][ T5958] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 609.458678][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1915'. [ 609.574975][ T5958] usb 1-1: device descriptor read/64, error -71 [ 609.712853][ T5958] usb usb1-port1: attempt power cycle [ 609.820502][ T5950] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 610.010664][ T5950] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 610.027109][ T5950] usb 2-1: config 0 has no interface number 0 [ 610.040019][ T5950] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 610.049375][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.061279][ T5950] usb 2-1: config 0 descriptor?? [ 610.071152][ T5950] cp210x 2-1:0.35: cp210x converter detected [ 610.090509][ T5958] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 610.113617][ T5958] usb 1-1: device descriptor read/8, error -71 [ 610.271095][T15338] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 610.302248][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 610.311355][T15338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1922'. [ 610.340027][ T5901] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 610.390646][ T5958] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 610.456021][ T5958] usb 1-1: device descriptor read/8, error -71 [ 610.560526][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 610.576428][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.593792][ T5958] usb usb1-port1: unable to enumerate USB device [ 610.601402][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 610.636906][T15318] netlink: 'syz.1.1915': attribute type 10 has an invalid length. [ 610.658581][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 610.680599][ T5901] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 610.690311][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.734511][ T5901] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 610.744082][ T5901] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 610.757276][ T5901] usb 4-1: Manufacturer: syz [ 610.765373][T15342] qrtr: Invalid version 0 [ 610.769860][ T5901] usb 4-1: config 0 descriptor?? [ 610.779387][T15318] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.791127][T15342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.799825][T15342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.816553][T15318] bond0: (slave team0): Enslaving as an active interface with an up link [ 610.852990][T15346] veth0_vlan: left promiscuous mode [ 610.858310][T15346] veth0_vlan: entered allmulticast mode [ 610.865119][T15346] veth0_vlan: entered promiscuous mode [ 610.882623][T15343] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:78ba:a3ff:fe8c:ffc0 error=-28 [ 611.043934][ T5901] rc_core: IR keymap rc-hauppauge not found [ 611.049910][ T5901] Registered IR keymap rc-empty [ 611.063591][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.190175][T15332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.190550][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.202333][T15332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.241214][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 611.246860][T15343] infiniband syz2: set down [ 611.254531][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 611.259501][T15343] infiniband syz2: added team_slave_0 [ 611.278260][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.340601][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.361027][T15343] RDS/IB: syz2: added [ 611.366270][T15343] smc: adding ib device syz2 with port count 1 [ 611.375837][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.413552][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.442960][T15343] smc: ib device syz2 port 1 has pnetid [ 611.455707][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.480617][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.520621][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.556312][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.577143][T15359] netlink: 'syz.2.1927': attribute type 4 has an invalid length. [ 611.585129][ T30] audit: type=1400 audit(2000000112.658:1341): avc: denied { setopt } for pid=15357 comm="syz.2.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 611.605388][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.622524][T15359] syz.2.1927: attempt to access beyond end of device [ 611.622524][T15359] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 611.645098][T15359] syz.2.1927: attempt to access beyond end of device [ 611.645098][T15359] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 611.660785][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.695553][ T5901] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 611.732163][ T5901] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 611.760760][ T5901] usb 4-1: USB disconnect, device number 102 [ 611.900553][ T5934] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 612.071047][ T5901] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 612.078956][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 612.089380][ T5934] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 612.099866][ T5934] usb 1-1: config 0 has no interface number 0 [ 612.106957][ T5934] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 612.118114][ T5934] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 612.130016][ T5934] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.141333][ T5934] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 612.157659][ T5934] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 612.167062][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.187792][ T5934] usb 1-1: config 0 descriptor?? [ 612.204787][ T5934] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 612.235115][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.249827][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.267199][ T5901] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 612.283452][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.302378][ T5901] usb 4-1: config 0 descriptor?? [ 612.426997][T15360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.440839][T15360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.478830][ T5934] usb 1-1: USB disconnect, device number 91 [ 612.488329][ T5934] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 614.426789][ T5901] usbhid 4-1:0.0: can't add hid device: -71 [ 614.432878][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 614.443515][ T5901] usb 4-1: USB disconnect, device number 103 [ 614.630734][ T30] audit: type=1400 audit(2000000115.704:1342): avc: denied { setattr } for pid=15394 comm="syz.3.1938" name="PNPIPE" dev="sockfs" ino=42030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 614.632920][T15399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1938'. [ 615.224622][ T5950] cp210x 2-1:0.35: failed to get vendor val 0x000e size 3: -71 [ 615.263036][ T5950] usb 2-1: cp210x converter now attached to ttyUSB0 [ 615.315450][ T5950] usb 2-1: USB disconnect, device number 95 [ 615.383364][ T5950] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 615.420503][ T5950] cp210x 2-1:0.35: device disconnected [ 616.920652][ T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 617.553524][T15430] loop8: detected capacity change from 0 to 8 [ 617.591211][T15430] loop8: detected capacity change from 8 to 6 [ 617.600830][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.609979][ C0] buffer_io_error: 50 callbacks suppressed [ 617.609991][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 617.624062][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.633202][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 617.642147][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.651300][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 617.659346][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.660273][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.668587][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 617.687330][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.687376][ T10] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 617.687400][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.701305][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.723555][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 617.731580][T15430] ldm_validate_partition_table(): Disk read failed. [ 617.739110][ T10] usb 1-1: config 0 descriptor?? [ 617.739307][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.753282][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 617.762992][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.772227][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 617.780609][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.789792][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 617.798392][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.807628][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 617.815620][T15430] Dev loop8: unable to read RDB block 0 [ 617.821530][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 617.830742][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 617.843866][T15430] loop8: unable to read partition table [ 617.849740][T15430] loop8: partition table beyond EOD, truncated [ 617.856181][T15430] loop_reread_partitions: partition scan of loop8 (^{Z~P[]M,+-`1(6$~ [ 617.856181][T15430] ۅ6Ã) failed (rc=-5) [ 617.885003][ T30] audit: type=1400 audit(2000000118.964:1343): avc: denied { bind } for pid=15431 comm="syz.5.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 618.205613][T15441] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1952'. [ 618.217430][T15441] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1952'. [ 618.226597][T15441] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1952'. [ 618.815844][T15451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.824591][T15451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.850551][ T5953] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 619.355321][ T30] audit: type=1400 audit(2000000120.434:1344): avc: denied { ioctl } for pid=15455 comm="syz.3.1956" path="socket:[42092]" dev="sockfs" ino=42092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 619.699338][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 619.705538][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 619.719543][ T10] usb 1-1: USB disconnect, device number 92 [ 620.337102][T15473] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1962'. [ 621.230877][ T5953] usb 2-1: unable to get BOS descriptor or descriptor too short [ 621.241680][ T5953] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 621.249336][ T5953] usb 2-1: can't read configurations, error -71 [ 621.272618][T15480] netlink: 'syz.3.1965': attribute type 11 has an invalid length. [ 622.195374][ T5953] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 622.440015][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 622.504871][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.515050][ T5953] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 622.524288][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.535101][ T5953] usb 2-1: config 0 descriptor?? [ 622.684122][ T30] audit: type=1400 audit(2000000123.754:1345): avc: denied { ioctl } for pid=15496 comm="syz.3.1970" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 622.708938][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.289667][ T5953] savu 0003:1E7D:2D5A.0015: item fetching failed at offset 7/8 [ 623.293570][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'. [ 623.319524][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1972'. [ 623.329337][ T5953] savu 0003:1E7D:2D5A.0015: parse failed [ 623.366413][ T5953] savu 0003:1E7D:2D5A.0015: probe with driver savu failed with error -22 [ 623.394431][T15505] vim2m vim2m.0: vidioc_s_fmt queue busy [ 623.395985][T15503] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.409548][T15503] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.418474][T15503] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.427239][T15503] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.604731][T15484] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 623.670309][ T30] audit: type=1400 audit(2000000124.744:1346): avc: denied { remount } for pid=15511 comm="syz.5.1975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 623.691691][ T10] usb 2-1: USB disconnect, device number 97 [ 624.252514][T15526] bridge0: port 3(dummy0) entered disabled state [ 625.003157][T15540] loop6: detected capacity change from 0 to 2560 [ 625.125634][T15540] buffer_io_error: 3 callbacks suppressed [ 625.125646][T15540] Buffer I/O error on dev loop6, logical block 0, async page read [ 625.153341][T15540] Buffer I/O error on dev loop6, logical block 0, async page read [ 625.180434][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 625.605356][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.747816][T15540] Buffer I/O error on dev loop6, logical block 0, async page read [ 625.756715][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.769433][T15540] Buffer I/O error on dev loop6, logical block 0, async page read [ 625.777672][T15540] Buffer I/O error on dev loop6, logical block 0, async page read [ 625.790744][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 625.803790][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 625.831561][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.870648][ T10] usb 2-1: config 0 descriptor?? [ 625.888810][T15540] Buffer I/O error on dev loop6, logical block 0, async page read [ 625.935512][T15540] Buffer I/O error on dev loop6, logical block 0, async page read [ 625.951121][T15540] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.097301][T15540] ldm_validate_partition_table(): Disk read failed. [ 626.116150][T15540] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.126850][ T30] audit: type=1326 audit(2000000127.184:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 626.150848][T15540] Buffer I/O error on dev loop6, logical block 0, async page read [ 626.159778][T15540] Dev loop6: unable to read RDB block 0 [ 626.203037][ T30] audit: type=1326 audit(2000000127.184:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 626.230488][T15540] loop6: unable to read partition table [ 626.248535][T15540] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 626.315855][ T10] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xe [ 626.328834][ T30] audit: type=1326 audit(2000000127.184:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 626.353108][ T10] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 626.391388][ T10] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 626.416091][ T30] audit: type=1326 audit(2000000127.184:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 626.419847][T15556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.439621][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.513598][ T30] audit: type=1326 audit(2000000127.184:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 626.523453][T15556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.537122][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.551992][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'. [ 626.616467][ T5958] usb 2-1: USB disconnect, device number 98 [ 626.748393][ T30] audit: type=1326 audit(2000000127.184:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 626.771899][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.855382][ T30] audit: type=1326 audit(2000000127.184:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 626.918150][ T30] audit: type=1326 audit(2000000127.184:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 626.941598][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.047129][ T30] audit: type=1326 audit(2000000127.184:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15552 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebeb8e929 code=0x7ffc0000 [ 627.070629][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.580541][ T5901] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 627.690474][ T10] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 627.761617][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 627.779099][ T5901] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 628.081338][ T5901] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 628.109336][ T5901] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.130936][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 628.147243][ T5901] usb 4-1: config 1 interface 0 has no altsetting 0 [ 628.155088][ T10] usb 2-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 628.182914][ T5901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 628.219291][ T10] usb 2-1: Product: syz [ 628.227417][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.242729][ T10] usb 2-1: SerialNumber: syz [ 628.263105][ T5901] usb 4-1: Product: syz [ 628.267300][ T5901] usb 4-1: Manufacturer: syz [ 628.273306][ T10] usb 2-1: config 0 descriptor?? [ 628.327641][ T5901] usb 4-1: SerialNumber: syz [ 628.512903][ T10] ldusb 2-1:0.0: Interrupt in endpoint not found [ 628.528550][ T10] usb 2-1: USB disconnect, device number 99 [ 629.160044][ T5901] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 104 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 629.300217][ T5894] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 629.376337][ T5958] usb 4-1: USB disconnect, device number 104 [ 629.395897][ T5958] usblp0: removed [ 629.408457][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 629.408471][ T30] audit: type=1400 audit(2000000130.484:1373): avc: denied { connect } for pid=15601 comm="syz.1.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 629.500905][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.516419][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.544617][ T5894] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 629.571243][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.585197][T15575] No source specified [ 629.597170][ T5894] usb 1-1: config 0 descriptor?? [ 630.643353][ T5958] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 630.694665][T15575] delete_channel: no stack [ 631.466353][ T30] audit: type=1400 audit(2000000132.544:1374): avc: denied { open } for pid=15619 comm="syz.3.2004" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 631.591238][ T30] audit: type=1400 audit(2000000132.574:1375): avc: denied { ioctl } for pid=15619 comm="syz.3.2004" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 631.806796][ T5894] usbhid 1-1:0.0: can't add hid device: -71 [ 631.814192][ T5894] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 631.832639][ T5894] usb 1-1: USB disconnect, device number 93 [ 633.071253][T15637] kAFS: No cell specified [ 633.099959][T15636] syz.0.2010: attempt to access beyond end of device [ 633.099959][T15636] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 633.188194][T15636] FAT-fs (loop1): unable to read boot sector [ 633.554432][ T30] audit: type=1326 audit(2000000134.634:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.5.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 633.791272][ T30] audit: type=1326 audit(2000000134.664:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.5.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 633.970550][ T30] audit: type=1326 audit(2000000134.674:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.5.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 634.143687][ T30] audit: type=1326 audit(2000000134.684:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.5.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 634.169998][ T30] audit: type=1326 audit(2000000134.684:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.5.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 634.234702][ T30] audit: type=1326 audit(2000000134.694:1381): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.5.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 634.308631][ T30] audit: type=1326 audit(2000000134.694:1382): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.5.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c6d8e929 code=0x7ffc0000 [ 634.770215][ T5934] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 635.339948][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 635.339965][ T30] audit: type=1400 audit(2000000136.414:1446): avc: denied { setopt } for pid=15661 comm="syz.3.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 635.412568][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.426181][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.438187][T15675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.461835][ T5934] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 635.491393][T15675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.506734][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.563118][ T5934] usb 1-1: config 0 descriptor?? [ 635.598704][T15662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.767723][T15680] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 635.779834][T15680] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 635.788242][T15680] CPU: 1 UID: 0 PID: 15680 Comm: syz.2.2021 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 635.798555][T15680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.808616][T15680] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 635.815553][T15680] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 635.835150][T15680] RSP: 0018:ffffc90003c872f8 EFLAGS: 00010202 [ 635.841202][T15680] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc9000cd6a000 [ 635.849155][T15680] RDX: 000000000000000b RSI: ffffffff89931e9c RDI: 0000000000000058 [ 635.857110][T15680] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 635.865060][T15680] R10: 00000000000affe0 R11: 0000000000000001 R12: ffffffff8ce8ce60 [ 635.873013][T15680] R13: 0000000000000058 R14: ffffffff8ce8ce40 R15: ffff888053722000 [ 635.880970][T15680] FS: 00007f4ebfaa96c0(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 635.889882][T15680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.896450][T15680] CR2: 0000200000000240 CR3: 0000000037174000 CR4: 00000000003526f0 [ 635.904406][T15680] Call Trace: [ 635.907669][T15680] [ 635.910585][T15680] drr_qlen_notify+0x24/0x150 [ 635.915251][T15680] qdisc_tree_reduce_backlog+0x221/0x500 [ 635.920871][T15680] codel_change+0x6d9/0xc90 [ 635.925357][T15680] ? qdisc_alloc+0x900/0xc50 [ 635.929934][T15680] ? qdisc_create+0x71/0xfc0 [ 635.934511][T15680] ? tc_modify_qdisc+0x12bb/0x2130 [ 635.939606][T15680] ? rtnetlink_rcv_msg+0x3c9/0xe90 [ 635.944707][T15680] ? ____sys_sendmsg+0xa95/0xc70 [ 635.949625][T15680] ? __pfx_codel_change+0x10/0x10 [ 635.954660][T15680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.960715][T15680] codel_init+0x2e6/0x430 [ 635.965039][T15680] ? __pfx_codel_init+0x10/0x10 [ 635.969876][T15680] qdisc_create+0x457/0xfc0 [ 635.974367][T15680] tc_modify_qdisc+0x12bb/0x2130 [ 635.979292][T15680] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 635.984568][T15680] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 635.989839][T15680] rtnetlink_rcv_msg+0x3c9/0xe90 [ 635.994771][T15680] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 636.000224][T15680] ? ref_tracker_free+0x37c/0x830 [ 636.005239][T15680] netlink_rcv_skb+0x155/0x420 [ 636.009985][T15680] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 636.015436][T15680] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 636.020707][T15680] ? netlink_deliver_tap+0x1ae/0xd30 [ 636.025983][T15680] netlink_unicast+0x53a/0x7f0 [ 636.030729][T15680] ? __pfx_netlink_unicast+0x10/0x10 [ 636.035998][T15680] netlink_sendmsg+0x8d1/0xdd0 [ 636.040743][T15680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.046012][T15680] ____sys_sendmsg+0xa95/0xc70 [ 636.050758][T15680] ? copy_msghdr_from_user+0x10a/0x160 [ 636.056210][T15680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.061478][T15680] ? __pfx_futex_wake_mark+0x10/0x10 [ 636.066747][T15680] ___sys_sendmsg+0x134/0x1d0 [ 636.071410][T15680] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.076591][T15680] ? __lock_acquire+0x622/0x1c90 [ 636.081522][T15680] __sys_sendmsg+0x16d/0x220 [ 636.086100][T15680] ? __pfx___sys_sendmsg+0x10/0x10 [ 636.091197][T15680] ? __x64_sys_futex+0x1e0/0x4c0 [ 636.096127][T15680] ? fput+0x70/0xf0 [ 636.099918][T15680] do_syscall_64+0xcd/0x4c0 [ 636.104415][T15680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.110292][T15680] RIP: 0033:0x7f4ebeb8e929 [ 636.114687][T15680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.134287][T15680] RSP: 002b:00007f4ebfaa9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.142681][T15680] RAX: ffffffffffffffda RBX: 00007f4ebedb5fa0 RCX: 00007f4ebeb8e929 [ 636.150632][T15680] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 636.158582][T15680] RBP: 00007f4ebec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 636.166536][T15680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.174487][T15680] R13: 0000000000000000 R14: 00007f4ebedb5fa0 R15: 00007ffcc27043d8 [ 636.182444][T15680] [ 636.185452][T15680] Modules linked in: [ 636.190817][T15680] ---[ end trace 0000000000000000 ]--- [ 636.196316][T15680] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 636.203325][T15680] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 636.223044][T15680] RSP: 0018:ffffc90003c872f8 EFLAGS: 00010202 [ 636.229174][T15680] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc9000cd6a000 [ 636.237204][T15680] RDX: 000000000000000b RSI: ffffffff89931e9c RDI: 0000000000000058 [ 636.245233][T15680] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 636.253261][T15680] R10: 00000000000affe0 R11: 0000000000000001 R12: ffffffff8ce8ce60 [ 636.261279][T15680] R13: 0000000000000058 R14: ffffffff8ce8ce40 R15: ffff888053722000 [ 636.269292][T15680] FS: 00007f4ebfaa96c0(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 636.278283][T15680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.284918][T15680] CR2: 0000200000000240 CR3: 0000000037174000 CR4: 00000000003526f0 [ 636.292959][T15680] Kernel panic - not syncing: Fatal exception in interrupt [ 636.300351][T15680] Kernel Offset: disabled [ 636.304662][T15680] Rebooting in 86400 seconds..